Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/wig0jpBUlz16X4GTvU5cRPZzmeE.mft
File:                     wig0jpBUlz16X4GTvU5cRPZzmeE.mft (raw, json)
Hash identifier:          A4OjYCN4TZcvYeYEBpm/Ec5pHg3l4He+zAHDlhTQucE=
Subject key identifier:   6B:4C:A3:02:C0:17:CE:5A:8F:24:9D:FA:C2:84:35:3E:93:08:C0:6D
Authority key identifier: C2:28:34:8E:90:54:97:3D:7A:5F:81:93:BD:4E:5C:44:F6:73:99:E1
Certificate issuer:       /CN=c228348e9054973d7a5f8193bd4e5c44f67399e1
Certificate serial:       01973D6430978A2E21CCFA13E7ABBE9110FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wig0jpBUlz16X4GTvU5cRPZzmeE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/wig0jpBUlz16X4GTvU5cRPZzmeE.mft
Manifest number:          1588
Signing time:             Thu 05 Jun 2025 00:01:05 +0000
Manifest this update:     Thu 05 Jun 2025 00:01:05 +0000
Manifest next update:     Fri 06 Jun 2025 00:01:05 +0000
Files and hashes:         1: 0QvCIwpxR3bpNP5RGisGcKh9tl4.roa (hash: o05fpl+QvO05aQyn7co8mtDbeJw4OqMmO6xVcG1jfvs=)
                          2: 3k6upSOdWy9zCNJpe2jRV6jVFps.roa (hash: KymeToQI2DhxJPw828I+qq4ysUMrfZXU0uXAbAf0KTU=)
                          3: 78o_FWZJdNx8y6lqNyGyQ8K6E58.roa (hash: IixtfvrQUner2Z+jcrj/ILDoom7eQRYfsR3spwo/Sp8=)
                          4: 8ye5aMnDN3H7sXuqJJReuxUEJXk.roa (hash: 5SBqUuPfoMeImGa+JEq3mqC1lLk8F5qTvpo0BQMOKDI=)
                          5: Aqt3jeaprsuKaHcOUqUUT28sbp8.roa (hash: EmCBxRRSxkg6mCxIsUzjtmNjSktnaiN0x5KAiYWphtY=)
                          6: BClXzEQANgLSEyYwbcinWsrBQ-g.roa (hash: yVBHkPkJIglcfOF7z6cfI7im3HPfB2TRKP3mvLzBmGg=)
                          7: Cm730G_AHSSBzZcSEbVAVS1nZYk.roa (hash: +l4oY660Xw3njFEI5BINOE+dJQFJ4tvjTaTZZwjdme4=)
                          8: D9-YU2ZDhJ0v1_AXcHBT_S48GwI.roa (hash: DMZSaMGentXeOZzVyA6LykLKHQIR9Ks1woE8+zLvzpk=)
                          9: ERLWTBMaBYD_unsIlsetr5st4fw.roa (hash: KpD3u3ug5GanNwgbi8bSe4vUjYbgUszyEQHqwM0V68A=)
                          10: EntV6VzXxjtJAhHc4d_vR-U-89U.roa (hash: 1AGpduD0aJJJJWhNq4TNumzYObxhPZ6xOeMP1fog8L4=)
                          11: G7_pBwgIb18W0bzx0vE-1R_iK4c.roa (hash: /gR04o7RTMGFCWJfgbmLvJDeNPnpOC+Ybn3q4mrVCbg=)
                          12: IgurgAZqMyXZW_Q9kx83TkpAvtY.roa (hash: S2jpYnrIhuuDh4c7AwFLs0DidvN0vHIICnCQLX4nXq4=)
                          13: Is_SubZgwqb_9F4vdFcPtqqAE_Q.roa (hash: xmxRpk/h+RREswL6FdQ3EYJu4suUIaG6Qi2dOEQuO0E=)
                          14: ItK4FWpjS5MvaBYu8Cw9ufPzz8M.roa (hash: ZxbilmAi3dMbN07yI1icrylrp1ISWW9blZJUQMbe0tE=)
