Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.mft
File:                     WHO1mFUN9b_byZp6HjlsNJW9qDs.mft (raw, json)
Hash identifier:          K1gS1yFn3r0GdkpQnFK6tDGs4DI9gvv5HeuEhQkLQH0=
Subject key identifier:   59:C5:57:A3:2A:09:39:1C:10:D1:37:79:13:64:AB:A4:17:37:F6:0B
Authority key identifier: 58:73:B5:98:55:0D:F5:BF:DB:C9:9A:7A:1E:39:6C:34:95:BD:A8:3B
Certificate issuer:       /CN=5873b598550df5bfdbc99a7a1e396c3495bda83b
Certificate serial:       01974B1F2DDF6DB6A27369E24F73FD226827
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WHO1mFUN9b_byZp6HjlsNJW9qDs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.mft
Manifest number:          1580
Signing time:             Sat 07 Jun 2025 16:00:23 +0000
Manifest this update:     Sat 07 Jun 2025 16:00:23 +0000
Manifest next update:     Sun 08 Jun 2025 16:00:23 +0000
Files and hashes:         1: SMQq7CRzdTMpOyBYbyD-3lmnAf8.roa (hash: NUvlu4bhU491Hj0WQxuB3vUQkEUZUeQ7tnSRNTWGTcQ=)
                          2: WHO1mFUN9b_byZp6HjlsNJW9qDs.crl (hash: kwm66KJ2XsaVHEDsmcKE8J7vbn//y4RvegAmNrUSDkA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WHO1mFUN9b_byZp6HjlsNJW9qDs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 16:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:1f:2d:df:6d:b6:a2:73:69:e2:4f:73:fd:22:68:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5873b598550df5bfdbc99a7a1e396c3495bda83b
        Validity
            Not Before: Jun  7 16:00:23 2025 GMT
            Not After : Jun  8 16:00:23 2025 GMT
        Subject: CN=59c557a32a09391c10d137791364aba41737f60b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:82:e8:01:e9:8e:c2:57:f8:f4:0a:e4:37:07:
                    81:c8:fe:0a:56:04:1c:c3:20:b7:d6:64:5c:ea:2d:
                    78:2f:e0:ed:c0:ac:cf:d9:ec:0f:91:0c:eb:4e:76:
                    35:d5:41:8b:6a:c5:c0:b7:4f:1a:dd:fd:80:28:e1:
                    73:7f:a6:cb:f5:2a:a9:be:38:64:ef:64:c2:76:98:
                    e7:56:56:a1:f0:47:0b:72:6f:fd:62:b9:f6:0d:3c:
                    f8:56:99:af:d1:a0:18:02:c8:4f:d1:15:2f:bd:86:
                    78:08:06:57:16:9e:08:af:39:df:08:b5:ec:19:7a:
                    2f:b0:4d:9a:6e:6b:67:08:9c:1d:db:df:8b:75:a4:
                    8e:e0:2c:af:88:27:78:79:e8:7e:85:47:fc:a4:19:
                    b3:56:7c:98:45:e8:73:64:8f:79:ff:8e:d9:a3:47:
                    64:b1:d7:58:5a:6a:51:78:9d:62:7b:8d:20:ca:6f:
                    af:27:e2:dc:4c:0b:14:b9:58:9c:a0:00:02:11:e6:
                    ff:19:49:eb:f9:94:20:df:be:0e:69:ec:0c:6e:e1:
                    bb:b6:4e:dc:f7:08:b3:cf:86:6e:7a:84:d7:91:b4:
                    1e:28:21:ac:01:b3:10:c4:b0:e6:c8:73:76:1f:4f:
                    80:ee:ea:ab:5b:83:b6:a4:a9:47:1c:df:7d:f1:4f:
                    22:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:C5:57:A3:2A:09:39:1C:10:D1:37:79:13:64:AB:A4:17:37:F6:0B
            X509v3 Authority Key Identifier:
                keyid:58:73:B5:98:55:0D:F5:BF:DB:C9:9A:7A:1E:39:6C:34:95:BD:A8:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WHO1mFUN9b_byZp6HjlsNJW9qDs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/14238d-8591-471f-895b-1769d1994df6/1/WHO1mFUN9b_byZp6HjlsNJW9qDs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:86:b8:3e:6c:0a:50:95:5c:c5:e5:43:7a:33:b2:50:ba:0c:
         df:11:75:a6:65:6b:7b:9e:00:77:0f:97:1f:c7:d0:7f:e4:8c:
         cf:f7:8d:b1:53:dd:a5:c8:83:3c:d9:5b:7c:3a:d7:ea:85:08:
         c8:27:dc:0e:7e:22:9f:db:e7:78:2f:bc:18:7a:a9:b7:f2:a5:
         00:13:9a:e5:13:f2:42:3e:60:21:ae:f1:8f:28:15:42:02:ae:
         5b:ef:b8:0e:42:0e:09:39:4f:8b:e3:dc:a9:f4:ce:31:e9:f0:
         7c:af:3b:c2:c1:b1:fe:d1:1f:8c:fe:ce:fa:58:b7:5b:22:6c:
         be:de:b7:d0:1d:91:f8:73:09:3e:f7:1a:81:18:ab:87:f9:86:
         0f:8c:de:18:5f:db:9b:1f:1f:86:4a:46:ce:7a:f9:f4:26:de:
         a6:a8:71:38:60:71:78:5c:e2:fc:04:62:89:76:e4:36:9b:8f:
         f0:b6:c0:74:81:55:e3:5d:a9:71:ae:3a:f3:00:f6:78:cf:eb:
         1b:40:c7:f4:83:d3:d1:8a:8a:a7:71:1e:a2:5a:5c:e8:a8:c1:
         0c:c7:7e:01:13:3b:10:92:ea:74:3b:1f:0c:72:70:d0:37:6c:
         8c:25:5d:15:cf:c8:23:c5:b1:85:4b:38:33:10:36:8b:83:ba:
         04:51:a3:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:34:11 2025 by rpki-client