Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/179bd8-fc68-4f76-86ff-68f316607376/1/Wjsd3asz5FUGrZdwQJJHIEF9Vog.mft
File:                     Wjsd3asz5FUGrZdwQJJHIEF9Vog.mft (raw, json)
Hash identifier:          4ZGqSGglCleeJVha88akycGaLXv92ecI5wHMtNEaXf4=
Subject key identifier:   72:95:72:B3:60:D4:C0:6E:FB:AE:70:59:BD:5F:F7:8C:BC:E2:ED:AA
Authority key identifier: 5A:3B:1D:DD:AB:33:E4:55:06:AD:97:70:40:92:47:20:41:7D:56:88
Certificate issuer:       /CN=5a3b1dddab33e45506ad977040924720417d5688
Certificate serial:       0198D5BBE9322EF0B7199A808DACD7907EB7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wjsd3asz5FUGrZdwQJJHIEF9Vog.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/179bd8-fc68-4f76-86ff-68f316607376/1/Wjsd3asz5FUGrZdwQJJHIEF9Vog.mft
Manifest number:          0B92
Signing time:             Sat 23 Aug 2025 07:01:58 +0000
Manifest this update:     Sat 23 Aug 2025 07:01:58 +0000
Manifest next update:     Sun 24 Aug 2025 07:01:58 +0000
Files and hashes:         1: Wjsd3asz5FUGrZdwQJJHIEF9Vog.crl (hash: do/DC78e+N2UhGl8HqJlVngDBhkzKzFQhT0oO4zkR7U=)
                          2: y0QD6cVeHITeOOUrewdmduPjNyw.roa (hash: d578B+uX2xF03DWPlSDJU4G4ivlMPauq0XylCe7obdU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/179bd8-fc68-4f76-86ff-68f316607376/1/Wjsd3asz5FUGrZdwQJJHIEF9Vog.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/179bd8-fc68-4f76-86ff-68f316607376/1/Wjsd3asz5FUGrZdwQJJHIEF9Vog.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Wjsd3asz5FUGrZdwQJJHIEF9Vog.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bb:e9:32:2e:f0:b7:19:9a:80:8d:ac:d7:90:7e:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a3b1dddab33e45506ad977040924720417d5688
        Validity
            Not Before: Aug 23 07:01:58 2025 GMT
            Not After : Aug 24 07:01:58 2025 GMT
        Subject: CN=729572b360d4c06efbae7059bd5ff78cbce2edaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:45:cb:fc:13:53:5f:f8:8e:96:c9:23:39:2e:
                    e4:52:34:2b:ed:d9:18:48:56:1f:4f:3f:e3:03:86:
                    51:15:11:ab:cc:7b:31:50:dd:ec:9e:2a:9f:9f:fc:
                    be:e1:1f:1b:9b:05:96:3d:47:42:6b:90:cb:9d:f6:
                    0f:e2:7f:a5:77:1e:f6:59:55:cc:c0:30:72:5b:27:
                    9e:0c:80:51:cb:2a:67:8e:10:e0:e3:21:d8:7f:62:
                    06:59:c1:e7:b7:40:f3:7c:da:a4:e2:68:b9:b9:8a:
                    8c:cf:59:6c:3a:fe:f9:6e:df:ac:ec:d2:ba:b9:8e:
                    bc:48:4c:d6:54:f6:ea:9c:03:91:d1:1c:e9:d4:af:
                    08:9e:3d:f9:a5:7c:4a:b1:ca:7e:83:33:2b:c1:0f:
                    45:ae:af:f0:0a:95:fc:22:ad:ef:96:9c:0d:33:fd:
                    48:38:38:92:82:15:ac:f2:d7:fb:d5:64:e2:04:1d:
                    d3:d7:11:36:3d:ca:a9:38:5c:99:1a:f0:bc:4c:8a:
                    e7:13:ed:87:42:ed:66:f0:cc:da:12:4a:7e:39:5a:
                    61:4a:fb:8e:4f:c8:63:0d:44:dd:8e:c0:cd:0e:5d:
                    1f:ef:b7:dc:fe:61:83:79:c4:91:c0:48:db:bf:93:
                    a1:98:88:1b:7a:97:73:67:2a:7e:43:c6:4c:08:3a:
                    e4:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:95:72:B3:60:D4:C0:6E:FB:AE:70:59:BD:5F:F7:8C:BC:E2:ED:AA
            X509v3 Authority Key Identifier:
                keyid:5A:3B:1D:DD:AB:33:E4:55:06:AD:97:70:40:92:47:20:41:7D:56:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wjsd3asz5FUGrZdwQJJHIEF9Vog.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/179bd8-fc68-4f76-86ff-68f316607376/1/Wjsd3asz5FUGrZdwQJJHIEF9Vog.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/179bd8-fc68-4f76-86ff-68f316607376/1/Wjsd3asz5FUGrZdwQJJHIEF9Vog.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:ea:df:a3:af:b9:35:d3:2a:63:06:6e:fe:bf:5c:c4:06:b8:
         82:22:d5:24:74:48:5d:24:12:2d:e7:d9:3b:d6:9f:89:dc:42:
         e0:3a:32:1d:c2:41:55:05:df:24:6d:c4:09:15:a8:66:08:3d:
         5f:88:e1:57:58:89:70:c7:24:90:7d:58:a9:0d:7b:ae:0e:06:
         e5:63:9b:07:66:2d:84:e8:36:5c:a0:70:e5:03:6b:a9:c1:61:
         20:04:40:ee:36:9b:c0:8e:a3:69:b9:8e:30:42:8f:d1:b0:dd:
         86:aa:2c:19:cd:41:31:fe:c2:3b:9e:4d:77:e9:74:83:e1:14:
         be:6b:c5:8b:33:79:43:df:ee:42:c2:e0:3a:90:5d:b4:31:7e:
         63:41:b7:37:4d:81:d8:96:15:5a:5b:fd:f7:0c:3e:67:b7:34:
         8c:60:e7:2d:b8:c8:34:ba:dc:ba:e6:82:b3:8a:21:ba:55:15:
         0b:37:6c:df:a2:3f:81:a5:c3:94:c8:5a:ce:0c:b2:fc:bd:b4:
         d6:2f:3c:13:22:14:da:7b:5f:39:58:1f:17:bc:cf:fe:7b:4e:
         c2:ae:de:29:3e:61:2c:31:c2:c6:9d:9d:bb:85:46:a7:85:24:
         cb:e4:0c:28:81:8b:9c:bf:39:a1:79:e6:70:1d:d2:b6:18:9c:
         48:89:d0:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:44:18 2025 by rpki-client