Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/e46168-9818-4b51-94ad-c618dec07462/1/wNBDfN98up85Z-syighobQbkfVY.mft
File:                     wNBDfN98up85Z-syighobQbkfVY.mft (raw, json)
Hash identifier:          KzxOT+vwuRgFVjFIa0hU1beMP5kcDh3YcnhiccMSYkY=
Subject key identifier:   10:DB:F3:18:C1:BB:63:59:86:35:10:86:42:47:86:74:ED:79:E6:B5
Authority key identifier: C0:D0:43:7C:DF:7C:BA:9F:39:67:EB:32:8A:08:68:6D:06:E4:7D:56
Certificate issuer:       /CN=c0d0437cdf7cba9f3967eb328a08686d06e47d56
Certificate serial:       0198D54E8DE0AFCB0D807210FF1316E6D8DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wNBDfN98up85Z-syighobQbkfVY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/e46168-9818-4b51-94ad-c618dec07462/1/wNBDfN98up85Z-syighobQbkfVY.mft
Manifest number:          03EC
Signing time:             Sat 23 Aug 2025 05:02:31 +0000
Manifest this update:     Sat 23 Aug 2025 05:02:31 +0000
Manifest next update:     Sun 24 Aug 2025 05:02:31 +0000
Files and hashes:         1: RVpE5x4ewK-16qeOmC4zQhoP4D0.roa (hash: hUGCkNpwy4m/7VpqWBt6q2aDAeStLb3YaDGvbWD+DDQ=)
                          2: wNBDfN98up85Z-syighobQbkfVY.crl (hash: Q7+WIOCnUDEyYH28GN+3ro1Hgz0WyPhx1EKiZYjK2vQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/e46168-9818-4b51-94ad-c618dec07462/1/wNBDfN98up85Z-syighobQbkfVY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/e46168-9818-4b51-94ad-c618dec07462/1/wNBDfN98up85Z-syighobQbkfVY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wNBDfN98up85Z-syighobQbkfVY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4e:8d:e0:af:cb:0d:80:72:10:ff:13:16:e6:d8:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0d0437cdf7cba9f3967eb328a08686d06e47d56
        Validity
            Not Before: Aug 23 05:02:31 2025 GMT
            Not After : Aug 24 05:02:31 2025 GMT
        Subject: CN=10dbf318c1bb63598635108642478674ed79e6b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ff:5e:70:23:17:f8:7a:da:e3:c3:b4:9b:61:
                    45:b0:1a:75:4c:25:b9:80:31:94:3b:d2:35:10:2d:
                    b7:29:cd:6a:6e:91:ac:dc:1c:3a:0a:37:ef:3e:c3:
                    3c:e7:01:c5:47:0b:6c:ba:c3:24:48:d3:29:94:80:
                    41:02:3c:fe:9b:e4:15:fc:45:e0:3d:6e:a2:ef:91:
                    21:89:07:5a:8c:71:93:b4:97:1d:b6:70:12:21:48:
                    41:3a:c5:e6:ef:e8:05:c2:f4:3c:e8:3a:c7:ae:e7:
                    e0:90:50:0a:1f:ae:10:1f:81:a6:32:83:78:72:0f:
                    59:58:a3:bd:26:13:7a:c9:c4:16:51:ec:9e:05:99:
                    00:24:70:72:14:27:e9:db:ba:ba:89:04:ae:35:fa:
                    0c:90:23:7c:ce:d8:36:4f:15:8a:7f:73:f1:91:1c:
                    9b:f8:bf:17:21:e4:6e:48:da:af:e4:8a:30:2b:9d:
                    db:2b:77:ba:08:6f:e0:84:fc:94:18:c4:15:25:2b:
                    8e:6a:a4:ad:c8:7e:62:9c:1d:0e:a5:31:b9:f0:ca:
                    60:a6:f9:33:59:fd:21:53:ef:82:c5:f0:26:d3:5e:
                    26:8c:49:7d:f2:f5:84:df:5e:1b:7c:d9:a1:92:50:
                    eb:8a:3b:6b:0e:c4:ab:da:29:24:eb:9e:96:ed:e7:
                    9d:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:DB:F3:18:C1:BB:63:59:86:35:10:86:42:47:86:74:ED:79:E6:B5
            X509v3 Authority Key Identifier:
                keyid:C0:D0:43:7C:DF:7C:BA:9F:39:67:EB:32:8A:08:68:6D:06:E4:7D:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wNBDfN98up85Z-syighobQbkfVY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/e46168-9818-4b51-94ad-c618dec07462/1/wNBDfN98up85Z-syighobQbkfVY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/e46168-9818-4b51-94ad-c618dec07462/1/wNBDfN98up85Z-syighobQbkfVY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:ba:92:e6:f2:29:8e:b5:73:0f:28:dc:22:1b:ad:58:bf:1f:
         6e:6f:91:04:bc:18:22:f7:4d:e2:1b:3a:a7:13:6d:0a:f0:62:
         01:a0:ad:5b:8e:ff:37:3f:8c:6f:60:e2:34:c3:1f:50:4f:3b:
         4a:db:14:1d:37:84:a2:18:63:1f:18:3e:c2:ec:7c:21:19:bc:
         a8:12:c2:a1:ae:b4:05:53:41:a2:ed:43:10:38:bd:7c:de:c2:
         fb:12:c1:0b:b4:2c:b0:2e:0e:b9:6f:d5:dc:d6:09:8c:ef:bb:
         a9:47:ee:ee:62:14:cb:50:a9:ab:1a:d8:c5:b0:f0:77:ff:c3:
         57:fe:15:3c:1e:6d:36:68:d6:fc:aa:9e:44:c4:6a:48:de:10:
         ab:a4:c3:56:7f:55:cf:60:5c:1a:f2:fc:c4:7b:e4:aa:71:70:
         57:b2:4a:55:a8:6b:7e:10:d9:b5:6a:4a:96:c5:09:c7:0b:b1:
         cc:20:9a:ac:98:a2:d6:d9:40:81:1f:e7:b3:e1:89:f2:a5:17:
         24:f6:32:80:2b:a5:f8:cb:3d:f4:ef:9f:6c:5d:af:36:61:4a:
         ac:f3:67:22:d9:15:a9:44:a2:32:86:a0:4b:03:58:97:57:dc:
         cf:c5:9d:82:5b:c2:44:36:b0:18:53:37:5a:b0:7b:6d:05:9a:
         a9:aa:b1:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:20:00 2025 by rpki-client