Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.mft
File:                     wE23YjJB1-Znj8JXUfpOC2ZlGGs.mft (raw, json)
Hash identifier:          XkIn/VmmMqudM7JbrGnUYvFNOcN9QH7Q1MVChOq+tcI=
Subject key identifier:   6F:A9:5A:70:22:8D:A3:D3:91:3B:98:26:BE:C3:A8:31:BE:7A:45:82
Authority key identifier: C0:4D:B7:62:32:41:D7:E6:67:8F:C2:57:51:FA:4E:0B:66:65:18:6B
Certificate issuer:       /CN=c04db7623241d7e6678fc25751fa4e0b6665186b
Certificate serial:       01974D44B7F49D20AFEE5F4DB7472BD8F8AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wE23YjJB1-Znj8JXUfpOC2ZlGGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.mft
Manifest number:          0FF7
Signing time:             Sun 08 Jun 2025 02:00:38 +0000
Manifest this update:     Sun 08 Jun 2025 02:00:38 +0000
Manifest next update:     Mon 09 Jun 2025 02:00:38 +0000
Files and hashes:         1: 0kvVQcd2e4SnQh3xLN4W9Ie4suY.roa (hash: dfbeFrG20UF3jAoNCZUQnOLXn1JG2r7gMGzts7DU6SI=)
                          2: 4AZZgr-FtZ5C7UeruxhpUjmqfpQ.roa (hash: 1LrkJHOzTguh6JvPCNh6V6i/J0BR7h6wEY/GDxBjoTQ=)
                          3: Jsb0BR9UN-dcyjDsxkaO3-Yvltw.roa (hash: mF6vNbBQIU1GWKkIg2h8rHabqCIgbySUD4lzazj7BZI=)
                          4: L1zaQrOyYMyhb-vjYsccEQ0rOGs.roa (hash: h8hWAA3iPsZGpLorxG9VKCzAf/rtjUUbjPF4osJaSgE=)
                          5: mpKpYmY8DEGhZcV6ltJDz93teq8.roa (hash: 7UANVEML/0vRWe4hxTYzTFGxeQ0U+2SuSQ0y29OV6fo=)
                          6: pU_eB5rSsUS6EVPfiP0TBGNtCcY.roa (hash: rx92LY3LSKSOciZBDpqfQO1j0HB6jcKddcqiSbdXBt8=)
                          7: wE23YjJB1-Znj8JXUfpOC2ZlGGs.crl (hash: cjS/A4nx++40YX+XRX9HwB4Byu/rTaytIQV0Bxp3JAU=)
                          8: zlP9_orrw6aHHSv7bATBUkhqiRA.roa (hash: NvMCHUJ14Lp9H+mYdu1xuY40BR4qWMQHtDYR2W3Odek=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wE23YjJB1-Znj8JXUfpOC2ZlGGs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 02:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4d:44:b7:f4:9d:20:af:ee:5f:4d:b7:47:2b:d8:f8:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c04db7623241d7e6678fc25751fa4e0b6665186b
        Validity
            Not Before: Jun  8 02:00:38 2025 GMT
            Not After : Jun  9 02:00:38 2025 GMT
        Subject: CN=6fa95a70228da3d3913b9826bec3a831be7a4582
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:ff:af:6a:b3:1a:1b:2c:79:89:46:e5:f6:dd:
                    19:1f:48:4a:84:f5:82:30:89:45:6e:3b:c5:38:b7:
                    33:c4:95:9c:6c:d2:21:12:4e:2d:2e:c8:90:5a:32:
                    a7:89:a2:d3:5d:37:50:af:73:f4:a1:bc:e3:5c:30:
                    61:eb:5f:4b:c8:34:30:84:13:66:9b:df:2e:60:93:
                    19:1c:5c:7d:d9:31:99:c1:c9:f1:8b:bf:56:59:89:
                    51:36:ab:e2:a0:3c:4c:f8:ff:4f:8f:31:d4:41:d3:
                    87:62:18:e0:6b:00:40:47:4c:9b:3c:b1:7d:fe:34:
                    aa:62:6a:19:32:3c:55:a2:8d:c6:4f:25:f2:fc:aa:
                    9c:43:58:ce:ca:1a:d2:f5:b4:55:24:13:11:91:19:
                    ad:a4:0a:23:85:ef:b5:69:71:ef:c7:bd:a7:b7:43:
                    8f:80:5e:50:82:8c:9e:b1:3c:1f:5e:76:c0:c9:79:
                    e0:02:e2:d4:a8:ad:21:75:5e:99:1d:66:f8:f2:81:
                    ae:25:a5:09:8b:87:02:23:ba:5c:55:25:c9:55:a9:
                    1e:3e:6b:b1:6a:12:f0:f7:3e:3d:50:12:32:be:74:
                    10:9a:c8:df:77:09:d4:b4:58:ba:10:ee:58:d8:fe:
                    17:f7:fe:a1:57:f6:42:49:01:d7:4a:0d:37:b7:d1:
                    d4:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:A9:5A:70:22:8D:A3:D3:91:3B:98:26:BE:C3:A8:31:BE:7A:45:82
            X509v3 Authority Key Identifier:
                keyid:C0:4D:B7:62:32:41:D7:E6:67:8F:C2:57:51:FA:4E:0B:66:65:18:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wE23YjJB1-Znj8JXUfpOC2ZlGGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:0d:42:e0:ac:38:6c:bd:b6:05:90:6a:ab:43:fe:59:c5:e5:
         5c:03:59:1f:a2:c2:44:26:ea:b1:9a:3d:0f:1b:90:f8:dc:17:
         e7:d2:5b:80:03:42:d3:55:fd:d4:a8:8b:b5:63:83:f0:d6:2e:
         2b:bf:de:2c:ca:c9:7c:1b:08:59:e5:72:57:12:5a:95:eb:e4:
         2a:86:71:cd:d0:f0:6f:da:63:f1:79:11:77:3e:5c:df:99:0d:
         34:51:07:97:07:21:29:20:2d:1d:73:f6:7e:48:d7:4a:d5:d4:
         29:18:fa:7b:b7:fb:83:73:45:d6:c1:fc:07:47:af:46:f4:87:
         88:5a:00:ea:49:49:0d:9c:53:e6:1e:20:1e:0a:ee:ba:41:a8:
         bf:b5:f8:d6:d7:d8:1b:d1:ef:5c:e0:ba:4d:05:2a:c7:a1:19:
         1a:58:f4:c2:d0:bf:ab:6f:37:ad:7e:81:a8:06:92:37:61:d0:
         1f:b7:dc:ca:d2:90:6b:3e:d3:b1:4d:b6:0d:09:1b:29:bb:09:
         11:35:d8:08:d5:e6:96:48:41:0e:eb:71:a8:6c:91:04:fd:7d:
         fe:22:67:99:df:ab:8d:81:5a:04:61:ec:23:a0:a1:36:fa:19:
         41:5d:8d:c3:3a:78:7b:54:32:92:66:76:8f:56:e1:21:17:4f:
         4c:2f:53:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 10:18:05 2025 by rpki-client