Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/24b5ba-bf06-4b51-95bc-a45218c58418/1/wMlBPwdqeCEQwUSQ2JDxs-mOB4U.mft
File:                     wMlBPwdqeCEQwUSQ2JDxs-mOB4U.mft (raw, json)
Hash identifier:          6MiCIQVaWfjIIZwymNoyulhqvrbtICFOSZ4CsoaduW4=
Subject key identifier:   7B:3B:DC:4D:1C:36:A3:14:9F:13:78:60:DB:63:8D:F2:05:41:90:E9
Authority key identifier: C0:C9:41:3F:07:6A:78:21:10:C1:44:90:D8:90:F1:B3:E9:8E:07:85
Certificate issuer:       /CN=c0c9413f076a782110c14490d890f1b3e98e0785
Certificate serial:       01974C6960309F0F0B859ADEE50A89D4DDBD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wMlBPwdqeCEQwUSQ2JDxs-mOB4U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/24b5ba-bf06-4b51-95bc-a45218c58418/1/wMlBPwdqeCEQwUSQ2JDxs-mOB4U.mft
Manifest number:          0B2C
Signing time:             Sat 07 Jun 2025 22:01:03 +0000
Manifest this update:     Sat 07 Jun 2025 22:01:03 +0000
Manifest next update:     Sun 08 Jun 2025 22:01:03 +0000
Files and hashes:         1: XvSqa1PF0nx9rdnf-qHYXXmj-t4.roa (hash: 6D9O10hjXxh7sEXhihEUoyls7053T5SpuEJHdN4TtnE=)
                          2: wMlBPwdqeCEQwUSQ2JDxs-mOB4U.crl (hash: 6hqFUitGQE0hTlBFERTHEhBQsQS0PFDVDicjCwfi22k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/24b5ba-bf06-4b51-95bc-a45218c58418/1/wMlBPwdqeCEQwUSQ2JDxs-mOB4U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/24b5ba-bf06-4b51-95bc-a45218c58418/1/wMlBPwdqeCEQwUSQ2JDxs-mOB4U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wMlBPwdqeCEQwUSQ2JDxs-mOB4U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 18:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4c:69:60:30:9f:0f:0b:85:9a:de:e5:0a:89:d4:dd:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0c9413f076a782110c14490d890f1b3e98e0785
        Validity
            Not Before: Jun  7 22:01:03 2025 GMT
            Not After : Jun  8 22:01:03 2025 GMT
        Subject: CN=7b3bdc4d1c36a3149f137860db638df2054190e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:29:85:e4:13:91:cb:39:72:d0:b3:0a:4a:7a:
                    f6:9a:c6:c3:8d:b9:61:c9:67:cb:fe:56:9a:51:50:
                    b9:12:c5:fd:3e:e7:55:ee:b3:50:6c:61:b2:15:43:
                    37:0f:e7:df:3e:9f:a7:44:45:ce:39:69:4d:c1:2d:
                    4b:4f:74:a1:d9:a1:57:45:88:b1:5a:4f:a5:db:54:
                    43:8a:98:61:23:ae:b4:69:10:54:ac:09:03:17:d9:
                    d1:6e:8b:b9:02:11:73:f2:ad:7e:0a:b4:06:76:8d:
                    93:8d:39:3b:df:56:90:fd:4e:e6:18:0e:a7:58:5a:
                    eb:86:0b:c9:dd:26:c2:a1:2e:18:19:91:46:1b:40:
                    36:b2:d3:65:e5:30:53:ec:6a:f7:35:85:55:c3:d5:
                    1f:dc:03:3d:64:16:c6:9d:35:e9:e0:5a:28:db:54:
                    b1:92:78:bb:ae:72:9b:c2:19:cf:cb:52:4a:84:8e:
                    cb:de:c7:e8:f8:10:b9:8c:9b:a7:25:54:ad:33:86:
                    a0:24:07:8f:f5:b1:af:81:9f:16:9f:89:bb:88:9a:
                    fb:e4:c6:73:6e:8d:25:74:42:2c:59:4d:39:d8:f5:
                    34:91:ac:75:68:29:c4:24:2b:a9:91:7e:10:53:b2:
                    59:59:6b:02:10:3c:00:10:8f:eb:db:23:11:24:cd:
                    af:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:3B:DC:4D:1C:36:A3:14:9F:13:78:60:DB:63:8D:F2:05:41:90:E9
            X509v3 Authority Key Identifier:
                keyid:C0:C9:41:3F:07:6A:78:21:10:C1:44:90:D8:90:F1:B3:E9:8E:07:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wMlBPwdqeCEQwUSQ2JDxs-mOB4U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/24b5ba-bf06-4b51-95bc-a45218c58418/1/wMlBPwdqeCEQwUSQ2JDxs-mOB4U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/24b5ba-bf06-4b51-95bc-a45218c58418/1/wMlBPwdqeCEQwUSQ2JDxs-mOB4U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:6d:e6:f9:75:73:ba:1f:f8:7a:b3:c4:e4:1f:c3:f4:1e:10:
         02:45:32:ec:62:2b:4d:79:ba:17:a8:74:d0:dc:d0:92:dc:e6:
         d5:83:49:99:e4:0e:28:93:e9:d0:22:7e:99:6d:a7:8a:d0:92:
         9e:56:45:38:ed:1a:ce:e1:57:61:eb:f4:dc:41:e7:70:c5:0e:
         d8:5d:11:38:9b:70:6f:bd:fc:f6:0b:5e:34:de:d6:2a:08:97:
         2d:ef:20:d5:65:cf:16:44:32:50:71:a8:30:54:6e:cb:88:64:
         e0:2b:1d:b0:9e:a7:a3:08:82:8e:60:67:7d:3b:fb:40:82:b0:
         ca:fd:42:6b:d6:71:d8:1c:e2:ff:7b:97:c9:c6:3f:76:73:f1:
         16:46:50:6a:5e:58:43:e1:e2:9a:26:ab:d7:78:60:a2:f0:e2:
         64:d7:0a:89:f6:0d:a4:2c:c3:2d:91:de:5b:e6:5e:0a:83:5a:
         d9:39:c6:56:cc:dc:81:72:c8:2d:00:e2:3d:21:9e:17:47:54:
         5e:19:76:62:2d:19:a5:0a:e8:f3:fb:a0:54:63:03:15:27:e0:
         bd:92:b6:c9:43:b2:75:eb:71:62:22:bb:a4:16:55:73:6d:43:
         7c:fc:25:92:f7:7f:79:49:95:6f:8e:53:05:cc:b6:c0:47:fd:
         ea:e8:48:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 03:48:51 2025 by rpki-client