                          15: Mk8KYt2G3egKSdt0jzQVPmKCVkw.roa (hash: cbkefvTY+ExyUo66CALX+XiVOUGydzynhYnpl1eVmus=)
                          16: OVtacBhFparFzA-VK57YO0y03m8.roa (hash: N6MabMbeLUr71XAZxpIYhW2kQPSVkUOZJml4SO6pE4k=)
                          17: PA-jfkanAVWfUpQmpSeB8oXIr0s.roa (hash: pCuvftglSJb2tleiBWc5aLM9vMUvfIEWsyAMH9nG+8A=)
                          18: QGsUTlp6_BEFTYCsH7OHXModcUQ.roa (hash: VOTvEoonXB+enjAqNX+KysvO9X3bauhfk46eSsAk6MY=)
                          19: Vx21t_oagyVMf4O40v7qZsXeXQU.roa (hash: UL9yz0GAvk+ZvI8LYI9Sctm68iPWeqJLY2M1tPCrmus=)
                          20: YIU-4qo-oAuRHLmOCynpaPalSF0.roa (hash: JsQyAb9PtTIbmB15wOfkyewNwt/4cFt2DHNCYba33k0=)
                          21: _COwDv5XkoYYyhJgP_qwBSHFm50.roa (hash: b7Iyv+8YJpp6HOm25cqap6uTGeszF/qdRTBIxvC6pFU=)
                          22: _bX74_w1oEwgLrgAZnQVIU-cSZ4.roa (hash: KHaAUhSlqOxQmRu7iriH0WDDD4QIxMf3JGOZ+VNOHOo=)
                          23: awP_9rkml_sm7zeUyIk-hWOcaNM.roa (hash: /WFwmRIxgInGSPEa5mh27hc+5dvYTjv7SOciwYm7Yqo=)
                          24: dHYWEJSWET067N4qclUpm0XFJ7o.roa (hash: S4EKIPK+IYCyvgM4xfHGDmmF/Oz7ejFlhnvB8trqAd8=)
                          25: f9FMqbsGCQTR2I_pSghMmyxXvQo.roa (hash: z+cFX5s0n92Drw/RVVSHwoX4sUW+bw76H7mDsPuHcRQ=)
                          26: gH2Ml08pkcNQk3L7CCHmTjTSwKQ.roa (hash: d4RSH6+xorxY40URBoEfRdGUVfAgCYRaB6RGA++Wipc=)
                          27: ja4l9ymf5vogAzY_c1pZ9r2JQl0.roa (hash: QV8yo4Y7S4RMw1tYaqfomW+XF6w6Y5Rkf38FTGtBaCc=)
                          28: jhlmLh--Fe0ICj7hvW7KAqjvWqw.roa (hash: 1FZCflmFpzFt5lOiwrwcCB3daxKRGAB3UUOelBugZLE=)
                          29: l7a_kNrevPjxNodupeNHSdCWEr8.roa (hash: df9hdqTFrMwkzFMkErR0XGiaeVzL8O1w6wVxDJsaOfc=)
                          30: lwXNaXod425LZYgrYh4gZBb1l7A.roa (hash: xPJa4H0AiEaccJwObXy0o6a7JoSiYl8+9hHgmFuSLDg=)
                          31: pmytThn77KyfY62XUmuBTmJmlEU.roa (hash: veYyBmTbvHZFT2kyetYWhwPTKHkYv0ENqtloF/dQJ4g=)
                          32: su_1DPB7Zp9ePwa-RHRem-w70CY.roa (hash: NSbW9yzN/6/DTloMlYOQZADFDTunvCQs/5F9HlR2sjU=)
                          33: tXpAR6snYYdl9lnSZFlZrlTwOtU.roa (hash: amfZ9AmgB5LnsYibO/xBS7f3HIiKaJ443EHi9bke7DY=)
                          34: wig0jpBUlz16X4GTvU5cRPZzmeE.crl (hash: cv02v+knePQqlEVHPww8fcS9h7I4ada4268b81TeHMo=)
                          35: xX5hP5dyXaRRP0j4wd3WK2HuKs8.roa (hash: LUqqIedij3MsZ4xdDrj2P77W4YSkhRHXS4bSs5DH+Z0=)
