Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/35b638-7286-43d0-a7c0-9ab19b266e96/1/wmsHYHZubMcjnCdVotDTn74U7Xg.mft
File:                     wmsHYHZubMcjnCdVotDTn74U7Xg.mft (raw, json)
Hash identifier:          JuCwK1L9ZnDAiV5eZFqViRfo028l7p+BSNAY5Uc5WRs=
Subject key identifier:   3C:F1:50:D6:6F:6B:24:F8:01:AB:AA:F5:4C:DF:1B:D1:83:99:69:0A
Authority key identifier: C2:6B:07:60:76:6E:6C:C7:23:9C:27:55:A2:D0:D3:9F:BE:14:ED:78
Certificate issuer:       /CN=c26b0760766e6cc7239c2755a2d0d39fbe14ed78
Certificate serial:       01974A7B460E09614EDA04C3302A048C0CCE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wmsHYHZubMcjnCdVotDTn74U7Xg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/35b638-7286-43d0-a7c0-9ab19b266e96/1/wmsHYHZubMcjnCdVotDTn74U7Xg.mft
Manifest number:          0937
Signing time:             Sat 07 Jun 2025 13:01:22 +0000
Manifest this update:     Sat 07 Jun 2025 13:01:22 +0000
Manifest next update:     Sun 08 Jun 2025 13:01:22 +0000
Files and hashes:         1: wmsHYHZubMcjnCdVotDTn74U7Xg.crl (hash: TWQJ2++SE72hXdQjDHysCKBhTHW0U1jghERk+Mz1i/U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/35b638-7286-43d0-a7c0-9ab19b266e96/1/wmsHYHZubMcjnCdVotDTn74U7Xg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/35b638-7286-43d0-a7c0-9ab19b266e96/1/wmsHYHZubMcjnCdVotDTn74U7Xg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wmsHYHZubMcjnCdVotDTn74U7Xg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 13:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:7b:46:0e:09:61:4e:da:04:c3:30:2a:04:8c:0c:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c26b0760766e6cc7239c2755a2d0d39fbe14ed78
        Validity
            Not Before: Jun  7 13:01:22 2025 GMT
            Not After : Jun  8 13:01:22 2025 GMT
        Subject: CN=3cf150d66f6b24f801abaaf54cdf1bd18399690a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:51:d5:17:f0:90:da:52:74:c9:27:dd:25:50:
                    90:d3:52:79:73:04:e5:d3:7b:c3:aa:2e:d6:e0:d5:
                    11:83:3e:cf:04:e1:c0:61:9e:4a:bd:55:11:01:cc:
                    3a:3d:44:e7:ee:fb:73:c2:b3:5b:18:97:81:1b:82:
                    8d:34:e6:8b:6f:3b:f2:38:94:fe:e8:f7:83:84:6f:
                    1b:36:df:dd:76:f2:49:0f:60:6b:8e:83:12:61:cb:
                    58:a3:65:a6:c0:e4:74:fb:2e:24:e8:4a:c4:e7:09:
                    63:c6:b7:8f:85:e8:48:5a:c0:67:85:2e:18:4a:b4:
                    6c:18:17:a0:24:9b:5b:5b:9f:fc:8c:eb:f7:51:d9:
                    ee:79:69:e4:34:1d:c7:6a:79:1d:9c:85:90:41:8a:
                    f9:4b:65:5a:3a:6b:4c:0e:9f:0d:d1:4b:f9:b9:0a:
                    9b:fc:4a:82:7f:39:7e:61:d2:6f:d1:10:3a:d2:33:
                    f7:aa:02:fb:e2:83:79:aa:2d:d8:c6:94:0c:a2:6f:
                    1d:a2:22:ac:08:e0:7e:a5:35:a1:83:31:04:72:fe:
                    54:98:8e:03:46:96:24:0f:06:ba:78:7e:0b:3c:31:
                    a3:10:35:c4:57:7e:16:54:1f:7b:83:45:3b:93:87:
                    58:52:51:c9:9b:90:b8:cf:02:fd:4d:c8:10:c3:1b:
                    ab:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:F1:50:D6:6F:6B:24:F8:01:AB:AA:F5:4C:DF:1B:D1:83:99:69:0A
            X509v3 Authority Key Identifier:
                keyid:C2:6B:07:60:76:6E:6C:C7:23:9C:27:55:A2:D0:D3:9F:BE:14:ED:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wmsHYHZubMcjnCdVotDTn74U7Xg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/35b638-7286-43d0-a7c0-9ab19b266e96/1/wmsHYHZubMcjnCdVotDTn74U7Xg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/35b638-7286-43d0-a7c0-9ab19b266e96/1/wmsHYHZubMcjnCdVotDTn74U7Xg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e8:3a:2d:0c:65:c4:a4:36:38:98:6b:71:3b:5f:42:2d:d7:82:
         2b:a1:cc:e3:aa:01:7e:d7:36:8e:9b:4a:d2:73:72:49:db:52:
         ae:aa:9c:35:e8:0f:93:73:ba:a5:7a:8e:f6:4f:e8:3f:01:98:
         5d:20:e1:c8:5c:4e:3e:17:ea:d9:83:90:c9:ad:41:c2:9e:78:
         07:e6:31:be:9e:0f:e8:77:51:99:5a:b7:dd:54:8f:8d:31:da:
         77:4d:d7:f0:02:03:04:20:31:d8:d7:c2:12:4c:1d:c7:75:47:
         63:45:4f:55:5e:5f:d2:5a:36:80:51:97:d2:2b:8e:fa:d2:15:
         e2:ca:0c:85:27:b7:80:6f:0d:8b:3a:09:4c:f9:f8:81:0a:97:
         4c:b0:72:3f:74:4d:6a:1d:5b:76:21:d1:f7:3a:31:1c:b4:b6:
         67:d6:79:9f:b7:c5:14:27:02:dc:f9:e1:35:d7:f6:62:9c:1b:
         5d:02:02:a4:78:9f:52:89:17:b2:cb:42:96:a3:83:cc:4a:92:
         15:e4:f2:ee:5a:41:6b:56:b5:ba:9c:d8:ca:42:70:e8:7c:53:
         87:53:94:2d:07:03:66:de:18:28:54:9f:79:8f:ab:b3:96:8d:
         21:86:df:59:3a:d5:d5:01:c2:32:86:23:dc:64:93:4a:9f:3d:
         b4:9c:85:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:33:10 2025 by rpki-client