Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/d1fcd0-55c1-46ba-9db1-2c10b19d4c2a/1/WbxSsVBpwcR7VOl7n1aUt1W1zrE.mft
File:                     WbxSsVBpwcR7VOl7n1aUt1W1zrE.mft (raw, json)
Hash identifier:          8vpDE+0W9EjXCvvK6VCpADWxVuaalulPWT70l+jln2Y=
Subject key identifier:   AB:35:83:6A:FC:FF:56:5D:06:E6:4F:08:99:6E:38:97:D2:99:F6:3E
Authority key identifier: 59:BC:52:B1:50:69:C1:C4:7B:54:E9:7B:9F:56:94:B7:55:B5:CE:B1
Certificate issuer:       /CN=59bc52b15069c1c47b54e97b9f5694b755b5ceb1
Certificate serial:       019749312C153A32FCBD688BAD6CBA19EAD6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WbxSsVBpwcR7VOl7n1aUt1W1zrE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/d1fcd0-55c1-46ba-9db1-2c10b19d4c2a/1/WbxSsVBpwcR7VOl7n1aUt1W1zrE.mft
Manifest number:          049E
Signing time:             Sat 07 Jun 2025 07:00:48 +0000
Manifest this update:     Sat 07 Jun 2025 07:00:48 +0000
Manifest next update:     Sun 08 Jun 2025 07:00:48 +0000
Files and hashes:         1: 0se6oPOZ9FSI_6qzearxcjxlYSY.roa (hash: g6cZT2b3ImLhGYVmMKzVx9c34caYKC+s1u35aPIl42k=)
                          2: WbxSsVBpwcR7VOl7n1aUt1W1zrE.crl (hash: JDHoXOUzWYBhGfqOkDw0R3YBQ3oKJ8qwJr1WmxNmz1s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/d1fcd0-55c1-46ba-9db1-2c10b19d4c2a/1/WbxSsVBpwcR7VOl7n1aUt1W1zrE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/d1fcd0-55c1-46ba-9db1-2c10b19d4c2a/1/WbxSsVBpwcR7VOl7n1aUt1W1zrE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WbxSsVBpwcR7VOl7n1aUt1W1zrE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 07:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:31:2c:15:3a:32:fc:bd:68:8b:ad:6c:ba:19:ea:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59bc52b15069c1c47b54e97b9f5694b755b5ceb1
        Validity
            Not Before: Jun  7 07:00:48 2025 GMT
            Not After : Jun  8 07:00:48 2025 GMT
        Subject: CN=ab35836afcff565d06e64f08996e3897d299f63e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d6:15:3f:93:02:46:fc:fe:d4:c2:fa:ca:d5:
                    8d:6f:a9:a7:3c:9d:5e:39:64:6b:fa:9e:a5:fb:4b:
                    af:05:ca:b5:56:a2:63:ff:e0:71:de:b3:79:80:1b:
                    94:04:31:a5:53:f8:e2:3c:eb:45:d0:59:a8:89:55:
                    f8:f7:a0:62:6f:60:61:3a:00:a6:74:0f:b1:76:37:
                    71:f3:74:55:59:79:7f:f7:d0:51:c4:dc:bf:3d:b8:
                    7e:ed:ad:37:3e:85:d1:09:59:82:ac:26:8f:1a:66:
                    f9:b8:00:cf:35:99:fd:ab:56:d6:94:ff:90:ee:18:
                    f8:9c:aa:4b:04:d7:11:b8:cb:1e:d0:35:31:54:52:
                    f7:21:f0:8d:2a:2a:cb:35:57:de:07:89:5b:17:9a:
                    b5:32:25:94:af:e8:f9:9e:7e:02:fa:14:c0:a1:cd:
                    82:e5:fb:02:0d:9e:3c:a5:24:0d:4d:45:ec:c2:21:
                    1e:4d:93:9a:98:ee:5a:b9:41:87:e9:96:ef:a9:72:
                    58:ab:29:30:9b:92:4b:23:d7:1f:4c:f4:fd:71:60:
                    23:26:d1:f4:23:45:59:be:ed:93:e5:3a:d4:08:04:
                    2e:21:2b:af:6b:2f:05:f4:b3:0f:47:4d:51:d7:16:
                    ad:13:67:98:35:3f:69:9e:42:f9:6c:15:a0:98:f6:
                    f4:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:35:83:6A:FC:FF:56:5D:06:E6:4F:08:99:6E:38:97:D2:99:F6:3E
            X509v3 Authority Key Identifier:
                keyid:59:BC:52:B1:50:69:C1:C4:7B:54:E9:7B:9F:56:94:B7:55:B5:CE:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WbxSsVBpwcR7VOl7n1aUt1W1zrE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d1fcd0-55c1-46ba-9db1-2c10b19d4c2a/1/WbxSsVBpwcR7VOl7n1aUt1W1zrE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/d1fcd0-55c1-46ba-9db1-2c10b19d4c2a/1/WbxSsVBpwcR7VOl7n1aUt1W1zrE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:09:f4:9f:3e:81:3c:69:e6:2d:03:f1:d2:9c:56:92:b8:ee:
         56:78:62:92:0f:5f:5a:a9:e4:6f:df:4e:44:39:3a:1d:c0:e4:
         fd:da:53:1a:a3:ed:6f:20:0f:66:07:26:d1:18:2e:21:13:69:
         0b:e8:17:7d:f8:21:d5:61:c6:4d:f0:3e:55:d3:5f:94:16:89:
         77:58:ff:60:66:d3:dd:39:fe:7e:09:10:bc:3f:7d:6e:93:d0:
         c6:96:3c:a2:a0:f7:ae:80:a4:22:ba:bc:26:38:13:6c:ef:7e:
         a3:e1:f7:3c:4e:b0:bf:db:4d:9d:20:7c:33:1a:62:fd:01:4e:
         d3:94:91:84:4d:f7:33:2c:d8:a3:9b:2b:70:db:05:69:9e:d5:
         5c:71:67:64:ee:ef:13:ad:10:6d:ad:3a:bb:15:ac:2b:36:7f:
         8a:cb:3f:ce:06:ee:3e:25:14:ea:c9:ae:7c:a7:8e:a7:64:b1:
         9b:d3:90:27:67:5d:51:42:90:93:3c:e7:c5:96:0d:a1:6d:2c:
         db:26:00:0f:44:c2:00:42:f5:e6:e5:04:35:33:3d:07:b5:b9:
         5c:21:21:6a:99:93:c1:77:79:98:24:47:55:01:4f:45:f2:d0:
         73:69:17:fa:9f:17:92:25:e4:de:65:04:c5:d3:ea:d7:73:bb:
         6b:61:c1:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:46:43 2025 by rpki-client