Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/34c618-4d43-4736-859f-9d2a42affb1b/1/Mw4_2xHYJrwBZjKQvXykBrjXZQc.mft
File:                     Mw4_2xHYJrwBZjKQvXykBrjXZQc.mft (raw, json)
Hash identifier:          xIYgmF3l+oTdoOf43ZaBy0GW7Iq+QeSdDWY1MAenCX4=
Subject key identifier:   6E:54:4D:D8:C1:B6:8C:B3:60:27:93:98:7E:6F:DF:B0:0C:D7:DF:C0
Authority key identifier: 33:0E:3F:DB:11:D8:26:BC:01:66:32:90:BD:7C:A4:06:B8:D7:65:07
Certificate issuer:       /CN=330e3fdb11d826bc01663290bd7ca406b8d76507
Certificate serial:       0197466747F75AE2A0FE89A5C6D3873AFB6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mw4_2xHYJrwBZjKQvXykBrjXZQc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/34c618-4d43-4736-859f-9d2a42affb1b/1/Mw4_2xHYJrwBZjKQvXykBrjXZQc.mft
Manifest number:          0C5F
Signing time:             Fri 06 Jun 2025 18:01:03 +0000
Manifest this update:     Fri 06 Jun 2025 18:01:03 +0000
Manifest next update:     Sat 07 Jun 2025 18:01:03 +0000
Files and hashes:         1: DT1onb-4ObKDzalYYHYuQuaaeIo.roa (hash: vu1nm9V8jbxKLGzlJsgL+mHK04vH81jI0saGvnr/HOw=)
                          2: Mw4_2xHYJrwBZjKQvXykBrjXZQc.crl (hash: wPZ2bv3kTmy1bDIySmUVkuY4cJp4B4CW/l69wYRpp/s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/34c618-4d43-4736-859f-9d2a42affb1b/1/Mw4_2xHYJrwBZjKQvXykBrjXZQc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/34c618-4d43-4736-859f-9d2a42affb1b/1/Mw4_2xHYJrwBZjKQvXykBrjXZQc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mw4_2xHYJrwBZjKQvXykBrjXZQc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 18:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:67:47:f7:5a:e2:a0:fe:89:a5:c6:d3:87:3a:fb:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=330e3fdb11d826bc01663290bd7ca406b8d76507
        Validity
            Not Before: Jun  6 18:01:03 2025 GMT
            Not After : Jun  7 18:01:03 2025 GMT
        Subject: CN=6e544dd8c1b68cb3602793987e6fdfb00cd7dfc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:38:a6:7a:a7:bf:ae:03:ff:3d:8c:cc:7b:a0:
                    9e:d5:95:78:36:ff:b4:fd:96:03:80:f7:b8:ae:6b:
                    84:5a:74:a4:69:1c:9c:a1:00:62:2e:39:6b:f4:6d:
                    18:20:7c:77:c5:8b:a6:35:17:d1:5f:d1:65:df:84:
                    91:f0:c9:e4:d8:43:1e:bb:b6:55:8a:3a:93:f4:50:
                    bf:46:52:81:f1:a6:aa:70:28:9d:bd:ec:0c:a5:ec:
                    8c:f8:3a:58:51:36:ff:35:3d:9d:c3:93:2c:b5:2a:
                    7d:87:78:c3:af:11:ca:00:88:f7:c0:1d:53:e3:a7:
                    59:b8:90:2f:79:0d:9e:dd:2b:59:9b:ec:26:e5:a9:
                    92:52:d7:62:81:0f:df:51:f6:f8:14:f6:5c:ef:23:
                    3b:6e:81:a1:58:34:ca:8f:29:af:93:ee:5f:5c:5e:
                    81:a2:67:d9:33:3b:46:76:63:06:c0:1a:5b:8c:91:
                    7d:d1:c3:59:11:14:6f:d9:00:46:54:8d:06:8f:ed:
                    38:e8:5a:a8:b6:86:52:0d:de:4d:d6:e9:eb:cf:ea:
                    bf:c9:9d:06:29:3b:88:82:28:2e:8c:ae:01:d2:3d:
                    02:ed:89:e7:2c:40:d2:fa:87:a7:ba:d3:e4:59:5a:
                    1e:fd:22:e2:91:b8:dd:9d:cb:c8:57:31:a6:e6:0c:
                    81:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:54:4D:D8:C1:B6:8C:B3:60:27:93:98:7E:6F:DF:B0:0C:D7:DF:C0
            X509v3 Authority Key Identifier:
                keyid:33:0E:3F:DB:11:D8:26:BC:01:66:32:90:BD:7C:A4:06:B8:D7:65:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mw4_2xHYJrwBZjKQvXykBrjXZQc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/34c618-4d43-4736-859f-9d2a42affb1b/1/Mw4_2xHYJrwBZjKQvXykBrjXZQc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/34c618-4d43-4736-859f-9d2a42affb1b/1/Mw4_2xHYJrwBZjKQvXykBrjXZQc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:c1:99:36:d2:5f:9a:7e:4a:6e:79:e6:b2:ee:57:a8:ad:5d:
         3f:c8:32:a8:c1:b8:fa:0e:46:c3:09:63:29:1b:5b:88:a7:19:
         59:62:6e:2d:00:2c:3b:db:4b:1a:d9:32:c8:91:8b:a1:e7:4e:
         bf:21:7e:b7:f5:e5:f6:80:7c:c6:66:b2:88:04:4e:65:83:f9:
         6b:8c:15:11:c0:e4:76:eb:de:e0:11:a7:b4:9d:b9:4e:69:3e:
         69:9b:aa:84:1c:fd:f5:29:db:41:99:e4:08:28:6a:70:30:82:
         66:ed:e6:d8:76:c5:00:a6:70:65:5e:96:0f:65:55:67:0d:d0:
         db:f4:3f:75:72:cc:46:d9:78:ce:61:d1:df:b5:40:fd:57:64:
         da:91:b5:ad:95:a0:59:be:38:99:71:04:d6:70:61:04:c7:1a:
         1d:d9:98:b4:e8:ff:18:d1:d8:48:e4:8c:08:8e:21:a6:40:14:
         de:26:b2:8b:20:59:f4:cb:90:9b:34:27:e0:00:31:c6:1b:3b:
         85:d6:ee:44:2a:84:70:72:0c:c0:f2:36:63:71:a4:ce:50:6a:
         2b:be:cc:c7:b6:05:1d:de:b0:a0:28:23:dd:cf:20:41:70:64:
         81:2d:42:45:c6:a9:8f:56:0c:c3:e1:df:8a:b7:7e:5e:6a:ec:
         45:ae:34:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 02:07:42 2025 by rpki-client