Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/622353-2bcf-4560-9cae-7db20e6fc11d/1/pex__WA9oUiSKAsYN8OgN3Y1LVQ.mft
File:                     pex__WA9oUiSKAsYN8OgN3Y1LVQ.mft (raw, json)
Hash identifier:          2luAKbCdbqAnfkOzT5JKTAhYevK3H/Uq0cLTEeZ3evc=
Subject key identifier:   48:AA:29:60:73:1A:95:A2:5B:6E:A3:5B:F9:4E:BA:F0:F2:2A:D1:0F
Authority key identifier: A5:EC:7F:FD:60:3D:A1:48:92:28:0B:18:37:C3:A0:37:76:35:2D:54
Certificate issuer:       /CN=a5ec7ffd603da14892280b1837c3a03776352d54
Certificate serial:       01975DCAE2C68F5C9BC7F6F8DB6DC688CCC6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pex__WA9oUiSKAsYN8OgN3Y1LVQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/622353-2bcf-4560-9cae-7db20e6fc11d/1/pex__WA9oUiSKAsYN8OgN3Y1LVQ.mft
Manifest number:          1585
Signing time:             Wed 11 Jun 2025 07:01:06 +0000
Manifest this update:     Wed 11 Jun 2025 07:01:06 +0000
Manifest next update:     Thu 12 Jun 2025 07:01:06 +0000
Files and hashes:         1: pex__WA9oUiSKAsYN8OgN3Y1LVQ.crl (hash: w7nowlvyeg2lwORhM3LbWFhkChH5qQbmtVEQMktnnHM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/622353-2bcf-4560-9cae-7db20e6fc11d/1/pex__WA9oUiSKAsYN8OgN3Y1LVQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/622353-2bcf-4560-9cae-7db20e6fc11d/1/pex__WA9oUiSKAsYN8OgN3Y1LVQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pex__WA9oUiSKAsYN8OgN3Y1LVQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 23:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5d:ca:e2:c6:8f:5c:9b:c7:f6:f8:db:6d:c6:88:cc:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5ec7ffd603da14892280b1837c3a03776352d54
        Validity
            Not Before: Jun 11 07:01:06 2025 GMT
            Not After : Jun 12 07:01:06 2025 GMT
        Subject: CN=48aa2960731a95a25b6ea35bf94ebaf0f22ad10f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:7c:44:93:0c:09:46:16:34:c9:66:be:00:6a:
                    fa:86:2d:de:68:e2:c7:ac:41:89:e7:fe:b0:5a:13:
                    bd:6a:16:96:d7:ad:f3:53:07:68:88:29:3c:e5:49:
                    1a:7f:e5:f6:be:e1:f2:93:76:23:b5:21:ec:87:e4:
                    c3:fa:7b:47:b2:a0:92:5b:49:6c:1c:5e:2c:db:82:
                    09:29:48:25:c6:6d:d5:21:39:5f:79:47:be:60:ec:
                    d4:ae:43:39:94:41:62:1b:08:83:d4:cf:1d:13:e3:
                    cd:25:e7:c2:70:9a:e1:bd:45:84:ee:e4:79:71:1d:
                    4c:6f:9a:b7:58:6b:b7:86:30:d9:07:7c:a8:62:6c:
                    29:24:ed:74:8d:bd:d1:24:ad:3e:f1:94:25:bd:d5:
                    64:c2:46:1d:f1:d4:82:3d:72:20:20:8e:38:d1:83:
                    6d:aa:10:86:9c:93:3b:dd:13:90:8a:82:df:bc:aa:
                    d1:18:00:8e:3a:82:48:2c:2b:c9:3e:07:11:7a:ee:
                    98:a5:89:cc:aa:52:5c:50:6f:c2:60:40:ad:e3:1d:
                    7f:75:c1:9b:b0:95:2f:f2:a1:b0:b5:d8:c7:8d:2d:
                    48:d7:55:fc:5e:cb:bc:e8:5d:2d:f9:77:80:a9:b3:
                    39:9b:d9:0f:b0:83:b1:44:7f:2b:bc:57:4e:41:31:
                    7d:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:AA:29:60:73:1A:95:A2:5B:6E:A3:5B:F9:4E:BA:F0:F2:2A:D1:0F
