Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/2eed24-0dff-4400-a57c-459ddc631bcc/1/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.mft
File:                     WgLKgbnwqXE7CZaH3IFVHEXj-Pw.mft (raw, json)
Hash identifier:          No9ET9/2v9asKu+GYlKAwNPPnun7Q/LAjBTMXfplcNg=
Subject key identifier:   82:9D:72:C1:1A:F3:96:EF:AF:7A:82:B1:68:CB:99:72:3A:91:6C:5E
Authority key identifier: 5A:02:CA:81:B9:F0:A9:71:3B:09:96:87:DC:81:55:1C:45:E3:F8:FC
Certificate issuer:       /CN=5a02ca81b9f0a9713b099687dc81551c45e3f8fc
Certificate serial:       0198D54E5ED44B454AE9CAD21E5DBD1F1679
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/2eed24-0dff-4400-a57c-459ddc631bcc/1/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.mft
Manifest number:          091A
Signing time:             Sat 23 Aug 2025 05:02:19 +0000
Manifest this update:     Sat 23 Aug 2025 05:02:19 +0000
Manifest next update:     Sun 24 Aug 2025 05:02:19 +0000
Files and hashes:         1: WgLKgbnwqXE7CZaH3IFVHEXj-Pw.crl (hash: ONkj7LzUnGQWTW6qwv5e6ftDApNqj8O4ianwj6rUOwI=)
                          2: fPdaDi8Q6kMa2if35eGudsLEQ8o.roa (hash: vc9oGx1t9ju95rv1gQobwnbtC4KxraULnnXmJJ4pSRU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/2eed24-0dff-4400-a57c-459ddc631bcc/1/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/2eed24-0dff-4400-a57c-459ddc631bcc/1/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4e:5e:d4:4b:45:4a:e9:ca:d2:1e:5d:bd:1f:16:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a02ca81b9f0a9713b099687dc81551c45e3f8fc
        Validity
            Not Before: Aug 23 05:02:19 2025 GMT
            Not After : Aug 24 05:02:19 2025 GMT
        Subject: CN=829d72c11af396efaf7a82b168cb99723a916c5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:3d:b3:f0:32:65:85:c6:a2:18:d2:e9:5e:c0:
                    54:6d:01:35:0f:d0:a8:1a:99:15:1b:5b:74:09:d8:
                    64:18:6c:2f:0f:5d:d3:5d:ff:6a:f3:24:76:64:33:
                    69:30:ac:9f:7b:64:35:99:97:74:a6:34:50:ca:ec:
                    e9:0a:d2:3b:5c:b2:5c:b7:fb:dd:01:cc:d7:2f:a3:
                    7f:5a:8d:01:28:7f:d2:b8:6a:a5:71:d4:55:a3:b1:
                    b7:87:6c:62:a6:ac:2c:fc:f8:85:be:9a:f8:e0:2c:
                    32:d1:ef:8d:d5:bc:ad:4b:12:b1:32:7b:d0:69:f3:
                    f1:3b:3f:35:63:5c:21:a2:99:fc:6e:7d:33:db:35:
                    79:96:4a:3b:c3:9d:96:d9:3c:aa:43:a5:eb:de:13:
                    05:88:4c:2f:84:5f:89:ea:be:04:7e:fd:01:c6:2f:
                    80:1b:08:ab:e6:8a:e0:b6:60:b7:bc:29:56:51:bb:
                    77:a7:c6:f0:f0:a4:20:eb:07:8a:a4:88:aa:b2:52:
                    14:7c:21:6e:a4:1f:c5:d3:9b:da:6d:84:5e:31:18:
                    b0:82:00:28:e4:99:fe:d0:71:db:53:2e:8c:9f:ac:
                    66:e3:7a:de:dc:16:fa:93:8f:de:43:68:c1:ef:e5:
                    23:20:73:f7:23:05:4d:f5:d0:c3:c6:27:31:25:7a:
                    79:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:9D:72:C1:1A:F3:96:EF:AF:7A:82:B1:68:CB:99:72:3A:91:6C:5E
