Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/WM1WOirmUpyfQ_5LXGfbcOd5oJs.mft
File:                     WM1WOirmUpyfQ_5LXGfbcOd5oJs.mft (raw, json)
Hash identifier:          LODfROkeaFxotn42TvdI7K+a17DYXmw5RR5t/26J/nI=
Subject key identifier:   CF:35:0B:ED:C9:4B:AF:73:66:4C:FE:90:EB:5F:B1:FB:08:DB:45:F9
Authority key identifier: 58:CD:56:3A:2A:E6:52:9C:9F:43:FE:4B:5C:67:DB:70:E7:79:A0:9B
Certificate issuer:       /CN=58cd563a2ae6529c9f43fe4b5c67db70e779a09b
Certificate serial:       019738AB3CEC97B85CF959570DB5B10583A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WM1WOirmUpyfQ_5LXGfbcOd5oJs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/WM1WOirmUpyfQ_5LXGfbcOd5oJs.mft
Manifest number:          CD
Signing time:             Wed 04 Jun 2025 02:00:35 +0000
Manifest this update:     Wed 04 Jun 2025 02:00:35 +0000
Manifest next update:     Thu 05 Jun 2025 02:00:35 +0000
Files and hashes:         1: WM1WOirmUpyfQ_5LXGfbcOd5oJs.crl (hash: 2XEitU5AZTmewLOqr8FB4wsQ7DpFniYNSvyC4FlneIo=)
                          2: _sGWnEAm6H3GQnFAjvcpfjYmmpU.roa (hash: e0wmcRqP7ldHP1lF0Smi9FCBdi4Vz7I53Q9ZET+MPRw=)
                          3: dJzDSPenGFs61jrjvaTekpH7lb0.roa (hash: kpJ+1xwnPbkQC6dTg5VdbKW3vchd3ul1f6drVPMIJlo=)
                          4: o4GoVj1IVmnPHBj-vP4PnBTlkD4.roa (hash: HjBekZUZeHTCiqwh5UX3k0G+u1uy5Ap+OteoXrFlzT8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/WM1WOirmUpyfQ_5LXGfbcOd5oJs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/WM1WOirmUpyfQ_5LXGfbcOd5oJs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WM1WOirmUpyfQ_5LXGfbcOd5oJs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Jun 2025 02:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:38:ab:3c:ec:97:b8:5c:f9:59:57:0d:b5:b1:05:83:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58cd563a2ae6529c9f43fe4b5c67db70e779a09b
        Validity
            Not Before: Jun  4 02:00:35 2025 GMT
            Not After : Jun  5 02:00:35 2025 GMT
        Subject: CN=cf350bedc94baf73664cfe90eb5fb1fb08db45f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:c3:97:8f:d0:23:1f:f4:08:8f:49:6c:11:b5:
                    c8:32:64:6f:cc:2d:d0:b3:a0:60:1b:6f:8c:be:39:
                    e1:de:c1:55:aa:67:07:44:a5:82:ee:f6:03:dc:5e:
                    46:b2:8a:bd:f5:eb:a7:ec:8c:96:8e:b0:b2:1c:5b:
                    4b:7e:27:21:e4:b1:45:af:a8:c8:96:9e:ee:d3:ec:
                    ae:23:b1:82:fe:b4:06:df:fb:0e:a1:e8:87:76:88:
                    51:7a:24:75:bc:b2:c1:61:1a:05:4b:24:c6:e0:bb:
                    e0:2b:ab:43:26:5b:6f:34:9b:05:c1:4f:a2:31:fd:
                    da:ed:6c:24:08:22:44:ac:71:ae:5b:41:9f:43:e3:
                    15:cc:df:f3:b1:3a:62:9b:1b:8d:a3:42:47:bb:5a:
                    c8:dc:6b:81:7d:7e:8f:17:68:bd:e2:3c:28:99:76:
                    73:64:3c:31:5f:ee:ab:44:21:5c:67:42:8a:8f:cf:
                    1e:7f:33:d4:b9:e5:85:d1:fd:df:f4:ba:f6:d2:45:
                    23:cb:c0:dd:46:bd:61:e5:0e:95:70:37:ca:92:16:
                    3e:0b:aa:ee:7f:44:87:2b:3c:10:88:77:90:1e:3c:
                    62:99:51:fc:17:61:10:65:c9:75:2e:61:33:30:cc:
                    b1:73:4c:7a:6b:ed:83:c6:17:53:a5:5d:f6:cb:25:
                    e9:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:35:0B:ED:C9:4B:AF:73:66:4C:FE:90:EB:5F:B1:FB:08:DB:45:F9
            X509v3 Authority Key Identifier:
                keyid:58:CD:56:3A:2A:E6:52:9C:9F:43:FE:4B:5C:67:DB:70:E7:79:A0:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WM1WOirmUpyfQ_5LXGfbcOd5oJs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/WM1WOirmUpyfQ_5LXGfbcOd5oJs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/WM1WOirmUpyfQ_5LXGfbcOd5oJs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:31:9c:2f:a8:7e:22:fe:ac:8b:c3:37:a1:7f:5d:38:68:da:
         9b:1c:12:97:5b:58:c6:fc:59:06:6f:11:bb:8e:32:a3:bd:cd:
         3f:df:ae:85:8f:11:d5:85:95:40:6f:0d:12:f0:5b:48:cf:b7:
         18:39:e5:bb:2b:a4:45:29:51:de:21:4c:b8:9c:f1:e7:47:75:
         98:00:eb:b7:63:8f:dd:65:28:61:f4:a6:3a:1d:0e:2b:15:b1:
         53:a5:be:6f:f8:04:11:10:09:23:9a:f4:96:4a:e0:cf:4e:e9:
         9f:a8:bc:b7:30:76:04:43:8f:1f:55:71:4f:05:bd:b3:1b:c8:
         aa:fc:11:54:f8:79:ff:93:ba:b9:9a:1f:30:0b:b2:28:c2:7f:
         92:30:44:00:37:45:b4:9a:91:02:67:4e:d4:dd:9b:1e:ea:15:
         6f:5c:7f:f0:64:6d:1d:23:98:03:37:ce:8d:53:d3:a2:2a:2d:
         25:6f:68:25:e4:b8:ce:79:7d:bb:e5:7b:52:c6:d3:be:b8:09:
         03:33:59:45:2a:0c:55:17:b6:90:76:1c:af:d2:7c:60:4f:06:
         02:7a:d3:79:e6:38:b7:df:36:20:6d:72:d8:dc:95:67:74:4b:
         97:06:95:b3:17:b0:50:4c:86:9d:cf:d4:ec:87:e7:0c:04:f2:
         0b:f1:65:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 11:42:44 2025 by rpki-client