Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/834875-aafb-45b4-ab58-519368b77c5d/1/WRgezM-jp4ELruDwW_Oge7j3jWY.mft
File:                     WRgezM-jp4ELruDwW_Oge7j3jWY.mft (raw, json)
Hash identifier:          KrzLeqeA0qHG5DX0wglYm4vAvjd7vIcaIzeKpwWW200=
Subject key identifier:   A7:9E:D9:CC:A3:8B:75:CD:A9:22:77:B6:55:C6:1E:FF:47:C9:11:E0
Authority key identifier: 59:18:1E:CC:CF:A3:A7:81:0B:AE:E0:F0:5B:F3:A0:7B:B8:F7:8D:66
Certificate issuer:       /CN=59181ecccfa3a7810baee0f05bf3a07bb8f78d66
Certificate serial:       0198D54E9BED02C9F55BA1EDF7F49808CC54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WRgezM-jp4ELruDwW_Oge7j3jWY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/834875-aafb-45b4-ab58-519368b77c5d/1/WRgezM-jp4ELruDwW_Oge7j3jWY.mft
Manifest number:          0ED8
Signing time:             Sat 23 Aug 2025 05:02:35 +0000
Manifest this update:     Sat 23 Aug 2025 05:02:35 +0000
Manifest next update:     Sun 24 Aug 2025 05:02:35 +0000
Files and hashes:         1: WRgezM-jp4ELruDwW_Oge7j3jWY.crl (hash: H9lj49wInKBXFj6BazOCmlnQpTzic/y2VTV45Y8lPhQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/834875-aafb-45b4-ab58-519368b77c5d/1/WRgezM-jp4ELruDwW_Oge7j3jWY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/834875-aafb-45b4-ab58-519368b77c5d/1/WRgezM-jp4ELruDwW_Oge7j3jWY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WRgezM-jp4ELruDwW_Oge7j3jWY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4e:9b:ed:02:c9:f5:5b:a1:ed:f7:f4:98:08:cc:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59181ecccfa3a7810baee0f05bf3a07bb8f78d66
        Validity
            Not Before: Aug 23 05:02:35 2025 GMT
            Not After : Aug 24 05:02:35 2025 GMT
        Subject: CN=a79ed9cca38b75cda92277b655c61eff47c911e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:3b:94:15:da:04:66:23:39:50:54:c2:7f:aa:
                    d2:13:90:31:30:71:0c:b3:07:78:57:2a:91:ca:7b:
                    0b:19:cf:1e:24:b5:a2:ba:ad:66:96:77:7f:43:9c:
                    56:b5:73:bf:9f:95:c8:20:be:fb:ff:3e:2a:33:74:
                    c3:ff:49:92:c4:5e:f0:8c:be:14:ea:b6:ed:71:40:
                    68:54:e4:c5:4d:98:f2:6e:45:38:f6:a9:d1:0a:8c:
                    e2:94:02:98:36:f3:14:b1:c8:70:da:0e:ae:d2:a0:
                    d9:8d:70:28:3a:91:e3:95:1a:dd:43:f4:3e:a6:01:
                    66:25:8e:5e:1f:e7:6b:63:38:70:e3:a7:15:c6:83:
                    5f:c2:ee:9f:26:4f:df:55:b4:cd:a3:1d:46:f9:91:
                    0a:00:38:a6:c1:4f:2f:cf:ab:00:84:a5:41:5e:8f:
                    cf:61:f0:b0:d8:5c:a3:bd:b7:d5:d9:54:7f:e6:05:
                    97:80:bf:4f:1c:4f:b1:b5:06:23:53:bc:16:13:e3:
                    89:f6:5d:ef:7d:c2:1c:4b:f6:33:20:2b:68:4b:b1:
                    b1:8b:0f:7c:99:07:b4:c7:ee:97:7e:1f:58:45:4a:
                    cd:f0:82:97:ee:d4:df:2c:94:52:42:56:b4:2c:74:
                    74:60:43:78:12:7b:d5:86:be:6b:03:cc:4b:55:c0:
                    03:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:9E:D9:CC:A3:8B:75:CD:A9:22:77:B6:55:C6:1E:FF:47:C9:11:E0
            X509v3 Authority Key Identifier:
                keyid:59:18:1E:CC:CF:A3:A7:81:0B:AE:E0:F0:5B:F3:A0:7B:B8:F7:8D:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WRgezM-jp4ELruDwW_Oge7j3jWY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/834875-aafb-45b4-ab58-519368b77c5d/1/WRgezM-jp4ELruDwW_Oge7j3jWY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/834875-aafb-45b4-ab58-519368b77c5d/1/WRgezM-jp4ELruDwW_Oge7j3jWY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:9a:09:f4:6f:85:af:31:9d:49:95:5b:fa:c9:32:56:46:94:
         47:ce:d4:78:8b:f7:fe:db:cb:cd:97:d5:d1:8d:ad:b3:cb:32:
         d6:a8:8e:7f:d6:f1:53:0b:10:94:aa:d2:ce:b3:1d:a1:b7:89:
         a4:cc:ec:87:76:9b:e8:fc:e1:ef:73:c5:b6:54:50:66:49:4c:
         1b:89:9c:b2:6a:62:46:7a:23:a5:0a:49:8d:db:09:9d:aa:e1:
         09:7b:74:e0:a7:57:b7:38:c3:11:0c:b1:41:52:81:72:7d:49:
         ba:c1:e4:da:ee:1f:b4:88:51:d4:15:42:3d:f6:85:37:a4:f9:
         90:c6:85:75:02:af:b2:76:49:24:87:ea:b5:92:38:55:26:3a:
         fb:48:87:34:2c:3d:44:e7:a6:f0:4b:b0:61:58:b6:63:44:f2:
         dd:43:5a:5a:fe:e9:e8:00:49:2f:b0:49:86:a9:49:b9:c0:ff:
         d7:0c:95:e1:b5:46:53:22:36:4e:01:df:aa:4f:46:0b:91:5c:
         6b:87:db:0a:d3:0d:f1:bf:39:0d:93:e9:0f:73:61:65:48:91:
         50:58:22:b0:28:12:18:79:18:6c:41:85:e7:5e:d6:d1:36:a5:
         00:aa:9d:30:f5:5c:2a:93:a8:03:63:4d:7a:e8:72:68:48:86:
         6d:f0:14:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:26:50 2025 by rpki-client