Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/aca736-4088-480b-af5f-89b6c219d90b/1/DWutPz3QrFVvP3qA0cabn9lk3Ww.mft
File:                     DWutPz3QrFVvP3qA0cabn9lk3Ww.mft (raw, json)
Hash identifier:          gQrrlmw8vgwHJLoV/DUnZ3sfnZKoNUzVzdxYw84jfJA=
Subject key identifier:   02:A6:77:F6:48:DC:09:77:0A:F6:8A:2E:A2:88:2F:44:7D:9C:90:14
Authority key identifier: 0D:6B:AD:3F:3D:D0:AC:55:6F:3F:7A:80:D1:C6:9B:9F:D9:64:DD:6C
Certificate issuer:       /CN=0d6bad3f3dd0ac556f3f7a80d1c69b9fd964dd6c
Certificate serial:       0198D54DEC8BD6521F479A22FBFC96062D8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DWutPz3QrFVvP3qA0cabn9lk3Ww.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/aca736-4088-480b-af5f-89b6c219d90b/1/DWutPz3QrFVvP3qA0cabn9lk3Ww.mft
Manifest number:          1045
Signing time:             Sat 23 Aug 2025 05:01:50 +0000
Manifest this update:     Sat 23 Aug 2025 05:01:50 +0000
Manifest next update:     Sun 24 Aug 2025 05:01:50 +0000
Files and hashes:         1: DWutPz3QrFVvP3qA0cabn9lk3Ww.crl (hash: Roaox7rdVvkzpVL4vULzQOO75lgkZmazVUqIUbRZ7+0=)
                          2: clB1f_NiIoBJs06I1N2ua9KcprY.roa (hash: Hc2uBMDIF+2ALpimHYsk+DChTWTq8OrIlMci+ZWtnyA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/aca736-4088-480b-af5f-89b6c219d90b/1/DWutPz3QrFVvP3qA0cabn9lk3Ww.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/aca736-4088-480b-af5f-89b6c219d90b/1/DWutPz3QrFVvP3qA0cabn9lk3Ww.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DWutPz3QrFVvP3qA0cabn9lk3Ww.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4d:ec:8b:d6:52:1f:47:9a:22:fb:fc:96:06:2d:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d6bad3f3dd0ac556f3f7a80d1c69b9fd964dd6c
        Validity
            Not Before: Aug 23 05:01:50 2025 GMT
            Not After : Aug 24 05:01:50 2025 GMT
        Subject: CN=02a677f648dc09770af68a2ea2882f447d9c9014
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:55:4d:3f:3f:7e:e9:23:7d:69:63:cc:f0:fe:
                    14:9f:25:4c:db:c1:e3:d3:79:e7:17:a2:2b:59:cb:
                    ef:f0:3c:34:1f:0e:6a:e3:20:61:bb:1d:56:9f:51:
                    5a:bd:35:ce:52:d3:6d:5f:13:4b:99:85:f5:e6:88:
                    30:ed:e6:36:a0:8e:8e:4f:87:75:62:7d:be:a7:df:
                    e4:62:f9:03:f8:67:d9:15:c3:6a:f9:46:8a:4f:a5:
                    fd:23:05:2c:ea:ee:9f:45:c1:97:90:c2:37:b2:42:
                    6e:2c:ec:bb:46:de:e0:64:44:76:32:aa:7c:53:1f:
                    fa:60:6d:25:6f:c1:c9:3d:85:c0:0c:da:6b:59:65:
                    30:66:a7:6a:9b:58:2c:fd:e5:b9:9f:1a:5a:33:ca:
                    5b:c5:00:59:72:8f:d3:56:41:45:bb:0c:61:5a:74:
                    97:14:cd:5a:c8:45:77:57:d0:aa:37:f5:f6:9d:7f:
                    0a:c8:c3:2b:21:20:63:cb:79:72:69:fb:6d:df:1b:
                    57:96:a0:56:39:16:d7:68:fd:2b:29:c1:3b:4d:d5:
                    02:c3:b9:70:2d:86:b5:62:d3:0d:f0:c1:d3:e5:80:
                    f5:ea:aa:11:41:68:97:33:9d:38:db:62:c6:f2:e8:
                    7e:e1:7f:c2:eb:a5:eb:a2:ee:b0:ec:69:d2:82:3f:
                    80:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:A6:77:F6:48:DC:09:77:0A:F6:8A:2E:A2:88:2F:44:7D:9C:90:14
            X509v3 Authority Key Identifier:
                keyid:0D:6B:AD:3F:3D:D0:AC:55:6F:3F:7A:80:D1:C6:9B:9F:D9:64:DD:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DWutPz3QrFVvP3qA0cabn9lk3Ww.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/aca736-4088-480b-af5f-89b6c219d90b/1/DWutPz3QrFVvP3qA0cabn9lk3Ww.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/aca736-4088-480b-af5f-89b6c219d90b/1/DWutPz3QrFVvP3qA0cabn9lk3Ww.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:50:bc:37:0b:d0:d6:5d:d6:d2:01:17:c9:29:d5:73:9c:ce:
         2f:94:bd:0c:2e:f7:23:3b:de:15:a7:2f:ec:ae:93:61:ea:a6:
         1e:77:34:8e:9b:ab:4e:cb:90:be:52:34:69:8e:74:53:a3:2f:
         cc:86:48:19:0e:de:df:dd:b1:00:9b:98:3a:0d:eb:2f:18:93:
         ae:1e:d8:d1:50:de:51:50:ec:ec:0a:37:72:70:74:07:d2:07:
         04:53:d3:dc:97:16:7c:e7:26:e1:f2:18:ab:2c:68:34:df:8d:
         f6:5f:25:b3:5f:57:4e:82:b6:8f:82:d3:07:94:36:4a:63:83:
         b6:6c:12:84:f8:eb:0e:b3:67:4d:47:db:e7:c5:24:b3:7d:5a:
         56:8d:77:81:f2:0d:d3:c8:94:64:3b:de:2b:21:ac:8b:59:df:
         00:0e:de:72:12:ed:56:ec:13:1b:11:33:93:df:6f:32:0c:f4:
         ed:13:3d:64:2f:8f:fc:44:b7:83:e2:15:c8:62:60:bb:8b:94:
         9d:f4:85:aa:89:d5:4c:83:13:ac:bc:4b:54:21:a8:f7:dd:62:
         82:cc:95:58:3d:b6:b5:4c:fd:0c:a5:dc:e6:e0:71:62:a4:13:
         63:06:fe:6e:22:76:f8:f6:7a:59:ab:16:5a:79:51:93:00:1d:
         1b:61:ae:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:41:51 2025 by rpki-client