                          36: zdnRo8hsG_ekUtB6UXgJfPq6Drs.roa (hash: OHzg7i+zGnHbWGtkMSWmdg/OlccAvO2NXEsZMfvBT88=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/wig0jpBUlz16X4GTvU5cRPZzmeE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/wig0jpBUlz16X4GTvU5cRPZzmeE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wig0jpBUlz16X4GTvU5cRPZzmeE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Jun 2025 00:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:3d:64:30:97:8a:2e:21:cc:fa:13:e7:ab:be:91:10:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c228348e9054973d7a5f8193bd4e5c44f67399e1
        Validity
            Not Before: Jun  5 00:01:05 2025 GMT
            Not After : Jun  6 00:01:05 2025 GMT
        Subject: CN=6b4ca302c017ce5a8f249dfac284353e9308c06d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a8:88:ce:f4:c0:6c:44:27:33:3b:2a:87:e3:
                    ce:f9:e9:b5:92:85:29:67:9a:a1:8d:ee:11:e9:4f:
                    a8:49:0f:90:3d:2e:d3:08:c2:0a:1a:c4:07:89:f3:
                    ee:63:c5:12:09:b7:df:0c:6c:3e:f6:69:35:94:f7:
                    16:a3:e2:e5:de:7b:18:b3:3b:37:02:0c:7f:41:56:
                    71:cb:9a:dc:41:de:e3:68:13:e1:82:0f:df:5f:dc:
                    a4:91:80:2b:17:ec:13:24:ae:ae:66:04:16:ff:89:
                    5f:9c:2d:1c:d0:29:c2:ab:0d:48:fc:a5:66:3b:ce:
                    bc:15:1f:e4:91:0b:a2:5b:47:01:44:0b:c8:52:cb:
                    4d:ca:35:44:0f:d4:b3:f5:ff:bc:8e:c6:8b:5a:55:
                    f3:ec:ec:bf:f7:ec:02:dc:30:1c:99:19:5a:ed:9a:
                    24:cc:9b:89:08:61:19:b5:14:c6:17:0f:86:77:17:
                    a5:32:b0:3e:fb:cd:72:fa:33:9f:92:95:ad:4e:46:
                    2a:ef:2e:78:b7:36:ca:1f:fa:ed:bd:59:9c:b7:63:
                    38:eb:33:c0:11:fd:9e:4b:ed:43:f2:88:19:83:d4:
                    4f:47:db:93:26:ad:cf:af:28:81:b3:66:d8:0e:cb:
                    99:2a:5e:03:47:f1:68:3c:93:6b:7e:c3:77:cb:2b:
                    ae:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:4C:A3:02:C0:17:CE:5A:8F:24:9D:FA:C2:84:35:3E:93:08:C0:6D
            X509v3 Authority Key Identifier:
                keyid:C2:28:34:8E:90:54:97:3D:7A:5F:81:93:BD:4E:5C:44:F6:73:99:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wig0jpBUlz16X4GTvU5cRPZzmeE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/wig0jpBUlz16X4GTvU5cRPZzmeE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/wig0jpBUlz16X4GTvU5cRPZzmeE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:82:e5:f4:b2:37:a0:e0:7d:eb:6c:c8:fa:7a:f0:eb:96:2e:
