Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/e3267b-f780-4187-8057-75f4fca86ae4/1/WXhaIeLQfGj_MXVYxp7xGMx1gFo.mft
File:                     WXhaIeLQfGj_MXVYxp7xGMx1gFo.mft (raw, json)
Hash identifier:          aLOoo7ZcU38tFqTcgI2q3fm7LH6d2UMXBOnGei5VWmE=
Subject key identifier:   C9:E4:53:74:7C:30:E5:7E:B3:B2:E6:08:3D:9F:49:92:14:3C:AE:88
Authority key identifier: 59:78:5A:21:E2:D0:7C:68:FF:31:75:58:C6:9E:F1:18:CC:75:80:5A
Certificate issuer:       /CN=59785a21e2d07c68ff317558c69ef118cc75805a
Certificate serial:       01976EF518634625AE4777BA909950CB5413
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WXhaIeLQfGj_MXVYxp7xGMx1gFo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/e3267b-f780-4187-8057-75f4fca86ae4/1/WXhaIeLQfGj_MXVYxp7xGMx1gFo.mft
Manifest number:          0C34
Signing time:             Sat 14 Jun 2025 15:00:45 +0000
Manifest this update:     Sat 14 Jun 2025 15:00:45 +0000
Manifest next update:     Sun 15 Jun 2025 15:00:45 +0000
Files and hashes:         1: WXhaIeLQfGj_MXVYxp7xGMx1gFo.crl (hash: vGt91mcBgoejMoZfZtRePFpGMsNZn9+3Z5+m1r6ek+0=)
                          2: pBfkqeCcf8kyWik2qeWgXpT9J0w.roa (hash: x6edmQyN+AuRQRVkdUM3z3US8XBwQrqEnFPt4p+BBqw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/e3267b-f780-4187-8057-75f4fca86ae4/1/WXhaIeLQfGj_MXVYxp7xGMx1gFo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/e3267b-f780-4187-8057-75f4fca86ae4/1/WXhaIeLQfGj_MXVYxp7xGMx1gFo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WXhaIeLQfGj_MXVYxp7xGMx1gFo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 10:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6e:f5:18:63:46:25:ae:47:77:ba:90:99:50:cb:54:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59785a21e2d07c68ff317558c69ef118cc75805a
        Validity
            Not Before: Jun 14 15:00:45 2025 GMT
            Not After : Jun 15 15:00:45 2025 GMT
        Subject: CN=c9e453747c30e57eb3b2e6083d9f4992143cae88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:7c:53:c0:d5:57:15:bf:c9:8d:bc:35:3a:3a:
                    18:1a:4c:fe:72:da:08:73:44:c7:54:64:ea:64:26:
                    d1:4a:50:b0:08:12:0a:45:30:67:89:3c:f0:fe:5c:
                    db:5d:04:ff:50:97:98:62:df:ed:b9:84:76:78:22:
                    71:26:5f:79:da:cc:03:41:db:04:fc:95:57:4b:c9:
                    1d:df:a7:0d:a4:e9:b1:ad:b5:41:15:ac:e4:3a:da:
                    53:34:70:ea:cf:8f:5f:4b:76:b7:2d:e4:4b:db:74:
                    48:92:2d:1a:35:76:1d:b7:7d:66:d2:94:65:b9:e7:
                    dd:18:db:9a:c9:39:9b:73:2b:de:8f:08:bb:75:60:
                    e4:9c:7c:ab:e8:ae:e9:63:7c:28:7a:09:cd:26:03:
                    3d:7f:ba:25:2b:8e:12:c4:bd:89:bc:c6:6e:99:28:
                    05:6a:c4:65:07:72:d8:72:91:74:7e:10:3f:ea:bd:
                    ba:d8:63:7a:be:85:d5:97:2e:0c:c2:2e:6c:16:57:
                    3d:83:8b:5c:71:e4:93:9c:ad:2f:0f:47:dd:b6:97:
                    6e:4d:d0:8e:42:1c:fd:b6:83:b2:94:74:62:2f:f2:
                    4f:68:c9:17:9b:6b:b1:8d:c7:c9:7f:73:44:4f:43:
                    da:fd:02:7a:2a:c8:56:44:a3:27:d3:3d:30:1b:93:
                    28:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:E4:53:74:7C:30:E5:7E:B3:B2:E6:08:3D:9F:49:92:14:3C:AE:88
            X509v3 Authority Key Identifier:
                keyid:59:78:5A:21:E2:D0:7C:68:FF:31:75:58:C6:9E:F1:18:CC:75:80:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXhaIeLQfGj_MXVYxp7xGMx1gFo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e3267b-f780-4187-8057-75f4fca86ae4/1/WXhaIeLQfGj_MXVYxp7xGMx1gFo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/e3267b-f780-4187-8057-75f4fca86ae4/1/WXhaIeLQfGj_MXVYxp7xGMx1gFo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:c5:9f:95:c6:b5:72:de:30:8c:10:ff:3f:9f:0c:c3:b9:e1:
         5a:d2:30:68:2c:ab:1e:c2:f0:98:7a:25:4b:d8:ad:4a:c5:5e:
         a8:c5:40:da:9b:ea:dc:e5:21:8d:25:df:04:96:53:aa:1b:22:
         10:53:db:90:78:9f:9c:f5:33:33:a3:d1:ee:85:4b:c6:74:01:
         4f:fc:4f:17:ab:f2:44:b3:cc:27:6e:41:b3:b8:5b:f4:bb:84:
         49:aa:53:1a:07:35:c7:8f:7a:76:60:10:15:49:37:f2:e2:56:
         e5:74:7a:22:41:e0:35:d7:cb:07:60:97:21:7d:ed:f5:50:25:
         e1:fb:12:de:65:0c:f9:b4:01:01:08:fc:94:66:b4:fd:db:fb:
         8b:a0:26:ec:9f:73:8e:a4:35:7c:62:48:1e:3b:62:cb:65:d1:
         00:32:19:c4:1e:e9:17:ea:1c:bb:bb:f0:4d:1f:e3:b6:d0:60:
         59:06:f5:95:ff:cc:e8:5b:67:6f:b9:4d:8f:9c:85:f2:af:98:
         6d:03:46:8a:c0:6f:ad:22:df:ee:ee:36:43:46:3b:ee:d9:bb:
         91:65:31:a9:9e:6d:b5:f3:57:ae:cb:e2:b6:7c:b1:92:fc:fd:
         ec:af:25:c5:f6:9c:03:27:78:8f:b9:3f:e7:16:89:cd:f3:96:
         b7:cd:89:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 20:37:08 2025 by rpki-client