Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/a50aa4-e092-4d8c-9d83-0e0df68cde03/1/WBTUHPqUPaGfJ3ig03PdKndB0G0.mft
File:                     WBTUHPqUPaGfJ3ig03PdKndB0G0.mft (raw, json)
Hash identifier:          nR1BcKesg8pqudefTjmx6MtzJ5ERX1lAaLdxrQEfTNk=
Subject key identifier:   49:A8:5E:C4:DC:AB:00:1F:91:F6:A9:86:24:A6:DB:A2:E3:42:58:17
Authority key identifier: 58:14:D4:1C:FA:94:3D:A1:9F:27:78:A0:D3:73:DD:2A:77:41:D0:6D
Certificate issuer:       /CN=5814d41cfa943da19f2778a0d373dd2a7741d06d
Certificate serial:       0197B77CD2D3567DA00285D3EDAD56E85BD7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WBTUHPqUPaGfJ3ig03PdKndB0G0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/a50aa4-e092-4d8c-9d83-0e0df68cde03/1/WBTUHPqUPaGfJ3ig03PdKndB0G0.mft
Manifest number:          0115
Signing time:             Sat 28 Jun 2025 17:01:40 +0000
Manifest this update:     Sat 28 Jun 2025 17:01:40 +0000
Manifest next update:     Sun 29 Jun 2025 17:01:40 +0000
Files and hashes:         1: WBTUHPqUPaGfJ3ig03PdKndB0G0.crl (hash: eS2RJE4lD/mB808hxiVQKTAz75aLYjgCEwCLLNlPXyA=)
                          2: YyT2XNVLd1WyCxtwc8XjqhwP3s4.roa (hash: vmLIxrmSzRhBjR//CR1+0NyG35ecgKl2ei7ZqRd06oY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/a50aa4-e092-4d8c-9d83-0e0df68cde03/1/WBTUHPqUPaGfJ3ig03PdKndB0G0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/a50aa4-e092-4d8c-9d83-0e0df68cde03/1/WBTUHPqUPaGfJ3ig03PdKndB0G0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WBTUHPqUPaGfJ3ig03PdKndB0G0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:7c:d2:d3:56:7d:a0:02:85:d3:ed:ad:56:e8:5b:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5814d41cfa943da19f2778a0d373dd2a7741d06d
        Validity
            Not Before: Jun 28 17:01:40 2025 GMT
            Not After : Jun 29 17:01:40 2025 GMT
        Subject: CN=49a85ec4dcab001f91f6a98624a6dba2e3425817
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:43:92:b9:62:8a:e6:10:5f:c6:fc:47:6c:9f:
                    c8:f4:04:44:5b:43:06:de:9f:40:27:63:ee:b2:ad:
                    b1:1e:7f:bf:d0:3b:87:e5:c4:7b:22:6b:80:f6:84:
                    d4:74:bc:31:46:a2:dd:32:d8:38:44:60:c2:19:c2:
                    38:ce:cc:79:ca:d1:21:4f:74:2d:8c:1c:d9:d1:10:
                    87:db:cf:b2:41:24:67:97:32:c6:d8:33:e7:55:e4:
                    05:40:47:b9:2f:e1:0e:77:be:b3:fb:b1:15:ea:24:
                    79:88:ec:b2:4e:0c:fa:f2:a9:07:88:72:66:ec:af:
                    05:56:b9:db:87:97:ad:54:4a:b5:89:87:a2:bc:60:
                    be:d0:69:10:e7:37:b8:8b:1e:c4:9a:30:2c:88:05:
                    55:21:d7:e2:d4:f7:13:e0:fb:dd:29:f0:f1:78:d1:
                    c3:cf:a9:a3:c7:fb:fc:41:71:0c:0c:bd:f2:24:e7:
                    78:51:35:31:6f:84:be:e6:b2:65:a9:17:21:f2:24:
                    93:b9:26:12:88:f3:35:62:61:35:a9:11:94:d7:57:
                    36:a2:50:50:f1:9f:43:1a:e1:5a:67:bb:95:e3:26:
                    c8:8a:61:0c:a2:e3:b2:bd:2b:3f:9b:1c:b3:68:de:
                    fe:49:60:f2:5b:b8:30:47:31:41:49:53:3b:93:25:
                    8b:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:A8:5E:C4:DC:AB:00:1F:91:F6:A9:86:24:A6:DB:A2:E3:42:58:17
            X509v3 Authority Key Identifier:
                keyid:58:14:D4:1C:FA:94:3D:A1:9F:27:78:A0:D3:73:DD:2A:77:41:D0:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WBTUHPqUPaGfJ3ig03PdKndB0G0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/a50aa4-e092-4d8c-9d83-0e0df68cde03/1/WBTUHPqUPaGfJ3ig03PdKndB0G0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/a50aa4-e092-4d8c-9d83-0e0df68cde03/1/WBTUHPqUPaGfJ3ig03PdKndB0G0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:9c:f4:61:d0:6d:41:7b:12:e8:90:e0:e6:1c:4c:ba:29:00:
         3a:2b:fb:5a:44:92:ba:a1:87:ab:a6:5b:72:ec:5d:98:b9:57:
         0f:9a:4a:32:2c:9e:e1:01:62:d6:bb:99:ce:57:ef:f6:e6:f8:
         4f:9b:18:77:ba:2d:10:64:af:71:8b:c8:df:fc:ef:a4:9a:56:
         80:56:4d:a6:59:47:1f:ff:fc:26:3f:c1:56:02:5a:fe:b6:ec:
         25:fd:cd:78:65:d1:19:a2:9e:53:c4:20:78:ee:e8:1c:ba:f2:
         1f:6b:2d:36:fb:57:1a:64:84:03:2a:01:92:b5:30:35:0c:7f:
         48:4e:37:2f:4c:d7:ab:c7:35:69:12:52:c2:e9:13:6c:cf:e0:
         92:e2:1e:dd:d7:f0:62:f5:bd:82:e3:96:a2:2d:5b:bf:9d:72:
         00:6f:71:f9:76:a2:7d:29:d6:6f:ee:b6:f1:0b:cc:5e:f7:c4:
         16:c6:e2:3b:36:76:e4:bb:b8:ac:a9:40:14:ad:de:af:3a:23:
         0c:6f:b7:c1:9d:9b:69:a5:73:bd:fd:09:57:69:6b:14:54:7d:
         7f:d4:6f:e9:8e:00:c7:a9:28:26:30:c8:8b:ac:3f:38:bf:ae:
         77:e9:e7:cd:aa:35:8d:4e:08:f0:3b:39:26:77:3c:6a:f4:e8:
         27:eb:3b:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:13:40 2025 by rpki-client