Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/b28f4c-a492-4ab1-95cc-b3f567805a7c/1/WbWUsQer_jKkbE0dvge7tOa7Fjo.mft
File:                     WbWUsQer_jKkbE0dvge7tOa7Fjo.mft (raw, json)
Hash identifier:          QldaaWmzKMUlWFNPQPISbS9opgFWbIENzK/aiTdF4Fk=
Subject key identifier:   80:74:EC:89:BE:20:5D:9D:32:7A:52:F2:D6:CE:34:20:60:7C:E3:7A
Authority key identifier: 59:B5:94:B1:07:AB:FE:32:A4:6C:4D:1D:BE:07:BB:B4:E6:BB:16:3A
Certificate issuer:       /CN=59b594b107abfe32a46c4d1dbe07bbb4e6bb163a
Certificate serial:       01974B8D5952EB1E526C906EA4B2A70B4F46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WbWUsQer_jKkbE0dvge7tOa7Fjo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/b28f4c-a492-4ab1-95cc-b3f567805a7c/1/WbWUsQer_jKkbE0dvge7tOa7Fjo.mft
Manifest number:          0A10
Signing time:             Sat 07 Jun 2025 18:00:43 +0000
Manifest this update:     Sat 07 Jun 2025 18:00:43 +0000
Manifest next update:     Sun 08 Jun 2025 18:00:43 +0000
Files and hashes:         1: WbWUsQer_jKkbE0dvge7tOa7Fjo.crl (hash: 90cCFvCRoIz9QE0XPk4qV999S2EC21qovNJwQZ7HFIA=)
                          2: iaYhX-wTSSW1QYw64E4AzhGwws8.roa (hash: wTQucH27CFyiNY63Xms6GuDAYhKr9yvb+MoiHvTWRCY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/b28f4c-a492-4ab1-95cc-b3f567805a7c/1/WbWUsQer_jKkbE0dvge7tOa7Fjo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/b28f4c-a492-4ab1-95cc-b3f567805a7c/1/WbWUsQer_jKkbE0dvge7tOa7Fjo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WbWUsQer_jKkbE0dvge7tOa7Fjo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 11:24:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:8d:59:52:eb:1e:52:6c:90:6e:a4:b2:a7:0b:4f:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59b594b107abfe32a46c4d1dbe07bbb4e6bb163a
        Validity
            Not Before: Jun  7 18:00:43 2025 GMT
            Not After : Jun  8 18:00:43 2025 GMT
        Subject: CN=8074ec89be205d9d327a52f2d6ce3420607ce37a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:80:2b:f9:58:51:f5:76:45:f5:33:66:fe:29:
                    01:d4:cd:a0:a2:13:04:b9:10:ae:78:eb:81:68:97:
                    4b:e0:55:b1:19:16:ee:e7:5f:0a:c3:c1:e0:b4:bf:
                    d1:80:03:9e:b8:16:f2:d9:fa:79:bf:b4:98:81:75:
                    b1:e1:07:c7:12:59:9c:9c:88:b6:36:91:09:4e:9a:
                    47:fd:67:e3:a8:88:a9:50:9e:3c:e9:59:b0:85:9b:
                    7c:35:24:b8:d4:9c:9b:c5:d0:e8:45:81:35:a7:a8:
                    db:ec:d9:08:0b:14:d8:8e:a2:dd:c9:12:48:f4:e4:
                    1f:d5:36:28:ea:df:0f:1f:1a:6a:bb:75:10:b8:61:
                    19:d2:33:76:58:fb:9a:08:12:b6:c3:80:d1:fe:a3:
                    46:3a:0d:01:8f:f0:79:36:a9:13:de:c7:7b:41:f9:
                    47:f2:f5:48:3c:ea:c1:78:89:d6:21:a2:cc:d1:14:
                    f1:1b:80:a7:ec:bf:fe:4b:61:bb:3f:8b:94:da:1a:
                    17:b3:c0:40:86:49:58:7f:1d:fe:29:3f:88:7c:0e:
                    eb:00:52:4e:ff:82:21:b4:49:13:9a:5f:95:9b:87:
                    d7:47:da:74:75:2a:78:93:ce:36:86:f2:50:51:23:
                    fe:dd:f7:1c:26:d9:9a:10:33:11:78:03:fa:d5:b7:
