Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/w8BZHi60nQVZ5vzn7iqoHw9Zum8.mft
File:                     w8BZHi60nQVZ5vzn7iqoHw9Zum8.mft (raw, json)
Hash identifier:          2DTIf+B4v2ccDSh23rYo0kYKHkGS8xtpdAuRx6NKl7k=
Subject key identifier:   63:EB:70:7A:2A:09:23:F5:8F:0C:BF:0B:5F:C7:C2:4D:FD:51:28:84
Authority key identifier: C3:C0:59:1E:2E:B4:9D:05:59:E6:FC:E7:EE:2A:A8:1F:0F:59:BA:6F
Certificate issuer:       /CN=c3c0591e2eb49d0559e6fce7ee2aa81f0f59ba6f
Certificate serial:       01976A3C857A2FD8AA9A9D6EC19F10583E59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w8BZHi60nQVZ5vzn7iqoHw9Zum8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/w8BZHi60nQVZ5vzn7iqoHw9Zum8.mft
Manifest number:          1599
Signing time:             Fri 13 Jun 2025 17:00:40 +0000
Manifest this update:     Fri 13 Jun 2025 17:00:40 +0000
Manifest next update:     Sat 14 Jun 2025 17:00:40 +0000
Files and hashes:         1: 2BUGtHga-91WOayxMZ7EN3sAoUE.roa (hash: 40eNzoOdvf9iy0CU470Iq6VAmpCnU36Mg3hoCFP9r9Q=)
                          2: Ka5Exl1GeddcELNpCklBpS5TlPs.roa (hash: kRYcEd/x8/mlJ+CtYhq56IHy4jqYQVlovD2KG8xYqY4=)
                          3: w8BZHi60nQVZ5vzn7iqoHw9Zum8.crl (hash: PV/8z4UErSLIhkhY+N5JlYtOgr848KNYwaSMpUGRUpw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/w8BZHi60nQVZ5vzn7iqoHw9Zum8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/w8BZHi60nQVZ5vzn7iqoHw9Zum8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w8BZHi60nQVZ5vzn7iqoHw9Zum8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 16:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6a:3c:85:7a:2f:d8:aa:9a:9d:6e:c1:9f:10:58:3e:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3c0591e2eb49d0559e6fce7ee2aa81f0f59ba6f
        Validity
            Not Before: Jun 13 17:00:40 2025 GMT
            Not After : Jun 14 17:00:40 2025 GMT
        Subject: CN=63eb707a2a0923f58f0cbf0b5fc7c24dfd512884
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f8:e8:8b:56:7c:c2:ba:8d:05:66:22:2f:57:
                    f4:6a:f5:12:f5:88:29:ce:7c:8a:8b:52:eb:fa:30:
                    e7:2c:9d:a7:76:b0:c1:9a:57:d2:54:97:f6:de:a6:
                    57:41:fc:aa:45:31:22:53:2f:9e:f6:99:57:2d:9e:
                    48:52:aa:6c:bf:dc:7e:c4:53:e4:83:db:2a:2a:d6:
                    b3:bc:c0:58:9a:8f:78:c2:be:da:b7:7a:66:37:33:
                    19:af:ee:dc:e4:24:ab:f9:74:6f:6a:1b:42:10:ae:
                    45:92:44:71:1e:4a:a6:c3:2d:bf:05:b1:cb:fd:55:
                    1a:79:a3:b4:49:18:ee:cd:75:c2:79:02:4a:8b:7c:
                    2b:41:61:a9:95:88:38:f3:21:84:79:31:26:bf:63:
                    a3:47:37:55:81:3a:69:f2:54:f0:46:08:6c:bd:7f:
                    df:2b:63:b5:27:0c:82:27:8e:39:d5:a9:f1:eb:be:
                    e9:67:cc:83:2d:25:5a:a6:e7:b0:5e:a9:f1:40:41:
                    94:25:7d:6a:38:32:a3:f1:fe:1b:9d:c0:ee:e5:fd:
                    54:dc:45:48:71:23:6c:e2:6e:68:17:e9:b9:a3:25:
                    ac:f1:6c:f9:76:1b:9f:45:c3:01:a6:e6:29:2f:b3:
                    af:cf:5c:85:49:13:60:69:a4:9e:32:17:66:2c:32:
                    a8:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:EB:70:7A:2A:09:23:F5:8F:0C:BF:0B:5F:C7:C2:4D:FD:51:28:84
            X509v3 Authority Key Identifier:
                keyid:C3:C0:59:1E:2E:B4:9D:05:59:E6:FC:E7:EE:2A:A8:1F:0F:59:BA:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8BZHi60nQVZ5vzn7iqoHw9Zum8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/w8BZHi60nQVZ5vzn7iqoHw9Zum8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/w8BZHi60nQVZ5vzn7iqoHw9Zum8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:40:58:20:d8:8f:46:8c:f6:28:ce:81:f6:a2:9d:d7:c7:be:
         dc:5a:fd:f6:7f:75:5d:e5:e0:bd:00:96:05:0b:49:f1:3d:9b:
         be:d0:00:cd:14:fb:6a:c4:95:b6:7e:8d:fa:6e:ec:d0:3b:91:
         9b:8b:ba:f0:bd:b7:04:a2:32:f2:ff:1f:80:90:3b:9e:5f:09:
         9b:f8:7d:f0:99:5b:80:ed:b5:d1:6f:d1:bd:b8:4f:39:2b:95:
         c7:90:8c:30:53:24:78:41:ec:66:c0:d2:93:06:af:8d:a2:a8:
         da:2f:39:ca:d5:50:38:61:00:dd:3f:36:39:03:92:d3:fd:55:
         35:11:f7:c3:b6:85:b3:b7:f4:2a:11:1d:76:99:e1:d6:9c:43:
         30:28:ce:66:54:cf:c8:03:f1:1f:b2:23:e5:29:d6:82:c7:45:
         70:b9:7f:92:2b:8e:0a:07:91:7c:56:97:c5:7d:1e:80:2b:c2:
         a7:09:8c:2b:29:57:a5:89:45:c7:eb:3f:65:a3:d3:66:f0:f6:
         62:5d:2b:3f:aa:eb:ee:67:2c:67:4a:44:d5:4d:da:8d:57:22:
         d6:3d:e4:83:15:4d:1f:ae:24:e7:a8:09:0f:b6:ce:3e:ef:5d:
         b7:8a:4a:cb:8a:a7:06:1a:04:08:46:95:4e:29:00:b9:ac:7d:
         9a:55:58:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 22:25:51 2025 by rpki-client