Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/wur6ows0Ds-BCky5rztRxwJWZZg.mft
File:                     wur6ows0Ds-BCky5rztRxwJWZZg.mft (raw, json)
Hash identifier:          wQkwpFvJuELjJOYfgP1A3wAZf9iIdc2rp6RRYYMFvNA=
Subject key identifier:   8C:6B:35:0D:FB:73:25:1E:5B:DD:02:B2:48:AC:33:2E:BC:52:C4:24
Authority key identifier: C2:EA:FA:A3:0B:34:0E:CF:81:0A:4C:B9:AF:3B:51:C7:02:56:65:98
Certificate issuer:       /CN=c2eafaa30b340ecf810a4cb9af3b51c702566598
Certificate serial:       0198D705E39588269AB150A31E559FA29BAE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wur6ows0Ds-BCky5rztRxwJWZZg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/wur6ows0Ds-BCky5rztRxwJWZZg.mft
Manifest number:          1656
Signing time:             Sat 23 Aug 2025 13:02:23 +0000
Manifest this update:     Sat 23 Aug 2025 13:02:23 +0000
Manifest next update:     Sun 24 Aug 2025 13:02:23 +0000
Files and hashes:         1: 1wrmzG8kmHTEu12xzRLuu8ra80I.roa (hash: 9m8Zy/qea1cvB7wZZ6FL+4apCQU2vA1vbBwqJEE2WcE=)
                          2: 5GkbsIVHSNjZKlhRMzKNoaujuQI.roa (hash: ZErUA0WOYmD80Q/QFMsB/idG5rJkQAo7XEeRzYdULMM=)
                          3: T-zwd3E8gbu-MxAIPetL9QmvKh0.roa (hash: 092w0Bm8URvR9yowFyiwo856iRLSuK3dnjktNqsPJK0=)
                          4: d_5rCXad48L982aV_sE5OcfISCI.roa (hash: 90ZGQ2cxG5cZFWpNWTKz60Bz+Hn3IddK6g3bDQGxBUA=)
                          5: ulqVIFVosPowykxTM5-oqMzd4Gw.roa (hash: GyWK8Gwo9Zktpx8zDLY/DbSmWK69tqfb6z/bHNQk+aU=)
                          6: wur6ows0Ds-BCky5rztRxwJWZZg.crl (hash: g7oI0n/nOb5X27rwkfTZVSeuhq5/AUidVZiAupDFwsQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/wur6ows0Ds-BCky5rztRxwJWZZg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/wur6ows0Ds-BCky5rztRxwJWZZg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wur6ows0Ds-BCky5rztRxwJWZZg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 13:02:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:05:e3:95:88:26:9a:b1:50:a3:1e:55:9f:a2:9b:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2eafaa30b340ecf810a4cb9af3b51c702566598
        Validity
            Not Before: Aug 23 13:02:23 2025 GMT
            Not After : Aug 24 13:02:23 2025 GMT
        Subject: CN=8c6b350dfb73251e5bdd02b248ac332ebc52c424
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:94:e2:ff:93:d7:dc:c2:a5:b9:13:b0:60:7c:
                    72:d1:02:73:fb:0d:1f:90:6a:d1:ab:28:ee:5e:b7:
                    74:2e:3e:3d:28:4c:55:d2:3b:a0:52:2c:57:5d:9b:
                    0b:85:4c:e8:ef:69:56:0b:5c:9a:66:0d:20:0a:ef:
                    5e:4e:18:94:55:6f:8f:76:f5:18:47:53:84:52:4d:
                    bc:84:df:08:e6:57:6b:43:19:0f:37:8f:73:ff:d6:
                    e1:50:e8:9f:7c:49:93:fa:3a:ea:2d:2a:a5:51:34:
                    fa:60:eb:11:cd:41:30:7c:29:29:a2:e4:15:7f:78:
                    ed:b2:bc:e1:9b:76:e9:f3:35:14:ee:43:c3:31:fc:
                    4f:2f:b7:0e:d2:b5:9f:17:4e:d2:eb:6d:10:67:03:
                    a1:e8:10:c3:12:f8:6a:1c:ec:d4:a9:70:de:d3:00:
                    62:78:73:2a:5b:d3:cf:fe:ce:10:83:33:a4:0f:b3:
                    38:3e:62:4c:8c:06:0f:3d:c9:8d:b1:4b:ef:7b:2a:
                    17:18:af:79:bc:47:a7:12:a7:88:be:23:ea:f2:5e:
                    5f:3a:15:87:de:ee:43:c0:c7:4b:9e:36:ca:30:1f:
                    8a:28:ae:ba:86:16:ca:89:59:8b:cb:bf:14:a6:a6:
                    ed:5b:e8:5b:a1:0f:c4:2d:27:6a:3d:a5:03:04:8d:
                    a5:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:6B:35:0D:FB:73:25:1E:5B:DD:02:B2:48:AC:33:2E:BC:52:C4:24
            X509v3 Authority Key Identifier:
                keyid:C2:EA:FA:A3:0B:34:0E:CF:81:0A:4C:B9:AF:3B:51:C7:02:56:65:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wur6ows0Ds-BCky5rztRxwJWZZg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/wur6ows0Ds-BCky5rztRxwJWZZg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/a34a16-f880-4873-868b-5ecafda471f7/1/wur6ows0Ds-BCky5rztRxwJWZZg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:3d:d5:e3:0d:31:47:e5:ec:18:09:53:87:63:13:e1:a1:e5:
         8f:02:65:2d:0e:19:bb:3e:a1:3d:b3:3f:82:41:e8:d5:90:f3:
         8c:ad:63:3f:1f:19:67:e0:b5:db:79:67:84:7e:4b:b1:a0:94:
         25:9e:15:66:32:4c:ac:30:62:d7:24:6a:a2:33:31:15:b4:a5:
         79:85:6f:7d:8d:98:48:b2:99:96:4f:f2:1a:74:3e:8f:bf:21:
         7d:57:b3:e4:0b:ba:74:10:ef:d8:eb:89:c2:e1:b2:a3:97:d4:
         37:9b:12:46:d0:be:6d:c2:a7:f6:b9:ac:2a:75:14:bd:fc:c1:
         81:6a:29:fb:a6:ee:f3:f1:6b:5f:bd:b6:57:a2:f5:23:c1:29:
         d3:a9:a2:e6:74:fb:e2:c1:51:90:28:94:e2:4e:d8:17:19:dd:
         a2:61:8a:1b:b9:9d:fd:71:de:8c:c9:49:3e:8c:6b:e2:23:5a:
         6f:0e:33:62:67:a6:1d:1a:f5:64:2c:ca:b3:eb:20:37:70:8f:
         8e:18:29:7a:36:2c:4d:40:ad:ef:0a:0e:e4:fc:cd:45:58:bf:
         5c:3b:99:8c:84:26:23:bb:3b:2f:32:84:e9:ee:81:6c:20:bb:
         45:dd:1b:06:4b:27:8c:f2:18:5e:6d:91:81:ab:6b:fa:24:12:
         d1:50:3b:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:41:53 2025 by rpki-client