Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/b72999-0952-4576-b118-21e739563683/1/dwHuTBoib59iQp81dWp4mApbRXo.mft
File:                     dwHuTBoib59iQp81dWp4mApbRXo.mft (raw, json)
Hash identifier:          45onzfa0AC21twyjflWmacIaMFQBZTI4HrI9iqblYJ4=
Subject key identifier:   1A:D8:71:8E:F0:FA:F2:F8:26:78:29:0B:03:74:30:CA:A4:2C:B2:A1
Authority key identifier: 77:01:EE:4C:1A:22:6F:9F:62:42:9F:35:75:6A:78:98:0A:5B:45:7A
Certificate issuer:       /CN=7701ee4c1a226f9f62429f35756a78980a5b457a
Certificate serial:       0198D515FE37F6EEFEF3256AD9C294B56BF4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dwHuTBoib59iQp81dWp4mApbRXo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/b72999-0952-4576-b118-21e739563683/1/dwHuTBoib59iQp81dWp4mApbRXo.mft
Manifest number:          15E2
Signing time:             Sat 23 Aug 2025 04:00:44 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:44 +0000
Manifest next update:     Sun 24 Aug 2025 04:00:44 +0000
Files and hashes:         1: dwHuTBoib59iQp81dWp4mApbRXo.crl (hash: wrRXFy2z4NYnkPKcGsbevyVLUHn+z8hDbrQ6DPb83Sg=)
                          2: eNeF4nAZ4czrvnsr1aVLaDs6aOA.roa (hash: tYhPAoHdmBCSAa68GIa0M0wkQIoMsHZdOyQCiBG9waM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/b72999-0952-4576-b118-21e739563683/1/dwHuTBoib59iQp81dWp4mApbRXo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/b72999-0952-4576-b118-21e739563683/1/dwHuTBoib59iQp81dWp4mApbRXo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dwHuTBoib59iQp81dWp4mApbRXo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:15:fe:37:f6:ee:fe:f3:25:6a:d9:c2:94:b5:6b:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7701ee4c1a226f9f62429f35756a78980a5b457a
        Validity
            Not Before: Aug 23 04:00:44 2025 GMT
            Not After : Aug 24 04:00:44 2025 GMT
        Subject: CN=1ad8718ef0faf2f82678290b037430caa42cb2a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:9a:04:d4:65:5f:ae:45:01:2b:e4:0b:7a:83:
                    62:8c:ad:e0:93:cd:30:9a:ab:4d:a8:f1:e5:62:c0:
                    6d:53:ef:70:2b:ac:2f:7c:f5:c8:4d:bb:65:2b:d4:
                    74:36:27:1a:cd:15:28:92:7c:6e:d5:55:70:d3:bf:
                    ec:26:3a:57:7b:5e:a4:c9:29:5c:5b:b9:f1:cd:a9:
                    e3:12:e4:5c:c3:a7:10:b1:dc:7e:7b:1e:a5:37:6a:
                    4e:e4:ed:65:28:b6:69:45:e4:fe:76:8c:91:63:81:
                    df:12:03:b6:c3:b7:49:29:a3:0d:d8:2d:53:d2:af:
                    a3:30:b5:d6:e0:56:1a:40:04:bb:43:c4:30:22:f6:
                    62:2a:b4:75:ac:2d:ad:66:b4:7c:c6:ca:b3:e0:16:
                    26:d7:9b:05:83:46:b4:83:68:b4:61:7b:81:9d:c8:
                    c5:ac:f5:26:77:61:1e:fa:7b:e9:83:ee:df:e7:c8:
                    c7:32:c0:f7:92:6b:62:64:fd:78:f5:20:63:32:ed:
                    5b:d0:92:d8:f8:c8:6f:5e:f5:f0:2a:af:33:05:f0:
                    73:a4:57:db:f6:8c:c5:0f:6f:c7:c9:26:a9:85:a7:
                    77:47:25:57:90:85:90:a1:f5:78:f0:95:23:b4:34:
                    bb:6d:9e:bb:b1:ef:77:ca:81:ef:77:e9:08:1d:f6:
                    db:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:D8:71:8E:F0:FA:F2:F8:26:78:29:0B:03:74:30:CA:A4:2C:B2:A1
            X509v3 Authority Key Identifier:
                keyid:77:01:EE:4C:1A:22:6F:9F:62:42:9F:35:75:6A:78:98:0A:5B:45:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dwHuTBoib59iQp81dWp4mApbRXo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b72999-0952-4576-b118-21e739563683/1/dwHuTBoib59iQp81dWp4mApbRXo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/b72999-0952-4576-b118-21e739563683/1/dwHuTBoib59iQp81dWp4mApbRXo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:16:3e:97:34:f0:43:b6:37:fa:c4:9f:01:07:c3:d1:25:e2:
         02:7e:f3:a4:82:c0:11:41:45:e3:bb:29:bb:2b:97:ed:41:79:
         bc:56:a4:7a:61:1e:c4:2e:a9:09:1c:d4:3e:ee:e3:76:a0:fa:
         18:67:bd:df:ba:a5:f6:78:4a:d2:27:a6:1e:4c:b5:2b:de:fb:
         66:4a:e7:a8:07:84:c5:35:a2:c5:f5:dd:74:44:29:0c:d0:12:
         fc:d1:e1:0f:2a:f5:87:6e:28:34:d3:b0:83:20:7b:a1:9a:89:
         fe:d5:9e:51:0c:d9:d4:6e:17:69:ea:3b:93:a2:43:d0:bd:8c:
         41:3d:d7:1c:ad:6a:14:e6:38:16:d1:a3:0e:be:9c:dc:bb:ae:
         49:3c:4c:21:7b:cd:4b:10:42:a7:38:59:f1:98:0d:e1:2d:7b:
         07:7b:24:e4:40:37:06:92:05:59:45:0c:fa:df:74:a2:fd:33:
         af:9c:63:e5:3e:9b:76:c6:81:dc:c4:b6:ac:7c:33:d3:1f:aa:
         9b:59:6a:49:f9:90:89:19:86:10:9f:dc:46:35:07:7e:d6:1d:
         c4:7d:a8:40:09:bc:68:97:8b:fb:24:e0:02:99:56:ea:64:f6:
         d2:59:bc:cc:59:54:47:4e:eb:fb:34:f8:d7:f6:7d:e3:7b:05:
         9c:43:6a:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:31:03 2025 by rpki-client