            X509v3 Authority Key Identifier:
                keyid:5A:02:CA:81:B9:F0:A9:71:3B:09:96:87:DC:81:55:1C:45:E3:F8:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/2eed24-0dff-4400-a57c-459ddc631bcc/1/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/2eed24-0dff-4400-a57c-459ddc631bcc/1/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:c9:a8:36:a7:26:be:3e:ce:47:02:35:03:d5:5a:fa:85:6d:
         1c:de:a4:4c:57:84:58:3c:e4:01:79:79:bb:ab:2c:03:bb:85:
         d1:c7:d8:ac:30:38:7c:e4:f1:20:5e:ce:1b:28:6a:2a:58:95:
         f6:80:a9:a2:4c:e0:58:bc:18:0c:55:0f:99:a9:a7:39:d5:14:
         a3:14:8a:0e:25:9c:b4:1d:0b:41:1b:07:23:5e:57:b3:fc:af:
         f9:8f:9c:5f:e1:fc:92:eb:d5:9e:28:90:a8:88:08:96:8d:be:
         08:68:0e:91:05:49:65:5f:fe:82:22:ed:65:3a:0e:ba:4e:2a:
         da:64:fb:92:3a:5a:ab:01:ea:9f:c4:0b:6e:10:c3:88:e6:1b:
         70:13:0c:c0:61:15:e8:f5:28:33:c3:dc:cf:80:cc:1d:e3:b7:
         a6:db:1c:a9:ff:20:cf:1e:d2:4b:cf:c9:31:a0:f1:f6:ee:9e:
         bf:ee:5f:65:c4:06:e3:68:84:33:8b:94:18:58:29:a5:6e:86:
         4e:0f:98:c2:43:16:e2:e7:b0:16:3e:ec:de:df:bf:d2:7c:0e:
         1a:bb:05:91:c8:3c:4a:f0:ef:a0:18:ef:4d:ae:28:f0:06:bf:
         c4:ee:d8:fc:b9:ef:81:22:0c:e3:e7:54:3e:4d:32:a8:0e:6a:
         ee:f8:6b:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTl7US0VK6crSHl29HxZ5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhMDJjYTgxYjlmMGE5NzEzYjA5OTY4N2RjODE1NTFjNDVl
M2Y4ZmMwHhcNMjUwODIzMDUwMjE5WhcNMjUwODI0MDUwMjE5WjAzMTEwLwYDVQQD
Eyg4MjlkNzJjMTFhZjM5NmVmYWY3YTgyYjE2OGNiOTk3MjNhOTE2YzVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4T2z8DJlhcaiGNLpXsBUbQE1D9Co
GpkVG1t0CdhkGGwvD13TXf9q8yR2ZDNpMKyfe2Q1mZd0pjRQyuzpCtI7XLJct/vd
AczXL6N/Wo0BKH/SuGqlcdRVo7G3h2xipqws/PiFvpr44Cwy0e+N1bytSxKxMnvQ
afPxOz81Y1whopn8bn0z2zV5lko7w52W2TyqQ6Xr3hMFiEwvhF+J6r4Efv0Bxi+A
Gwir5orgtmC3vClWUbt3p8bw8KQg6weKpIiqslIUfCFupB/F05vabYReMRiwggAo
5Jn+0HHbUy6Mn6xm43re3Bb6k4/eQ2jB7+UjIHP3IwVN9dDDxicxJXp5LwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIKdcsEa85bvr3qCsWjLmXI6kWxeMB8GA1UdIwQY
MBaAFFoCyoG58KlxOwmWh9yBVRxF4/j8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2dMS2dibndxWEU3Q1phSDNJRlZIRVhqLVB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8yZWVkMjQtMGRmZi00NDAwLWE1N2Mt
NDU5ZGRjNjMxYmNjLzEvV2dMS2dibndxWEU3Q1phSDNJRlZIRVhqLVB3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni8yZWVkMjQtMGRmZi00NDAwLWE1N2MtNDU5ZGRjNjMxYmNj
LzEvV2dMS2dibndxWEU3Q1phSDNJRlZIRVhqLVB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARsmoNqcm
vj7ORwI1A9Va+oVtHN6kTFeEWDzkAXl5u6ssA7uF0cfYrDA4fOTxIF7OGyhqKliV
9oCpokzgWLwYDFUPmamnOdUUoxSKDiWctB0LQRsHI15Xs/yv+Y+cX+H8kuvVniiQ
qIgIlo2+CGgOkQVJZV/+giLtZToOuk4q2mT7kjpaqwHqn8QLbhDDiOYbcBMMwGEV
6PUoM8Pcz4DMHeO3ptscqf8gzx7SS8/JMaDx9u6ev+5fZcQG42iEM4uUGFgppW6G
Tg+YwkMW4uewFj7s3t+/0nwOGrsFkcg8SvDvoBjvTa4o8Aa/xO7Y/LnvgSIM4+dU
Pk0yqA5q7vhrjw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:27:01 2025 by rpki-client