Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/a744c4-5c24-48c2-ab06-60736859c0c4/1/WCBDwB163q3Zb1a9u-8nSOAIAjQ.mft
File:                     WCBDwB163q3Zb1a9u-8nSOAIAjQ.mft (raw, json)
Hash identifier:          /bnL1exd3fIFMpd2Ok95fMhKZBCdMF7PWljoqZydUhA=
Subject key identifier:   D9:84:4B:55:09:9A:1C:99:7C:B7:46:1B:24:FB:1B:C7:A1:3C:F9:FF
Authority key identifier: 58:20:43:C0:1D:7A:DE:AD:D9:6F:56:BD:BB:EF:27:48:E0:08:02:34
Certificate issuer:       /CN=582043c01d7adeadd96f56bdbbef2748e0080234
Certificate serial:       0198D54DCCCF0B43B166EAFA4E0095A9ED33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WCBDwB163q3Zb1a9u-8nSOAIAjQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/a744c4-5c24-48c2-ab06-60736859c0c4/1/WCBDwB163q3Zb1a9u-8nSOAIAjQ.mft
Manifest number:          02C1
Signing time:             Sat 23 Aug 2025 05:01:42 +0000
Manifest this update:     Sat 23 Aug 2025 05:01:42 +0000
Manifest next update:     Sun 24 Aug 2025 05:01:42 +0000
Files and hashes:         1: WCBDwB163q3Zb1a9u-8nSOAIAjQ.crl (hash: 5bdgBCvZ9SR701EAz8PUAwi10MFf9xbnwzubXQqV2FM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/a744c4-5c24-48c2-ab06-60736859c0c4/1/WCBDwB163q3Zb1a9u-8nSOAIAjQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/a744c4-5c24-48c2-ab06-60736859c0c4/1/WCBDwB163q3Zb1a9u-8nSOAIAjQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WCBDwB163q3Zb1a9u-8nSOAIAjQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4d:cc:cf:0b:43:b1:66:ea:fa:4e:00:95:a9:ed:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=582043c01d7adeadd96f56bdbbef2748e0080234
        Validity
            Not Before: Aug 23 05:01:42 2025 GMT
            Not After : Aug 24 05:01:42 2025 GMT
        Subject: CN=d9844b55099a1c997cb7461b24fb1bc7a13cf9ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d4:0a:8e:43:1f:55:71:22:0e:7b:14:f4:58:
                    84:32:e0:6c:29:87:bf:85:4f:2b:6c:dc:c8:4e:5d:
                    04:09:6c:2e:67:a8:fc:a0:cc:15:04:f4:4a:a9:83:
                    df:db:61:b9:d9:a9:27:dc:f1:3c:c6:d3:d8:05:81:
                    2a:20:53:05:3c:3f:f5:9e:22:2a:76:11:90:20:35:
                    f3:6a:23:23:16:92:be:7e:46:89:33:78:56:34:fe:
                    31:45:0b:ae:c0:81:e9:4d:18:81:66:8a:fe:c8:67:
                    5a:73:12:b3:18:c5:38:1a:f0:17:ae:c0:ea:85:3a:
                    e2:b4:fc:3f:41:65:f1:5c:1a:27:f5:a6:38:50:4d:
                    96:f6:ab:be:ca:8f:a0:c4:58:f9:0b:39:ea:77:ee:
                    19:b5:f9:8e:74:87:d9:92:62:aa:e2:cd:f3:41:e9:
                    42:89:a4:e2:fd:6a:10:d6:8e:1e:dc:95:b6:a4:54:
                    6d:27:2e:d9:b2:d7:37:bc:2e:b2:d0:f5:53:b2:94:
                    ba:32:1a:b9:16:4b:4c:00:21:f8:c5:42:32:37:30:
                    69:10:12:07:85:42:07:a6:81:b7:7b:75:37:fd:d7:
                    0a:fd:42:07:c4:f7:27:14:0b:7c:2e:ca:3a:a3:14:
                    08:e5:c4:6b:ad:eb:22:33:0f:04:a3:1c:be:bd:34:
                    6f:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:84:4B:55:09:9A:1C:99:7C:B7:46:1B:24:FB:1B:C7:A1:3C:F9:FF
            X509v3 Authority Key Identifier:
                keyid:58:20:43:C0:1D:7A:DE:AD:D9:6F:56:BD:BB:EF:27:48:E0:08:02:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WCBDwB163q3Zb1a9u-8nSOAIAjQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/a744c4-5c24-48c2-ab06-60736859c0c4/1/WCBDwB163q3Zb1a9u-8nSOAIAjQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/a744c4-5c24-48c2-ab06-60736859c0c4/1/WCBDwB163q3Zb1a9u-8nSOAIAjQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:77:d9:a0:24:7b:10:9a:4e:d3:8e:5e:99:0b:fa:ee:4c:1c:
         da:c0:0a:99:cb:2c:b3:4f:a9:fc:7f:02:ae:08:b4:6f:03:ad:
         89:5a:1f:65:24:cb:ba:e5:a0:7a:29:68:dc:65:b4:59:27:87:
         8b:b3:8f:51:75:ba:e2:bc:7e:c3:67:28:bc:d7:5f:50:76:5f:
         a5:4a:f7:c5:b1:a7:49:59:84:2c:44:e7:43:9b:36:72:bf:3f:
         c4:fa:c7:4c:a0:91:fa:9e:05:0c:61:b6:ac:e0:bb:e2:ec:b6:
         aa:f9:6b:40:07:d5:ee:8d:c3:5b:24:c0:71:74:31:00:a8:2e:
         c5:a7:65:d4:d8:20:3d:cd:aa:9e:56:72:80:79:68:03:ca:aa:
         99:7d:e8:b5:29:d9:fb:fa:39:3b:58:ac:0d:29:b5:67:86:32:
         13:2a:58:23:41:0b:e2:14:e8:67:41:95:5d:23:9f:c0:22:9b:
         c7:d6:e8:03:7f:dd:dd:27:84:9d:f8:f3:f6:1d:02:b8:4e:fa:
         48:c4:20:e1:ad:3d:bd:26:01:35:b4:29:90:c4:d4:7a:c2:ea:
         0d:b4:87:dc:0a:2d:bb:50:37:50:9f:16:de:19:35:09:66:a7:
         10:6e:dd:da:fa:cd:d4:9e:9e:7a:c5:c5:74:d8:24:d9:90:44:
         f4:ca:83:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:18:19 2025 by rpki-client