Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/5453db-be8f-40cb-bd09-9ca30f191934/1/wWfFkcwblqHKT5EP4QHvkE2h4hg.mft
File:                     wWfFkcwblqHKT5EP4QHvkE2h4hg.mft (raw, json)
Hash identifier:          jNN9ByHoHryvfmwb1zuLjz4qtw35Vh7oGGM+Yi4/BZI=
Subject key identifier:   53:D7:60:91:85:5B:45:BA:E8:19:83:57:BD:09:7D:88:7B:C5:CE:51
Authority key identifier: C1:67:C5:91:CC:1B:96:A1:CA:4F:91:0F:E1:01:EF:90:4D:A1:E2:18
Certificate issuer:       /CN=c167c591cc1b96a1ca4f910fe101ef904da1e218
Certificate serial:       0198D515827063624B66CD1314AB0FE8DFBA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wWfFkcwblqHKT5EP4QHvkE2h4hg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/5453db-be8f-40cb-bd09-9ca30f191934/1/wWfFkcwblqHKT5EP4QHvkE2h4hg.mft
Manifest number:          1647
Signing time:             Sat 23 Aug 2025 04:00:13 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:13 +0000
Manifest next update:     Sun 24 Aug 2025 04:00:13 +0000
Files and hashes:         1: WpUhoumLDTywn-hlHQU-VDabUzs.roa (hash: 9FT2QaZNDoK6y/oGgYEly9qHrYE52q7Wpp2ENNu/WYM=)
                          2: wWfFkcwblqHKT5EP4QHvkE2h4hg.crl (hash: XIJ+Wpr4RzYgspl8ouvi+4r/BDiI1YmDLApQUaaeDkw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/5453db-be8f-40cb-bd09-9ca30f191934/1/wWfFkcwblqHKT5EP4QHvkE2h4hg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/5453db-be8f-40cb-bd09-9ca30f191934/1/wWfFkcwblqHKT5EP4QHvkE2h4hg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wWfFkcwblqHKT5EP4QHvkE2h4hg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:15:82:70:63:62:4b:66:cd:13:14:ab:0f:e8:df:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c167c591cc1b96a1ca4f910fe101ef904da1e218
        Validity
            Not Before: Aug 23 04:00:13 2025 GMT
            Not After : Aug 24 04:00:13 2025 GMT
        Subject: CN=53d76091855b45bae8198357bd097d887bc5ce51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b9:cd:fa:f1:0b:f1:79:e3:91:f3:44:3c:1e:
                    53:68:3c:5a:a1:51:c6:f3:7d:69:1b:ef:b2:25:6d:
                    1d:73:d5:2d:0d:56:95:04:1c:78:6b:7d:87:55:da:
                    21:af:01:00:49:b7:0e:ff:31:76:03:fd:9b:d2:da:
                    57:ba:8b:e6:6c:0e:35:98:ce:51:50:de:12:1f:00:
                    45:d1:ee:c1:71:ae:83:a7:8f:86:ce:53:e1:9f:6a:
                    ad:6a:ed:2d:33:0a:08:bd:ae:c4:70:a2:fc:68:84:
                    b5:d4:e0:65:e9:2a:94:e8:b4:c2:75:14:2e:bf:53:
                    f8:d1:9e:92:f5:2c:47:78:37:33:68:a9:e1:e1:b6:
                    0c:08:f3:46:fe:f9:04:57:f5:ec:65:f6:16:80:81:
                    ca:03:3b:bf:95:e7:59:61:bd:51:99:de:d6:9a:72:
                    9e:73:5c:c4:eb:a6:8c:23:ae:5c:71:c4:85:30:03:
                    84:3d:94:24:dc:93:96:e6:fb:e7:19:b2:89:b1:9f:
                    c1:9d:d2:e7:d8:39:d1:e3:51:28:92:32:cb:80:38:
                    19:5e:db:f9:ef:b2:39:a6:d1:fd:43:7a:38:71:d4:
                    91:8a:d3:64:12:f7:a0:82:49:98:20:c3:e0:40:14:
                    3f:c4:ad:5e:aa:bb:a4:c3:ad:3c:fc:54:91:fc:42:
                    0d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:D7:60:91:85:5B:45:BA:E8:19:83:57:BD:09:7D:88:7B:C5:CE:51
            X509v3 Authority Key Identifier:
                keyid:C1:67:C5:91:CC:1B:96:A1:CA:4F:91:0F:E1:01:EF:90:4D:A1:E2:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wWfFkcwblqHKT5EP4QHvkE2h4hg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/5453db-be8f-40cb-bd09-9ca30f191934/1/wWfFkcwblqHKT5EP4QHvkE2h4hg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/5453db-be8f-40cb-bd09-9ca30f191934/1/wWfFkcwblqHKT5EP4QHvkE2h4hg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:d3:19:7a:dc:a8:70:7b:54:18:6e:45:bb:35:5a:28:81:2a:
         60:f9:3d:06:59:a8:bc:a3:d9:b6:85:49:9a:82:87:79:5f:d6:
         df:42:51:e5:29:5e:c5:9f:be:9f:8f:7a:1b:b3:bd:55:23:b2:
         b0:c0:1b:96:d2:59:ed:77:5c:dc:dc:7b:d8:db:54:38:c9:d5:
         83:ac:a3:4f:e3:63:10:7b:1c:97:ee:07:1e:6c:a9:b3:1f:bb:
         cd:27:40:79:5e:a5:f2:44:4e:64:82:fb:ce:d0:66:08:24:ee:
         0e:40:a4:9d:04:e1:85:49:5e:24:42:0e:5b:79:18:72:7a:b4:
         6d:ae:e5:cf:5f:b3:06:69:9d:54:ef:33:69:36:56:6c:72:66:
         b0:d6:34:e1:9e:d2:79:b1:d0:bc:d0:06:26:a4:60:48:61:cb:
         f3:50:42:73:e4:b5:ce:97:53:05:68:ad:1d:5e:1a:3a:51:9f:
         29:74:3c:b2:e4:5b:55:90:19:d6:41:c7:a6:4a:86:39:ea:85:
         77:82:24:2b:f7:22:5c:17:db:92:ab:3c:73:88:0d:28:8c:74:
         84:d3:a6:1d:e6:4d:02:1d:8b:84:ea:9a:f3:1c:72:cb:bc:38:
         fe:cb:8d:99:d6:56:17:0b:44:f1:1a:52:66:be:f4:ae:bc:c4:
         ef:26:11:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:16:03 2025 by rpki-client