Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/9f5b81-ae4d-46a4-bb82-7655c89f14d6/1/wMrI1SSl_sf8g6I4MPv5Imp2Aa4.mft
File:                     wMrI1SSl_sf8g6I4MPv5Imp2Aa4.mft (raw, json)
Hash identifier:          aUdBwEeiQciISjhAqPPQ0ik60MdycgkJP4Vpbi2gl+A=
Subject key identifier:   2B:08:F3:70:22:B9:7B:D5:77:CA:A3:0A:84:3B:30:7D:9E:68:7F:2D
Authority key identifier: C0:CA:C8:D5:24:A5:FE:C7:FC:83:A2:38:30:FB:F9:22:6A:76:01:AE
Certificate issuer:       /CN=c0cac8d524a5fec7fc83a23830fbf9226a7601ae
Certificate serial:       01974B56B2E4576FEBEB6BBB8564121230DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wMrI1SSl_sf8g6I4MPv5Imp2Aa4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/9f5b81-ae4d-46a4-bb82-7655c89f14d6/1/wMrI1SSl_sf8g6I4MPv5Imp2Aa4.mft
Manifest number:          0A3F
Signing time:             Sat 07 Jun 2025 17:01:02 +0000
Manifest this update:     Sat 07 Jun 2025 17:01:02 +0000
Manifest next update:     Sun 08 Jun 2025 17:01:02 +0000
Files and hashes:         1: 6qgSMfZ3_YfeL-wTXFWx5LVQFts.roa (hash: avRjJs3tQZCWYxxzrvKfKWMx6I1KbzcTNaTHuCyd7uA=)
                          2: wMrI1SSl_sf8g6I4MPv5Imp2Aa4.crl (hash: YCrqEx036f28Tjfrb8bFUTfzuISVdu5JWR2I3O8WAAA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/9f5b81-ae4d-46a4-bb82-7655c89f14d6/1/wMrI1SSl_sf8g6I4MPv5Imp2Aa4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/9f5b81-ae4d-46a4-bb82-7655c89f14d6/1/wMrI1SSl_sf8g6I4MPv5Imp2Aa4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wMrI1SSl_sf8g6I4MPv5Imp2Aa4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 11:24:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:56:b2:e4:57:6f:eb:eb:6b:bb:85:64:12:12:30:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0cac8d524a5fec7fc83a23830fbf9226a7601ae
        Validity
            Not Before: Jun  7 17:01:02 2025 GMT
            Not After : Jun  8 17:01:02 2025 GMT
        Subject: CN=2b08f37022b97bd577caa30a843b307d9e687f2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:56:75:7f:05:5d:70:7d:06:dd:1e:bf:03:c9:
                    49:b6:66:b8:fa:50:fa:40:a4:32:e1:f8:e3:b4:e7:
                    1a:9b:0a:38:d1:e8:a5:77:77:3d:ea:e3:5b:75:f0:
                    74:28:56:9a:3a:85:e3:b8:5c:e8:c6:98:04:da:8d:
                    0a:c2:46:28:8d:3b:0e:96:c3:fd:7f:e5:2c:83:b8:
                    9d:9b:18:99:ea:42:de:3c:e7:2e:21:2e:34:b1:a8:
                    06:b3:a8:76:f9:cd:af:8a:fd:d4:ef:d3:4f:23:bd:
                    b7:cf:bf:63:64:98:f5:b7:2e:21:ce:65:e2:91:67:
                    a9:f1:2a:d3:36:52:dd:69:6c:d5:c9:dc:80:6e:e5:
                    b8:b5:2c:b0:9e:71:78:c6:25:e8:3a:34:59:c2:81:
                    c3:91:f7:2d:d1:ac:8c:a2:b6:6e:5e:72:20:76:f9:
                    cf:ef:50:38:ef:77:fa:fd:cb:28:5c:61:66:a0:ef:
                    65:14:95:a8:02:b9:83:03:2d:12:1c:2c:73:93:22:
                    3d:88:51:77:f1:2e:6a:ad:75:bb:19:3d:3f:e8:c9:
                    5e:0d:6d:a0:dc:99:1f:62:da:00:63:61:99:e1:ef:
                    4d:ee:96:63:48:97:ce:7a:90:fe:5d:81:c7:e8:d3:
                    97:e9:e4:90:e0:a5:75:1c:59:01:ab:a9:c6:eb:e0:
                    1d:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:08:F3:70:22:B9:7B:D5:77:CA:A3:0A:84:3B:30:7D:9E:68:7F:2D
            X509v3 Authority Key Identifier:
                keyid:C0:CA:C8:D5:24:A5:FE:C7:FC:83:A2:38:30:FB:F9:22:6A:76:01:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wMrI1SSl_sf8g6I4MPv5Imp2Aa4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9f5b81-ae4d-46a4-bb82-7655c89f14d6/1/wMrI1SSl_sf8g6I4MPv5Imp2Aa4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9f5b81-ae4d-46a4-bb82-7655c89f14d6/1/wMrI1SSl_sf8g6I4MPv5Imp2Aa4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:62:a8:a8:e5:19:f5:85:c5:58:dd:23:fd:d6:06:cd:40:aa:
         67:27:f2:d6:2a:ee:e6:e5:da:ad:87:e7:b1:39:19:68:ab:58:
         fc:02:c5:4c:c8:7f:f4:c6:a3:cd:18:ac:e6:6f:71:a2:e2:21:
         84:7c:c9:4d:76:b1:16:a2:2a:2f:74:c2:09:ed:6b:0f:6c:4d:
         72:c1:64:af:ef:2a:94:0d:30:e2:9e:5a:f9:af:92:35:27:33:
         c2:ca:08:77:45:f0:0d:9b:32:55:b5:8e:45:5a:e4:30:91:fe:
         98:e3:4b:7b:b5:ba:e5:d6:ec:c5:11:7b:b9:cd:df:be:9e:b8:
         42:bb:a0:42:0a:db:30:08:a2:6c:55:3a:12:d3:98:4b:f8:4a:
         8e:29:ea:22:db:df:35:c0:11:99:bb:37:d3:f5:56:a5:5c:41:
         1f:bd:ad:94:7d:d7:67:8d:49:8b:01:26:0e:d5:9b:03:e7:65:
         cd:0b:40:2a:e5:33:e6:4c:75:70:b4:0e:91:36:57:82:de:ca:
         9e:6b:4f:b4:5b:00:91:35:0b:42:e8:ed:4b:b8:50:4d:e0:8a:
         98:89:0b:02:0f:9e:d7:9d:ea:e7:23:5d:f5:a0:b4:94:3a:db:
         97:65:e9:39:d8:f4:dd:2d:62:3b:ea:74:a3:5e:25:9b:4e:83:
         60:56:a9:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:14:35 2025 by rpki-client