Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/e88f71-2382-4413-b562-197178ff18f2/1/wtJUnY0AZ6NyMjzHbY7gECt02DM.mft
File:                     wtJUnY0AZ6NyMjzHbY7gECt02DM.mft (raw, json)
Hash identifier:          4Dyeb1muxn4r0sJZUvJb5DPdndVKmEXVIUyfA1LLb5I=
Subject key identifier:   34:28:86:26:F9:93:18:85:25:96:EB:02:2B:BE:7E:41:F0:64:97:9A
Authority key identifier: C2:D2:54:9D:8D:00:67:A3:72:32:3C:C7:6D:8E:E0:10:2B:74:D8:33
Certificate issuer:       /CN=c2d2549d8d0067a372323cc76d8ee0102b74d833
Certificate serial:       0198D5BBB123185E1B59442FB4D4BA1C74B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wtJUnY0AZ6NyMjzHbY7gECt02DM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/e88f71-2382-4413-b562-197178ff18f2/1/wtJUnY0AZ6NyMjzHbY7gECt02DM.mft
Manifest number:          164B
Signing time:             Sat 23 Aug 2025 07:01:44 +0000
Manifest this update:     Sat 23 Aug 2025 07:01:44 +0000
Manifest next update:     Sun 24 Aug 2025 07:01:44 +0000
Files and hashes:         1: 1XPduftMWiA3mhDReUc68s4JF-M.roa (hash: BCW8W7hox85l+EvIIJN43p7alSsxdX+eLTmQrODF5v4=)
                          2: wtJUnY0AZ6NyMjzHbY7gECt02DM.crl (hash: 7leBFxU2Tqlsgvxgbilq2Gxq8YjIxitlDBLoz4H/qYA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/e88f71-2382-4413-b562-197178ff18f2/1/wtJUnY0AZ6NyMjzHbY7gECt02DM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/e88f71-2382-4413-b562-197178ff18f2/1/wtJUnY0AZ6NyMjzHbY7gECt02DM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wtJUnY0AZ6NyMjzHbY7gECt02DM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bb:b1:23:18:5e:1b:59:44:2f:b4:d4:ba:1c:74:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2d2549d8d0067a372323cc76d8ee0102b74d833
        Validity
            Not Before: Aug 23 07:01:44 2025 GMT
            Not After : Aug 24 07:01:44 2025 GMT
        Subject: CN=34288626f99318852596eb022bbe7e41f064979a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:47:b4:2b:8e:2c:6b:2f:3e:01:b1:67:9d:b9:
                    53:68:6f:19:42:4e:5d:18:51:82:8a:84:b5:20:c6:
                    66:4a:4f:55:a7:34:7d:80:e5:94:34:21:32:a4:f8:
                    f3:53:71:64:72:e0:c5:b2:22:35:24:ed:9c:48:ed:
                    f7:cf:f6:79:69:66:dd:c4:68:f2:40:4a:ca:17:22:
                    d9:90:b4:ed:fa:65:28:b3:bb:5f:02:06:45:2f:57:
                    60:08:53:9d:59:6f:8e:b6:f3:98:29:31:30:70:46:
                    24:cd:33:4a:ce:72:9c:a0:6e:8b:7e:6d:dd:f4:3f:
                    ed:6c:cd:55:ae:cc:fa:6b:06:bb:50:11:b7:9d:36:
                    44:d5:be:a6:00:c3:04:1c:4c:7b:fd:f9:21:fa:b5:
                    dc:17:0e:56:a1:e0:47:30:af:43:de:7f:d0:81:74:
                    4a:bb:40:1f:8d:1c:fc:c1:2a:28:87:04:8a:10:96:
                    66:b7:34:3b:40:c3:4c:f0:90:e8:85:6a:21:71:6c:
                    2b:1c:4f:fd:94:3e:af:4f:d5:cd:e2:9c:38:c5:a1:
                    98:11:9a:0f:5a:97:73:08:b1:fc:e7:70:5a:97:46:
                    e2:16:27:91:e3:41:eb:b2:ee:14:a8:37:20:cb:81:
                    62:c5:5c:66:4d:1e:8b:89:39:33:5b:44:a6:dc:0d:
                    7a:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:28:86:26:F9:93:18:85:25:96:EB:02:2B:BE:7E:41:F0:64:97:9A
            X509v3 Authority Key Identifier:
                keyid:C2:D2:54:9D:8D:00:67:A3:72:32:3C:C7:6D:8E:E0:10:2B:74:D8:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtJUnY0AZ6NyMjzHbY7gECt02DM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/e88f71-2382-4413-b562-197178ff18f2/1/wtJUnY0AZ6NyMjzHbY7gECt02DM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/e88f71-2382-4413-b562-197178ff18f2/1/wtJUnY0AZ6NyMjzHbY7gECt02DM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:09:ed:f3:8a:f6:66:cf:3d:6e:b1:46:f2:45:d5:2b:b3:81:
         31:40:65:a0:eb:36:fd:5a:27:01:20:e8:2c:73:b4:8c:a8:11:
         00:3d:7d:f7:96:75:a9:03:b4:31:b0:ba:fc:d0:e6:cd:32:46:
         38:b7:ff:d6:89:6f:db:8e:00:da:32:20:4a:91:55:74:75:0e:
         1b:e8:4c:1b:f1:62:a8:4e:63:10:da:41:ce:54:78:01:f3:6b:
         48:e3:f8:4a:7c:42:63:9d:dd:29:97:80:12:82:6e:f2:dd:be:
         59:4c:6f:e8:b8:91:d6:93:57:1c:78:c9:00:a7:53:da:bc:dd:
         53:a7:7c:f7:c8:57:50:c6:5b:64:95:56:f3:66:b5:66:9d:f9:
         8c:ac:4c:50:82:82:14:77:63:72:55:f8:93:f6:a9:89:9a:d7:
         0e:8b:43:a8:64:cb:d9:72:f3:59:8d:de:ea:72:31:f9:d3:91:
         8d:fa:6b:ea:0b:41:f3:46:5c:6a:c6:35:9c:d4:ff:22:95:9e:
         9b:c6:5c:84:50:72:2c:f2:44:97:d2:c4:8f:f6:54:9f:f4:bd:
         a5:b9:11:e8:87:99:86:02:69:0d:be:b6:a0:59:87:4e:ad:b3:
         17:55:73:cd:21:2c:61:32:90:73:43:cc:70:e1:66:5b:65:7a:
         65:87:12:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:26:08 2025 by rpki-client