Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/9a694b-c61b-41b2-93ce-4dc2f793c3cd/1/wyoWsgfjtvb3LT0K1fzrqOoQNjY.mft
File:                     wyoWsgfjtvb3LT0K1fzrqOoQNjY.mft (raw, json)
Hash identifier:          HdxRpDljsE5F4mdkTkS9bpEi/+A//ySSsW9zAeR3/MU=
Subject key identifier:   EC:C1:BD:27:38:75:C2:E3:59:0D:F9:85:CA:66:EE:71:0E:78:5F:82
Authority key identifier: C3:2A:16:B2:07:E3:B6:F6:F7:2D:3D:0A:D5:FC:EB:A8:EA:10:36:36
Certificate issuer:       /CN=c32a16b207e3b6f6f72d3d0ad5fceba8ea103636
Certificate serial:       01974EFC427C321EADDEADC5057769800145
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wyoWsgfjtvb3LT0K1fzrqOoQNjY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/9a694b-c61b-41b2-93ce-4dc2f793c3cd/1/wyoWsgfjtvb3LT0K1fzrqOoQNjY.mft
Manifest number:          1584
Signing time:             Sun 08 Jun 2025 10:00:44 +0000
Manifest this update:     Sun 08 Jun 2025 10:00:44 +0000
Manifest next update:     Mon 09 Jun 2025 10:00:44 +0000
Files and hashes:         1: hFaskM76WmkGz-mPiPTUpMiqZxk.roa (hash: luq1omNBXihu/qimESEN6qhU6P0bWFQ94OAUTpScUXc=)
                          2: wyoWsgfjtvb3LT0K1fzrqOoQNjY.crl (hash: 4BrKC5+FmqekVJM1eAVmQwX27gDPTIAaqRv4NibUD9I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/9a694b-c61b-41b2-93ce-4dc2f793c3cd/1/wyoWsgfjtvb3LT0K1fzrqOoQNjY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/9a694b-c61b-41b2-93ce-4dc2f793c3cd/1/wyoWsgfjtvb3LT0K1fzrqOoQNjY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wyoWsgfjtvb3LT0K1fzrqOoQNjY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 10:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4e:fc:42:7c:32:1e:ad:de:ad:c5:05:77:69:80:01:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c32a16b207e3b6f6f72d3d0ad5fceba8ea103636
        Validity
            Not Before: Jun  8 10:00:44 2025 GMT
            Not After : Jun  9 10:00:44 2025 GMT
        Subject: CN=ecc1bd273875c2e3590df985ca66ee710e785f82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:f3:7f:e3:53:b1:5c:93:1c:4a:c5:2d:8c:d3:
                    fa:31:22:bf:03:31:80:b2:7f:4b:ae:84:06:fa:41:
                    60:29:2a:32:67:ef:f0:ef:a9:52:6a:41:e1:db:64:
                    f3:a7:8d:ee:60:2f:cb:e8:ce:29:0a:a8:8f:a4:a4:
                    38:63:d3:b1:50:9f:8f:e7:84:bf:f4:6e:8b:45:0f:
                    d9:5e:3a:2d:3d:81:bc:e1:59:23:3a:63:52:58:fc:
                    ed:b4:d3:35:ba:10:48:9a:ec:92:12:06:a8:a5:5f:
                    6e:26:a7:6c:08:47:b2:7d:89:0b:2c:0e:3b:7f:b0:
                    09:90:c0:11:e2:c3:26:fd:80:5f:7e:0b:0a:73:33:
                    1b:2a:08:d8:41:ac:e2:37:ec:25:3b:58:e4:58:8b:
                    35:d3:b3:0e:e3:11:cb:9f:cf:08:27:9c:11:5b:8f:
                    9f:b8:6f:e5:aa:30:de:2c:d1:ab:18:3e:bc:c1:21:
                    2d:25:c1:7e:65:23:de:bd:bb:68:39:52:88:6e:9a:
                    d0:c6:73:e1:e8:ba:ae:8e:13:b5:51:8d:ed:c4:75:
                    c5:97:aa:be:7f:f6:b2:e4:ee:2c:14:b8:47:80:0e:
                    45:44:af:e6:90:67:a1:b7:db:43:a5:bd:26:83:6f:
                    d4:4e:6e:bd:72:c0:89:c5:5f:29:5e:ea:f1:fb:58:
                    97:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:C1:BD:27:38:75:C2:E3:59:0D:F9:85:CA:66:EE:71:0E:78:5F:82
            X509v3 Authority Key Identifier:
                keyid:C3:2A:16:B2:07:E3:B6:F6:F7:2D:3D:0A:D5:FC:EB:A8:EA:10:36:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wyoWsgfjtvb3LT0K1fzrqOoQNjY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9a694b-c61b-41b2-93ce-4dc2f793c3cd/1/wyoWsgfjtvb3LT0K1fzrqOoQNjY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9a694b-c61b-41b2-93ce-4dc2f793c3cd/1/wyoWsgfjtvb3LT0K1fzrqOoQNjY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:27:dd:89:41:50:99:ec:46:ac:d4:16:ea:37:96:70:78:fe:
         40:64:1b:bd:a0:15:03:1f:b5:53:a7:86:2b:12:79:ec:da:55:
         8f:e4:69:9e:fe:48:19:48:0c:1e:82:6c:c4:53:a2:2b:db:fb:
         55:8f:06:1e:50:33:e2:bd:9d:16:e5:3f:1a:62:a3:12:a5:c5:
         d2:d3:80:62:f0:ea:92:cc:2b:bd:c4:79:67:4a:ed:57:74:ec:
         61:25:e4:6d:f3:79:ca:18:58:2d:93:4c:f3:37:d3:76:7c:5c:
         5b:c6:c9:58:ba:dc:9b:4c:30:8a:2e:36:47:96:75:dc:fe:93:
         82:86:69:86:93:79:ea:80:13:f0:3a:9d:d6:2f:d6:92:9a:2b:
         a1:ea:3f:44:00:90:fe:2a:3f:73:1f:b7:45:f9:33:29:03:ed:
         3d:11:b9:7e:d4:e1:03:bf:ea:a0:42:d4:4f:e2:7b:f9:4f:ed:
         ab:25:15:6b:b3:fd:40:21:18:10:f6:08:3c:cf:34:f1:cd:4f:
         49:38:53:ed:93:a0:f6:ef:ea:51:a6:2f:82:04:64:ac:47:b6:
         74:d5:0b:e8:52:9d:04:d9:71:2a:14:b6:d6:af:ab:75:4b:56:
         f8:22:85:84:af:12:32:c2:d0:00:2b:eb:a2:60:77:96:4f:2a:
         eb:dc:b0:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 15:24:05 2025 by rpki-client