Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/a1c6ec-c260-4ca2-887b-4bb94cbc2e73/1/W20XjxOFEwa1Y03xWXFjGfTYJHg.mft
File:                     W20XjxOFEwa1Y03xWXFjGfTYJHg.mft (raw, json)
Hash identifier:          SLCHMflygIkdNUoAz33NLHU8B9WVOzD3jnYrSEJ+WZE=
Subject key identifier:   FF:B1:CB:1A:2B:41:77:C4:BB:7F:82:D0:5E:EE:E8:B6:CF:70:C6:5A
Authority key identifier: 5B:6D:17:8F:13:85:13:06:B5:63:4D:F1:59:71:63:19:F4:D8:24:78
Certificate issuer:       /CN=5b6d178f13851306b5634df159716319f4d82478
Certificate serial:       0197493127BBFFCC8C58EB41EC57E73A4949
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W20XjxOFEwa1Y03xWXFjGfTYJHg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/a1c6ec-c260-4ca2-887b-4bb94cbc2e73/1/W20XjxOFEwa1Y03xWXFjGfTYJHg.mft
Manifest number:          0C18
Signing time:             Sat 07 Jun 2025 07:00:47 +0000
Manifest this update:     Sat 07 Jun 2025 07:00:47 +0000
Manifest next update:     Sun 08 Jun 2025 07:00:47 +0000
Files and hashes:         1: 4Y2Nbo1_a6IBq8Cl0IDfGwKCP_M.roa (hash: 0bsJSEvzwH1XPIlPA10NL/s8qRTvdmZt752O+GQRDjw=)
                          2: W20XjxOFEwa1Y03xWXFjGfTYJHg.crl (hash: 6sEr5lzoWeC2z3qowmgMMCNV9SV288Hp1f1qiiZGkGI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/a1c6ec-c260-4ca2-887b-4bb94cbc2e73/1/W20XjxOFEwa1Y03xWXFjGfTYJHg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/a1c6ec-c260-4ca2-887b-4bb94cbc2e73/1/W20XjxOFEwa1Y03xWXFjGfTYJHg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W20XjxOFEwa1Y03xWXFjGfTYJHg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:31:27:bb:ff:cc:8c:58:eb:41:ec:57:e7:3a:49:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b6d178f13851306b5634df159716319f4d82478
        Validity
            Not Before: Jun  7 07:00:47 2025 GMT
            Not After : Jun  8 07:00:47 2025 GMT
        Subject: CN=ffb1cb1a2b4177c4bb7f82d05eeee8b6cf70c65a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:ec:9d:26:81:68:bc:c6:c3:0f:bb:eb:fc:74:
                    df:fb:a4:91:9d:d0:8e:92:b8:5e:d5:28:70:85:d6:
                    be:01:dd:92:35:29:c2:a4:59:be:b3:cb:1f:1e:35:
                    de:3c:60:ef:13:4f:5f:f1:86:5d:9b:6c:d2:9f:7d:
                    e8:6b:f1:65:5b:59:01:4f:0c:1c:9e:5e:a1:2e:dd:
                    19:36:d0:14:ab:bd:29:ad:e1:5a:5f:a6:83:ce:ca:
                    46:6f:4b:b6:53:5a:fc:2d:4e:22:0f:16:af:1c:30:
                    90:9f:23:66:14:8a:16:48:26:cc:38:2e:e9:a7:2f:
                    8c:2c:de:33:31:eb:ae:28:e9:e3:ca:97:bb:d4:0d:
                    d6:58:24:bb:57:c5:47:61:eb:fd:93:4c:af:2d:d9:
                    1c:68:0e:07:a6:12:d4:c9:d3:3d:b7:7b:8f:54:11:
                    eb:35:e1:a0:94:3d:85:28:5c:70:b1:e8:37:eb:03:
                    cd:d0:28:f2:aa:e4:14:9e:09:f8:df:dc:ce:77:96:
                    49:b7:2e:f3:b4:46:ec:49:af:1a:fc:ee:2b:2e:dd:
                    0c:31:f9:3d:40:dc:82:1c:88:c1:97:5c:58:e5:fd:
                    85:40:49:3c:ef:b7:67:2e:7b:f7:35:1a:b3:f2:bd:
                    3f:2a:d7:7d:58:7e:fd:b4:22:c8:b9:97:ab:1c:6f:
                    cb:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:B1:CB:1A:2B:41:77:C4:BB:7F:82:D0:5E:EE:E8:B6:CF:70:C6:5A
            X509v3 Authority Key Identifier:
                keyid:5B:6D:17:8F:13:85:13:06:B5:63:4D:F1:59:71:63:19:F4:D8:24:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W20XjxOFEwa1Y03xWXFjGfTYJHg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a1c6ec-c260-4ca2-887b-4bb94cbc2e73/1/W20XjxOFEwa1Y03xWXFjGfTYJHg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a1c6ec-c260-4ca2-887b-4bb94cbc2e73/1/W20XjxOFEwa1Y03xWXFjGfTYJHg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:e4:e1:80:9e:62:19:8f:7f:66:df:96:8e:54:fd:27:92:b4:
         d6:7c:2a:d8:1a:e3:76:e7:cb:0b:63:9b:00:4f:e2:26:43:f0:
         7c:8c:81:56:e6:aa:49:46:ce:03:d0:53:d4:c0:8f:f3:5a:f4:
         97:36:13:5a:7c:31:5b:93:31:16:25:b4:ce:99:1c:8b:21:83:
         4c:f6:7c:4e:fe:fa:69:de:df:b6:18:36:d5:87:49:1d:23:d6:
         7f:40:c3:d4:80:f8:30:c8:8b:46:49:77:c4:bd:2b:1f:1a:8b:
         fb:7f:c6:66:3a:a3:ff:e4:86:37:9e:2a:3c:9c:66:3b:2d:fa:
         e4:45:4c:59:0d:39:14:86:c7:c4:5e:b2:a4:1e:c7:1d:47:22:
         a9:8d:64:a7:f3:c4:40:7d:92:43:21:8d:d2:b0:6b:a8:1e:76:
         19:67:d1:46:ca:4d:b6:29:c3:02:f8:f7:eb:11:df:ad:29:7c:
         86:da:f5:ff:49:83:b9:9b:dd:c6:38:f1:66:d6:e8:18:01:e5:
         04:71:66:f7:ee:3e:58:35:74:a2:00:cb:5a:a5:e3:6c:69:77:
         eb:ea:75:86:87:12:2b:06:1f:5e:7d:84:70:95:e3:3d:df:72:
         59:06:08:88:c1:71:b9:c3:f0:5f:ea:ac:45:64:2a:2a:7e:27:
         94:76:b4:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:35:42 2025 by rpki-client