Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/005fc9-2bc8-405b-9c01-c0c0b3b307c6/1/wqMqa-560Y0aiuNCPpHcVZ8nbEc.mft
File:                     wqMqa-560Y0aiuNCPpHcVZ8nbEc.mft (raw, json)
Hash identifier:          B8W+QMHhwd6We/eRf/5G90f1DnmCdVaog/Mu59mTE2c=
Subject key identifier:   EE:41:E3:A8:8B:FD:A9:E0:E1:30:FC:65:4E:9F:3A:BA:FD:82:F0:44
Authority key identifier: C2:A3:2A:6B:EE:7A:D1:8D:1A:8A:E3:42:3E:91:DC:55:9F:27:6C:47
Certificate issuer:       /CN=c2a32a6bee7ad18d1a8ae3423e91dc559f276c47
Certificate serial:       01974A7A860E06C4B98EB9ACCF47BB527DD4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wqMqa-560Y0aiuNCPpHcVZ8nbEc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/005fc9-2bc8-405b-9c01-c0c0b3b307c6/1/wqMqa-560Y0aiuNCPpHcVZ8nbEc.mft
Manifest number:          157B
Signing time:             Sat 07 Jun 2025 13:00:32 +0000
Manifest this update:     Sat 07 Jun 2025 13:00:32 +0000
Manifest next update:     Sun 08 Jun 2025 13:00:32 +0000
Files and hashes:         1: wqMqa-560Y0aiuNCPpHcVZ8nbEc.crl (hash: DF9+uCQbxpN9WPCz/Z3PBQcavqLh/P1PJgezpFtIBFE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/005fc9-2bc8-405b-9c01-c0c0b3b307c6/1/wqMqa-560Y0aiuNCPpHcVZ8nbEc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/005fc9-2bc8-405b-9c01-c0c0b3b307c6/1/wqMqa-560Y0aiuNCPpHcVZ8nbEc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wqMqa-560Y0aiuNCPpHcVZ8nbEc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 11:24:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:7a:86:0e:06:c4:b9:8e:b9:ac:cf:47:bb:52:7d:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2a32a6bee7ad18d1a8ae3423e91dc559f276c47
        Validity
            Not Before: Jun  7 13:00:32 2025 GMT
            Not After : Jun  8 13:00:32 2025 GMT
        Subject: CN=ee41e3a88bfda9e0e130fc654e9f3abafd82f044
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:cc:42:11:29:47:fd:0b:ce:c6:88:1f:08:37:
                    4c:19:e5:8c:93:23:b1:d9:27:74:0c:36:2a:f7:0b:
                    e9:08:7c:78:34:bd:74:74:f9:ba:12:7d:62:83:47:
                    69:85:70:cf:73:57:d8:72:fc:c0:69:7f:43:ed:1a:
                    d7:a1:89:6a:0f:f6:b5:fa:a8:44:4e:dc:fb:89:6f:
                    00:8c:be:b0:d5:31:bd:20:ab:53:08:63:83:3e:c2:
                    0f:cb:18:06:f2:d8:78:5c:6b:96:49:fd:07:24:af:
                    45:65:8e:f4:64:d1:58:ba:50:02:80:9f:6d:3e:8d:
                    90:d9:8e:8e:1d:4c:dc:92:4c:68:a3:b9:9d:37:26:
                    63:19:32:a3:83:91:63:d4:b7:71:5c:82:3c:82:6c:
                    23:3b:16:c9:7a:bc:1e:16:6e:b2:70:a2:3c:36:49:
                    ae:98:ad:b4:4a:b1:f3:af:4d:f6:89:e6:dc:13:71:
                    bd:cb:d9:9b:af:68:67:dc:fb:7a:bb:87:2f:52:e0:
                    ee:c0:5a:13:71:df:13:c2:71:7a:d1:27:3e:f7:2d:
                    b4:62:c0:03:d0:d5:ff:56:cc:fb:de:ec:29:68:1c:
                    bc:18:43:d0:38:7d:4a:e3:5c:9c:71:b3:b5:b1:c1:
                    e8:6c:b0:41:7d:82:06:11:70:6c:e2:7d:93:0a:c2:
                    33:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:41:E3:A8:8B:FD:A9:E0:E1:30:FC:65:4E:9F:3A:BA:FD:82:F0:44
