Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/27911b-064f-4d62-ba1c-e6626af759b7/1/WWAuSwhZTFyv--tQ0eCp1HDrkuU.mft
File:                     WWAuSwhZTFyv--tQ0eCp1HDrkuU.mft (raw, json)
Hash identifier:          s5twClhX4V8U/wksNRo1AntF4MQmeJVR+OURp3eYBTc=
Subject key identifier:   BF:0D:D0:08:90:39:DB:41:71:29:B5:34:A0:32:AB:A4:8F:29:88:3E
Authority key identifier: 59:60:2E:4B:08:59:4C:5C:AF:FB:EB:50:D1:E0:A9:D4:70:EB:92:E5
Certificate issuer:       /CN=59602e4b08594c5caffbeb50d1e0a9d470eb92e5
Certificate serial:       0198D7A9011D16F1D8C7178E5429841E814B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WWAuSwhZTFyv--tQ0eCp1HDrkuU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/27911b-064f-4d62-ba1c-e6626af759b7/1/WWAuSwhZTFyv--tQ0eCp1HDrkuU.mft
Manifest number:          1389
Signing time:             Sat 23 Aug 2025 16:00:33 +0000
Manifest this update:     Sat 23 Aug 2025 16:00:33 +0000
Manifest next update:     Sun 24 Aug 2025 16:00:33 +0000
Files and hashes:         1: WWAuSwhZTFyv--tQ0eCp1HDrkuU.crl (hash: n7Qo2/izKbxnp3VS0jCL4ynwtGll9hu9elQ1wvtRGSI=)
                          2: Xihi8aGiKGmm1wm5o0bdg-SFO4M.roa (hash: UB6flWnnaqdKwm5uBg0CvnmFwbf9VSTpt0Wz6M2wzJs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/27911b-064f-4d62-ba1c-e6626af759b7/1/WWAuSwhZTFyv--tQ0eCp1HDrkuU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/27911b-064f-4d62-ba1c-e6626af759b7/1/WWAuSwhZTFyv--tQ0eCp1HDrkuU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WWAuSwhZTFyv--tQ0eCp1HDrkuU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:a9:01:1d:16:f1:d8:c7:17:8e:54:29:84:1e:81:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59602e4b08594c5caffbeb50d1e0a9d470eb92e5
        Validity
            Not Before: Aug 23 16:00:33 2025 GMT
            Not After : Aug 24 16:00:33 2025 GMT
        Subject: CN=bf0dd0089039db417129b534a032aba48f29883e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:14:b3:fb:9a:06:69:02:1e:9d:4c:ba:f8:9c:
                    af:dd:01:ab:ad:67:43:4a:40:25:18:f1:e2:14:b1:
                    5f:3f:dd:fb:3b:8e:ec:c6:b0:a1:db:10:37:40:6b:
                    c2:fe:ed:bf:53:86:58:59:32:b0:9b:5b:6f:d0:45:
                    c3:31:f2:d3:1c:da:f0:4d:1c:53:d2:ac:b8:2d:fd:
                    81:eb:10:0d:56:cc:9a:ed:dc:c7:17:0f:18:53:92:
                    e5:de:ae:c4:5d:70:81:39:1f:3b:13:4a:4a:66:dd:
                    f8:f7:c9:a1:1f:8c:7b:06:20:f0:58:83:90:7a:72:
                    4c:69:79:53:fd:45:f6:05:81:9c:ef:bd:bb:76:97:
                    ae:55:c8:13:39:c6:d1:b6:d3:66:5c:40:eb:6e:df:
                    56:99:f8:a7:98:85:3d:ba:c0:a8:c8:23:a6:4b:5e:
                    b8:81:e8:3e:84:9d:2b:74:23:d0:3b:d0:64:50:6a:
                    87:5f:56:31:8e:48:56:83:dc:49:65:ab:6f:71:58:
                    e3:29:45:5c:59:22:f8:2b:47:63:be:11:65:8a:65:
                    9b:87:52:af:41:a5:9e:f5:cd:04:3e:db:88:82:91:
                    33:47:d9:c9:fe:f9:f0:85:12:cf:64:29:b8:9e:8d:
                    33:c8:be:ca:7a:71:e2:4f:34:65:12:f6:9f:b7:0c:
                    9c:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:0D:D0:08:90:39:DB:41:71:29:B5:34:A0:32:AB:A4:8F:29:88:3E
            X509v3 Authority Key Identifier:
                keyid:59:60:2E:4B:08:59:4C:5C:AF:FB:EB:50:D1:E0:A9:D4:70:EB:92:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WWAuSwhZTFyv--tQ0eCp1HDrkuU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/27911b-064f-4d62-ba1c-e6626af759b7/1/WWAuSwhZTFyv--tQ0eCp1HDrkuU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/27911b-064f-4d62-ba1c-e6626af759b7/1/WWAuSwhZTFyv--tQ0eCp1HDrkuU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:eb:a2:22:cd:94:34:b5:a1:a4:5b:49:9f:7b:47:e9:df:43:
         55:32:a9:3e:db:43:a0:b5:8f:7a:be:e1:a1:3d:e6:2d:cd:8a:
         b8:53:97:aa:d0:60:7a:51:d5:18:03:50:3b:2d:5c:60:bf:8f:
         de:14:4d:cb:53:80:13:38:a3:66:98:b5:e8:03:a7:07:42:74:
         b5:22:1d:a2:5f:6c:f0:af:d3:56:52:ac:0f:28:9c:95:10:0b:
         df:1f:49:fe:db:f1:b1:d7:f0:e5:d7:27:33:ca:5d:04:a2:81:
         d9:14:8b:19:65:20:8a:66:e4:f8:82:37:87:72:71:77:4e:2c:
         b8:b4:be:2b:01:da:b4:26:ec:92:a6:e8:d0:d3:d7:16:d0:b9:
         33:05:9d:74:4d:c9:31:c5:41:7e:c2:25:c5:2a:ab:64:19:aa:
         44:d2:7e:0b:e5:c0:91:74:cd:15:76:ca:59:ca:93:91:c5:5f:
         92:56:7a:35:f9:dd:7f:71:82:0c:bc:00:ce:15:80:64:17:93:
         58:d6:1e:01:35:27:38:c1:5e:ed:51:85:e4:45:b7:0b:3e:60:
         cb:99:ce:13:6d:f0:f3:eb:94:05:a3:49:fd:82:f9:fd:3d:99:
         c5:23:02:f6:36:9a:66:cc:73:4f:80:47:9b:b4:49:bc:09:0f:
         76:99:01:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:04:25 2025 by rpki-client