Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/27e870-3e8d-42b0-b30c-bbcdcda61612/1/we6wu7y21HqENM9BEVHy4kh4CBU.mft
File:                     we6wu7y21HqENM9BEVHy4kh4CBU.mft (raw, json)
Hash identifier:          GnX9ays8emMD6Ht5RZI5JAT+cUeXkWQ4Fe+lFNy9U5w=
Subject key identifier:   A8:BE:FA:C4:BE:83:87:A9:1E:C5:F5:3A:B6:BA:E6:FA:48:6D:94:21
Authority key identifier: C1:EE:B0:BB:BC:B6:D4:7A:84:34:CF:41:11:51:F2:E2:48:78:08:15
Certificate issuer:       /CN=c1eeb0bbbcb6d47a8434cf411151f2e248780815
Certificate serial:       0198D473560AADD56907050F8DF35879A951
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/we6wu7y21HqENM9BEVHy4kh4CBU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/27e870-3e8d-42b0-b30c-bbcdcda61612/1/we6wu7y21HqENM9BEVHy4kh4CBU.mft
Manifest number:          0229
Signing time:             Sat 23 Aug 2025 01:03:05 +0000
Manifest this update:     Sat 23 Aug 2025 01:03:05 +0000
Manifest next update:     Sun 24 Aug 2025 01:03:05 +0000
Files and hashes:         1: iCajC07N1wXhLZhUBQa5qaDtpkc.roa (hash: TBjsHC2hLzzwIzsyf+O4ISG2vQbLL5AsHhFZzfGik5g=)
                          2: we6wu7y21HqENM9BEVHy4kh4CBU.crl (hash: 7evHVbTYT0wPvHHM3m/eU+CjIgIMY50ggHIaF5ih7/Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/27e870-3e8d-42b0-b30c-bbcdcda61612/1/we6wu7y21HqENM9BEVHy4kh4CBU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/27e870-3e8d-42b0-b30c-bbcdcda61612/1/we6wu7y21HqENM9BEVHy4kh4CBU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/we6wu7y21HqENM9BEVHy4kh4CBU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:73:56:0a:ad:d5:69:07:05:0f:8d:f3:58:79:a9:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1eeb0bbbcb6d47a8434cf411151f2e248780815
        Validity
            Not Before: Aug 23 01:03:05 2025 GMT
            Not After : Aug 24 01:03:05 2025 GMT
        Subject: CN=a8befac4be8387a91ec5f53ab6bae6fa486d9421
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:dc:fa:f6:b1:11:0b:9e:c9:e9:25:21:6c:06:
                    00:0d:ce:37:88:7b:55:63:f7:f5:5f:48:a7:a7:c2:
                    3a:8c:f7:62:e9:c7:2d:b3:1e:f4:c5:2c:37:7a:bb:
                    df:5b:5e:82:c9:23:d8:0b:43:76:80:06:e4:42:25:
                    98:a5:4c:5b:35:43:ae:ae:ec:07:b4:bb:ec:04:75:
                    7b:7d:a4:d4:d2:51:13:b2:1a:93:fd:ae:36:7d:12:
                    c1:76:40:66:da:7a:3f:e1:4a:9e:aa:9d:36:2d:25:
                    28:63:a3:53:85:e9:94:92:1c:84:51:85:e8:fb:c0:
                    2a:38:79:36:bf:4f:c2:2a:7a:83:3b:a0:f3:59:1d:
                    d0:c0:a7:ca:5f:93:4a:ac:d4:98:a6:f3:cf:56:f4:
                    38:fb:03:37:1f:fb:b0:e5:65:16:2a:39:0b:f1:54:
                    bf:d3:81:57:52:d3:c6:90:c9:29:48:87:01:bc:d4:
                    99:98:e1:f4:5a:a2:f6:df:e7:49:a4:f9:75:af:5a:
                    e4:63:f1:e4:b1:47:03:15:7d:aa:66:98:be:3d:b8:
                    dd:78:b0:2e:20:2b:bf:b5:3f:6e:5d:cc:39:7d:fc:
                    6b:26:e4:88:6d:a8:e2:33:f2:87:20:79:ba:7a:49:
                    b7:08:df:18:79:dc:b2:ae:40:4b:d9:57:c4:f5:d5:
                    6f:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:BE:FA:C4:BE:83:87:A9:1E:C5:F5:3A:B6:BA:E6:FA:48:6D:94:21
            X509v3 Authority Key Identifier:
                keyid:C1:EE:B0:BB:BC:B6:D4:7A:84:34:CF:41:11:51:F2:E2:48:78:08:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/we6wu7y21HqENM9BEVHy4kh4CBU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/27e870-3e8d-42b0-b30c-bbcdcda61612/1/we6wu7y21HqENM9BEVHy4kh4CBU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/27e870-3e8d-42b0-b30c-bbcdcda61612/1/we6wu7y21HqENM9BEVHy4kh4CBU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:3e:f8:65:73:f6:a6:9f:d1:73:a4:40:66:93:83:e1:90:16:
         84:ef:80:7c:1d:3e:b5:02:d5:9a:0b:6a:e2:28:10:19:5c:11:
         2c:31:92:6c:15:26:0d:18:1c:49:df:6c:59:8c:3d:fd:17:9a:
         14:0d:19:43:df:f9:a6:06:07:70:88:08:0e:1d:33:8c:61:ba:
         80:49:51:87:73:21:25:45:36:ec:b0:c1:62:8d:9a:37:b0:ef:
         7b:36:eb:d3:89:d6:08:6f:f5:6d:e7:f3:a5:53:d5:e7:6b:6f:
         fd:84:71:b6:43:2b:0f:d8:19:e5:2b:d6:38:a6:13:cf:c7:d2:
         aa:84:a6:9b:67:df:16:f1:25:8c:9c:c2:f6:50:9c:84:59:18:
         58:f3:2e:a1:b9:6b:e3:c0:28:e6:24:40:ce:99:85:d2:90:9d:
         72:3d:01:fd:e5:b3:be:97:de:16:67:2f:67:f8:de:76:93:5b:
         ea:d7:b0:4a:9c:ab:88:64:b2:c4:89:15:e7:25:d9:d6:23:2a:
         ec:d6:c6:f1:84:0c:8d:8d:7b:a4:b4:d7:b1:ee:14:cc:9b:14:
         12:10:9f:c1:22:82:49:26:7b:eb:81:5d:5c:df:af:51:c0:37:
         c7:c4:9c:1a:9a:93:ae:14:30:9c:81:ad:94:87:83:74:b5:2f:
         0e:f5:16:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:19:54 2025 by rpki-client