Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/29440b-c59a-4608-bc63-a4ca3363d701/1/Wv2_mIPBjEzhZdi4UDxiAXRdaIc.mft
File:                     Wv2_mIPBjEzhZdi4UDxiAXRdaIc.mft (raw, json)
Hash identifier:          /6aCi9IF6i5Qs40AbwQI29J3oc9Dq8pkvWf2HjOoTBg=
Subject key identifier:   CC:88:93:04:5E:74:8B:E2:A9:07:66:2E:8A:2A:10:4F:3B:3C:D7:3C
Authority key identifier: 5A:FD:BF:98:83:C1:8C:4C:E1:65:D8:B8:50:3C:62:01:74:5D:68:87
Certificate issuer:       /CN=5afdbf9883c18c4ce165d8b8503c6201745d6887
Certificate serial:       019748FA32966FFBADFF246E3E943B7E900A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wv2_mIPBjEzhZdi4UDxiAXRdaIc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/29440b-c59a-4608-bc63-a4ca3363d701/1/Wv2_mIPBjEzhZdi4UDxiAXRdaIc.mft
Manifest number:          0FE9
Signing time:             Sat 07 Jun 2025 06:00:45 +0000
Manifest this update:     Sat 07 Jun 2025 06:00:45 +0000
Manifest next update:     Sun 08 Jun 2025 06:00:45 +0000
Files and hashes:         1: ORzdYgpKmwSJL1fVNUo6LmyhjSk.roa (hash: LmFlM+n+lX0yoflgNqGYgZ3G5C5DbphEooeee/wY1iM=)
                          2: Wv2_mIPBjEzhZdi4UDxiAXRdaIc.crl (hash: zmdvZZ2mtStc+9jDIvgB75NL+Skj0ZV74MDsF7HOUoc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/29440b-c59a-4608-bc63-a4ca3363d701/1/Wv2_mIPBjEzhZdi4UDxiAXRdaIc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/29440b-c59a-4608-bc63-a4ca3363d701/1/Wv2_mIPBjEzhZdi4UDxiAXRdaIc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Wv2_mIPBjEzhZdi4UDxiAXRdaIc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 22:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:fa:32:96:6f:fb:ad:ff:24:6e:3e:94:3b:7e:90:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5afdbf9883c18c4ce165d8b8503c6201745d6887
        Validity
            Not Before: Jun  7 06:00:45 2025 GMT
            Not After : Jun  8 06:00:45 2025 GMT
        Subject: CN=cc8893045e748be2a907662e8a2a104f3b3cd73c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:44:97:17:5f:a5:87:7b:83:a6:41:ec:01:24:
                    27:96:e2:2e:bf:32:51:1b:a0:c5:d4:40:4b:c7:f8:
                    12:74:6b:cc:0b:61:bc:ae:e8:80:3d:93:7c:c7:35:
                    85:a3:17:14:0a:ed:e2:3e:96:63:23:77:0f:b5:9f:
                    14:23:47:4b:00:d0:ee:4f:4d:5f:24:8c:40:69:ff:
                    62:9e:db:cd:dd:14:7c:84:6b:8c:41:a7:b2:8d:f3:
                    1a:1c:ff:5e:56:29:03:83:78:1f:44:5a:f8:2f:17:
                    a9:86:b2:b5:f2:69:6f:9d:c5:60:96:a0:24:0c:49:
                    c1:ee:5e:f4:a1:13:bf:6a:0e:e3:d3:1f:01:f1:7b:
                    b6:ad:fd:31:41:7e:13:42:b9:95:80:4c:aa:a9:87:
                    d3:86:4f:18:25:da:c5:91:c1:64:a6:c9:0c:15:3e:
                    07:09:18:20:a6:ac:83:ef:52:7c:0b:ed:e9:20:ae:
                    71:a4:d5:ac:dd:3a:86:4e:d7:0f:bc:82:b4:50:74:
                    9f:96:4f:54:58:49:81:9a:ea:8f:53:4e:a7:ce:fc:
                    2d:70:52:c0:5b:d1:7a:24:6e:b7:41:1e:34:80:25:
                    97:bc:7e:3e:61:ab:e4:54:9d:b9:2c:73:41:c0:ce:
                    3b:70:50:72:ba:a3:b2:94:17:9a:d3:cf:f9:b3:c1:
                    83:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:88:93:04:5E:74:8B:E2:A9:07:66:2E:8A:2A:10:4F:3B:3C:D7:3C
            X509v3 Authority Key Identifier:
                keyid:5A:FD:BF:98:83:C1:8C:4C:E1:65:D8:B8:50:3C:62:01:74:5D:68:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wv2_mIPBjEzhZdi4UDxiAXRdaIc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/29440b-c59a-4608-bc63-a4ca3363d701/1/Wv2_mIPBjEzhZdi4UDxiAXRdaIc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/29440b-c59a-4608-bc63-a4ca3363d701/1/Wv2_mIPBjEzhZdi4UDxiAXRdaIc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:79:7b:f1:75:d7:47:96:cd:e1:55:6a:cb:5d:37:4d:64:81:
         1d:c2:4b:93:f7:83:8a:10:1b:27:b9:a3:4e:eb:19:0e:b2:ff:
         49:08:b7:48:2c:99:74:a0:11:6e:f8:1b:ef:b7:28:b8:e5:78:
         59:cf:e5:ae:f2:6e:22:7c:ed:ba:f6:62:30:8c:8b:27:02:b0:
         ea:fd:be:98:9e:ee:02:ea:c4:21:99:ea:61:79:b9:92:71:1f:
         1e:fa:4d:83:23:bd:85:2d:3a:60:e7:af:92:42:75:cf:a6:c4:
         a8:b7:fa:d5:e9:65:69:58:e4:d1:42:e2:e6:38:0a:53:02:08:
         21:91:bd:64:b2:ba:59:72:76:7e:8a:df:42:8a:0d:69:ec:4a:
         b9:eb:4b:43:d2:7e:9f:8b:54:50:f1:7e:82:cf:c7:56:1e:11:
         26:b6:ca:6a:4a:05:26:7d:ba:bb:1b:f0:06:22:14:87:b9:6f:
         53:41:1e:1b:8a:7c:53:aa:53:ac:95:73:1c:2b:63:78:5f:c9:
         db:04:45:c9:d5:a7:b5:35:95:be:4e:e0:28:03:02:d2:92:09:
         c6:49:30:7e:b3:62:1b:f9:93:4f:d9:82:04:c9:dc:25:d0:1c:
         b6:a8:49:73:7e:eb:1e:29:f7:4a:20:d0:5f:77:c1:d2:64:ec:
         87:ce:f3:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:18:39 2025 by rpki-client