Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/8664bf-e96a-4c0f-8be3-e72e9b4b7658/1/W4smxTL7xStd5nKrNXYdHH2X6yY.mft
File:                     W4smxTL7xStd5nKrNXYdHH2X6yY.mft (raw, json)
Hash identifier:          xCojqwWbnICZLyLypR9vKOU32V1L8zBpCAp57iI4hgs=
Subject key identifier:   B9:27:7E:EB:B5:2E:5A:56:15:33:E5:63:09:95:D8:7A:E5:D9:08:B3
Authority key identifier: 5B:8B:26:C5:32:FB:C5:2B:5D:E6:72:AB:35:76:1D:1C:7D:97:EB:26
Certificate issuer:       /CN=5b8b26c532fbc52b5de672ab35761d1c7d97eb26
Certificate serial:       01974931539226AD9D86BDCD58C9B92ECB2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W4smxTL7xStd5nKrNXYdHH2X6yY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/8664bf-e96a-4c0f-8be3-e72e9b4b7658/1/W4smxTL7xStd5nKrNXYdHH2X6yY.mft
Manifest number:          2F
Signing time:             Sat 07 Jun 2025 07:00:58 +0000
Manifest this update:     Sat 07 Jun 2025 07:00:58 +0000
Manifest next update:     Sun 08 Jun 2025 07:00:58 +0000
Files and hashes:         1: 7XMrXBUl5guh00C3od83p0sdL2E.roa (hash: s4K7G9zJkdgY7spJ3jJ5e9+1XNKqCaxgKeKuHtLUBSY=)
                          2: W4smxTL7xStd5nKrNXYdHH2X6yY.crl (hash: gENSR5xnvvCE2tpOwFONteIQpN5fbXSrmZ9TnRhMQ80=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/8664bf-e96a-4c0f-8be3-e72e9b4b7658/1/W4smxTL7xStd5nKrNXYdHH2X6yY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/8664bf-e96a-4c0f-8be3-e72e9b4b7658/1/W4smxTL7xStd5nKrNXYdHH2X6yY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W4smxTL7xStd5nKrNXYdHH2X6yY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 07:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:31:53:92:26:ad:9d:86:bd:cd:58:c9:b9:2e:cb:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b8b26c532fbc52b5de672ab35761d1c7d97eb26
        Validity
            Not Before: Jun  7 07:00:58 2025 GMT
            Not After : Jun  8 07:00:58 2025 GMT
        Subject: CN=b9277eebb52e5a561533e5630995d87ae5d908b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:a2:cb:b2:0e:96:f6:98:9c:10:7e:ca:a6:80:
                    5e:cd:e2:b6:2a:bd:c5:ac:0f:ce:92:d6:8f:d9:e8:
                    40:e2:f3:14:18:fd:d1:02:28:ae:49:7c:58:6c:9f:
                    97:61:f3:04:45:0a:b6:60:cc:08:06:95:92:8e:6b:
                    15:3e:47:18:42:ef:0b:ef:bb:66:9c:46:cc:74:d7:
                    6f:75:a5:39:43:67:b7:e7:d6:e0:f4:8f:7d:bf:c4:
                    0e:6a:f2:72:37:14:3d:20:0f:7b:b6:18:3d:d7:78:
                    05:3c:14:79:fb:21:f4:6e:c3:83:64:05:40:0b:19:
                    f3:a0:4b:f9:dd:38:69:91:30:be:01:10:38:a2:80:
                    52:52:7d:38:81:6e:8a:82:89:d3:9c:72:fd:fa:19:
                    75:ec:fe:17:c1:b4:7f:82:92:b9:11:a5:d2:9b:df:
                    21:a2:37:5f:ec:d0:56:0b:b1:30:0c:f6:3c:0d:81:
                    68:2f:34:3a:b6:9f:26:49:ec:e7:b7:05:e9:77:6f:
                    27:30:07:bb:37:10:1a:2f:b4:59:62:a9:de:45:aa:
                    25:1b:c8:d7:37:c4:f2:3d:e6:ac:48:a3:7d:24:0c:
                    8c:34:60:8b:97:84:10:e0:46:55:7a:db:d3:7b:3e:
                    5d:a6:f7:cc:85:1c:08:c9:83:8d:f1:d6:89:4e:d8:
                    76:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:27:7E:EB:B5:2E:5A:56:15:33:E5:63:09:95:D8:7A:E5:D9:08:B3
            X509v3 Authority Key Identifier:
                keyid:5B:8B:26:C5:32:FB:C5:2B:5D:E6:72:AB:35:76:1D:1C:7D:97:EB:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W4smxTL7xStd5nKrNXYdHH2X6yY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/8664bf-e96a-4c0f-8be3-e72e9b4b7658/1/W4smxTL7xStd5nKrNXYdHH2X6yY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/8664bf-e96a-4c0f-8be3-e72e9b4b7658/1/W4smxTL7xStd5nKrNXYdHH2X6yY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:38:e1:82:63:4b:29:2c:69:2d:ee:2d:a8:31:ba:01:47:ab:
         34:c1:fe:b4:ee:0d:ba:93:87:c1:07:af:e0:a4:3d:b2:81:0f:
         f0:90:1d:f5:a8:54:d8:1e:88:b6:35:c6:90:9d:bf:ee:8c:ab:
         a8:37:30:ab:93:84:ad:80:24:94:11:22:9e:7d:02:aa:b8:f0:
         96:c2:e4:03:37:10:07:f2:8f:b8:73:09:8f:ee:5f:0d:ef:ff:
         82:80:38:8d:56:a4:ed:e1:e7:96:70:67:6b:66:ba:c5:87:29:
         3b:1f:22:53:dd:8e:9b:1b:51:9c:ac:a5:50:04:14:f7:eb:5d:
         3b:54:d7:11:b4:37:e2:dd:ce:dc:de:f9:e8:1d:1a:29:28:b7:
         52:37:3e:49:f3:05:31:a2:27:e8:5d:d8:e8:80:49:2f:e5:25:
         86:a5:9f:f4:cd:07:37:9c:5b:c8:c8:71:98:c1:f2:b8:14:12:
         c2:16:f9:28:1b:0c:c7:ec:54:d6:98:94:ff:da:f1:6c:4b:2d:
         fd:a5:42:f6:ae:64:d9:e4:8a:c7:d2:dc:9a:36:5d:86:56:be:
         ae:b1:27:bc:cc:41:7a:d9:e7:90:79:97:6c:ab:d9:7d:a1:a6:
         9a:80:a5:d2:ca:0e:cc:eb:c4:b2:4d:05:05:4f:01:ed:ca:b2:
         fa:c2:e1:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 17:09:00 2025 by rpki-client