Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/657197-c628-48b1-956d-effe955a5d64/1/wei4jx4wVzoOIOR51boAtOkYJ7Y.mft
File:                     wei4jx4wVzoOIOR51boAtOkYJ7Y.mft (raw, json)
Hash identifier:          fMmffgDoPQOyVhMYJNGoY7FmGOaWag3sZaVRa+vy6yM=
Subject key identifier:   71:11:5E:7C:2A:52:B9:36:A0:3B:2D:DE:4C:5F:44:A5:CA:06:C4:49
Authority key identifier: C1:E8:B8:8F:1E:30:57:3A:0E:20:E4:79:D5:BA:00:B4:E9:18:27:B6
Certificate issuer:       /CN=c1e8b88f1e30573a0e20e479d5ba00b4e91827b6
Certificate serial:       0198D7E17744687AAF34C24FA90123412617
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wei4jx4wVzoOIOR51boAtOkYJ7Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/657197-c628-48b1-956d-effe955a5d64/1/wei4jx4wVzoOIOR51boAtOkYJ7Y.mft
Manifest number:          164A
Signing time:             Sat 23 Aug 2025 17:02:14 +0000
Manifest this update:     Sat 23 Aug 2025 17:02:14 +0000
Manifest next update:     Sun 24 Aug 2025 17:02:14 +0000
Files and hashes:         1: X1Gl7pI0OMRR6ajfA3cvno5vstw.roa (hash: zVVJwLgXELHLdhQ+YSrbw1EHdsK7mWsiuWthVrRspkM=)
                          2: wei4jx4wVzoOIOR51boAtOkYJ7Y.crl (hash: zs5Zs9SqQzjGQtxb4yZoLcWYxxoyY61Z9ebqjWnf6mQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/657197-c628-48b1-956d-effe955a5d64/1/wei4jx4wVzoOIOR51boAtOkYJ7Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/657197-c628-48b1-956d-effe955a5d64/1/wei4jx4wVzoOIOR51boAtOkYJ7Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wei4jx4wVzoOIOR51boAtOkYJ7Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:e1:77:44:68:7a:af:34:c2:4f:a9:01:23:41:26:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1e8b88f1e30573a0e20e479d5ba00b4e91827b6
        Validity
            Not Before: Aug 23 17:02:14 2025 GMT
            Not After : Aug 24 17:02:14 2025 GMT
        Subject: CN=71115e7c2a52b936a03b2dde4c5f44a5ca06c449
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:81:10:9d:c6:fb:67:f2:d7:ea:1a:d0:f5:67:
                    0c:b9:3e:98:14:5c:e2:9f:20:fc:f7:85:1c:9a:c6:
                    18:fe:2e:de:a0:f6:53:1e:08:23:c8:51:88:f3:03:
                    3f:44:14:2b:69:a3:ba:f3:77:ec:3f:39:7d:ba:1b:
                    3d:57:3d:48:9a:f7:2b:3b:c1:c1:65:88:b5:10:c3:
                    8c:fa:40:c6:ed:c3:2c:a7:4d:47:5f:1b:92:d6:b2:
                    8f:95:47:3c:54:3b:18:96:d6:03:ff:96:09:b6:b0:
                    c4:c9:dd:aa:c9:a3:7a:96:74:c1:02:ec:aa:56:ed:
                    3a:ae:46:99:54:73:21:29:8e:da:58:d7:1b:fb:8f:
                    23:b2:ed:5d:44:f5:3c:13:81:b1:a0:16:56:6c:0b:
                    6b:d8:ac:8f:b2:78:99:5d:6f:e5:45:89:10:5f:2b:
                    f3:f4:e1:9e:4b:5a:31:86:77:dd:0e:90:37:ef:3f:
                    c1:fd:82:9d:94:48:37:53:3e:a5:a8:09:33:98:66:
                    14:15:d9:07:dc:66:cd:33:4c:41:d2:c4:35:59:93:
                    53:ab:4b:39:49:80:59:9c:7d:80:e0:97:99:03:86:
                    39:68:72:13:ed:03:a7:1c:4e:e9:90:d9:23:ad:dd:
                    1e:56:f6:76:59:c6:53:ef:b3:bf:67:af:be:b9:11:
                    28:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:11:5E:7C:2A:52:B9:36:A0:3B:2D:DE:4C:5F:44:A5:CA:06:C4:49
            X509v3 Authority Key Identifier:
                keyid:C1:E8:B8:8F:1E:30:57:3A:0E:20:E4:79:D5:BA:00:B4:E9:18:27:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wei4jx4wVzoOIOR51boAtOkYJ7Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/657197-c628-48b1-956d-effe955a5d64/1/wei4jx4wVzoOIOR51boAtOkYJ7Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/657197-c628-48b1-956d-effe955a5d64/1/wei4jx4wVzoOIOR51boAtOkYJ7Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:a1:bf:ab:5a:d0:75:2d:3a:f3:44:63:a7:0a:34:16:a6:ec:
         bd:f0:41:60:5f:8e:1b:ca:88:62:44:00:0a:a8:a0:24:4a:95:
         b9:6f:ea:5a:fe:39:d3:b5:d9:ef:94:f3:0d:25:db:60:ac:fe:
         39:bf:9b:4f:fe:e8:72:8b:2d:76:15:6d:4a:fc:ad:37:8f:c7:
         2f:3e:70:2d:36:7b:6c:a4:5a:26:57:9d:cb:68:d8:28:ca:dc:
         9a:92:1c:6f:11:b1:ca:d6:68:e9:41:39:80:02:65:45:1a:7e:
         22:d6:9d:84:fd:f4:44:3a:a6:74:5c:ab:46:48:23:40:71:83:
         d9:d5:23:96:6a:8e:14:66:a9:11:27:79:05:4e:8a:22:03:8a:
         80:31:b0:b9:46:85:b3:e3:e4:30:64:4e:46:61:25:b9:40:a4:
         3d:0d:1b:76:dc:aa:9f:2f:be:e7:fc:21:26:8e:51:8b:71:20:
         2f:80:b1:d5:6b:74:40:92:0e:09:00:ce:c6:04:60:b3:a9:03:
         d6:88:85:02:12:a5:ce:f8:ca:18:20:0f:7f:78:00:c8:22:4e:
         f0:78:81:ef:02:2e:f8:e8:d3:fa:12:3a:d7:ef:85:a2:81:8c:
         3a:45:75:e6:9b:c7:63:af:d5:a3:20:64:1f:cb:a4:a0:3d:16:
         a1:0a:ce:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:06:45 2025 by rpki-client