Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/2b7576-2e0d-461c-9b89-0e4f0a394123/1/WtYwth0ucpL5zviTu21xJCpfS-0.mft
File:                     WtYwth0ucpL5zviTu21xJCpfS-0.mft (raw, json)
Hash identifier:          /puC2zluBkD1cG4OaFY1tr1nyQdhSKH8m5fLxFNlRYo=
Subject key identifier:   5D:69:D7:A8:51:D2:47:B9:EE:B3:8F:95:11:CF:DE:0E:D9:43:72:FE
Authority key identifier: 5A:D6:30:B6:1D:2E:72:92:F9:CE:F8:93:BB:6D:71:24:2A:5F:4B:ED
Certificate issuer:       /CN=5ad630b61d2e7292f9cef893bb6d71242a5f4bed
Certificate serial:       0198D54DDD7AB8909A814970EF5265A8D935
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WtYwth0ucpL5zviTu21xJCpfS-0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/2b7576-2e0d-461c-9b89-0e4f0a394123/1/WtYwth0ucpL5zviTu21xJCpfS-0.mft
Manifest number:          1356
Signing time:             Sat 23 Aug 2025 05:01:46 +0000
Manifest this update:     Sat 23 Aug 2025 05:01:46 +0000
Manifest next update:     Sun 24 Aug 2025 05:01:46 +0000
Files and hashes:         1: WtYwth0ucpL5zviTu21xJCpfS-0.crl (hash: EOPGulzFLcwWnDgasz+7aVduTS5s2dkSIhzPfgq3F24=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/2b7576-2e0d-461c-9b89-0e4f0a394123/1/WtYwth0ucpL5zviTu21xJCpfS-0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/2b7576-2e0d-461c-9b89-0e4f0a394123/1/WtYwth0ucpL5zviTu21xJCpfS-0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WtYwth0ucpL5zviTu21xJCpfS-0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4d:dd:7a:b8:90:9a:81:49:70:ef:52:65:a8:d9:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ad630b61d2e7292f9cef893bb6d71242a5f4bed
        Validity
            Not Before: Aug 23 05:01:46 2025 GMT
            Not After : Aug 24 05:01:46 2025 GMT
        Subject: CN=5d69d7a851d247b9eeb38f9511cfde0ed94372fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:26:95:3c:5b:36:5f:e9:60:9c:ba:66:96:57:
                    8f:79:82:05:93:df:c7:42:e1:a7:73:c5:fd:d0:e5:
                    3b:06:ab:ce:d5:4a:45:b5:23:25:99:74:a7:ea:a2:
                    49:25:54:f1:b3:c3:9c:9e:91:b6:0c:57:4f:cf:45:
                    e8:54:bd:6c:2b:b4:f0:a9:88:b4:bf:26:58:94:ee:
                    9a:ed:5e:3f:27:0c:eb:d2:9f:8c:f9:9b:fb:22:e3:
                    bd:d0:16:41:a2:95:3f:09:45:6d:f4:73:bb:e8:53:
                    4c:93:c7:90:28:ad:65:3d:f3:82:c1:83:97:64:64:
                    a2:40:58:a5:63:62:14:67:05:55:05:9b:df:5b:d8:
                    eb:a0:96:47:19:3e:ae:0b:3c:e8:40:a4:4b:28:1d:
                    9a:81:a6:fa:6f:0f:dd:8d:01:36:68:64:1e:f1:43:
                    1a:fb:15:f7:a9:64:fe:b1:4f:89:c4:86:50:83:47:
                    39:c8:f7:3f:cf:5e:92:49:eb:fa:38:5b:5a:38:2c:
                    56:71:6b:38:4c:fc:84:e8:f0:45:17:3b:a3:05:b7:
                    c0:22:44:32:05:33:74:8f:f3:6b:f1:db:b6:59:f7:
                    fa:68:68:e1:a4:df:52:48:80:b5:ea:7c:67:73:a3:
                    8d:fb:f7:39:19:92:da:8b:d9:6a:5f:a5:65:74:c9:
                    00:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:69:D7:A8:51:D2:47:B9:EE:B3:8F:95:11:CF:DE:0E:D9:43:72:FE
            X509v3 Authority Key Identifier:
                keyid:5A:D6:30:B6:1D:2E:72:92:F9:CE:F8:93:BB:6D:71:24:2A:5F:4B:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtYwth0ucpL5zviTu21xJCpfS-0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/2b7576-2e0d-461c-9b89-0e4f0a394123/1/WtYwth0ucpL5zviTu21xJCpfS-0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/2b7576-2e0d-461c-9b89-0e4f0a394123/1/WtYwth0ucpL5zviTu21xJCpfS-0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:e0:9d:86:f4:aa:f8:e6:ac:4c:e8:40:f3:96:b9:85:39:69:
         2a:10:0a:de:5e:8f:dd:0e:35:12:12:ae:2a:3a:97:e7:0e:51:
         72:4b:9b:7e:c9:e6:f8:d1:19:2d:c6:3a:a4:c0:0f:fa:c2:82:
         5f:3d:89:1f:c2:7f:48:e3:20:ce:79:53:b0:c6:0e:32:64:73:
         4a:65:ff:c1:f7:7c:4d:1b:f3:1f:be:20:e0:e0:35:ae:bf:e4:
         73:c8:dc:6e:28:39:50:96:e3:15:a7:61:94:51:2a:3b:db:9a:
         ac:05:27:de:07:6e:d1:25:c2:03:39:77:ac:b3:a2:08:d6:0d:
         d3:b4:4b:e7:a1:d6:c5:99:9a:93:fe:90:b1:52:07:78:66:28:
         04:19:ab:d8:7e:4e:a5:6d:9e:8f:e1:19:9c:b7:18:65:4f:0a:
         4f:35:ba:96:f1:88:98:9d:8a:73:02:d8:cb:56:4f:4d:b4:9b:
         99:5c:0d:1e:7d:13:42:17:cb:dd:3a:9e:63:db:c4:0d:ba:8e:
         99:e5:ec:4b:a8:1d:90:e6:23:fa:3a:46:51:65:43:08:bd:f3:
         e2:8f:18:ab:13:19:80:9a:cf:71:b8:36:07:9f:77:cd:3e:e7:
         af:79:72:17:55:96:75:e9:e7:43:56:65:30:9b:ba:f3:3a:d7:
         4a:50:a5:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:27 2025 by rpki-client