            X509v3 Authority Key Identifier:
                keyid:C2:A3:2A:6B:EE:7A:D1:8D:1A:8A:E3:42:3E:91:DC:55:9F:27:6C:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wqMqa-560Y0aiuNCPpHcVZ8nbEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/005fc9-2bc8-405b-9c01-c0c0b3b307c6/1/wqMqa-560Y0aiuNCPpHcVZ8nbEc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/005fc9-2bc8-405b-9c01-c0c0b3b307c6/1/wqMqa-560Y0aiuNCPpHcVZ8nbEc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:33:9c:67:58:15:28:f2:b1:7a:41:39:e7:fd:77:b6:ea:e2:
         e0:df:1a:ab:24:e3:4a:9d:6d:2e:c5:ec:17:99:08:24:11:3b:
         66:41:6e:e0:5a:a7:c5:5a:14:11:55:e1:c5:57:28:03:6a:86:
         30:bc:aa:0d:5e:6d:56:59:f0:41:a8:d8:b9:2a:60:d2:42:31:
         d6:a3:40:f4:b1:b7:be:75:49:e1:ed:5b:68:23:ef:ea:13:ff:
         18:99:ac:dc:94:fc:19:ff:be:13:66:74:0a:cc:93:da:a5:c9:
         74:1e:0e:b4:57:da:cb:1e:e8:f3:4f:11:06:71:9c:30:1d:f0:
         28:b9:31:65:97:e0:d1:27:74:57:b9:3a:ff:a1:41:ca:94:23:
         15:e5:35:19:3d:55:c2:f4:5e:1b:6a:7c:ed:5b:f1:61:4e:32:
         fe:7e:82:44:b7:f0:e3:97:52:62:ee:0f:60:4c:1b:6e:46:39:
         e2:81:9d:95:b6:2c:3f:c6:42:38:ec:29:4f:3f:72:f5:38:b9:
         ed:92:a8:dc:91:30:66:b7:70:d7:c2:a4:34:66:16:32:30:71:
         f5:03:6e:a5:1f:0a:48:2a:ea:92:c8:96:93:de:03:e1:ec:49:
         9c:11:b7:98:82:60:14:0b:3a:60:6e:13:62:08:5d:76:2e:f3:
         29:51:09:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKeoYOBsS5jrmsz0e7Un3UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyYTMyYTZiZWU3YWQxOGQxYThhZTM0MjNlOTFkYzU1OWYy
NzZjNDcwHhcNMjUwNjA3MTMwMDMyWhcNMjUwNjA4MTMwMDMyWjAzMTEwLwYDVQQD
EyhlZTQxZTNhODhiZmRhOWUwZTEzMGZjNjU0ZTlmM2FiYWZkODJmMDQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMxCESlH/QvOxogfCDdMGeWMkyOx
2Sd0DDYq9wvpCHx4NL10dPm6En1ig0dphXDPc1fYcvzAaX9D7RrXoYlqD/a1+qhE
Ttz7iW8AjL6w1TG9IKtTCGODPsIPyxgG8th4XGuWSf0HJK9FZY70ZNFYulACgJ9t
Po2Q2Y6OHUzckkxoo7mdNyZjGTKjg5Fj1LdxXII8gmwjOxbJerweFm6ycKI8Nkmu
mK20SrHzr032iebcE3G9y9mbr2hn3Pt6u4cvUuDuwFoTcd8TwnF60Sc+9y20YsAD
0NX/Vsz73uwpaBy8GEPQOH1K41yccbO1scHobLBBfYIGEXBs4n2TCsIzJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO5B46iL/ang4TD8ZU6fOrr9gvBEMB8GA1UdIwQY
MBaAFMKjKmvuetGNGorjQj6R3FWfJ2xHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3FNcWEtNTYwWTBhaXVOQ1BwSGNWWjhuYkVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8wMDVmYzktMmJjOC00MDViLTljMDEt
YzBjMGIzYjMwN2M2LzEvd3FNcWEtNTYwWTBhaXVOQ1BwSGNWWjhuYkVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy8wMDVmYzktMmJjOC00MDViLTljMDEtYzBjMGIzYjMwN2M2
LzEvd3FNcWEtNTYwWTBhaXVOQ1BwSGNWWjhuYkVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdzOcZ1gV
KPKxekE55/13turi4N8aqyTjSp1tLsXsF5kIJBE7ZkFu4FqnxVoUEVXhxVcoA2qG
MLyqDV5tVlnwQajYuSpg0kIx1qNA9LG3vnVJ4e1baCPv6hP/GJms3JT8Gf++E2Z0
CsyT2qXJdB4OtFfayx7o808RBnGcMB3wKLkxZZfg0Sd0V7k6/6FBypQjFeU1GT1V
wvReG2p87VvxYU4y/n6CRLfw45dSYu4PYEwbbkY54oGdlbYsP8ZCOOwpTz9y9Ti5
7ZKo3JEwZrdw18KkNGYWMjBx9QNupR8KSCrqksiWk94D4exJnBG3mIJgFAs6YG4T
Yghddi7zKVEJDA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 20:25:28 2025 by rpki-client