Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/9f5b81-ae4d-46a4-bb82-7655c89f14d6/1/wMrI1SSl_sf8g6I4MPv5Imp2Aa4.mft
File:                     wMrI1SSl_sf8g6I4MPv5Imp2Aa4.mft (raw, json)
Hash identifier:          5zdowpjKiKaiNgYMvqCs5lfDc3BwB/mr40xhko61RNE=
Subject key identifier:   6C:36:48:08:C4:C2:CD:27:CC:2C:F4:C0:D7:FC:73:0F:63:DA:CE:F3
Authority key identifier: C0:CA:C8:D5:24:A5:FE:C7:FC:83:A2:38:30:FB:F9:22:6A:76:01:AE
Certificate issuer:       /CN=c0cac8d524a5fec7fc83a23830fbf9226a7601ae
Certificate serial:       01988054C986AF73E1278A458477BB955848
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wMrI1SSl_sf8g6I4MPv5Imp2Aa4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/9f5b81-ae4d-46a4-bb82-7655c89f14d6/1/wMrI1SSl_sf8g6I4MPv5Imp2Aa4.mft
Manifest number:          0ADF
Signing time:             Wed 06 Aug 2025 17:01:36 +0000
Manifest this update:     Wed 06 Aug 2025 17:01:36 +0000
Manifest next update:     Thu 07 Aug 2025 17:01:36 +0000
Files and hashes:         1: 6qgSMfZ3_YfeL-wTXFWx5LVQFts.roa (hash: avRjJs3tQZCWYxxzrvKfKWMx6I1KbzcTNaTHuCyd7uA=)
                          2: wMrI1SSl_sf8g6I4MPv5Imp2Aa4.crl (hash: IDIC9g+HL9MQ3BX633nCbOJ6T2j6MlXTcbN4L17uDWU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/9f5b81-ae4d-46a4-bb82-7655c89f14d6/1/wMrI1SSl_sf8g6I4MPv5Imp2Aa4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/9f5b81-ae4d-46a4-bb82-7655c89f14d6/1/wMrI1SSl_sf8g6I4MPv5Imp2Aa4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wMrI1SSl_sf8g6I4MPv5Imp2Aa4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 17:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:80:54:c9:86:af:73:e1:27:8a:45:84:77:bb:95:58:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0cac8d524a5fec7fc83a23830fbf9226a7601ae
        Validity
            Not Before: Aug  6 17:01:36 2025 GMT
            Not After : Aug  7 17:01:36 2025 GMT
        Subject: CN=6c364808c4c2cd27cc2cf4c0d7fc730f63dacef3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:b7:43:14:64:34:a5:19:c0:12:dc:b4:be:a1:
                    ea:99:9f:7c:83:35:64:3a:eb:4f:73:70:ea:1e:4e:
                    db:34:71:ff:2e:28:88:35:10:f1:0b:fc:35:68:df:
                    13:22:af:e5:47:68:f3:84:87:53:97:62:9e:a6:30:
                    fe:4e:cd:ff:54:be:9e:cc:f4:4d:c4:b6:66:db:8a:
                    df:c9:e0:89:0b:a0:da:a3:60:40:77:d5:13:47:77:
                    5d:36:9a:d3:6f:de:01:d2:bf:d7:68:12:f1:81:4e:
                    66:3f:2b:e6:b6:75:ed:bc:b3:b1:43:6a:02:6c:6b:
                    eb:de:55:59:f6:f5:0c:df:fa:3e:36:0d:13:25:a4:
                    96:25:82:50:c6:b9:bc:13:4a:fe:7d:a6:d6:9f:b7:
                    23:4a:5b:ae:ed:e0:ec:17:49:f4:28:ca:e5:22:f8:
                    50:7a:14:08:6a:97:80:18:75:ea:12:68:b1:2b:38:
                    cc:33:63:9f:47:fc:29:3f:3d:46:f8:24:a4:0e:23:
                    45:61:63:7d:9b:b9:72:e8:29:8b:6d:2e:bb:87:e8:
                    18:87:27:29:bb:a6:fc:5d:cd:2d:c9:d2:7e:7c:42:
                    46:1e:79:88:30:11:6a:68:e0:3e:35:d6:52:dc:e7:
                    e6:83:71:4a:61:4c:9d:b2:38:23:e8:50:74:eb:a0:
                    90:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:36:48:08:C4:C2:CD:27:CC:2C:F4:C0:D7:FC:73:0F:63:DA:CE:F3
            X509v3 Authority Key Identifier:
                keyid:C0:CA:C8:D5:24:A5:FE:C7:FC:83:A2:38:30:FB:F9:22:6A:76:01:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wMrI1SSl_sf8g6I4MPv5Imp2Aa4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9f5b81-ae4d-46a4-bb82-7655c89f14d6/1/wMrI1SSl_sf8g6I4MPv5Imp2Aa4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9f5b81-ae4d-46a4-bb82-7655c89f14d6/1/wMrI1SSl_sf8g6I4MPv5Imp2Aa4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:75:a9:19:71:98:61:ca:66:71:dd:b1:5d:cc:94:ba:f3:f7:
         57:02:32:d2:20:07:6d:ee:b6:1b:a3:6a:aa:e1:9d:34:ea:24:
         f2:7f:98:65:6d:a9:b9:6c:63:1b:93:ef:d7:23:c5:22:50:31:
         f2:50:35:77:54:ae:1f:ef:7b:86:6e:b1:ed:2f:e8:02:bc:43:
         81:86:85:26:1f:76:79:2c:3d:8d:39:2f:45:0c:3c:69:f7:8e:
         48:dc:bc:56:08:0b:c5:ae:37:ec:b8:90:a7:5e:ad:60:d0:f7:
         65:6b:c5:bc:be:70:a0:81:fe:db:15:c6:c4:53:f3:8c:f6:28:
         ac:19:5b:dd:0a:1f:68:0b:3b:c7:54:a8:a7:96:d8:0a:78:5a:
         5e:b1:1f:03:2b:ac:b8:54:63:37:5e:69:82:bf:3a:9b:96:bc:
         b9:19:19:71:4a:0f:14:2a:04:37:86:ab:80:bc:96:16:cd:af:
         20:08:2f:59:23:f0:ed:7f:56:97:ae:e5:f2:d1:d0:aa:29:a0:
         4e:a3:cc:fb:85:47:34:65:94:37:ee:69:3d:c0:0a:7c:94:6d:
         24:2b:58:81:a2:9e:1f:80:ed:b2:ef:e5:38:60:3c:ae:8d:7a:
         5b:e5:3b:4d:cf:8d:61:00:2f:bd:a7:15:43:96:e6:45:bc:ff:
         50:2b:70:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:29:43 2025 by rpki-client