Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/a2fd11-ff1d-4901-8b5a-cae35a871646/1/Wc_oEoYU0zJajOwYM9c7tqRpjA4.mft
File:                     Wc_oEoYU0zJajOwYM9c7tqRpjA4.mft (raw, json)
Hash identifier:          A6E1CYesdrMFBKCnx+obC1Gtuca2u8cxMcAyoyPS7F4=
Subject key identifier:   24:CC:12:5E:F0:5E:DE:0A:B8:20:07:82:F4:9A:E9:28:26:70:BC:A2
Authority key identifier: 59:CF:E8:12:86:14:D3:32:5A:8C:EC:18:33:D7:3B:B6:A4:69:8C:0E
Certificate issuer:       /CN=59cfe8128614d3325a8cec1833d73bb6a4698c0e
Certificate serial:       019749318DCD07D3F06EFE7795B743FBE4B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wc_oEoYU0zJajOwYM9c7tqRpjA4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/a2fd11-ff1d-4901-8b5a-cae35a871646/1/Wc_oEoYU0zJajOwYM9c7tqRpjA4.mft
Manifest number:          0372
Signing time:             Sat 07 Jun 2025 07:01:13 +0000
Manifest this update:     Sat 07 Jun 2025 07:01:13 +0000
Manifest next update:     Sun 08 Jun 2025 07:01:13 +0000
Files and hashes:         1: JOSO1JmulK_3UGT4DHh2rfgYfwY.roa (hash: EgfSLon34sQaHSqw1cjg97JzDl/x10iZFo3pqDa2iBE=)
                          2: Wc_oEoYU0zJajOwYM9c7tqRpjA4.crl (hash: PPXoznJDLlDYrobAi9+zxZzjOFKrY9B7/4cuxANyz8Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/a2fd11-ff1d-4901-8b5a-cae35a871646/1/Wc_oEoYU0zJajOwYM9c7tqRpjA4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/a2fd11-ff1d-4901-8b5a-cae35a871646/1/Wc_oEoYU0zJajOwYM9c7tqRpjA4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Wc_oEoYU0zJajOwYM9c7tqRpjA4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 07:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:31:8d:cd:07:d3:f0:6e:fe:77:95:b7:43:fb:e4:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59cfe8128614d3325a8cec1833d73bb6a4698c0e
        Validity
            Not Before: Jun  7 07:01:13 2025 GMT
            Not After : Jun  8 07:01:13 2025 GMT
        Subject: CN=24cc125ef05ede0ab8200782f49ae9282670bca2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:fb:f9:70:7e:f4:b1:5d:ed:c6:a9:0a:04:64:
                    75:f9:98:7e:da:c8:c8:2f:bd:e6:0a:83:cb:a2:3a:
                    c5:97:c6:19:75:72:3a:b5:72:40:89:39:e6:9f:4c:
                    b7:7c:75:32:61:e5:18:f3:15:ca:2e:16:5d:00:ee:
                    38:22:65:19:89:23:1a:c9:53:5a:53:07:b8:b7:e8:
                    c6:53:ae:35:7d:91:c8:11:e0:57:35:f0:0b:87:13:
                    a2:fd:05:58:63:ff:a1:e5:41:ee:13:66:7e:17:f5:
                    03:d3:49:17:1d:af:1c:bc:90:90:2e:e5:99:d7:aa:
                    1a:ed:0c:5e:7b:19:ef:80:0d:7d:03:5e:1c:53:22:
                    61:45:c1:7b:65:77:f7:e0:78:9d:60:74:eb:cd:5c:
                    7a:9d:86:00:af:62:94:92:e8:d1:58:ae:b2:6d:18:
                    82:c1:b7:b4:5c:fa:2a:21:61:44:1a:30:88:29:4e:
                    de:5f:d6:71:be:de:f6:5d:88:e6:66:6b:0f:93:96:
                    ae:38:b6:bc:b9:65:d0:e9:77:93:1b:76:aa:77:a2:
                    36:3d:9b:a0:3a:01:5b:c7:89:1f:3b:84:84:f1:04:
                    d4:2a:13:09:4c:c5:d3:80:83:c0:16:71:48:5f:9b:
                    a6:e8:8b:0c:b6:79:eb:c2:46:e5:c0:84:1e:7e:37:
                    7b:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:CC:12:5E:F0:5E:DE:0A:B8:20:07:82:F4:9A:E9:28:26:70:BC:A2
            X509v3 Authority Key Identifier:
                keyid:59:CF:E8:12:86:14:D3:32:5A:8C:EC:18:33:D7:3B:B6:A4:69:8C:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wc_oEoYU0zJajOwYM9c7tqRpjA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a2fd11-ff1d-4901-8b5a-cae35a871646/1/Wc_oEoYU0zJajOwYM9c7tqRpjA4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a2fd11-ff1d-4901-8b5a-cae35a871646/1/Wc_oEoYU0zJajOwYM9c7tqRpjA4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:f2:a4:a0:12:42:e3:e2:98:bb:67:6a:7a:5f:d2:5e:e6:7d:
         1a:71:32:90:74:62:6f:82:5f:9a:76:8c:1a:4f:ec:6b:a6:e9:
         40:c6:38:67:c0:47:d3:26:c6:86:c4:44:de:77:df:20:13:ef:
         d9:85:b6:0d:d0:84:ce:4e:64:58:67:21:00:9f:4f:35:90:e9:
         c6:96:2c:c6:0e:c9:e7:3a:d2:a2:a4:ea:1a:1d:af:57:f9:ad:
         05:67:0c:47:0d:6f:68:d4:36:d8:1f:31:04:0e:0a:2d:c2:39:
         4e:9f:b7:46:33:43:76:da:2f:4b:68:d9:45:a2:62:e6:a5:8a:
         5e:49:55:52:81:01:c6:f3:98:82:16:19:ce:58:21:2b:7d:9b:
         55:71:1f:a2:f6:d8:c6:cc:d5:67:77:08:e6:2d:4c:ea:93:d6:
         89:78:61:9c:b3:35:1b:73:b4:a4:da:9e:03:ed:4b:28:bd:cf:
         61:38:0d:08:c0:79:d6:47:89:a7:2c:2b:10:62:b6:67:93:40:
         c4:fe:ad:a6:e2:0d:39:e8:d3:c7:f2:20:fe:e8:fe:dc:97:fd:
         94:14:a8:fd:8d:00:23:14:b6:ee:69:03:63:45:a5:26:18:2d:
         00:c4:4e:2d:75:f6:d8:1e:74:19:c5:8f:2a:49:db:17:c9:95:
         ca:07:c4:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 12:31:03 2025 by rpki-client