Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/eaa7e2-8af0-4de1-8241-a55ffae2ebd0/1/WQN6n-ViXtoBCB6y6QfP2bWl3Jo.mft
File:                     WQN6n-ViXtoBCB6y6QfP2bWl3Jo.mft (raw, json)
Hash identifier:          EKaR/hGwFfaiUuvLn7Gs7iD2eEsBXM4JJB6LFUL98wY=
Subject key identifier:   A1:29:35:6C:C5:E5:13:5D:65:30:5C:CE:76:B0:E8:1F:50:B9:87:58
Authority key identifier: 59:03:7A:9F:E5:62:5E:DA:01:08:1E:B2:E9:07:CF:D9:B5:A5:DC:9A
Certificate issuer:       /CN=59037a9fe5625eda01081eb2e907cfd9b5a5dc9a
Certificate serial:       0198D8510CA51DFBC6248A06E6751B361D47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WQN6n-ViXtoBCB6y6QfP2bWl3Jo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/eaa7e2-8af0-4de1-8241-a55ffae2ebd0/1/WQN6n-ViXtoBCB6y6QfP2bWl3Jo.mft
Manifest number:          0F7C
Signing time:             Sat 23 Aug 2025 19:04:06 +0000
Manifest this update:     Sat 23 Aug 2025 19:04:06 +0000
Manifest next update:     Sun 24 Aug 2025 19:04:06 +0000
Files and hashes:         1: WQN6n-ViXtoBCB6y6QfP2bWl3Jo.crl (hash: o0VuYl7EXIdp8syYbKXdUQREiUzyG6h+Q/olDyHuYXk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/eaa7e2-8af0-4de1-8241-a55ffae2ebd0/1/WQN6n-ViXtoBCB6y6QfP2bWl3Jo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/eaa7e2-8af0-4de1-8241-a55ffae2ebd0/1/WQN6n-ViXtoBCB6y6QfP2bWl3Jo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WQN6n-ViXtoBCB6y6QfP2bWl3Jo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d8:51:0c:a5:1d:fb:c6:24:8a:06:e6:75:1b:36:1d:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59037a9fe5625eda01081eb2e907cfd9b5a5dc9a
        Validity
            Not Before: Aug 23 19:04:06 2025 GMT
            Not After : Aug 24 19:04:06 2025 GMT
        Subject: CN=a129356cc5e5135d65305cce76b0e81f50b98758
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c5:b9:53:6e:db:61:82:bd:92:6f:31:b9:cf:
                    fa:16:2a:8d:9c:b4:5c:63:8b:1b:56:c3:bd:b9:d1:
                    15:41:5d:e4:6a:b5:5c:f2:67:30:c2:11:7c:dd:56:
                    cb:d8:57:50:9e:f7:75:7c:b5:2c:05:d6:8a:90:5a:
                    87:6e:b9:75:e5:90:31:41:aa:2f:39:cc:53:c9:be:
                    07:2e:76:a2:37:50:bd:2a:a2:fc:36:55:e4:c7:55:
                    b2:8e:8b:20:24:d9:1c:de:86:9a:27:59:04:c9:f4:
                    16:33:dd:76:12:75:25:00:59:b4:49:98:0f:8a:39:
                    ca:f9:26:12:27:c5:87:14:16:66:a2:ed:50:47:c7:
                    d8:06:dd:b8:61:22:20:95:31:78:c6:ab:82:13:3a:
                    be:52:2d:50:c2:71:77:2d:ff:4b:30:a1:c0:c8:ac:
                    44:59:f9:1c:62:d3:87:26:61:02:a4:2a:7d:e4:43:
                    3c:a7:1a:03:ff:cb:80:b6:57:35:89:a7:66:46:72:
                    99:57:1c:92:f8:13:f8:0f:ad:e3:af:9d:24:d4:cb:
                    b9:b5:c1:4f:41:40:20:a5:97:b8:22:b4:c8:17:45:
                    14:2f:37:9f:64:6b:de:b9:4c:3d:48:32:35:86:3d:
                    ce:b8:26:ea:62:fd:36:d7:3d:1f:98:a2:56:22:69:
                    c9:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:29:35:6C:C5:E5:13:5D:65:30:5C:CE:76:B0:E8:1F:50:B9:87:58
            X509v3 Authority Key Identifier:
                keyid:59:03:7A:9F:E5:62:5E:DA:01:08:1E:B2:E9:07:CF:D9:B5:A5:DC:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WQN6n-ViXtoBCB6y6QfP2bWl3Jo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/eaa7e2-8af0-4de1-8241-a55ffae2ebd0/1/WQN6n-ViXtoBCB6y6QfP2bWl3Jo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/eaa7e2-8af0-4de1-8241-a55ffae2ebd0/1/WQN6n-ViXtoBCB6y6QfP2bWl3Jo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:ed:67:52:5a:54:2c:b9:5e:bc:6b:24:9f:33:59:b9:40:3e:
         e0:46:82:8d:2a:2a:f5:7c:cf:64:6d:dd:c9:4f:0d:16:60:b1:
         7c:93:4c:cf:7f:f3:cb:88:b6:1b:9c:52:c2:00:d5:71:05:a0:
         62:1f:da:70:08:00:e3:72:c9:b3:98:74:ed:72:27:6b:58:58:
         56:86:68:34:2e:49:ac:5b:70:84:cf:6f:9c:77:df:0e:99:24:
         38:a5:13:66:61:d8:5d:d5:e7:95:50:97:a1:5c:de:93:e8:57:
         45:1e:45:53:21:57:d5:8d:a6:47:04:bf:26:01:ea:4d:81:02:
         4e:34:72:d9:e2:ea:03:78:0e:23:18:62:da:32:db:11:6f:f7:
         56:05:ba:48:6d:45:40:37:59:a3:08:21:de:91:55:78:a3:70:
         81:60:d2:e0:79:0e:aa:dd:08:1d:79:bf:fb:13:16:58:80:78:
         d2:e4:38:95:16:18:7f:22:68:e6:82:46:2f:7d:43:c0:43:88:
         b9:11:19:f7:c2:4f:4d:87:68:a6:56:c6:39:b1:a8:d8:c0:6e:
         7c:37:be:78:d3:3f:ca:86:39:57:ce:d5:0c:be:1e:83:6f:d0:
         49:9f:6e:94:1b:00:b0:98:88:51:ae:99:ef:f6:d5:c6:2b:63:
         b8:3d:09:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 01:01:43 2025 by rpki-client