Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/9acaa0-05e1-4721-89eb-a671915ee99a/1/wy_JMz20PiSz8jvGSjrhP0D7Cqc.mft
File:                     wy_JMz20PiSz8jvGSjrhP0D7Cqc.mft (raw, json)
Hash identifier:          IqjDulldjZfP4we40/VW2XrMUQafvsOgOPTmVCAE8us=
Subject key identifier:   20:6C:32:BB:3B:22:B4:84:0C:0E:76:B0:39:FE:44:32:ED:CC:49:C7
Authority key identifier: C3:2F:C9:33:3D:B4:3E:24:B3:F2:3B:C6:4A:3A:E1:3F:40:FB:0A:A7
Certificate issuer:       /CN=c32fc9333db43e24b3f23bc64a3ae13f40fb0aa7
Certificate serial:       01975723EC23EC279CD43919478FB3FFC654
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wy_JMz20PiSz8jvGSjrhP0D7Cqc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/9acaa0-05e1-4721-89eb-a671915ee99a/1/wy_JMz20PiSz8jvGSjrhP0D7Cqc.mft
Manifest number:          1585
Signing time:             Tue 10 Jun 2025 00:01:01 +0000
Manifest this update:     Tue 10 Jun 2025 00:01:01 +0000
Manifest next update:     Wed 11 Jun 2025 00:01:01 +0000
Files and hashes:         1: JPfPPVmim_oMGeKjFN51mz2DXZs.roa (hash: huLyNUibR3FOKspRTI8zL5oJYiyI6ApwBCQ1/RFqhSE=)
                          2: wy_JMz20PiSz8jvGSjrhP0D7Cqc.crl (hash: e1V8/7Ds86Hg8yGTKBPkiU//uVedh0SbiB3V2D3xjzI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/9acaa0-05e1-4721-89eb-a671915ee99a/1/wy_JMz20PiSz8jvGSjrhP0D7Cqc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/9acaa0-05e1-4721-89eb-a671915ee99a/1/wy_JMz20PiSz8jvGSjrhP0D7Cqc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wy_JMz20PiSz8jvGSjrhP0D7Cqc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:57:23:ec:23:ec:27:9c:d4:39:19:47:8f:b3:ff:c6:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c32fc9333db43e24b3f23bc64a3ae13f40fb0aa7
        Validity
            Not Before: Jun 10 00:01:01 2025 GMT
            Not After : Jun 11 00:01:01 2025 GMT
        Subject: CN=206c32bb3b22b4840c0e76b039fe4432edcc49c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:75:4d:87:81:27:e8:03:f0:e8:fe:42:45:df:
                    d1:15:a0:b2:c3:68:d7:17:d1:ff:7a:2a:cc:55:79:
                    c6:f6:cc:94:9e:e3:f0:ce:42:1d:9e:77:f6:36:37:
                    df:d0:74:5a:60:30:70:64:ea:aa:06:90:5a:f9:02:
                    11:c3:4a:7a:4a:6b:fd:7b:95:32:5d:17:d9:20:8a:
                    2e:ba:68:2c:ef:bf:ed:86:02:dc:05:8a:4c:ff:8f:
                    5c:c2:a9:64:17:80:0a:99:95:29:ac:ac:e0:a0:a8:
                    3d:19:09:92:ca:3b:19:fd:90:f2:9f:b9:94:f9:6a:
                    82:7c:15:e2:ab:f9:6b:3c:72:1d:16:89:ec:b1:29:
                    bd:7b:5b:6d:97:eb:67:56:cc:77:ff:d0:dc:e5:b3:
                    8c:8d:b1:cb:a2:fb:7c:f7:a3:9d:6d:f1:74:e9:1f:
                    3c:e9:4a:33:9e:dc:79:fb:55:ff:ba:33:ec:e3:ea:
                    a2:aa:65:82:60:f8:3b:1e:77:23:bd:f2:05:d5:69:
                    63:e9:aa:01:8a:16:80:bc:67:5a:30:be:47:fc:6e:
                    cf:9c:5c:a4:c1:50:76:00:8e:4e:55:59:27:da:0a:
                    4f:2d:7d:32:f8:d6:7b:be:4e:d5:0d:2a:e8:c1:82:
                    25:1b:74:0a:7e:ec:70:41:8e:d4:df:2b:9a:63:f8:
                    b6:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:6C:32:BB:3B:22:B4:84:0C:0E:76:B0:39:FE:44:32:ED:CC:49:C7
            X509v3 Authority Key Identifier:
                keyid:C3:2F:C9:33:3D:B4:3E:24:B3:F2:3B:C6:4A:3A:E1:3F:40:FB:0A:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wy_JMz20PiSz8jvGSjrhP0D7Cqc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9acaa0-05e1-4721-89eb-a671915ee99a/1/wy_JMz20PiSz8jvGSjrhP0D7Cqc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9acaa0-05e1-4721-89eb-a671915ee99a/1/wy_JMz20PiSz8jvGSjrhP0D7Cqc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:d7:55:78:bb:af:4e:f0:f6:a0:97:e2:48:62:77:53:f6:f6:
         58:28:e7:a3:f3:d4:21:f3:b6:db:51:6a:15:13:cd:95:5f:e1:
         a3:f7:e5:5b:f0:a4:97:d0:e5:c3:80:e2:d3:eb:5b:0b:4f:a8:
         21:21:8a:48:d2:b8:bd:40:b6:ff:cc:6d:b4:07:50:c5:a6:6f:
         f9:26:17:30:7d:82:16:5e:9f:a4:c5:09:61:17:20:e2:b9:2e:
         c8:ce:59:db:01:dd:32:64:d1:e5:1d:d2:7f:8b:98:7e:97:35:
         d6:57:0c:c9:5e:bd:84:05:4f:5f:e6:50:7f:31:f6:00:08:55:
         e1:62:62:22:c9:f4:88:18:e1:bf:ec:83:5e:3e:08:dc:04:65:
         3e:e4:f1:7c:d0:76:c5:60:d0:c9:d7:8f:34:a3:21:ab:3b:20:
         fb:a5:1b:2d:59:3f:4a:75:ce:5b:11:9b:97:35:48:88:d5:81:
         f6:11:f8:79:29:4f:72:fc:a7:15:1b:ac:6c:06:5c:51:b0:2c:
         c1:ac:19:df:6b:7b:2e:a2:dc:e0:a5:6a:75:f2:22:09:6e:8d:
         8b:c2:dc:9f:7c:98:41:41:f6:97:f2:84:13:a6:83:ab:fb:ec:
         39:aa:78:73:58:a2:ab:e2:05:8b:5c:08:35:39:f0:e4:d8:6f:
         70:17:9b:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 07:19:10 2025 by rpki-client