Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/a46abe-1fb7-434a-9f22-beba85e7b295/1/Wh1X4GDRdF27kjiRR_AfYE7Puqw.mft
File:                     Wh1X4GDRdF27kjiRR_AfYE7Puqw.mft (raw, json)
Hash identifier:          cs+rvoYCtgzAj+mRjBQEDbuSlhpuII8RiRuxjm4J9Yw=
Subject key identifier:   E6:F5:4E:C5:F7:22:E6:C8:4E:76:28:7F:5C:70:5F:24:C0:0C:64:E8
Authority key identifier: 5A:1D:57:E0:60:D1:74:5D:BB:92:38:91:47:F0:1F:60:4E:CF:BA:AC
Certificate issuer:       /CN=5a1d57e060d1745dbb92389147f01f604ecfbaac
Certificate serial:       01988355136AF19E55B36F7180C84CBDEDA5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wh1X4GDRdF27kjiRR_AfYE7Puqw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/a46abe-1fb7-434a-9f22-beba85e7b295/1/Wh1X4GDRdF27kjiRR_AfYE7Puqw.mft
Manifest number:          1416
Signing time:             Thu 07 Aug 2025 07:00:47 +0000
Manifest this update:     Thu 07 Aug 2025 07:00:47 +0000
Manifest next update:     Fri 08 Aug 2025 07:00:47 +0000
Files and hashes:         1: Wh1X4GDRdF27kjiRR_AfYE7Puqw.crl (hash: oNk0pISjPvJqjn77VuLgsDGo5CAQD/532+b5X9Pt6iw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/a46abe-1fb7-434a-9f22-beba85e7b295/1/Wh1X4GDRdF27kjiRR_AfYE7Puqw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/a46abe-1fb7-434a-9f22-beba85e7b295/1/Wh1X4GDRdF27kjiRR_AfYE7Puqw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Wh1X4GDRdF27kjiRR_AfYE7Puqw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 08 Aug 2025 07:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:83:55:13:6a:f1:9e:55:b3:6f:71:80:c8:4c:bd:ed:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a1d57e060d1745dbb92389147f01f604ecfbaac
        Validity
            Not Before: Aug  7 07:00:47 2025 GMT
            Not After : Aug  8 07:00:47 2025 GMT
        Subject: CN=e6f54ec5f722e6c84e76287f5c705f24c00c64e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:f1:7c:62:46:3c:8d:f0:16:e9:e9:f8:fe:c7:
                    86:64:28:91:fd:3d:10:e2:dc:f5:37:2d:fb:d4:59:
                    ed:e9:28:5a:c7:79:b5:b3:62:f9:42:1a:92:eb:ad:
                    22:ef:46:df:fd:c5:20:65:e5:0e:1f:ad:2f:94:46:
                    54:39:6e:40:cf:ef:e1:ad:ac:87:70:23:b9:0a:1d:
                    ad:7c:28:17:7e:ab:71:5f:72:30:b4:b0:db:d2:0a:
                    ae:a5:0a:50:77:b8:91:05:76:1e:60:ec:37:2e:1b:
                    32:25:94:e8:08:03:bc:99:3f:37:79:9c:3f:5a:5d:
                    d8:63:cb:6a:54:dd:be:00:54:f5:05:98:3f:df:4d:
                    9a:89:76:b9:0a:de:a1:ad:07:44:40:d4:a3:61:b5:
                    83:81:c2:20:60:99:83:7a:0d:81:f4:7b:cb:7c:74:
                    77:98:f9:84:c4:ff:87:82:99:9b:9a:d5:fd:b5:99:
                    f5:83:b5:65:67:1f:e5:44:fd:0c:06:ff:ab:f7:72:
                    39:eb:bd:db:75:c5:18:d8:84:d1:50:44:c1:bf:08:
                    b0:d9:d5:71:b4:0a:04:b1:94:63:eb:d3:94:ec:da:
                    00:8e:ae:1c:5c:dc:d8:6a:b4:ca:9c:5c:45:cb:24:
                    c1:15:b3:69:3d:eb:75:20:7b:07:f0:89:12:b9:8a:
                    43:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:F5:4E:C5:F7:22:E6:C8:4E:76:28:7F:5C:70:5F:24:C0:0C:64:E8
            X509v3 Authority Key Identifier:
                keyid:5A:1D:57:E0:60:D1:74:5D:BB:92:38:91:47:F0:1F:60:4E:CF:BA:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wh1X4GDRdF27kjiRR_AfYE7Puqw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/a46abe-1fb7-434a-9f22-beba85e7b295/1/Wh1X4GDRdF27kjiRR_AfYE7Puqw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/a46abe-1fb7-434a-9f22-beba85e7b295/1/Wh1X4GDRdF27kjiRR_AfYE7Puqw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d3:bd:1b:ce:7e:43:f0:1f:3a:7d:07:07:2e:c5:a7:b4:a2:e2:
         6e:8a:be:9c:41:d8:7e:bd:32:37:2e:05:97:d7:e6:af:b4:2b:
         44:43:66:9f:0e:f2:90:9e:6b:4f:bd:f9:c5:14:b3:bc:01:1c:
         e1:da:18:f0:9e:df:ad:5e:0d:cb:e0:5d:a3:27:2d:76:5e:90:
         65:3a:42:e2:14:ce:2e:f3:af:db:0b:15:5b:79:32:b7:28:3e:
         29:8f:22:11:a5:44:68:24:81:0b:54:61:1c:eb:b5:76:86:9f:
         3f:cd:9c:57:a3:a3:b3:dc:85:21:d0:00:ea:83:71:8c:18:f9:
         27:31:91:6a:df:3d:bb:48:84:12:2c:a6:1b:71:96:d7:4f:f5:
         de:06:ad:54:e0:9f:16:3c:5e:e2:23:4e:28:55:f7:41:6a:9c:
         f7:83:2c:9a:2f:32:58:39:99:3a:0f:ed:fe:45:39:24:0c:49:
         6c:34:8d:5c:64:29:21:f8:51:3f:b8:5a:b4:4e:4b:72:d6:79:
         3b:0c:a6:ab:13:b5:a8:a7:bb:e5:c6:a5:e8:52:87:2b:e5:ee:
         21:7f:de:d0:7c:06:a4:16:b8:c9:b7:b2:bd:5f:ec:27:bb:d8:
         da:a0:01:80:2c:f7:84:56:0e:4c:c1:60:38:8b:89:21:d9:df:
         82:d0:7c:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 17:28:26 2025 by rpki-client