Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/e28ba6-aaaf-4d33-b8dc-0aee360b0ba4/1/WmjWmdGpRXx4rPvsAE-YZ3qkzBY.mft
File:                     WmjWmdGpRXx4rPvsAE-YZ3qkzBY.mft (raw, json)
Hash identifier:          bX3WLUQXHf9qAbQu7oMKGvthMB5zV3D3NUFEVeGuZiQ=
Subject key identifier:   BA:60:70:55:8D:12:72:C5:99:8D:49:30:CE:4A:63:40:EA:39:75:7D
Authority key identifier: 5A:68:D6:99:D1:A9:45:7C:78:AC:FB:EC:00:4F:98:67:7A:A4:CC:16
Certificate issuer:       /CN=5a68d699d1a9457c78acfbec004f98677aa4cc16
Certificate serial:       01975422DE56BE390A2D631C09E530200672
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WmjWmdGpRXx4rPvsAE-YZ3qkzBY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/e28ba6-aaaf-4d33-b8dc-0aee360b0ba4/1/WmjWmdGpRXx4rPvsAE-YZ3qkzBY.mft
Manifest number:          1586
Signing time:             Mon 09 Jun 2025 10:01:00 +0000
Manifest this update:     Mon 09 Jun 2025 10:01:00 +0000
Manifest next update:     Tue 10 Jun 2025 10:01:00 +0000
Files and hashes:         1: 3kN5HczaKLC1vDzc4T6OQ767Uq0.roa (hash: ZGwS+xHk4JSopWZ3QlH5/tdsWooS6ScieKAhsK9alu4=)
                          2: KOtOprlo9eWM-S3ee18Bkra0s7U.roa (hash: YzsVJr77Droy7DJXTIqItUpDk3Xa+3GyD3WsTRtaj84=)
                          3: VJASrMOyLg85AblR9YiVSWxHxZs.roa (hash: REvGVujT8OfpbkY6GeJPSg8UwmOkMcFqkev3bGvsPwQ=)
                          4: WmjWmdGpRXx4rPvsAE-YZ3qkzBY.crl (hash: NaXOeFtu5qeiACUUdpotWondAjIsX8u/Pmhg98jzwiY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/e28ba6-aaaf-4d33-b8dc-0aee360b0ba4/1/WmjWmdGpRXx4rPvsAE-YZ3qkzBY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/e28ba6-aaaf-4d33-b8dc-0aee360b0ba4/1/WmjWmdGpRXx4rPvsAE-YZ3qkzBY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WmjWmdGpRXx4rPvsAE-YZ3qkzBY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Jun 2025 02:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:54:22:de:56:be:39:0a:2d:63:1c:09:e5:30:20:06:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a68d699d1a9457c78acfbec004f98677aa4cc16
        Validity
            Not Before: Jun  9 10:01:00 2025 GMT
            Not After : Jun 10 10:01:00 2025 GMT
        Subject: CN=ba6070558d1272c5998d4930ce4a6340ea39757d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:4f:41:a8:e8:14:5e:56:eb:95:64:65:3d:4a:
                    1f:ab:91:e3:7c:be:7f:53:a6:a0:67:bc:32:80:a2:
                    b0:c0:f0:e3:3a:66:e3:73:fe:c3:07:17:d9:2b:f5:
                    bf:b0:00:49:2e:4d:56:bb:62:0d:f3:86:d3:da:aa:
                    16:de:40:01:81:98:77:cb:ca:0c:d5:4e:3e:d3:34:
                    22:e5:ee:33:1e:43:6f:92:cc:b1:97:f8:7f:15:99:
                    f1:2f:01:b0:6e:ac:bf:21:96:54:d9:bf:3d:53:c8:
                    e7:fc:19:09:58:13:c2:06:3b:a2:da:45:67:bd:28:
                    8a:bc:de:d0:a3:16:9c:32:ab:06:56:e8:43:9a:bf:
                    0a:e6:ad:35:33:22:36:96:0f:68:9c:c5:0c:0d:eb:
                    ea:19:d8:84:6b:0b:41:37:8e:c9:c3:9d:8b:bb:52:
                    2a:63:19:a5:8a:0e:45:83:69:a7:86:c6:3a:45:8b:
                    67:60:97:73:d9:66:1f:9c:34:d1:fb:e0:a7:6f:85:
                    12:d9:37:c0:7c:98:44:5d:eb:18:21:89:01:aa:7d:
                    e5:9a:bc:4e:c7:46:fc:1b:e7:db:e7:84:72:cb:4c:
                    cd:76:c1:42:c7:24:1b:c6:ce:ae:8e:54:46:51:68:
                    c1:8b:5f:77:92:b6:e4:1e:15:d7:c7:b4:fa:14:3e:
                    f0:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:60:70:55:8D:12:72:C5:99:8D:49:30:CE:4A:63:40:EA:39:75:7D
            X509v3 Authority Key Identifier:
                keyid:5A:68:D6:99:D1:A9:45:7C:78:AC:FB:EC:00:4F:98:67:7A:A4:CC:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WmjWmdGpRXx4rPvsAE-YZ3qkzBY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e28ba6-aaaf-4d33-b8dc-0aee360b0ba4/1/WmjWmdGpRXx4rPvsAE-YZ3qkzBY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e28ba6-aaaf-4d33-b8dc-0aee360b0ba4/1/WmjWmdGpRXx4rPvsAE-YZ3qkzBY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:1d:1e:1a:e2:6d:29:af:c7:a6:2f:fd:ec:a2:eb:86:3f:1d:
         6d:9e:ed:46:7c:a3:28:5d:94:eb:c4:bb:3a:98:ce:4b:0a:e3:
         56:39:d8:3d:68:88:a5:77:64:69:2d:8f:96:b1:6d:83:c9:b5:
         1c:51:f3:18:ce:bc:02:8f:34:7f:3c:25:49:1b:f9:5c:58:10:
         ac:5b:5b:5b:b8:99:22:a8:2a:d0:96:5b:5c:c9:99:d4:85:f8:
         8c:a2:eb:31:ff:16:58:d9:20:6a:9b:50:27:16:49:fd:2c:5c:
         d0:8c:87:a4:02:3e:b3:c3:ee:ab:2a:94:99:8a:83:28:14:fc:
         3b:d7:d5:a8:0d:6b:c0:70:4a:64:06:f9:e9:c6:21:0f:b5:35:
         58:94:2b:c3:18:ab:b0:07:54:84:3a:3d:2c:66:22:34:0a:9d:
         ac:0f:7a:30:e7:08:8a:0c:b3:1f:79:e1:0a:5a:bf:59:f0:e3:
         a8:41:db:00:84:8a:f6:3c:c9:d9:07:c8:41:e1:8e:1b:33:af:
         9e:a4:f4:13:d1:68:75:5f:8e:50:cd:8c:e7:38:fc:f8:5a:2c:
         6e:2a:e6:72:80:45:de:aa:d4:fc:14:6e:b4:9d:25:79:68:c7:
         b2:ba:0a:8d:f5:10:26:2b:7c:2c:74:de:5a:44:5a:a7:4e:e6:
         58:9d:32:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 12:47:16 2025 by rpki-client