                    3f:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:74:EC:89:BE:20:5D:9D:32:7A:52:F2:D6:CE:34:20:60:7C:E3:7A
            X509v3 Authority Key Identifier:
                keyid:59:B5:94:B1:07:AB:FE:32:A4:6C:4D:1D:BE:07:BB:B4:E6:BB:16:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WbWUsQer_jKkbE0dvge7tOa7Fjo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b28f4c-a492-4ab1-95cc-b3f567805a7c/1/WbWUsQer_jKkbE0dvge7tOa7Fjo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b28f4c-a492-4ab1-95cc-b3f567805a7c/1/WbWUsQer_jKkbE0dvge7tOa7Fjo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:03:ea:c7:d9:1b:dd:cb:f5:4d:ba:8b:c0:08:ed:72:ab:42:
         9d:37:c6:36:43:82:2e:18:fe:27:99:fb:6f:12:92:f4:f3:54:
         b7:0d:78:f3:fb:29:5b:6e:b2:08:a1:66:c9:51:f2:29:d7:23:
         1c:0e:d9:8f:53:ac:29:1f:a9:33:67:e0:0d:fa:ba:cc:f3:bb:
         a2:9d:bf:c5:fc:d9:9a:55:d7:10:5a:af:94:ce:c0:a6:c3:ad:
         bb:c1:ba:df:02:e5:72:2b:45:f1:78:ec:06:57:ac:d1:21:a7:
         1d:c5:25:22:2d:c0:06:82:2c:61:ce:09:bf:c8:93:35:4e:94:
         cc:f1:2a:d2:be:e8:41:2d:6e:73:0a:7b:cc:5e:14:49:f0:02:
         5e:49:02:66:56:97:fc:ee:d8:17:7e:31:58:4c:ed:ec:ae:dc:
         53:d4:5b:59:1f:c5:3e:62:cc:a2:31:80:52:f6:37:c0:e6:c0:
         8b:24:12:bf:d5:20:af:41:54:4f:74:0c:2e:9e:46:bd:16:b3:
         64:af:c3:3d:25:61:08:75:9c:e7:ba:af:f7:78:37:7a:da:80:
         28:d8:32:88:3f:6a:5a:02:a3:b3:d1:ff:31:41:9e:37:ae:61:
         60:4d:98:37:ac:4f:c4:50:e2:bb:3f:ef:24:21:db:0b:36:c0:
         9e:da:35:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdLjVlS6x5SbJBupLKnC09GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5YjU5NGIxMDdhYmZlMzJhNDZjNGQxZGJlMDdiYmI0ZTZi
YjE2M2EwHhcNMjUwNjA3MTgwMDQzWhcNMjUwNjA4MTgwMDQzWjAzMTEwLwYDVQQD
Eyg4MDc0ZWM4OWJlMjA1ZDlkMzI3YTUyZjJkNmNlMzQyMDYwN2NlMzdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYAr+VhR9XZF9TNm/ikB1M2gohME
uRCueOuBaJdL4FWxGRbu518Kw8HgtL/RgAOeuBby2fp5v7SYgXWx4QfHElmcnIi2
NpEJTppH/WfjqIipUJ486VmwhZt8NSS41JybxdDoRYE1p6jb7NkICxTYjqLdyRJI
9OQf1TYo6t8PHxpqu3UQuGEZ0jN2WPuaCBK2w4DR/qNGOg0Bj/B5NqkT3sd7QflH
8vVIPOrBeInWIaLM0RTxG4Cn7L/+S2G7P4uU2hoXs8BAhklYfx3+KT+IfA7rAFJO
/4IhtEkTml+Vm4fXR9p0dSp4k842hvJQUSP+3fccJtmaEDMReAP61bc/XQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIB07Im+IF2dMnpS8tbONCBgfON6MB8GA1UdIwQY
MBaAFFm1lLEHq/4ypGxNHb4Hu7TmuxY6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2JXVXNRZXJfaktrYkUwZHZnZTd0T2E3RmpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9iMjhmNGMtYTQ5Mi00YWIxLTk1Y2Mt
YjNmNTY3ODA1YTdjLzEvV2JXVXNRZXJfaktrYkUwZHZnZTd0T2E3RmpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC9iMjhmNGMtYTQ5Mi00YWIxLTk1Y2MtYjNmNTY3ODA1YTdj
LzEvV2JXVXNRZXJfaktrYkUwZHZnZTd0T2E3RmpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAggPqx9kb
3cv1TbqLwAjtcqtCnTfGNkOCLhj+J5n7bxKS9PNUtw148/spW26yCKFmyVHyKdcj
HA7Zj1OsKR+pM2fgDfq6zPO7op2/xfzZmlXXEFqvlM7ApsOtu8G63wLlcitF8Xjs
Bles0SGnHcUlIi3ABoIsYc4Jv8iTNU6UzPEq0r7oQS1ucwp7zF4USfACXkkCZlaX
/O7YF34xWEzt7K7cU9RbWR/FPmLMojGAUvY3wObAiyQSv9Ugr0FUT3QMLp5GvRaz
ZK/DPSVhCHWc57qv93g3etqAKNgyiD9qWgKjs9H/MUGeN65hYE2YN6xPxFDiuz/v
JCHbCzbAnto1iQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 21:05:49 2025 by rpki-client