Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/efb2d1-c5cb-4143-aa88-610072d80115/1/W-j-iCe9xgk1VQngyegOqyH5zcM.mft
File:                     W-j-iCe9xgk1VQngyegOqyH5zcM.mft (raw, json)
Hash identifier:          rrh4XoUObE3/nzz/qJrlwYfcB7EzF9Fv7iIlV+nCOGc=
Subject key identifier:   C6:FB:63:43:0D:E8:0B:A3:73:D3:82:6C:36:5E:AE:E4:6B:D5:96:AD
Authority key identifier: 5B:E8:FE:88:27:BD:C6:09:35:55:09:E0:C9:E8:0E:AB:21:F9:CD:C3
Certificate issuer:       /CN=5be8fe8827bdc609355509e0c9e80eab21f9cdc3
Certificate serial:       019750EA91419C8E3C1DADC21EAC91E3761F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W-j-iCe9xgk1VQngyegOqyH5zcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/efb2d1-c5cb-4143-aa88-610072d80115/1/W-j-iCe9xgk1VQngyegOqyH5zcM.mft
Manifest number:          09BA
Signing time:             Sun 08 Jun 2025 19:00:39 +0000
Manifest this update:     Sun 08 Jun 2025 19:00:39 +0000
Manifest next update:     Mon 09 Jun 2025 19:00:39 +0000
Files and hashes:         1: W-j-iCe9xgk1VQngyegOqyH5zcM.crl (hash: BF+CqzCbh7iDKlsUy4iwaUMn4PWhxenbK8KGoL91N1E=)
                          2: y8OPBhGIRdnRfns2wStFC7bDr4o.roa (hash: J10wvmClCuf9chJ2RyDKTPdaCtqaxXBdRLqjfTXblX8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/efb2d1-c5cb-4143-aa88-610072d80115/1/W-j-iCe9xgk1VQngyegOqyH5zcM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/efb2d1-c5cb-4143-aa88-610072d80115/1/W-j-iCe9xgk1VQngyegOqyH5zcM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W-j-iCe9xgk1VQngyegOqyH5zcM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 17:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:50:ea:91:41:9c:8e:3c:1d:ad:c2:1e:ac:91:e3:76:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5be8fe8827bdc609355509e0c9e80eab21f9cdc3
        Validity
            Not Before: Jun  8 19:00:39 2025 GMT
            Not After : Jun  9 19:00:39 2025 GMT
        Subject: CN=c6fb63430de80ba373d3826c365eaee46bd596ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:3a:e0:7b:89:27:b0:b9:e2:01:65:57:a5:2e:
                    6b:f2:a8:29:ee:02:dc:4f:f6:7e:db:85:60:62:0b:
                    d4:bb:e3:93:bb:81:33:cb:d3:33:13:65:52:da:a9:
                    ba:22:92:16:27:02:92:0e:72:04:07:c3:9f:1a:7f:
                    66:d9:c8:84:e5:0b:87:81:dd:25:8f:13:ae:fb:90:
                    85:d8:87:77:ca:aa:44:4b:98:6d:33:cb:c6:cc:c6:
                    14:d1:8d:23:90:42:df:8f:85:1f:8d:4f:34:7c:22:
                    93:74:4e:9c:67:fa:7d:3d:aa:c0:de:af:ae:27:f3:
                    ee:c0:ac:a7:93:01:f6:aa:54:d0:27:80:bf:13:f3:
                    cf:b4:e0:ca:f2:58:d5:19:d7:c3:3b:d5:79:b2:34:
                    2a:5c:db:04:d9:98:a8:56:02:85:66:5e:5e:a6:c8:
                    f9:92:88:c9:cc:45:5f:39:17:fb:d7:71:03:95:43:
                    8b:65:35:14:ce:f0:b7:bf:1a:09:ce:68:e4:2e:7a:
                    c1:a8:58:19:58:3c:d2:4f:ed:4a:b3:2e:c8:d1:1a:
                    a6:17:a0:e4:47:c6:35:b1:0c:c3:2d:de:c6:ab:a8:
                    81:ff:a7:d4:c0:73:f4:06:fa:ec:53:ea:52:12:fc:
                    31:06:c9:6e:4f:03:11:5b:c9:c5:6e:a7:8e:dd:d2:
                    31:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:FB:63:43:0D:E8:0B:A3:73:D3:82:6C:36:5E:AE:E4:6B:D5:96:AD
            X509v3 Authority Key Identifier:
                keyid:5B:E8:FE:88:27:BD:C6:09:35:55:09:E0:C9:E8:0E:AB:21:F9:CD:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-j-iCe9xgk1VQngyegOqyH5zcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/efb2d1-c5cb-4143-aa88-610072d80115/1/W-j-iCe9xgk1VQngyegOqyH5zcM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/efb2d1-c5cb-4143-aa88-610072d80115/1/W-j-iCe9xgk1VQngyegOqyH5zcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:6f:5f:d5:46:5f:26:9d:04:29:0d:64:ce:3d:e0:52:d3:85:
         e8:ea:fb:1b:fe:92:06:6f:36:45:17:17:1e:f8:d2:1c:7d:b3:
         02:e4:bb:6a:00:fc:ed:d5:f0:13:02:55:f4:f8:ef:e6:87:92:
         e1:fb:16:07:44:e4:c8:3c:40:72:14:66:de:b5:ab:14:86:a8:
         66:c9:fe:83:f8:08:c6:a5:40:3c:e6:cb:12:70:40:cf:b2:4b:
         65:d3:23:68:3d:54:70:b4:37:92:15:fe:df:34:1d:7b:9c:bb:
         19:c1:cc:0d:bf:db:28:12:d9:7c:19:32:4e:74:66:ba:de:af:
         8f:19:c7:df:1e:81:12:ed:f4:82:23:e9:e8:3a:26:aa:5b:03:
         f7:45:34:6f:c5:02:ab:b6:8f:87:6c:97:85:70:63:d2:5b:8d:
         47:11:ff:d3:f5:d1:26:c4:6c:40:82:d2:d3:78:c9:df:c2:3c:
         77:45:cc:e6:84:51:71:29:10:84:d1:57:16:61:0a:1e:99:7b:
         ac:1f:b7:f9:08:15:e4:0e:85:f5:e8:05:b1:45:e3:f7:2a:d1:
         c5:b6:66:54:cd:68:e9:48:81:50:7b:9f:37:00:63:e1:d2:83:
         8b:7e:8a:f9:ad:a2:e0:bf:24:c8:cf:d3:1e:83:5c:c5:e7:da:
         80:dc:a7:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdQ6pFBnI48Ha3CHqyR43YfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViZThmZTg4MjdiZGM2MDkzNTU1MDllMGM5ZTgwZWFiMjFm
OWNkYzMwHhcNMjUwNjA4MTkwMDM5WhcNMjUwNjA5MTkwMDM5WjAzMTEwLwYDVQQD
EyhjNmZiNjM0MzBkZTgwYmEzNzNkMzgyNmMzNjVlYWVlNDZiZDU5NmFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzjrge4knsLniAWVXpS5r8qgp7gLc
T/Z+24VgYgvUu+OTu4Ezy9MzE2VS2qm6IpIWJwKSDnIEB8OfGn9m2ciE5QuHgd0l
jxOu+5CF2Id3yqpES5htM8vGzMYU0Y0jkELfj4UfjU80fCKTdE6cZ/p9ParA3q+u
J/PuwKynkwH2qlTQJ4C/E/PPtODK8ljVGdfDO9V5sjQqXNsE2ZioVgKFZl5epsj5
kojJzEVfORf713EDlUOLZTUUzvC3vxoJzmjkLnrBqFgZWDzST+1Ksy7I0RqmF6Dk
R8Y1sQzDLd7Gq6iB/6fUwHP0BvrsU+pSEvwxBsluTwMRW8nFbqeO3dIxNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMb7Y0MN6Aujc9OCbDZeruRr1ZatMB8GA1UdIwQY
MBaAFFvo/ognvcYJNVUJ4MnoDqsh+c3DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVy1qLWlDZTl4Z2sxVlFuZ3llZ09xeUg1emNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9lZmIyZDEtYzVjYi00MTQzLWFhODgt
NjEwMDcyZDgwMTE1LzEvVy1qLWlDZTl4Z2sxVlFuZ3llZ09xeUg1emNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS9lZmIyZDEtYzVjYi00MTQzLWFhODgtNjEwMDcyZDgwMTE1
LzEvVy1qLWlDZTl4Z2sxVlFuZ3llZ09xeUg1emNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhW9f1UZf
Jp0EKQ1kzj3gUtOF6Or7G/6SBm82RRcXHvjSHH2zAuS7agD87dXwEwJV9Pjv5oeS
4fsWB0TkyDxAchRm3rWrFIaoZsn+g/gIxqVAPObLEnBAz7JLZdMjaD1UcLQ3khX+
3zQde5y7GcHMDb/bKBLZfBkyTnRmut6vjxnH3x6BEu30giPp6DomqlsD90U0b8UC
q7aPh2yXhXBj0luNRxH/0/XRJsRsQILS03jJ38I8d0XM5oRRcSkQhNFXFmEKHpl7
rB+3+QgV5A6F9egFsUXj9yrRxbZmVM1o6UiBUHufNwBj4dKDi36K+a2i4L8kyM/T
HoNcxefagNynKQ==
-----END CERTIFICATE-----
Generated at Mon Jun 9 02:06:02 2025 by rpki-client