            X509v3 Authority Key Identifier:
                keyid:A5:EC:7F:FD:60:3D:A1:48:92:28:0B:18:37:C3:A0:37:76:35:2D:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pex__WA9oUiSKAsYN8OgN3Y1LVQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/622353-2bcf-4560-9cae-7db20e6fc11d/1/pex__WA9oUiSKAsYN8OgN3Y1LVQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/622353-2bcf-4560-9cae-7db20e6fc11d/1/pex__WA9oUiSKAsYN8OgN3Y1LVQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:91:b1:01:48:88:e1:ae:e3:94:fa:25:49:16:d2:45:e8:1b:
         2e:5d:c2:7d:2f:02:ec:1e:89:5b:02:e5:d3:71:be:46:03:01:
         45:fa:17:ba:29:72:31:3a:89:53:d1:52:51:5e:74:3d:2d:80:
         02:1a:7e:89:89:24:db:12:d1:a1:e0:a1:18:af:3a:7a:2a:4e:
         da:33:81:7a:d4:ac:14:75:5b:7f:f9:56:b0:c3:f9:ef:fc:22:
         f1:46:e7:20:04:d3:f7:ee:2b:72:6c:75:60:9f:dc:78:9b:a0:
         9c:ab:7a:1b:45:36:ce:9f:90:57:a1:04:b3:b9:3e:c3:8e:0b:
         19:69:b5:3b:55:a7:48:4b:f1:6e:1f:72:fd:8d:de:7b:67:42:
         c2:ee:62:5a:84:87:1d:ea:cf:1e:41:1d:1c:ff:7a:bf:da:60:
         6b:47:e4:9d:e1:d4:b7:f5:1f:dd:50:5b:13:36:20:a8:03:86:
         8b:96:b0:e8:50:db:2f:b7:ff:7e:c1:33:ae:05:8b:6e:8f:bc:
         37:d3:f0:8b:b0:bc:41:a2:90:46:33:a9:1c:f4:13:4d:6c:10:
         60:a4:82:63:b1:c6:ac:d9:66:59:3b:29:04:4b:a1:9d:71:36:
         95:42:8d:dc:12:03:26:9f:2e:7e:a3:52:29:d6:79:15:8c:ae:
         bd:36:6c:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZddyuLGj1ybx/b4223GiMzGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1ZWM3ZmZkNjAzZGExNDg5MjI4MGIxODM3YzNhMDM3NzYz
NTJkNTQwHhcNMjUwNjExMDcwMTA2WhcNMjUwNjEyMDcwMTA2WjAzMTEwLwYDVQQD
Eyg0OGFhMjk2MDczMWE5NWEyNWI2ZWEzNWJmOTRlYmFmMGYyMmFkMTBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzXxEkwwJRhY0yWa+AGr6hi3eaOLH
rEGJ5/6wWhO9ahaW163zUwdoiCk85Ukaf+X2vuHyk3YjtSHsh+TD+ntHsqCSW0ls
HF4s24IJKUglxm3VITlfeUe+YOzUrkM5lEFiGwiD1M8dE+PNJefCcJrhvUWE7uR5
cR1Mb5q3WGu3hjDZB3yoYmwpJO10jb3RJK0+8ZQlvdVkwkYd8dSCPXIgII440YNt
qhCGnJM73ROQioLfvKrRGACOOoJILCvJPgcReu6YpYnMqlJcUG/CYECt4x1/dcGb
sJUv8qGwtdjHjS1I11X8Xsu86F0t+XeAqbM5m9kPsIOxRH8rvFdOQTF9DQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEiqKWBzGpWiW26jW/lOuvDyKtEPMB8GA1UdIwQY
MBaAFKXsf/1gPaFIkigLGDfDoDd2NS1UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGV4X19XQTlvVWlTS0FzWU44T2dOM1kxTFZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS82MjIzNTMtMmJjZi00NTYwLTljYWUt
N2RiMjBlNmZjMTFkLzEvcGV4X19XQTlvVWlTS0FzWU44T2dOM1kxTFZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS82MjIzNTMtMmJjZi00NTYwLTljYWUtN2RiMjBlNmZjMTFk
LzEvcGV4X19XQTlvVWlTS0FzWU44T2dOM1kxTFZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX5GxAUiI
4a7jlPolSRbSRegbLl3CfS8C7B6JWwLl03G+RgMBRfoXuilyMTqJU9FSUV50PS2A
Ahp+iYkk2xLRoeChGK86eipO2jOBetSsFHVbf/lWsMP57/wi8UbnIATT9+4rcmx1
YJ/ceJugnKt6G0U2zp+QV6EEs7k+w44LGWm1O1WnSEvxbh9y/Y3ee2dCwu5iWoSH
HerPHkEdHP96v9pga0fkneHUt/Uf3VBbEzYgqAOGi5aw6FDbL7f/fsEzrgWLbo+8
N9Pwi7C8QaKQRjOpHPQTTWwQYKSCY7HGrNlmWTspBEuhnXE2lUKN3BIDJp8ufqNS
KdZ5FYyuvTZsyw==
-----END CERTIFICATE-----
Generated at Wed Jun 11 09:31:56 2025 by rpki-client