Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/dac70f-f172-44ce-9be5-5af89e6cd055/1/Wtn1vraTNIRUHOVigsmJ7W6L26M.mft
File:                     Wtn1vraTNIRUHOVigsmJ7W6L26M.mft (raw, json)
Hash identifier:          fDjVeXLiVIty+6Tl8VeiWoSFZivF1utAX/Rui/8bGok=
Subject key identifier:   7B:AC:34:62:A5:A4:58:DA:4B:23:D1:D0:E5:2C:8B:E2:F0:81:79:3F
Authority key identifier: 5A:D9:F5:BE:B6:93:34:84:54:1C:E5:62:82:C9:89:ED:6E:8B:DB:A3
Certificate issuer:       /CN=5ad9f5beb6933484541ce56282c989ed6e8bdba3
Certificate serial:       01987418C3CD1D06C276F1C3CF7BF30E4168
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wtn1vraTNIRUHOVigsmJ7W6L26M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/dac70f-f172-44ce-9be5-5af89e6cd055/1/Wtn1vraTNIRUHOVigsmJ7W6L26M.mft
Manifest number:          03DB
Signing time:             Mon 04 Aug 2025 08:00:36 +0000
Manifest this update:     Mon 04 Aug 2025 08:00:36 +0000
Manifest next update:     Tue 05 Aug 2025 08:00:36 +0000
Files and hashes:         1: HZBz5MrqBdAGlLzttgW8k7z_g5Y.roa (hash: vKALeCSvoIMsQY1cUM7A8I/fEETWOT998Li6zTAWX7w=)
                          2: Wtn1vraTNIRUHOVigsmJ7W6L26M.crl (hash: kJ/1eSw8fYyoaXZ0ySzx5JvQBvBp5GBvMXqPXlSb1ck=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/dac70f-f172-44ce-9be5-5af89e6cd055/1/Wtn1vraTNIRUHOVigsmJ7W6L26M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/dac70f-f172-44ce-9be5-5af89e6cd055/1/Wtn1vraTNIRUHOVigsmJ7W6L26M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Wtn1vraTNIRUHOVigsmJ7W6L26M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:18:c3:cd:1d:06:c2:76:f1:c3:cf:7b:f3:0e:41:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ad9f5beb6933484541ce56282c989ed6e8bdba3
        Validity
            Not Before: Aug  4 08:00:36 2025 GMT
            Not After : Aug  5 08:00:36 2025 GMT
        Subject: CN=7bac3462a5a458da4b23d1d0e52c8be2f081793f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:a8:5e:65:27:7d:0c:7a:c3:41:e6:14:2f:d3:
                    e3:30:da:6f:0d:5f:67:13:af:b3:65:43:91:d0:a3:
                    b6:c1:43:c5:f2:74:21:4b:4a:5a:88:1c:d3:51:ab:
                    83:d9:f5:9b:b7:42:f7:16:c1:37:12:60:f4:6e:02:
                    c7:76:4d:1b:f3:f5:c8:cb:17:ff:68:21:c7:20:2a:
                    f9:66:e2:03:3d:48:f6:a2:cc:4e:1c:14:c5:59:bc:
                    8d:a9:01:b7:a6:c7:56:00:1c:09:64:c0:e5:67:9f:
                    68:7b:72:96:89:fa:94:e0:5b:1c:be:c7:a3:b8:67:
                    fa:f4:ed:1c:17:5f:cf:20:cd:48:66:d5:2e:70:03:
                    bc:0e:f6:ab:37:f2:94:71:9d:e0:08:f8:19:32:e6:
                    b6:d3:ff:2c:29:d3:81:43:6b:7e:19:19:77:d3:af:
                    1d:03:9e:87:01:d3:64:5b:3b:aa:3c:d7:60:cc:d1:
                    64:1f:c1:75:e3:e7:a4:e5:70:72:b5:ca:9c:ec:f9:
                    ec:ea:90:a4:02:ff:0f:bb:9d:e0:4a:4e:55:12:50:
                    17:3b:c6:35:34:a5:19:b7:50:c0:b1:25:a7:a1:18:
                    91:c1:65:1f:00:8b:69:f5:7d:e1:02:4b:2c:01:4f:
                    8b:9d:7f:7b:09:66:45:af:0f:d9:5f:51:a4:79:d3:
                    b6:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:AC:34:62:A5:A4:58:DA:4B:23:D1:D0:E5:2C:8B:E2:F0:81:79:3F
