Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/wjbowhbwWp2eAyfxIivxIZirpdo.mft
File:                     wjbowhbwWp2eAyfxIivxIZirpdo.mft (raw, json)
Hash identifier:          rn0XX2fRCBrNHlzRURjt/MdApULfGurS+cuoZDGCIn8=
Subject key identifier:   F3:E8:46:71:0D:E6:E5:B9:28:F6:B0:85:58:95:1C:BA:F2:75:DF:E4
Authority key identifier: C2:36:E8:C2:16:F0:5A:9D:9E:03:27:F1:22:2B:F1:21:98:AB:A5:DA
Certificate issuer:       /CN=c236e8c216f05a9d9e0327f1222bf12198aba5da
Certificate serial:       019748FA043D2859EA158A9EA1ECFCB2F0A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wjbowhbwWp2eAyfxIivxIZirpdo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/wjbowhbwWp2eAyfxIivxIZirpdo.mft
Manifest number:          037E
Signing time:             Sat 07 Jun 2025 06:00:34 +0000
Manifest this update:     Sat 07 Jun 2025 06:00:34 +0000
Manifest next update:     Sun 08 Jun 2025 06:00:34 +0000
Files and hashes:         1: RE5hObodnlVzPY2NC9fBqxqamSo.roa (hash: vt4HA66geUCnP70MZ/cuIbrc9l462uvO+5uycK2tf/g=)
                          2: huVpaDuOyP7YO_hg-K93nMNZjQI.roa (hash: kb027+6ralND9X0aHEkf2xrhEHp9EQN+J7LlYr7HG58=)
                          3: jhFFnOfiUX1beQnMdFI7HQkXMu4.roa (hash: 3FY7Qpzpo28uDSYDS9CvGlbhOup4Iwr9S2FVCDXO+eg=)
                          4: jlgMYBPPrhVmr9kA8s7ItAO1aAc.roa (hash: LWFdrbfxp7Y32HBXjHLDhwbHmx4AJjStWSjMklLVIJw=)
                          5: wjbowhbwWp2eAyfxIivxIZirpdo.crl (hash: Mm5wNl2DkwmXwpYQC5ZmUhKHz/o++9DaPgUnDvAZSZM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/wjbowhbwWp2eAyfxIivxIZirpdo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/wjbowhbwWp2eAyfxIivxIZirpdo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wjbowhbwWp2eAyfxIivxIZirpdo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 06:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:fa:04:3d:28:59:ea:15:8a:9e:a1:ec:fc:b2:f0:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c236e8c216f05a9d9e0327f1222bf12198aba5da
        Validity
            Not Before: Jun  7 06:00:34 2025 GMT
            Not After : Jun  8 06:00:34 2025 GMT
        Subject: CN=f3e846710de6e5b928f6b08558951cbaf275dfe4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f0:1d:a2:da:f0:3b:f8:18:df:eb:36:36:52:
                    db:da:2d:5e:1e:23:a5:82:e5:85:8c:b6:0e:de:c5:
                    57:3c:4f:9b:87:a0:c8:dc:3e:34:7b:f9:6a:7f:99:
                    ee:63:d9:a0:64:04:4a:5f:84:9e:b3:3c:97:a3:d3:
                    7f:fc:4f:a8:ee:f6:02:00:84:e1:e8:68:2f:30:8c:
                    bc:49:17:fc:ed:93:61:f4:3e:c9:4d:f9:42:f5:b8:
                    be:c0:36:60:6f:6d:2e:73:7a:eb:10:75:c7:eb:7e:
                    58:59:b4:86:af:44:7a:a7:48:17:aa:c6:64:20:cc:
                    41:6b:5c:12:56:78:42:00:77:51:d7:28:1c:df:dc:
                    f5:f1:fd:c4:0b:f6:ba:31:fb:a0:48:3c:07:c8:13:
                    1a:38:02:a0:dc:a8:a7:7b:5d:bb:95:61:d7:79:39:
                    57:38:6b:17:fc:d5:ac:cc:3e:d3:c0:91:40:95:19:
                    c1:b5:17:ac:8b:e4:16:e1:78:8a:cf:de:70:ae:d5:
                    dc:7c:6c:a7:e1:0c:88:bb:50:03:af:1d:88:46:aa:
                    dd:9b:4c:15:b0:b7:00:5b:a6:1f:05:9b:9c:2b:ff:
                    29:2a:b4:07:40:e6:3e:bd:f9:4f:0c:7e:50:ff:11:
                    92:ad:7f:f2:6e:8e:ee:72:c9:f8:a5:69:d9:72:86:
                    28:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:E8:46:71:0D:E6:E5:B9:28:F6:B0:85:58:95:1C:BA:F2:75:DF:E4
            X509v3 Authority Key Identifier:
                keyid:C2:36:E8:C2:16:F0:5A:9D:9E:03:27:F1:22:2B:F1:21:98:AB:A5:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjbowhbwWp2eAyfxIivxIZirpdo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/wjbowhbwWp2eAyfxIivxIZirpdo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/wjbowhbwWp2eAyfxIivxIZirpdo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:a9:b7:ba:58:62:e7:7f:e6:09:95:06:d7:e5:ab:24:11:ec:
         37:65:f8:51:60:fb:62:41:5e:9f:eb:61:10:1e:fc:b5:5c:de:
         b8:f6:4f:8f:f8:e0:a5:16:a7:b8:48:ad:3b:5c:87:b9:cf:e1:
         63:8e:b9:6d:48:f6:7f:02:26:7e:e7:21:ac:a4:09:f9:51:a1:
         e9:15:6b:80:92:73:17:20:fe:ea:db:34:71:e2:b5:24:9a:22:
         9b:80:05:ef:af:b2:27:25:d3:a2:ef:7e:a2:38:ab:99:d6:f0:
         0b:ed:7d:81:ab:f2:59:4a:99:cb:9c:2f:a5:ad:fe:09:db:ec:
         cf:12:43:ea:0c:62:95:a5:7d:2b:1b:d1:55:d5:0f:4e:b5:6b:
         bd:22:5f:d7:99:30:ab:69:20:d0:2b:ec:22:f2:b2:3f:7e:2b:
         7b:e6:99:7e:0f:43:2e:1c:04:20:20:4b:7c:89:a4:65:a7:fa:
         8f:39:8e:e6:a7:81:50:b6:c3:91:05:41:42:93:12:0e:89:4d:
         62:ae:35:fa:0e:0f:3d:f5:1e:69:c9:ef:05:7b:76:9a:b3:8c:
         85:18:62:f2:26:68:d4:4c:5e:07:fd:a0:e6:a2:27:e4:39:3f:
         13:92:a0:81:2f:92:98:8b:11:e2:24:fd:20:de:7a:b7:17:24:
         a5:59:aa:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:46:31 2025 by rpki-client