Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/9a97f0-50b6-4844-89d4-23a276a428ab/1/w98u83AH1U-Gu6J1c9M61pXJ7lw.mft
File:                     w98u83AH1U-Gu6J1c9M61pXJ7lw.mft (raw, json)
Hash identifier:          bqrY+I/fh3UY1ghlndtbQU+hf0vHPIsWSYeNGO6QiSo=
Subject key identifier:   77:9C:21:CB:96:8C:43:46:F7:66:AC:73:8B:31:2C:65:B2:88:BB:58
Authority key identifier: C3:DF:2E:F3:70:07:D5:4F:86:BB:A2:75:73:D3:3A:D6:95:C9:EE:5C
Certificate issuer:       /CN=c3df2ef37007d54f86bba27573d33ad695c9ee5c
Certificate serial:       01975C1364AFADD5F110D1299793AA0D9F49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w98u83AH1U-Gu6J1c9M61pXJ7lw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/9a97f0-50b6-4844-89d4-23a276a428ab/1/w98u83AH1U-Gu6J1c9M61pXJ7lw.mft
Manifest number:          0A34
Signing time:             Tue 10 Jun 2025 23:01:04 +0000
Manifest this update:     Tue 10 Jun 2025 23:01:04 +0000
Manifest next update:     Wed 11 Jun 2025 23:01:04 +0000
Files and hashes:         1: MSS8bajhBaU5VhOzrfA52HmDj84.roa (hash: YEJDRIIvwqwjWO6NfGeQmsZ7v3rXxoUkegHU1CblIHc=)
                          2: w98u83AH1U-Gu6J1c9M61pXJ7lw.crl (hash: pnWzTHhjbhrSsH+Elnli10gyXcYwQnpLorD33sId4Dg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/9a97f0-50b6-4844-89d4-23a276a428ab/1/w98u83AH1U-Gu6J1c9M61pXJ7lw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/9a97f0-50b6-4844-89d4-23a276a428ab/1/w98u83AH1U-Gu6J1c9M61pXJ7lw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w98u83AH1U-Gu6J1c9M61pXJ7lw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 23:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5c:13:64:af:ad:d5:f1:10:d1:29:97:93:aa:0d:9f:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3df2ef37007d54f86bba27573d33ad695c9ee5c
        Validity
            Not Before: Jun 10 23:01:04 2025 GMT
            Not After : Jun 11 23:01:04 2025 GMT
        Subject: CN=779c21cb968c4346f766ac738b312c65b288bb58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:7c:00:80:01:be:f4:1f:da:1b:6d:0e:6c:8d:
                    3e:a1:f0:fc:5b:8f:2c:c1:14:3e:39:49:9c:f3:2b:
                    e2:b7:1e:0f:14:4c:98:4e:71:91:c6:6f:c3:17:f3:
                    0f:a1:e2:72:f5:fa:0a:f6:45:34:0f:34:32:02:57:
                    96:36:5c:cc:fd:a3:5f:d8:ef:53:15:66:68:f1:76:
                    66:48:6b:16:ae:24:5e:9b:56:12:b0:93:79:b2:1c:
                    24:84:74:7a:5d:8b:a1:ac:22:f4:d8:26:15:01:9e:
                    89:e8:0c:27:21:4d:cd:0b:69:ba:7d:ae:ec:53:f7:
                    9f:09:f6:41:f9:f3:df:c5:f5:71:c8:c5:08:6b:a1:
                    1b:c0:32:c8:b5:ed:0e:70:6d:cf:a8:f0:81:ef:5b:
                    fd:e2:f1:08:5b:c4:f1:93:75:16:51:41:4a:a5:35:
                    48:9b:8d:f8:53:2b:9b:62:f5:20:00:5e:db:4a:46:
                    62:80:b0:22:79:77:f7:c6:4e:08:4f:07:6b:fb:c1:
                    83:9c:14:7b:94:f6:a7:20:a8:fa:68:47:39:0a:58:
                    c8:67:1c:28:86:7a:3a:8f:af:f4:f6:be:3f:87:7c:
                    10:04:67:82:f2:89:9b:43:1c:2e:cb:92:23:47:25:
                    73:f0:e2:a3:f1:35:3c:29:7f:7a:08:92:54:50:fb:
                    af:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:9C:21:CB:96:8C:43:46:F7:66:AC:73:8B:31:2C:65:B2:88:BB:58
            X509v3 Authority Key Identifier:
                keyid:C3:DF:2E:F3:70:07:D5:4F:86:BB:A2:75:73:D3:3A:D6:95:C9:EE:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w98u83AH1U-Gu6J1c9M61pXJ7lw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/9a97f0-50b6-4844-89d4-23a276a428ab/1/w98u83AH1U-Gu6J1c9M61pXJ7lw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/9a97f0-50b6-4844-89d4-23a276a428ab/1/w98u83AH1U-Gu6J1c9M61pXJ7lw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:90:40:b7:5a:8e:a3:23:3c:93:15:f0:73:95:5e:97:73:bb:
         32:ee:66:f5:06:4a:79:a6:05:c8:dd:3f:54:fd:41:de:6e:a1:
         64:c4:77:27:11:d0:8e:35:49:fc:01:ca:bb:fc:9c:12:fe:ee:
         51:e9:cc:a1:46:92:b7:2b:1d:e1:3a:18:b7:a3:28:31:38:7f:
         72:f3:cf:44:51:2c:01:7e:0d:bf:67:f1:f9:a0:18:f4:32:61:
         97:01:d5:83:4f:c3:ac:1c:75:af:42:ac:4e:9b:f5:96:fb:d3:
         06:b1:f9:81:81:0e:41:5f:2b:cf:bc:07:86:04:7d:7c:4c:48:
         86:65:0b:d9:2c:20:55:46:09:ac:90:d5:43:14:0b:e2:05:48:
         e6:54:ba:20:7a:7f:57:26:20:30:21:09:ce:b6:0a:13:50:45:
         a8:ee:71:15:5e:49:df:77:87:1d:de:71:dd:eb:2a:57:df:eb:
         44:73:e8:71:5e:5f:71:6e:e4:1d:9a:23:86:88:30:ad:f2:31:
         2f:81:ea:53:57:a9:50:3f:39:6b:cd:71:26:0d:0e:a0:e8:86:
         de:c7:8a:20:47:a5:aa:39:b9:dd:83:bd:f2:78:4f:8e:b4:74:
         ba:32:03:38:b2:92:3d:3b:70:30:fc:72:68:25:2e:5d:6c:fc:
         c8:d0:9e:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 09:25:23 2025 by rpki-client