         7f:a0:87:5a:98:e0:57:e7:ea:9f:10:a9:90:97:3a:fb:eb:1b:
         0c:64:e4:0a:3d:c4:df:d3:85:80:92:54:7a:5d:30:dd:a3:a7:
         4e:03:34:5d:ba:2d:36:14:09:c8:a6:a6:e5:b3:8d:57:d6:43:
         54:51:b3:6e:40:1d:f6:ea:c2:5c:3c:f8:93:98:ec:a7:bc:11:
         1e:a7:e7:01:3d:6c:6f:aa:9d:3a:70:43:d3:9d:47:73:d1:b4:
         41:ea:59:cb:15:43:fc:ee:d1:79:d1:55:1b:02:2d:91:e4:7d:
         1b:37:27:5b:c4:47:97:68:98:c0:24:bf:ef:97:b8:db:dd:d0:
         4a:a6:fa:f3:41:1f:2a:60:b1:03:92:89:e0:53:78:e7:55:17:
         0f:7c:7b:d0:57:e8:23:89:a1:11:fb:19:0b:42:63:79:58:17:
         2c:93:9e:bf:ff:6c:65:38:d0:00:a9:97:8d:51:c3:ef:9a:4a:
         10:7e:61:cc:ec:69:25:ae:cb:c3:59:7c:f9:72:ac:db:f7:93:
         ee:84:a8:ce:b6:42:ee:99:91:a0:30:df:9e:d5:3f:8c:6d:de:
         8b:ff:54:3b:b9:da:cb:3f:8c:9e:78:ed:e7:79:ca:64:2a:4a:
         46:d0:25:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZc9ZDCXii4hzPoT56u+kRD6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyMjgzNDhlOTA1NDk3M2Q3YTVmODE5M2JkNGU1YzQ0ZjY3
Mzk5ZTEwHhcNMjUwNjA1MDAwMTA1WhcNMjUwNjA2MDAwMTA1WjAzMTEwLwYDVQQD
Eyg2YjRjYTMwMmMwMTdjZTVhOGYyNDlkZmFjMjg0MzUzZTkzMDhjMDZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApaiIzvTAbEQnMzsqh+PO+em1koUp
Z5qhje4R6U+oSQ+QPS7TCMIKGsQHifPuY8USCbffDGw+9mk1lPcWo+Ll3nsYszs3
Agx/QVZxy5rcQd7jaBPhgg/fX9ykkYArF+wTJK6uZgQW/4lfnC0c0CnCqw1I/KVm
O868FR/kkQuiW0cBRAvIUstNyjVED9Sz9f+8jsaLWlXz7Oy/9+wC3DAcmRla7Zok
zJuJCGEZtRTGFw+GdxelMrA++81y+jOfkpWtTkYq7y54tzbKH/rtvVmct2M46zPA
Ef2eS+1D8ogZg9RPR9uTJq3PryiBs2bYDsuZKl4DR/FoPJNrfsN3yyuu1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGtMowLAF85ajySd+sKENT6TCMBtMB8GA1UdIwQY
MBaAFMIoNI6QVJc9el+Bk71OXET2c5nhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2lnMGpwQlVsejE2WDRHVHZVNWNSUFp6bWVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9mMTY3OTQtOTFhZC00OTg0LTljNmMt
ZTg4ZmZmODJkNTUzLzEvd2lnMGpwQlVsejE2WDRHVHZVNWNSUFp6bWVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy9mMTY3OTQtOTFhZC00OTg0LTljNmMtZTg4ZmZmODJkNTUz
LzEvd2lnMGpwQlVsejE2WDRHVHZVNWNSUFp6bWVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlILl9LI3
oOB962zI+nrw65Yuf6CHWpjgV+fqnxCpkJc6++sbDGTkCj3E39OFgJJUel0w3aOn
TgM0XbotNhQJyKam5bONV9ZDVFGzbkAd9urCXDz4k5jsp7wRHqfnAT1sb6qdOnBD
051Hc9G0QepZyxVD/O7RedFVGwItkeR9GzcnW8RHl2iYwCS/75e4293QSqb680Ef
KmCxA5KJ4FN451UXD3x70FfoI4mhEfsZC0JjeVgXLJOev/9sZTjQAKmXjVHD75pK
EH5hzOxpJa7Lw1l8+XKs2/eT7oSozrZC7pmRoDDfntU/jG3ei/9UO7nayz+Mnnjt
53nKZCpKRtAlRg==
-----END CERTIFICATE-----
Generated at Thu Jun 5 08:57:36 2025 by rpki-client