Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/02966a-a7ae-4054-ab34-f7e73ddef4e2/1/wDleyIIdj4GJQTOSvYdte9eVwWw.mft
File:                     wDleyIIdj4GJQTOSvYdte9eVwWw.mft (raw, json)
Hash identifier:          BT5oiU6xZmBbJIjb4wrpJ0HM9VjsJfIgrq/XOSZbfyg=
Subject key identifier:   1E:E3:EA:54:21:3D:25:A8:1C:31:0C:24:4C:BB:FD:42:7D:0F:F8:28
Authority key identifier: C0:39:5E:C8:82:1D:8F:81:89:41:33:92:BD:87:6D:7B:D7:95:C1:6C
Certificate issuer:       /CN=c0395ec8821d8f8189413392bd876d7bd795c16c
Certificate serial:       0198D58377B5C8BCA54E7F36F77C09FDB2F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wDleyIIdj4GJQTOSvYdte9eVwWw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/02966a-a7ae-4054-ab34-f7e73ddef4e2/1/wDleyIIdj4GJQTOSvYdte9eVwWw.mft
Manifest number:          164B
Signing time:             Sat 23 Aug 2025 06:00:19 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:19 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:19 +0000
Files and hashes:         1: P3YoBo67vazrugYfMD3lybaWtAo.roa (hash: /AdjcQW3/wvGSZ4+BEuR5TlveAfDafAH3hNdQ89CSF4=)
                          2: wDleyIIdj4GJQTOSvYdte9eVwWw.crl (hash: n9+Ab9DyxaOSn68plCFJJc6aVNtT2j9HPrjv0xFj2FE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/02966a-a7ae-4054-ab34-f7e73ddef4e2/1/wDleyIIdj4GJQTOSvYdte9eVwWw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/02966a-a7ae-4054-ab34-f7e73ddef4e2/1/wDleyIIdj4GJQTOSvYdte9eVwWw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wDleyIIdj4GJQTOSvYdte9eVwWw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:77:b5:c8:bc:a5:4e:7f:36:f7:7c:09:fd:b2:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0395ec8821d8f8189413392bd876d7bd795c16c
        Validity
            Not Before: Aug 23 06:00:19 2025 GMT
            Not After : Aug 24 06:00:19 2025 GMT
        Subject: CN=1ee3ea54213d25a81c310c244cbbfd427d0ff828
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:13:7d:07:63:08:6d:dc:81:f5:d8:ff:4b:c1:
                    7b:80:9d:83:86:98:80:38:8a:53:c5:74:61:97:90:
                    84:05:0e:c6:07:59:91:f1:09:78:45:a4:0b:fe:ea:
                    ac:c8:a3:dc:90:30:98:59:1d:d3:8f:7f:90:4b:86:
                    a2:cb:f7:1d:22:76:50:a8:0c:14:3b:27:27:cc:62:
                    ef:b2:e2:66:9b:8f:09:15:5b:05:3a:d7:76:c3:be:
                    9b:92:7a:93:16:4b:43:58:4d:e1:5b:a9:3c:f0:fe:
                    8e:9c:45:42:99:07:44:df:7d:df:ee:cb:86:bc:30:
                    c5:63:1f:a2:25:71:8b:a2:37:c0:00:6b:63:f0:5b:
                    0e:09:7b:f3:d7:9d:9b:bc:1e:12:7d:d3:1c:17:0a:
                    36:2c:28:5e:7f:72:4e:a7:d0:59:78:81:9b:d5:7d:
                    61:f8:68:b5:5e:88:f8:95:2a:46:b5:fa:6a:eb:f0:
                    a4:92:a2:31:58:59:2f:a0:2d:83:eb:1a:7e:e6:b4:
                    15:51:b7:c5:70:32:b9:9f:64:38:f0:1e:e0:15:e0:
                    fa:36:ad:f2:60:b8:c5:01:fc:b9:80:49:c6:95:ac:
                    e7:d3:5c:ab:c5:ce:d6:f3:14:76:79:4a:2f:be:08:
                    2a:02:7a:b7:b9:87:bb:69:8f:bf:69:1f:b7:49:83:
                    e8:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:E3:EA:54:21:3D:25:A8:1C:31:0C:24:4C:BB:FD:42:7D:0F:F8:28
            X509v3 Authority Key Identifier:
                keyid:C0:39:5E:C8:82:1D:8F:81:89:41:33:92:BD:87:6D:7B:D7:95:C1:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wDleyIIdj4GJQTOSvYdte9eVwWw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/02966a-a7ae-4054-ab34-f7e73ddef4e2/1/wDleyIIdj4GJQTOSvYdte9eVwWw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/02966a-a7ae-4054-ab34-f7e73ddef4e2/1/wDleyIIdj4GJQTOSvYdte9eVwWw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:84:a5:bc:2a:8c:85:22:5a:47:2c:19:e3:32:2f:6e:ac:64:
         44:f5:d1:06:94:0a:5c:3e:e1:ab:33:31:42:fa:28:2e:a6:2b:
         24:fc:24:58:e4:3f:02:66:7d:b5:7a:1b:b1:51:f7:ad:23:25:
         3f:41:05:a1:f6:88:d7:47:83:4a:f0:85:98:c6:89:3b:e0:f1:
         e8:3c:c8:99:9c:27:5e:74:0a:bb:fc:f1:a1:92:25:81:8a:11:
         c1:7e:3d:c9:d5:ca:a9:62:02:df:fd:84:b1:57:38:db:40:5f:
         13:c2:2f:b2:21:ce:b6:bc:52:d3:20:00:fa:05:f8:8d:7e:0f:
         60:82:5d:70:21:bb:3c:59:1c:58:ac:b9:a5:07:5f:09:bc:82:
         e3:95:7f:23:98:ed:98:7c:fe:e0:bf:59:58:19:54:00:1b:30:
         a7:ac:7e:07:fd:59:3d:96:fe:7e:60:5f:1d:69:7b:aa:bf:46:
         77:25:08:02:06:29:9b:cb:da:8f:c8:6e:d7:a3:49:e1:85:64:
         7d:37:22:12:96:ca:05:01:4a:40:be:c1:65:23:e1:40:41:14:
         91:30:e8:98:1b:00:34:2a:a3:8c:7d:74:41:ad:1c:82:2f:62:
         15:38:b3:51:ae:15:d6:68:38:d5:cf:cc:ca:8c:f0:49:8a:d1:
         68:d9:e3:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:41:56 2025 by rpki-client