Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/2b8e6d-a2c8-4e7d-96ca-ac764c952357/1/WSDWcGSaSkqcsuZnchcHQa33xRo.mft
File:                     WSDWcGSaSkqcsuZnchcHQa33xRo.mft (raw, json)
Hash identifier:          BsyF4sDCRl7IDpecAcUqBRTpGGJNJtBItVJlELZLxSI=
Subject key identifier:   AA:5C:0F:11:7F:72:20:C2:8A:AE:4F:E3:BB:28:D9:1D:54:64:2D:B6
Authority key identifier: 59:20:D6:70:64:9A:4A:4A:9C:B2:E6:67:72:17:07:41:AD:F7:C5:1A
Certificate issuer:       /CN=5920d670649a4a4a9cb2e66772170741adf7c51a
Certificate serial:       0198D85002A42E55A9323C0349E830284F51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WSDWcGSaSkqcsuZnchcHQa33xRo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/2b8e6d-a2c8-4e7d-96ca-ac764c952357/1/WSDWcGSaSkqcsuZnchcHQa33xRo.mft
Manifest number:          0D2B
Signing time:             Sat 23 Aug 2025 19:02:58 +0000
Manifest this update:     Sat 23 Aug 2025 19:02:58 +0000
Manifest next update:     Sun 24 Aug 2025 19:02:58 +0000
Files and hashes:         1: PrK_NQRYp13y-DfvxtWGnq4X0dE.roa (hash: ZI/puUUas0tVvfAZ0vd46exqVsLLctxI+01KKUrwu2o=)
                          2: WSDWcGSaSkqcsuZnchcHQa33xRo.crl (hash: IO1WpZczokG86SBwKO+O3BG7LCyiO8cr27CQX338aHU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/2b8e6d-a2c8-4e7d-96ca-ac764c952357/1/WSDWcGSaSkqcsuZnchcHQa33xRo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/2b8e6d-a2c8-4e7d-96ca-ac764c952357/1/WSDWcGSaSkqcsuZnchcHQa33xRo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WSDWcGSaSkqcsuZnchcHQa33xRo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d8:50:02:a4:2e:55:a9:32:3c:03:49:e8:30:28:4f:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5920d670649a4a4a9cb2e66772170741adf7c51a
        Validity
            Not Before: Aug 23 19:02:58 2025 GMT
            Not After : Aug 24 19:02:58 2025 GMT
        Subject: CN=aa5c0f117f7220c28aae4fe3bb28d91d54642db6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:6e:f4:c3:84:48:02:a9:34:15:b0:2d:a6:47:
                    5a:39:34:91:ec:ed:23:ef:8e:12:9b:f1:ce:df:33:
                    bc:16:fb:fa:51:9e:4a:4c:47:06:f7:62:d3:af:3e:
                    e1:cf:bf:a6:5e:05:b9:08:12:8a:25:62:43:e3:35:
                    02:68:46:8a:39:3b:77:ad:93:7d:4f:d0:a3:9a:87:
                    45:09:74:de:55:d0:e9:ce:9a:5b:d2:38:9c:cd:e7:
                    a6:05:b9:ed:6d:e8:a6:77:db:77:c9:5c:7d:84:7e:
                    2f:99:a5:03:7d:64:8a:44:42:5f:59:63:ee:6f:15:
                    e9:17:46:81:1b:56:f5:23:b4:31:7b:b7:59:bd:9b:
                    c4:a5:ba:f1:21:22:9c:89:f6:8b:b8:ad:a2:47:ee:
                    66:c9:97:d5:a0:18:1c:58:09:52:1a:7e:9f:92:0b:
                    d6:83:91:70:02:33:b2:38:bc:55:f5:38:4d:7b:ab:
                    59:66:7e:60:8a:ae:91:6e:2e:f6:e2:aa:6b:e6:bc:
                    d0:c5:56:06:79:98:e3:23:c2:23:38:e2:88:a1:fb:
                    0f:f4:83:0f:87:4c:02:1e:e4:a5:c9:46:90:e5:ee:
                    be:67:ee:25:03:1c:b2:d9:10:b4:da:6c:20:21:c4:
                    07:de:b6:11:00:a7:42:66:c2:ab:3b:bd:18:72:2c:
                    d9:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:5C:0F:11:7F:72:20:C2:8A:AE:4F:E3:BB:28:D9:1D:54:64:2D:B6
            X509v3 Authority Key Identifier:
                keyid:59:20:D6:70:64:9A:4A:4A:9C:B2:E6:67:72:17:07:41:AD:F7:C5:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WSDWcGSaSkqcsuZnchcHQa33xRo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/2b8e6d-a2c8-4e7d-96ca-ac764c952357/1/WSDWcGSaSkqcsuZnchcHQa33xRo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/2b8e6d-a2c8-4e7d-96ca-ac764c952357/1/WSDWcGSaSkqcsuZnchcHQa33xRo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:c7:f6:fa:bf:a9:55:2a:f9:db:1f:c4:f9:6a:06:a5:a9:4b:
         1a:14:44:89:4d:ab:11:90:47:93:e1:7e:72:8e:98:25:68:77:
         d6:14:49:bd:c4:5c:4d:72:c5:96:97:ca:43:49:d0:85:95:86:
         cb:96:27:14:30:17:82:58:be:ad:16:22:8d:b8:68:bd:52:05:
         0d:69:75:cc:7f:f4:b3:30:c8:60:09:bc:72:9e:3b:81:57:1d:
         51:64:e3:30:b6:2d:e8:a0:37:e6:c9:55:c7:89:3b:aa:bc:6d:
         eb:a6:c9:80:0e:fd:a8:55:e6:e1:2b:3e:d7:de:39:0c:0c:e9:
         a4:ac:f1:2b:e1:fa:14:4c:aa:2e:e8:24:73:92:98:5a:f5:dc:
         0d:d4:f7:09:06:81:59:c1:f3:88:ac:0d:8c:1e:06:46:1e:75:
         8e:a6:5f:c7:b0:d1:b8:5b:23:83:b5:bb:14:0e:e3:98:df:5b:
         fc:8a:07:86:d3:46:1b:3b:64:37:2b:c7:1e:79:b8:bc:2e:c7:
         70:f0:14:6c:fc:bd:b5:ae:df:9d:f4:00:cb:9a:32:fd:cc:5a:
         51:5f:ed:d2:73:04:d6:06:94:75:ba:72:93:e9:dd:17:39:68:
         bd:4d:b9:f5:f3:fa:ba:3a:f6:c8:1d:7e:63:50:1f:02:79:41:
         5e:4e:5c:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:40:42 2025 by rpki-client