Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/0ee2ab-07d9-4a81-abf0-e0e4be6696f9/1/WGMp8we5goW3HSLHGX7Bm3Ad7Wc.mft
File:                     WGMp8we5goW3HSLHGX7Bm3Ad7Wc.mft (raw, json)
Hash identifier:          oxssPsriISflwly/10O7JJ22NoJybzaFb9d9SWL4y7g=
Subject key identifier:   22:20:7D:95:52:76:08:88:70:DB:9A:32:BC:8A:3E:B0:05:7E:E8:A5
Authority key identifier: 58:63:29:F3:07:B9:82:85:B7:1D:22:C7:19:7E:C1:9B:70:1D:ED:67
Certificate issuer:       /CN=586329f307b98285b71d22c7197ec19b701ded67
Certificate serial:       019745F8D0EF7C4BBA85337CFB69163A6CA2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WGMp8we5goW3HSLHGX7Bm3Ad7Wc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/0ee2ab-07d9-4a81-abf0-e0e4be6696f9/1/WGMp8we5goW3HSLHGX7Bm3Ad7Wc.mft
Manifest number:          157F
Signing time:             Fri 06 Jun 2025 16:00:23 +0000
Manifest this update:     Fri 06 Jun 2025 16:00:23 +0000
Manifest next update:     Sat 07 Jun 2025 16:00:23 +0000
Files and hashes:         1: PiqBBXAA6we4MoLDl4MdjTFczpk.roa (hash: UmY/XV+HwWVcLuYg16r45R+AHciaE7tJGWzQzK3TX58=)
                          2: WGMp8we5goW3HSLHGX7Bm3Ad7Wc.crl (hash: AnznXD04O+vJTC0RNWtQn8J7PBdBZes2oWkCpnbeVG4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/0ee2ab-07d9-4a81-abf0-e0e4be6696f9/1/WGMp8we5goW3HSLHGX7Bm3Ad7Wc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/0ee2ab-07d9-4a81-abf0-e0e4be6696f9/1/WGMp8we5goW3HSLHGX7Bm3Ad7Wc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WGMp8we5goW3HSLHGX7Bm3Ad7Wc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:45:f8:d0:ef:7c:4b:ba:85:33:7c:fb:69:16:3a:6c:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=586329f307b98285b71d22c7197ec19b701ded67
        Validity
            Not Before: Jun  6 16:00:23 2025 GMT
            Not After : Jun  7 16:00:23 2025 GMT
        Subject: CN=22207d955276088870db9a32bc8a3eb0057ee8a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b3:fe:2e:ef:92:b7:22:38:57:15:10:d3:ba:
                    fb:64:da:5f:45:24:8b:99:2f:9a:d7:09:b7:76:f7:
                    5a:ff:04:7d:ce:df:05:18:ca:fe:2c:f5:00:cc:6c:
                    41:4a:24:22:d1:66:83:7c:bb:2a:a0:e1:67:44:5e:
                    4b:0c:97:30:4a:97:87:76:4c:48:26:8c:6a:b1:67:
                    e7:5a:54:7f:1a:1f:78:67:e2:e6:0a:c9:91:d1:1e:
                    e7:8e:7a:57:2d:a6:29:60:3a:f4:de:28:0e:84:21:
                    f4:f8:9e:fc:f1:e8:7f:73:0f:59:a1:4d:7a:2b:08:
                    19:a5:62:b6:a4:ed:c2:4c:4e:a6:37:bb:6f:88:86:
                    cb:f8:2d:8c:37:0c:b1:ba:5d:b0:97:61:64:d0:2a:
                    fb:bf:db:d0:63:83:c4:fd:56:97:f8:9e:b5:16:b9:
                    c6:24:4d:14:6d:6f:e7:59:96:97:25:6f:ed:1f:12:
                    f8:c7:32:83:ab:48:2b:1c:b7:dc:e3:36:f3:46:86:
                    ad:12:8f:76:3f:6d:a0:f5:fb:11:3e:ac:f5:86:e3:
                    82:23:74:fb:5e:fe:72:9b:03:00:03:9f:a8:2a:fb:
                    c3:67:e8:e9:18:5b:75:c7:1a:5d:c1:24:77:35:ba:
                    a8:7b:e6:56:a6:79:ef:cf:a2:a4:69:2f:8a:84:32:
                    42:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:20:7D:95:52:76:08:88:70:DB:9A:32:BC:8A:3E:B0:05:7E:E8:A5
            X509v3 Authority Key Identifier:
                keyid:58:63:29:F3:07:B9:82:85:B7:1D:22:C7:19:7E:C1:9B:70:1D:ED:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WGMp8we5goW3HSLHGX7Bm3Ad7Wc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0ee2ab-07d9-4a81-abf0-e0e4be6696f9/1/WGMp8we5goW3HSLHGX7Bm3Ad7Wc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0ee2ab-07d9-4a81-abf0-e0e4be6696f9/1/WGMp8we5goW3HSLHGX7Bm3Ad7Wc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:24:28:a7:3c:89:68:5c:57:1d:86:df:71:9f:e5:4a:8d:b6:
         d9:5b:d5:5a:60:63:e8:0d:fe:9e:98:63:63:2b:fa:2c:1d:12:
         14:bb:c9:1a:07:b8:bf:10:e8:b3:c9:b7:76:50:0e:92:7f:72:
         15:23:e5:95:c5:b9:bc:86:2f:09:27:b7:ae:32:c1:aa:ef:9c:
         33:47:8d:9f:83:9a:f9:aa:fe:7d:21:17:12:21:41:c6:d8:84:
         a3:62:4c:a6:91:37:e8:9c:f2:31:1f:c9:d3:55:26:0b:b3:58:
         a4:e1:b1:60:4a:d9:d3:71:57:23:09:97:9b:3b:2d:9e:7e:a1:
         0e:d9:a4:5e:a6:dd:86:98:8b:52:3b:d0:b0:41:da:5b:df:39:
         7c:26:07:bb:c4:d2:00:78:ff:7e:0b:47:c1:cb:1c:80:f4:38:
         56:86:d2:8c:4f:8a:73:c7:5d:52:da:71:38:cd:8a:fa:8f:55:
         b7:42:e1:d5:6d:d8:5b:c4:26:65:40:52:bc:a1:70:4c:fd:78:
         62:a1:98:7d:a8:ed:6e:a5:5b:70:32:29:29:2b:96:f9:13:27:
         84:09:90:65:04:eb:a5:92:d4:5a:56:94:f2:d0:9c:a6:71:0c:
         ee:3a:42:47:32:3d:de:10:f7:18:1d:33:0f:dd:35:43:6f:81:
         07:28:4c:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:08:31 2025 by rpki-client