Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/26641a-b4f9-4fba-867d-f7f36457874e/1/WUt5mQ9haoNEyGAUj8kikQ4VTa0.mft
File:                     WUt5mQ9haoNEyGAUj8kikQ4VTa0.mft (raw, json)
Hash identifier:          GHkWBOw+1Yilz4XeVSluTWi7ep9QoLeSGnOCG1/YzMA=
Subject key identifier:   5E:14:B5:6C:F6:0E:EC:B2:15:50:7D:A8:AA:2F:A4:41:AD:B6:23:4C
Authority key identifier: 59:4B:79:99:0F:61:6A:83:44:C8:60:14:8F:C9:22:91:0E:15:4D:AD
Certificate issuer:       /CN=594b79990f616a8344c860148fc922910e154dad
Certificate serial:       0198D65FA96F29243C98EED0DB3E728379BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WUt5mQ9haoNEyGAUj8kikQ4VTa0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/26641a-b4f9-4fba-867d-f7f36457874e/1/WUt5mQ9haoNEyGAUj8kikQ4VTa0.mft
Manifest number:          0E90
Signing time:             Sat 23 Aug 2025 10:00:50 +0000
Manifest this update:     Sat 23 Aug 2025 10:00:50 +0000
Manifest next update:     Sun 24 Aug 2025 10:00:50 +0000
Files and hashes:         1: WUt5mQ9haoNEyGAUj8kikQ4VTa0.crl (hash: X7t3kp8M72uhwzLjHLNWLOXDfWNROWWtaS95ftnNpLo=)
                          2: g2GyYtJFOKWBkyrCF3Zn6C9X_qA.roa (hash: KOU5LPuCuD+DZVOgS7dpp5JLgW4GWVq1/6dngwGDNNg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/26641a-b4f9-4fba-867d-f7f36457874e/1/WUt5mQ9haoNEyGAUj8kikQ4VTa0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/26641a-b4f9-4fba-867d-f7f36457874e/1/WUt5mQ9haoNEyGAUj8kikQ4VTa0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WUt5mQ9haoNEyGAUj8kikQ4VTa0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:5f:a9:6f:29:24:3c:98:ee:d0:db:3e:72:83:79:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=594b79990f616a8344c860148fc922910e154dad
        Validity
            Not Before: Aug 23 10:00:50 2025 GMT
            Not After : Aug 24 10:00:50 2025 GMT
        Subject: CN=5e14b56cf60eecb215507da8aa2fa441adb6234c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:86:96:77:f9:5c:d2:80:b7:c6:88:f3:00:79:
                    a9:ff:bb:35:a2:e9:61:4d:a4:ab:29:0a:ef:39:19:
                    c4:a5:01:86:dc:27:f5:14:cf:c0:2f:e7:70:2c:05:
                    bc:ec:ff:aa:b6:1b:ad:af:91:09:da:1e:c7:4c:b6:
                    a1:42:a7:cb:a5:bb:3b:dc:2d:50:24:8d:dc:10:0c:
                    79:e6:d1:18:d7:71:2b:c5:25:55:59:7f:20:0d:73:
                    0f:9c:08:00:17:4c:f6:05:78:13:5e:08:68:5f:ae:
                    90:8e:e8:6f:89:8b:68:79:60:a7:b6:0b:d6:2a:32:
                    cf:ca:a7:4c:aa:92:bf:f7:5d:75:08:5c:ea:75:d6:
                    56:82:89:f9:bf:0f:eb:07:ea:e3:d3:58:62:d9:c6:
                    25:ee:db:48:af:31:ca:08:e8:98:e1:25:5f:01:f8:
                    b5:96:88:37:e2:6e:62:ab:78:65:06:33:b2:2f:8e:
                    39:8d:e3:8a:70:e0:dc:d0:2b:8f:3e:e4:9e:33:2e:
                    c7:60:1d:d3:11:90:13:5a:2c:6b:a2:f9:be:36:ae:
                    c1:93:8b:a4:09:c9:11:84:87:34:ec:61:fe:1a:ca:
                    e6:30:33:0f:51:fb:73:7e:81:66:d9:14:3b:1b:7c:
                    59:ab:51:99:90:2b:6f:bf:1a:b7:85:28:f2:64:26:
                    f8:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:14:B5:6C:F6:0E:EC:B2:15:50:7D:A8:AA:2F:A4:41:AD:B6:23:4C
            X509v3 Authority Key Identifier:
                keyid:59:4B:79:99:0F:61:6A:83:44:C8:60:14:8F:C9:22:91:0E:15:4D:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WUt5mQ9haoNEyGAUj8kikQ4VTa0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/26641a-b4f9-4fba-867d-f7f36457874e/1/WUt5mQ9haoNEyGAUj8kikQ4VTa0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/26641a-b4f9-4fba-867d-f7f36457874e/1/WUt5mQ9haoNEyGAUj8kikQ4VTa0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:a3:24:fc:53:45:c2:6c:56:f6:cc:1a:51:5d:83:a1:84:f9:
         da:12:24:3e:3f:0e:84:5a:f3:76:80:8a:32:19:d6:bd:b0:2e:
         00:4a:f3:68:d3:83:e7:e6:b5:42:a6:9d:56:c4:b2:b8:3c:3b:
         d3:2c:6c:c2:88:de:8f:ef:37:1d:e3:f2:0f:40:c2:f0:02:9f:
         91:49:9a:78:60:0a:75:71:b3:93:60:75:34:42:f1:13:2a:e9:
         16:a0:66:ab:45:c4:c0:74:5b:17:93:b4:f2:24:05:82:4c:7c:
         c4:21:d8:c9:c6:43:40:12:bd:a6:4d:a1:37:49:81:0f:1e:8d:
         18:b3:56:13:9b:a9:42:1c:f9:50:32:05:78:65:a9:06:39:43:
         14:bf:d3:a0:80:44:94:63:53:4c:0d:26:4d:c0:63:74:f0:37:
         1a:4c:62:59:88:65:fe:ee:5c:2f:8c:f5:8e:43:69:c6:bc:b9:
         a6:3f:70:01:ac:dd:2f:d8:a1:ac:ec:d4:f5:3c:e5:d1:57:d9:
         a1:26:6b:92:5b:14:68:cc:48:92:e1:72:99:1e:f9:8f:3d:c9:
         4b:ca:8c:d8:23:4a:ef:95:11:90:82:e1:8f:f6:dd:a5:45:b8:
         0d:f6:24:1b:92:51:69:1e:9a:58:75:d4:78:47:08:9a:f5:d9:
         d8:dc:b7:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:29:43 2025 by rpki-client