Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/6f6b7c-c0a9-4953-9865-de4bdaa37203/1/WWpf7pNF_NSAEDSId7eFOvzMZHQ.mft
File:                     WWpf7pNF_NSAEDSId7eFOvzMZHQ.mft (raw, json)
Hash identifier:          H4Pizn+6kGJ57cILFeyfXpa/c4aeBoJFlAjenKdwKSw=
Subject key identifier:   DC:9B:82:DA:B2:1D:A2:DB:C5:11:FB:E4:46:ED:FF:57:20:8F:CF:A0
Authority key identifier: 59:6A:5F:EE:93:45:FC:D4:80:10:34:88:77:B7:85:3A:FC:CC:64:74
Certificate issuer:       /CN=596a5fee9345fcd48010348877b7853afccc6474
Certificate serial:       019748C36552F68BA8F818187B4B065454C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WWpf7pNF_NSAEDSId7eFOvzMZHQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/6f6b7c-c0a9-4953-9865-de4bdaa37203/1/WWpf7pNF_NSAEDSId7eFOvzMZHQ.mft
Manifest number:          0427
Signing time:             Sat 07 Jun 2025 05:00:54 +0000
Manifest this update:     Sat 07 Jun 2025 05:00:54 +0000
Manifest next update:     Sun 08 Jun 2025 05:00:54 +0000
Files and hashes:         1: WWpf7pNF_NSAEDSId7eFOvzMZHQ.crl (hash: 1qrGvLREcul+STsCXuVJ/y8acykYIlmK2nLk2SsYCOo=)
                          2: _dX4f78r8ar055s65dZPENw-y4Y.roa (hash: YAHCWNUUSCjGUaMNs/qPZDcoPmc5Fkj8HR1jTR9dAy4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/6f6b7c-c0a9-4953-9865-de4bdaa37203/1/WWpf7pNF_NSAEDSId7eFOvzMZHQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/6f6b7c-c0a9-4953-9865-de4bdaa37203/1/WWpf7pNF_NSAEDSId7eFOvzMZHQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WWpf7pNF_NSAEDSId7eFOvzMZHQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 05:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:c3:65:52:f6:8b:a8:f8:18:18:7b:4b:06:54:54:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=596a5fee9345fcd48010348877b7853afccc6474
        Validity
            Not Before: Jun  7 05:00:54 2025 GMT
            Not After : Jun  8 05:00:54 2025 GMT
        Subject: CN=dc9b82dab21da2dbc511fbe446edff57208fcfa0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:83:e9:64:5c:4a:c1:3f:d9:13:fc:36:98:01:
                    5d:ca:4a:1a:4f:bc:86:61:d5:0b:8b:0f:8b:8b:d3:
                    ba:c8:00:f1:41:65:6a:83:0d:54:69:23:00:10:a6:
                    32:a7:f4:00:3b:40:c9:cb:90:74:78:a5:06:75:d2:
                    15:1e:56:1e:9d:65:cd:e7:1e:6d:65:08:a2:a0:61:
                    4c:45:6c:fe:78:e4:33:5b:67:6d:b6:df:fd:c9:dc:
                    a1:c0:00:c7:6a:cb:10:5d:43:15:74:3e:e8:a6:72:
                    4d:97:d7:b8:2d:42:85:44:05:41:e8:bc:17:ae:2c:
                    ef:42:d6:5e:08:95:66:a8:ed:0e:4f:ba:17:0e:1a:
                    99:04:ae:20:48:32:52:d3:62:fe:b7:f5:1a:9b:6e:
                    ea:cd:ff:26:5a:7b:6f:9c:f0:38:5f:ee:b7:27:c9:
                    e7:42:51:41:64:5d:15:8f:41:aa:6d:ff:84:0e:c6:
                    34:15:95:ce:ef:80:30:8a:e0:11:78:ec:f5:79:8a:
                    84:a1:09:b6:4b:d2:58:c6:3e:a7:a2:e6:06:d8:f3:
                    39:e3:24:67:f1:73:00:a0:aa:2d:be:e5:97:e7:db:
                    2f:eb:06:70:37:ea:30:34:58:67:e3:27:d9:82:7f:
                    7b:30:23:69:be:76:cb:fa:23:cd:77:c5:31:bd:dc:
                    f5:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:9B:82:DA:B2:1D:A2:DB:C5:11:FB:E4:46:ED:FF:57:20:8F:CF:A0
            X509v3 Authority Key Identifier:
                keyid:59:6A:5F:EE:93:45:FC:D4:80:10:34:88:77:B7:85:3A:FC:CC:64:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WWpf7pNF_NSAEDSId7eFOvzMZHQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/6f6b7c-c0a9-4953-9865-de4bdaa37203/1/WWpf7pNF_NSAEDSId7eFOvzMZHQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/6f6b7c-c0a9-4953-9865-de4bdaa37203/1/WWpf7pNF_NSAEDSId7eFOvzMZHQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d2:21:52:d0:92:14:ff:1a:48:fa:5c:dd:13:c3:09:1f:99:60:
         14:c3:ca:4a:74:2d:a2:86:a8:e3:f7:f2:9d:92:54:a5:64:3b:
         2a:4c:a3:83:86:79:f0:47:f0:f6:a6:ec:ae:b8:db:af:52:91:
         39:1f:bb:a3:2a:25:d6:2f:17:92:4f:86:e0:51:42:45:13:c9:
         5e:a7:ce:27:9b:e3:68:01:6c:ae:3a:47:c4:dc:2e:e0:2e:cc:
         2d:8c:5a:a5:92:33:ef:42:c9:ad:44:12:d6:e0:fe:0b:42:34:
         47:1b:6f:1d:73:f7:63:63:c2:fd:06:9e:71:25:fc:d1:b2:e6:
         a3:b6:22:dd:5c:eb:fe:3a:6d:ad:9c:6f:83:b9:93:0d:4b:38:
         d6:e6:b8:b7:d6:3f:13:60:ae:5d:6f:fe:90:6f:79:75:d4:19:
         33:7a:46:a5:59:cd:4c:bc:70:9a:65:84:4f:7c:ce:81:4c:63:
         2b:f6:55:1c:d7:93:29:6e:54:d4:98:44:d6:5d:52:d8:76:e2:
         7a:b8:39:8c:dc:9f:c2:1a:02:fb:c2:a2:3b:99:5f:68:5c:42:
         a4:ef:56:0e:7e:e6:9d:3b:a9:d8:eb:5b:1d:e0:3c:f9:79:39:
         e8:e7:78:e1:e7:27:ad:46:83:72:39:18:86:c5:6d:09:90:36:
         b3:a8:0b:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:46:53 2025 by rpki-client