Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/53ad2b-359b-436a-a2eb-afe84e18d56f/1/Wanp-OpHSG2Aydbc_VaPZU1PB-4.mft
File:                     Wanp-OpHSG2Aydbc_VaPZU1PB-4.mft (raw, json)
Hash identifier:          3RHxS2EhwyLAme/lu1BcHnw6DMQGTgA34kckKtFv1bs=
Subject key identifier:   2D:C5:BB:3F:F0:F6:B5:0A:F0:57:59:67:84:36:32:EE:A5:44:65:1F
Authority key identifier: 59:A9:E9:F8:EA:47:48:6D:80:C9:D6:DC:FD:56:8F:65:4D:4F:07:EE
Certificate issuer:       /CN=59a9e9f8ea47486d80c9d6dcfd568f654d4f07ee
Certificate serial:       0199FFC7D544BC54B797966A552442F1F56C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wanp-OpHSG2Aydbc_VaPZU1PB-4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/53ad2b-359b-436a-a2eb-afe84e18d56f/1/Wanp-OpHSG2Aydbc_VaPZU1PB-4.mft
Manifest number:          0E9A
Signing time:             Mon 20 Oct 2025 04:01:50 +0000
Manifest this update:     Mon 20 Oct 2025 04:01:50 +0000
Manifest next update:     Tue 21 Oct 2025 04:01:50 +0000
Files and hashes:         1: EBOIj8lPqb1xDaW8RBbB1Ok6-LE.roa (hash: QTASo2dR9S0FHaEMTzsEAOKw6oKeRRFkI+5ogAhRzoY=)
                          2: Wanp-OpHSG2Aydbc_VaPZU1PB-4.crl (hash: CF16wamEdP2LPEPB08NSoZ7/iAH5VbhFEEWfqmP/46c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/53ad2b-359b-436a-a2eb-afe84e18d56f/1/Wanp-OpHSG2Aydbc_VaPZU1PB-4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/53ad2b-359b-436a-a2eb-afe84e18d56f/1/Wanp-OpHSG2Aydbc_VaPZU1PB-4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Wanp-OpHSG2Aydbc_VaPZU1PB-4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ff:c7:d5:44:bc:54:b7:97:96:6a:55:24:42:f1:f5:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59a9e9f8ea47486d80c9d6dcfd568f654d4f07ee
        Validity
            Not Before: Oct 20 04:01:50 2025 GMT
            Not After : Oct 21 04:01:50 2025 GMT
        Subject: CN=2dc5bb3ff0f6b50af0575967843632eea544651f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c6:66:3a:05:9c:af:96:c2:f5:ce:ca:1d:58:
                    0a:15:23:5c:a6:27:e7:7b:b6:f4:a8:a2:76:9d:0d:
                    8d:0f:32:00:63:2a:2e:d4:f4:d4:24:45:75:a9:2b:
                    d3:bb:c3:0d:a9:07:e5:9e:17:37:5c:ef:08:71:ad:
                    53:60:c3:54:6e:3e:86:f7:aa:6f:a2:0a:b5:b7:1f:
                    82:f8:0f:a6:98:c6:9e:4b:7b:bb:98:01:ba:17:90:
                    02:13:e6:2a:5e:fb:79:d7:b3:9f:54:1e:7f:1e:ad:
                    44:0a:12:88:ef:36:0c:d5:1e:1e:2b:90:87:25:93:
                    43:31:64:b4:92:38:dd:14:fd:49:a3:af:8b:18:f2:
                    b4:29:46:9a:13:a8:b2:8b:75:19:47:78:21:32:cb:
                    85:78:c5:a1:7e:a0:f5:77:ea:84:6a:1b:df:a0:f8:
                    4a:f7:0f:0f:21:38:c4:04:f3:c0:97:1c:ad:17:70:
                    00:93:1d:51:b0:08:13:16:3a:4c:32:62:6d:af:4b:
                    79:67:0e:a6:25:33:5c:45:c9:a3:11:ad:26:ee:75:
                    32:ad:c2:9e:f9:2a:84:fe:1c:9c:fe:22:25:8f:88:
                    02:5e:20:32:4f:85:e5:d2:47:d4:05:23:a9:a9:ae:
                    c6:08:45:f2:e3:f4:6f:6d:7a:70:1f:56:56:c6:5d:
                    c6:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:C5:BB:3F:F0:F6:B5:0A:F0:57:59:67:84:36:32:EE:A5:44:65:1F
            X509v3 Authority Key Identifier:
                keyid:59:A9:E9:F8:EA:47:48:6D:80:C9:D6:DC:FD:56:8F:65:4D:4F:07:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wanp-OpHSG2Aydbc_VaPZU1PB-4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/53ad2b-359b-436a-a2eb-afe84e18d56f/1/Wanp-OpHSG2Aydbc_VaPZU1PB-4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/53ad2b-359b-436a-a2eb-afe84e18d56f/1/Wanp-OpHSG2Aydbc_VaPZU1PB-4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:9d:b3:79:cd:89:64:29:1f:ca:5b:46:21:78:64:46:e1:9d:
         1b:41:e7:4f:e9:84:db:36:cf:49:1f:3f:49:7e:50:c2:c9:fe:
         11:68:1a:d6:c2:b3:e1:5d:bd:1e:d9:f9:e7:16:fd:7f:37:18:
         9d:e5:2b:41:bf:4d:bd:1e:b9:11:95:71:5c:57:40:78:a9:44:
         77:df:61:2a:4a:f7:f8:34:ba:b3:1f:9f:c2:18:34:c4:21:9b:
         2c:85:28:79:5b:b4:85:ad:b5:30:d2:2e:42:93:6d:de:d6:19:
         32:9b:06:b3:09:d2:81:1e:44:e6:5f:62:27:86:30:14:11:72:
         4c:bf:c4:1f:5d:59:7f:b4:85:c8:bc:a6:f9:26:ad:29:2d:f2:
         66:8e:6c:5d:7d:05:df:1e:e9:31:9f:e8:84:60:6d:fc:27:6e:
         6c:8f:0a:82:48:46:8f:fd:bb:08:14:c9:10:4f:bc:2d:e8:5f:
         dc:e9:41:84:23:44:7d:9c:54:f1:d8:40:b4:b4:b9:61:c1:67:
         44:45:9e:f8:fb:92:c4:92:50:ec:16:85:ca:34:98:bf:60:0f:
         0d:1a:24:8a:8b:15:af:66:9c:fc:09:c0:71:b7:48:92:24:c6:
         b8:5a:69:ac:74:a0:18:7f:01:25:f7:d9:74:4d:01:b5:c8:7a:
         79:e2:8f:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:47:35 2025 by rpki-client