Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/075d2f-46bd-4bde-9835-95ff5c5dbb50/1/_WWGk-wyfq1P6DpXuCYBzCVSqr0.mft
File:                     _WWGk-wyfq1P6DpXuCYBzCVSqr0.mft (raw, json)
Hash identifier:          n6H7DF/JfY5iVfCzitIAEkS0UxzHIiKF5VbKN1deSRs=
Subject key identifier:   F3:95:93:C0:14:A6:8B:95:83:5F:B3:92:9A:4D:9A:65:86:5F:EC:A3
Authority key identifier: FD:65:86:93:EC:32:7E:AD:4F:E8:3A:57:B8:26:01:CC:25:52:AA:BD
Certificate issuer:       /CN=fd658693ec327ead4fe83a57b82601cc2552aabd
Certificate serial:       0198D7061C7B824B43E88C291039ABB2AA86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_WWGk-wyfq1P6DpXuCYBzCVSqr0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/075d2f-46bd-4bde-9835-95ff5c5dbb50/1/_WWGk-wyfq1P6DpXuCYBzCVSqr0.mft
Manifest number:          0617
Signing time:             Sat 23 Aug 2025 13:02:38 +0000
Manifest this update:     Sat 23 Aug 2025 13:02:38 +0000
Manifest next update:     Sun 24 Aug 2025 13:02:38 +0000
Files and hashes:         1: _WWGk-wyfq1P6DpXuCYBzCVSqr0.crl (hash: OoiN4dowm55tjdo63rsZsk82qDR8VL23B9h3nHDgIAA=)
                          2: ibOUE5neJ1faEM4n3lvggyMTtCY.roa (hash: qNPQJK6mqWJ5O0pHvAFNOCpKwBIQDgwq4QrZUIfBmEU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/075d2f-46bd-4bde-9835-95ff5c5dbb50/1/_WWGk-wyfq1P6DpXuCYBzCVSqr0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/075d2f-46bd-4bde-9835-95ff5c5dbb50/1/_WWGk-wyfq1P6DpXuCYBzCVSqr0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_WWGk-wyfq1P6DpXuCYBzCVSqr0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:50:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:06:1c:7b:82:4b:43:e8:8c:29:10:39:ab:b2:aa:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd658693ec327ead4fe83a57b82601cc2552aabd
        Validity
            Not Before: Aug 23 13:02:38 2025 GMT
            Not After : Aug 24 13:02:38 2025 GMT
        Subject: CN=f39593c014a68b95835fb3929a4d9a65865feca3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:bf:eb:38:f0:2e:43:9d:98:a6:8b:fb:16:76:
                    0e:f5:81:53:85:d0:35:e4:e7:29:6f:69:9d:74:9f:
                    8f:fd:0c:1f:f2:f8:ce:d7:10:4e:f1:9d:dd:17:4b:
                    43:5d:cd:fd:19:d7:ab:61:68:24:0d:47:c5:1e:e8:
                    cc:ac:cf:3b:76:e9:41:01:93:2f:fc:2e:83:b2:01:
                    09:bc:92:a8:19:9e:c1:09:89:6b:d4:c2:48:da:be:
                    90:bd:e1:6f:78:fc:a6:bf:61:a2:d9:ff:ed:1c:ba:
                    67:83:f2:cb:a0:99:c1:14:62:f8:8e:af:a0:00:67:
                    92:02:cb:6c:2d:bc:0f:c1:da:64:6e:f1:18:a0:e4:
                    34:20:39:db:29:fe:1a:6c:2e:10:03:2a:c2:3a:7d:
                    8d:0b:88:d2:48:fa:7f:44:b2:47:2b:db:51:2f:b5:
                    f7:f2:f1:fc:ac:0b:a8:51:a3:53:b3:c3:6e:36:58:
                    d6:f4:bb:95:60:1a:5c:4a:52:91:f2:e9:8e:4f:49:
                    46:c6:da:21:3a:a6:d3:d2:6a:0f:65:6c:8b:d0:02:
                    b3:a2:11:18:58:13:46:70:f0:fe:b3:39:9a:b1:30:
                    41:e1:27:ae:ad:78:00:1c:46:bd:2f:39:09:e0:57:
                    2f:3e:97:33:61:30:0e:22:f9:d8:d0:29:63:9b:30:
                    b6:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:95:93:C0:14:A6:8B:95:83:5F:B3:92:9A:4D:9A:65:86:5F:EC:A3
            X509v3 Authority Key Identifier:
                keyid:FD:65:86:93:EC:32:7E:AD:4F:E8:3A:57:B8:26:01:CC:25:52:AA:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_WWGk-wyfq1P6DpXuCYBzCVSqr0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/075d2f-46bd-4bde-9835-95ff5c5dbb50/1/_WWGk-wyfq1P6DpXuCYBzCVSqr0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/075d2f-46bd-4bde-9835-95ff5c5dbb50/1/_WWGk-wyfq1P6DpXuCYBzCVSqr0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:95:ca:62:23:7a:66:65:5d:e2:4e:5f:46:7e:81:0e:b8:a0:
         14:fe:84:69:36:a0:57:c3:ac:41:a3:09:53:0a:a1:38:89:9c:
         38:34:69:68:5a:7c:e3:80:d5:18:f5:20:07:29:13:bf:22:ad:
         e8:7a:47:dc:3f:11:8b:96:00:bc:8a:76:d1:8d:67:95:b4:38:
         d7:14:c4:90:1f:63:5b:15:a9:5f:1b:4e:8e:01:e9:4b:76:c2:
         68:48:34:e0:2a:f4:e1:dd:b1:4a:16:0b:cd:42:eb:13:98:e4:
         2e:41:54:5f:1a:25:bb:12:ba:8a:3d:90:d8:ee:07:03:00:d1:
         13:78:45:21:7b:4d:5b:b1:61:8f:5c:c8:b0:fd:8e:7d:8f:54:
         da:1f:25:a6:fa:fb:b3:df:fb:8b:14:d2:f4:3d:d6:b2:7b:56:
         59:cb:39:4b:94:26:89:f9:77:58:8d:d1:5e:1a:6e:87:4e:66:
         f3:df:f6:a4:52:87:4d:a8:cc:ba:86:98:c5:31:0e:3c:a6:e9:
         33:e3:0a:a9:61:1d:ea:b1:22:40:84:9a:70:08:c9:b9:6d:2c:
         c9:b6:26:1c:e0:ab:7f:6a:43:35:f1:07:5c:e0:b6:13:e6:5a:
         d4:32:c4:78:16:56:30:18:9d:01:8c:66:73:a7:57:38:ea:10:
         34:20:d3:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:08:32 2025 by rpki-client