            X509v3 Authority Key Identifier:
                keyid:5A:D9:F5:BE:B6:93:34:84:54:1C:E5:62:82:C9:89:ED:6E:8B:DB:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wtn1vraTNIRUHOVigsmJ7W6L26M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/dac70f-f172-44ce-9be5-5af89e6cd055/1/Wtn1vraTNIRUHOVigsmJ7W6L26M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/dac70f-f172-44ce-9be5-5af89e6cd055/1/Wtn1vraTNIRUHOVigsmJ7W6L26M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:2c:1c:ec:c4:06:3b:9a:a1:1c:f4:77:16:63:4a:17:69:ab:
         6e:2b:75:e5:08:d4:0f:38:05:b9:aa:c3:c4:2a:92:99:fa:34:
         b6:95:10:d7:b5:36:af:fe:2c:89:1a:96:1f:2a:0a:eb:f3:ae:
         8e:60:d0:9e:54:02:4b:ab:7c:eb:93:c2:f6:06:6e:d4:ff:44:
         80:ae:73:df:1c:94:60:76:11:26:1e:69:b9:45:d6:ae:03:09:
         b6:97:f6:46:62:56:76:4e:4d:c8:96:e4:e4:0d:e5:24:16:06:
         c3:73:8a:92:0f:8b:1e:3d:c6:5d:e2:6a:95:1d:71:c1:da:e9:
         1d:ff:70:eb:32:28:7f:4b:81:a5:86:e2:04:7f:fc:66:99:fd:
         55:c6:17:32:bd:ef:3b:1a:06:2b:02:b3:87:e9:9b:72:25:90:
         65:57:1c:2f:e9:d2:df:90:e6:9c:18:cb:13:12:da:70:80:75:
         e7:91:67:e8:aa:5b:9f:3b:03:7d:c0:ee:3f:32:b3:07:cc:5d:
         2e:95:00:17:0e:4c:93:72:bc:1b:f1:67:ad:59:ac:07:f1:92:
         2a:d4:e8:27:6f:21:02:a5:2b:8e:21:65:0b:7d:e8:7c:a9:98:
         38:0b:eb:5e:8a:b3:c3:17:90:66:c0:2d:f4:e4:1b:57:16:5e:
         36:3f:53:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0GMPNHQbCdvHDz3vzDkFoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhZDlmNWJlYjY5MzM0ODQ1NDFjZTU2MjgyYzk4OWVkNmU4
YmRiYTMwHhcNMjUwODA0MDgwMDM2WhcNMjUwODA1MDgwMDM2WjAzMTEwLwYDVQQD
Eyg3YmFjMzQ2MmE1YTQ1OGRhNGIyM2QxZDBlNTJjOGJlMmYwODE3OTNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmaheZSd9DHrDQeYUL9PjMNpvDV9n
E6+zZUOR0KO2wUPF8nQhS0paiBzTUauD2fWbt0L3FsE3EmD0bgLHdk0b8/XIyxf/
aCHHICr5ZuIDPUj2osxOHBTFWbyNqQG3psdWABwJZMDlZ59oe3KWifqU4Fscvsej
uGf69O0cF1/PIM1IZtUucAO8DvarN/KUcZ3gCPgZMua20/8sKdOBQ2t+GRl3068d
A56HAdNkWzuqPNdgzNFkH8F14+ek5XBytcqc7Pns6pCkAv8Pu53gSk5VElAXO8Y1
NKUZt1DAsSWnoRiRwWUfAItp9X3hAkssAU+LnX97CWZFrw/ZX1GkedO2SwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHusNGKlpFjaSyPR0OUsi+LwgXk/MB8GA1UdIwQY
MBaAFFrZ9b62kzSEVBzlYoLJie1ui9ujMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3RuMXZyYVROSVJVSE9WaWdzbUo3VzZMMjZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9kYWM3MGYtZjE3Mi00NGNlLTliZTUt
NWFmODllNmNkMDU1LzEvV3RuMXZyYVROSVJVSE9WaWdzbUo3VzZMMjZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9kYWM3MGYtZjE3Mi00NGNlLTliZTUtNWFmODllNmNkMDU1
LzEvV3RuMXZyYVROSVJVSE9WaWdzbUo3VzZMMjZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAECwc7MQG
O5qhHPR3FmNKF2mrbit15QjUDzgFuarDxCqSmfo0tpUQ17U2r/4siRqWHyoK6/Ou
jmDQnlQCS6t865PC9gZu1P9EgK5z3xyUYHYRJh5puUXWrgMJtpf2RmJWdk5NyJbk
5A3lJBYGw3OKkg+LHj3GXeJqlR1xwdrpHf9w6zIof0uBpYbiBH/8Zpn9VcYXMr3v
OxoGKwKzh+mbciWQZVccL+nS35DmnBjLExLacIB155Fn6KpbnzsDfcDuPzKzB8xd
LpUAFw5Mk3K8G/FnrVmsB/GSKtToJ28hAqUrjiFlC33ofKmYOAvrXoqzwxeQZsAt
9OQbVxZeNj9TUQ==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:08:59 2025 by rpki-client