Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/0749c0-dec3-4f01-9bd7-3448a889ce75/1/wPjbshSmFJ89TUKgxBMtVyWZJ1I.mft
File:                     wPjbshSmFJ89TUKgxBMtVyWZJ1I.mft (raw, json)
Hash identifier:          N2AZoRKhdEnHULOt9+x/UXzWFl01CN/BVaHmb34ziGQ=
Subject key identifier:   24:9C:AB:86:19:8A:EC:4E:B8:A3:5A:7F:5C:52:D3:06:99:2A:8F:84
Authority key identifier: C0:F8:DB:B2:14:A6:14:9F:3D:4D:42:A0:C4:13:2D:57:25:99:27:52
Certificate issuer:       /CN=c0f8dbb214a6149f3d4d42a0c4132d5725992752
Certificate serial:       01974931A8C8CFF68B5972DAA25CB2F2AC71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wPjbshSmFJ89TUKgxBMtVyWZJ1I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/0749c0-dec3-4f01-9bd7-3448a889ce75/1/wPjbshSmFJ89TUKgxBMtVyWZJ1I.mft
Manifest number:          5F
Signing time:             Sat 07 Jun 2025 07:01:20 +0000
Manifest this update:     Sat 07 Jun 2025 07:01:20 +0000
Manifest next update:     Sun 08 Jun 2025 07:01:20 +0000
Files and hashes:         1: 2qyhqFKpARK1F2ET6I7_YKaOPc0.roa (hash: qGM3ZFQucsF8/9E/V05Xc9DkgTgt/0zHmMZ5RCHxskE=)
                          2: wPjbshSmFJ89TUKgxBMtVyWZJ1I.crl (hash: +MCg7pUk7Sr8S3IfTJ3NelNo/vO3aC/o77KHlJeJvN8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/0749c0-dec3-4f01-9bd7-3448a889ce75/1/wPjbshSmFJ89TUKgxBMtVyWZJ1I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/0749c0-dec3-4f01-9bd7-3448a889ce75/1/wPjbshSmFJ89TUKgxBMtVyWZJ1I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wPjbshSmFJ89TUKgxBMtVyWZJ1I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:31:a8:c8:cf:f6:8b:59:72:da:a2:5c:b2:f2:ac:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0f8dbb214a6149f3d4d42a0c4132d5725992752
        Validity
            Not Before: Jun  7 07:01:20 2025 GMT
            Not After : Jun  8 07:01:20 2025 GMT
        Subject: CN=249cab86198aec4eb8a35a7f5c52d306992a8f84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:bf:36:77:e7:89:a7:9a:11:1e:61:2d:c7:c6:
                    34:fa:68:8d:f6:9e:ee:6f:0c:86:7d:e9:a5:43:39:
                    0c:e0:ed:f9:ae:c2:a1:83:2f:06:1b:93:20:44:6c:
                    c6:a5:88:7a:b8:ab:aa:07:87:d2:f4:48:04:cd:8e:
                    c7:81:4c:78:36:1f:34:f5:47:90:a5:41:68:d1:a2:
                    f3:92:1d:a9:0a:7b:aa:c3:c5:9e:d2:9a:c4:a9:b1:
                    df:d7:23:db:45:e3:13:a4:47:78:42:8e:16:bd:c5:
                    49:66:5c:7d:7b:eb:ad:af:d3:0a:6f:8b:c8:22:34:
                    b2:f8:2b:ef:84:37:ee:bf:98:03:9e:eb:f4:7b:4f:
                    5f:2d:6e:23:30:66:9b:6d:39:23:4b:ab:ab:19:2f:
                    b5:dd:66:31:1c:80:75:e6:1f:b6:10:e6:4b:87:3a:
                    7e:86:43:ff:cc:10:97:ea:67:c4:46:77:40:ff:38:
                    3c:85:ea:c1:88:11:f2:83:d6:f6:a0:0e:5b:a1:32:
                    6e:c7:62:d4:dd:fb:d4:77:1b:6a:0b:d4:75:5b:f5:
                    82:31:b4:a7:ef:5d:03:6d:31:b2:b5:70:0c:30:45:
                    44:92:c2:a3:fb:9b:38:26:1a:46:3e:fe:65:3b:54:
                    30:c5:61:6b:00:98:99:20:dd:31:cc:b3:00:69:15:
                    06:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:9C:AB:86:19:8A:EC:4E:B8:A3:5A:7F:5C:52:D3:06:99:2A:8F:84
            X509v3 Authority Key Identifier:
                keyid:C0:F8:DB:B2:14:A6:14:9F:3D:4D:42:A0:C4:13:2D:57:25:99:27:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wPjbshSmFJ89TUKgxBMtVyWZJ1I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/0749c0-dec3-4f01-9bd7-3448a889ce75/1/wPjbshSmFJ89TUKgxBMtVyWZJ1I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/0749c0-dec3-4f01-9bd7-3448a889ce75/1/wPjbshSmFJ89TUKgxBMtVyWZJ1I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:f8:74:0e:85:eb:c7:91:2a:b2:5a:4e:28:0d:39:84:32:44:
         90:f5:ac:df:eb:d1:51:01:58:b2:1d:93:26:8c:0b:59:c9:00:
         20:23:8e:4b:00:1b:c1:92:1a:7c:29:b4:fd:50:d0:b7:55:50:
         61:9e:19:85:8e:81:84:9c:dc:23:35:15:1c:82:65:60:97:df:
         eb:cc:3a:63:fb:02:33:7c:c1:3a:ef:a0:d7:93:27:99:b2:f1:
         28:f1:5e:96:29:eb:99:16:3e:6e:40:f4:25:fb:95:54:82:ed:
         7b:3c:7a:68:76:2b:14:9b:40:55:cf:c2:cf:ad:71:5f:6d:67:
         2b:25:f8:12:40:b5:4a:99:d0:ca:78:60:b6:9a:30:27:71:d6:
         a1:6b:fd:01:ad:56:98:af:b3:c5:52:bc:6d:d1:ae:83:63:6b:
         7f:2c:cc:6d:58:95:39:37:69:6e:e1:ae:ab:fc:50:be:5e:cf:
         79:bd:24:fe:94:52:e4:5e:3c:63:5c:d9:89:e3:54:6b:fc:56:
         83:a3:0d:3d:cd:26:92:f6:83:0d:6c:5d:7b:3a:ef:4f:b6:60:
         01:35:4d:c5:cf:4e:9a:49:8a:f1:90:22:d4:1f:29:73:6c:1f:
         8f:54:9a:21:44:d7:bc:a6:58:63:68:9e:e1:a5:f6:c6:94:e8:
         db:22:b3:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:31:33 2025 by rpki-client