Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e95e79-2702-40e0-9b8a-e7717b287066/1/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.mft
File:                     ws4IFBZ-qoGJ_YTTkCcOrfKUgss.mft (raw, json)
Hash identifier:          YHa3vhVVnF3d5q4IBM/JDuSlE6qXXpKNnDrFYtpk75M=
Subject key identifier:   B3:38:D4:3A:F8:33:A5:D9:63:EC:2C:30:8A:96:CC:25:2D:4A:F5:F7
Authority key identifier: C2:CE:08:14:16:7E:AA:81:89:FD:84:D3:90:27:0E:AD:F2:94:82:CB
Certificate issuer:       /CN=c2ce0814167eaa8189fd84d390270eadf29482cb
Certificate serial:       0198D5F14FF5BE88CEB51B58AA0FD4ADAB35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/e95e79-2702-40e0-9b8a-e7717b287066/1/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.mft
Manifest number:          0ACA
Signing time:             Sat 23 Aug 2025 08:00:18 +0000
Manifest this update:     Sat 23 Aug 2025 08:00:18 +0000
Manifest next update:     Sun 24 Aug 2025 08:00:18 +0000
Files and hashes:         1: R1gidcfPTDL9l_CbPS671EyX5iY.roa (hash: c4a4L7/lsOBY0SjW+Je19dj12ru5NWUKEP164tb+S4Q=)
                          2: Re7xjUICEpcefdPF_f0YtM8qXn4.roa (hash: ekIH5kxgf0bGVz6q5zIjK4NfDPuAaNIY8i0OtjeIH9w=)
                          3: f7Zg_MmXx6IJnLloz3q786pe2i4.roa (hash: mDHnzXpmbP7OAduSpZ+5VZ3yHq/l9M3cROQgCCtCtyw=)
                          4: ws4IFBZ-qoGJ_YTTkCcOrfKUgss.crl (hash: yoUK0FORq1Vxf48KQCjF7Ghfue9+EoP1toLU29vHesM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/e95e79-2702-40e0-9b8a-e7717b287066/1/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/e95e79-2702-40e0-9b8a-e7717b287066/1/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:f1:4f:f5:be:88:ce:b5:1b:58:aa:0f:d4:ad:ab:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2ce0814167eaa8189fd84d390270eadf29482cb
        Validity
            Not Before: Aug 23 08:00:18 2025 GMT
            Not After : Aug 24 08:00:18 2025 GMT
        Subject: CN=b338d43af833a5d963ec2c308a96cc252d4af5f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:e0:b2:4e:47:05:9f:94:bf:7c:a4:54:0f:e7:
                    e5:f4:51:34:da:52:c0:e1:49:9e:03:a8:52:ac:c7:
                    bc:40:af:8b:3c:3e:ce:11:0e:3b:7c:66:f0:c4:80:
                    56:06:81:6f:26:ee:cf:b6:de:c9:fa:84:fa:8a:9d:
                    16:18:6c:22:f5:f4:e4:bf:ce:98:51:99:2a:c6:0e:
                    28:47:0a:93:6e:3f:c0:b4:ed:5c:07:d8:ad:18:7c:
                    3e:3f:33:33:65:03:09:b3:f4:1e:02:1f:37:19:70:
                    5c:35:76:ff:94:61:54:5f:96:75:67:c6:08:af:02:
                    77:82:96:fe:a5:d8:7b:8b:ea:95:01:c3:01:38:79:
                    c3:ab:09:21:f0:e9:01:fe:9c:07:28:d1:cb:88:29:
                    b2:0d:d9:2e:69:6f:12:a5:4d:3f:ae:29:91:6c:c0:
                    c9:a8:ed:d1:08:05:42:e6:28:b2:9d:0b:81:c5:8c:
                    b4:82:b0:7d:09:c7:d3:07:47:e2:62:d4:41:aa:09:
                    38:a6:64:c2:dd:c2:17:8e:57:35:96:bd:f9:ee:32:
                    40:32:a7:7a:4a:1b:7c:56:90:ad:89:a8:15:b1:08:
                    c2:5a:5f:c1:69:95:f9:5b:bb:30:cf:73:a3:17:cb:
                    c2:9b:3d:d4:6b:52:e1:6e:fe:b6:7f:31:fe:22:cb:
                    52:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:38:D4:3A:F8:33:A5:D9:63:EC:2C:30:8A:96:CC:25:2D:4A:F5:F7
            X509v3 Authority Key Identifier:
                keyid:C2:CE:08:14:16:7E:AA:81:89:FD:84:D3:90:27:0E:AD:F2:94:82:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e95e79-2702-40e0-9b8a-e7717b287066/1/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e95e79-2702-40e0-9b8a-e7717b287066/1/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e5:e6:1a:15:aa:6b:ec:22:23:9d:ad:7b:2b:ab:a2:8b:f2:55:
         7a:b3:c4:0c:79:e5:02:42:5e:23:98:f9:a7:99:62:22:15:16:
         ea:7b:a1:ad:d7:2f:03:cf:74:cc:c6:0f:d4:82:6d:58:31:38:
         35:30:9d:ed:cb:bb:92:47:5b:e3:c0:df:31:fc:eb:6e:41:2b:
         44:57:33:9b:03:37:e5:8c:48:b5:d4:11:2d:f4:78:dd:87:1d:
         3d:57:82:db:38:23:8d:f1:17:fe:e5:bd:07:20:9e:90:1f:4b:
         ea:fe:30:ca:8f:72:3e:0c:cd:34:a4:0b:b4:41:b4:a3:5b:5f:
         98:e9:71:15:72:f4:00:cf:2d:ff:89:72:58:3b:6b:33:b7:a8:
         4e:46:98:91:60:bd:ec:94:a5:84:e3:d8:51:77:cd:5c:ef:1e:
         c1:a8:c2:00:60:11:91:3e:e7:6b:9c:2e:62:e8:75:5a:41:fc:
         7c:d5:18:b7:fe:03:94:44:2e:ff:2b:a0:6a:6b:ff:75:48:8b:
         a7:3e:9b:d6:90:22:42:02:6a:bf:91:5b:31:85:29:15:9d:40:
         f6:0d:1d:50:bc:3f:c3:15:f4:7f:81:d3:62:e2:3f:d0:d5:c2:
         90:07:44:48:47:c5:ad:02:f4:e8:09:0e:a4:b2:76:aa:d7:63:
         26:d0:06:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:26:56 2025 by rpki-client