Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/8c7247-8592-44ae-82b1-100e5b65e672/1/W6vKoQozYHLrwIIKbfC_pNxc_ao.mft
File:                     W6vKoQozYHLrwIIKbfC_pNxc_ao.mft (raw, json)
Hash identifier:          wz2HoW+MI+JfEEMJsnB9S/KQ338TN9noK+NjMXLpTlI=
Subject key identifier:   84:31:41:37:7F:F6:35:B8:7A:9F:C7:B2:C6:93:3A:0B:C9:DA:C4:2B
Authority key identifier: 5B:AB:CA:A1:0A:33:60:72:EB:C0:82:0A:6D:F0:BF:A4:DC:5C:FD:AA
Certificate issuer:       /CN=5babcaa10a336072ebc0820a6df0bfa4dc5cfdaa
Certificate serial:       0198D65F74F3BBC109372C52FD4A6D85D3EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W6vKoQozYHLrwIIKbfC_pNxc_ao.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/8c7247-8592-44ae-82b1-100e5b65e672/1/W6vKoQozYHLrwIIKbfC_pNxc_ao.mft
Manifest number:          0A22
Signing time:             Sat 23 Aug 2025 10:00:36 +0000
Manifest this update:     Sat 23 Aug 2025 10:00:36 +0000
Manifest next update:     Sun 24 Aug 2025 10:00:36 +0000
Files and hashes:         1: B2n18W6FZZHyRPgmArtbq0-BQHI.roa (hash: sGRiT/dWrEM0f4SVXVnUW/pThWPm0EW+IVYQygpGhOY=)
                          2: W6vKoQozYHLrwIIKbfC_pNxc_ao.crl (hash: ofWBigZri1rVcsI2BDi4SiMuE+8SNPp+7rLvAUPPDos=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/8c7247-8592-44ae-82b1-100e5b65e672/1/W6vKoQozYHLrwIIKbfC_pNxc_ao.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/8c7247-8592-44ae-82b1-100e5b65e672/1/W6vKoQozYHLrwIIKbfC_pNxc_ao.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W6vKoQozYHLrwIIKbfC_pNxc_ao.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 10:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:5f:74:f3:bb:c1:09:37:2c:52:fd:4a:6d:85:d3:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5babcaa10a336072ebc0820a6df0bfa4dc5cfdaa
        Validity
            Not Before: Aug 23 10:00:36 2025 GMT
            Not After : Aug 24 10:00:36 2025 GMT
        Subject: CN=843141377ff635b87a9fc7b2c6933a0bc9dac42b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:2f:41:13:76:2c:03:33:63:c2:a1:06:99:16:
                    01:49:4a:e6:dd:c1:98:fa:37:37:29:ef:31:b3:0d:
                    89:c6:6d:76:53:f1:bf:41:2d:d3:0e:b0:21:9e:1a:
                    11:30:bf:59:26:f1:9b:b8:39:72:76:10:9d:fa:08:
                    8e:2c:ca:f8:39:87:8e:ea:de:66:48:b8:e1:f8:c5:
                    ab:8f:1a:5f:42:f1:71:9d:11:52:07:31:5a:2c:cd:
                    75:c5:c3:d8:7e:cb:af:16:91:0b:c4:69:67:fe:eb:
                    fc:03:34:17:7f:96:fd:c2:c7:ca:c2:c0:c3:4f:df:
                    c1:b5:b0:57:c6:bb:56:2c:36:c1:fe:db:5e:73:98:
                    96:eb:68:61:60:cc:30:57:f2:86:30:07:e8:0c:42:
                    f5:67:b1:77:a9:a9:7c:06:69:1b:14:21:2b:ca:0c:
                    aa:a1:27:86:4f:da:f1:b2:13:84:29:87:f5:dd:01:
                    84:e2:02:58:7e:f1:a6:71:b6:b1:1a:45:09:9d:f5:
                    4b:a5:22:99:04:08:aa:3c:a2:8b:60:c8:0f:89:5a:
                    d4:21:ef:7b:d8:20:e5:d4:2b:2a:78:9d:e7:87:db:
                    d8:50:a8:d1:5d:b1:ae:bd:49:5c:d9:79:de:18:12:
                    5c:0d:52:d1:a1:1a:ed:41:dc:6c:b2:ad:05:ad:84:
                    a4:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:31:41:37:7F:F6:35:B8:7A:9F:C7:B2:C6:93:3A:0B:C9:DA:C4:2B
            X509v3 Authority Key Identifier:
                keyid:5B:AB:CA:A1:0A:33:60:72:EB:C0:82:0A:6D:F0:BF:A4:DC:5C:FD:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W6vKoQozYHLrwIIKbfC_pNxc_ao.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/8c7247-8592-44ae-82b1-100e5b65e672/1/W6vKoQozYHLrwIIKbfC_pNxc_ao.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/8c7247-8592-44ae-82b1-100e5b65e672/1/W6vKoQozYHLrwIIKbfC_pNxc_ao.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:92:ab:fe:b8:3f:30:41:a6:32:61:d1:85:1c:b3:3c:a8:bc:
         f8:cf:ad:58:4d:b0:e1:64:d1:dd:2c:ef:25:90:d8:c7:37:8a:
         e6:80:85:db:fe:06:a0:cf:9f:65:ff:91:34:55:9b:e8:17:f8:
         c0:80:34:e0:5e:dd:e9:40:fd:69:2a:a3:87:a8:29:40:41:93:
         95:a7:a7:2a:c3:cf:bc:bc:7b:46:ab:3c:e1:41:54:6f:91:71:
         38:0f:f0:24:8e:b6:16:64:14:21:e4:5d:ac:27:f1:03:e3:41:
         4f:02:64:c0:9d:fc:74:90:78:21:9f:e4:60:8b:35:c0:b2:66:
         2d:18:12:17:64:03:96:1f:3a:2c:c2:dc:0b:10:c2:1b:61:f0:
         f0:54:4b:d9:18:26:1e:88:79:06:06:ed:8f:d7:a4:d2:91:ff:
         c7:61:7c:d3:65:46:c4:f4:9d:e0:bf:bb:84:24:22:23:c6:ef:
         42:9c:71:a6:fc:38:f0:6c:dc:0d:ab:28:72:b8:c5:0a:6b:22:
         53:62:c9:be:b6:d2:6f:2a:6e:ce:7c:c1:00:a0:a3:42:48:87:
         89:5f:5e:d0:bd:c8:38:2d:d1:0b:4f:91:34:20:f2:23:2b:65:
         d7:fe:b3:f9:b2:cf:29:c7:42:69:0b:88:9c:8e:1f:cc:5e:da:
         e7:89:4f:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:53:56 2025 by rpki-client