Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/812357-3d70-468e-b044-84afeaabb373/1/WtoRVWOZ4o_FXas7oHho_0kcb7g.mft
File:                     WtoRVWOZ4o_FXas7oHho_0kcb7g.mft (raw, json)
Hash identifier:          7o0aV5OhTW9uL7sliFPWekW4+uG9Bz1NET4utfcd5ro=
Subject key identifier:   C8:2B:91:A2:F5:D6:2C:9A:EC:E3:72:E8:1F:47:02:58:D3:07:FD:E9
Authority key identifier: 5A:DA:11:55:63:99:E2:8F:C5:5D:AB:3B:A0:78:68:FF:49:1C:6F:B8
Certificate issuer:       /CN=5ada11556399e28fc55dab3ba07868ff491c6fb8
Certificate serial:       0198906BC789DCB09167A1EBA057422F4A57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WtoRVWOZ4o_FXas7oHho_0kcb7g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/812357-3d70-468e-b044-84afeaabb373/1/WtoRVWOZ4o_FXas7oHho_0kcb7g.mft
Manifest number:          0F72
Signing time:             Sat 09 Aug 2025 20:00:39 +0000
Manifest this update:     Sat 09 Aug 2025 20:00:39 +0000
Manifest next update:     Sun 10 Aug 2025 20:00:39 +0000
Files and hashes:         1: WtoRVWOZ4o_FXas7oHho_0kcb7g.crl (hash: sHsDVgUJvUlZYWbJDF+F+CI2TkvasauNnTj6vp5bBTc=)
                          2: taSqw31_rwZ-hq0xkmTZUp1cyvw.roa (hash: V6lzw9iNkrzm6qgoGO8eVYLPpqNejoCjLT7yaMGPS3k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/812357-3d70-468e-b044-84afeaabb373/1/WtoRVWOZ4o_FXas7oHho_0kcb7g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/812357-3d70-468e-b044-84afeaabb373/1/WtoRVWOZ4o_FXas7oHho_0kcb7g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WtoRVWOZ4o_FXas7oHho_0kcb7g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 18:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:90:6b:c7:89:dc:b0:91:67:a1:eb:a0:57:42:2f:4a:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ada11556399e28fc55dab3ba07868ff491c6fb8
        Validity
            Not Before: Aug  9 20:00:39 2025 GMT
            Not After : Aug 10 20:00:39 2025 GMT
        Subject: CN=c82b91a2f5d62c9aece372e81f470258d307fde9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:01:a7:64:46:a5:c5:43:e9:33:d3:cc:0b:b5:
                    0b:fc:be:02:17:52:7b:ea:5c:97:28:0a:02:dd:48:
                    52:2d:dd:a7:d9:af:70:74:1a:f4:dd:fe:b0:12:af:
                    1a:7a:ab:7b:b2:10:72:45:8e:5a:35:11:a6:b5:5c:
                    b4:07:3b:55:4e:3e:26:9e:7c:ac:32:1e:cc:81:f5:
                    33:77:b3:31:67:b4:32:c0:fd:8c:28:f7:aa:6b:83:
                    96:6e:aa:a3:ed:20:b5:67:c4:fc:2e:8c:2d:08:ab:
                    b8:88:92:f8:83:92:58:6d:f2:a3:56:19:6d:8b:38:
                    1e:3b:68:4d:9e:dd:49:1d:02:57:d3:3c:00:a5:26:
                    ee:50:45:a1:52:dd:3f:d5:1b:3e:bd:57:1b:e6:ee:
                    c9:20:f6:58:55:39:8c:32:ed:d3:e0:f3:fa:55:20:
                    65:61:2a:19:e6:1c:6e:5f:a5:5a:51:26:aa:bc:2d:
                    d7:e1:0a:b8:5c:56:3e:72:9b:c5:7c:9f:3a:8e:46:
                    0d:e6:73:81:76:d4:f4:fc:f3:94:e3:50:4d:64:7e:
                    28:ce:d0:7d:28:52:4f:73:77:7d:1c:c0:8c:6b:a8:
                    e5:0c:2c:5c:e0:68:5c:33:5a:5e:d9:f6:84:11:55:
                    d2:98:d3:6f:50:16:00:c8:73:38:6d:13:f1:48:b3:
                    07:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:2B:91:A2:F5:D6:2C:9A:EC:E3:72:E8:1F:47:02:58:D3:07:FD:E9
            X509v3 Authority Key Identifier:
                keyid:5A:DA:11:55:63:99:E2:8F:C5:5D:AB:3B:A0:78:68:FF:49:1C:6F:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtoRVWOZ4o_FXas7oHho_0kcb7g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/812357-3d70-468e-b044-84afeaabb373/1/WtoRVWOZ4o_FXas7oHho_0kcb7g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/812357-3d70-468e-b044-84afeaabb373/1/WtoRVWOZ4o_FXas7oHho_0kcb7g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:a3:de:48:c0:9b:26:bf:e7:3f:a5:7f:a0:f5:4e:ad:1e:f4:
         ca:2a:51:cd:e8:e3:b2:27:3e:83:3d:cb:73:f7:43:fe:28:e7:
         4d:7d:6d:24:f5:b2:f6:9d:ff:09:2c:60:66:49:81:52:ff:cf:
         3a:f0:43:15:4a:bb:53:87:44:09:91:22:d7:72:c1:c5:7e:5d:
         f6:b3:61:0d:f8:68:28:fc:e1:4c:4c:94:d8:26:35:e7:6b:08:
         44:df:32:1b:1e:d4:13:55:dc:2d:39:34:6a:d0:0b:d9:ff:bc:
         10:5e:5e:7d:1a:0d:4c:b9:4f:5a:40:2e:b5:1d:c7:f5:43:d5:
         03:f1:4c:83:f9:6d:f8:90:89:b0:9f:9d:9b:a6:85:35:0f:54:
         c1:4b:d2:c9:3b:9b:92:26:1c:30:48:3d:8c:7a:80:37:62:84:
         fc:d7:05:23:41:19:96:3d:10:9f:52:13:d9:e4:14:d9:ef:50:
         6f:74:3d:cc:e0:89:fb:28:e5:20:d6:c3:42:de:9d:7d:19:f8:
         0b:3c:91:c9:cc:2e:16:6d:ed:7a:4e:33:2e:46:16:84:4c:a1:
         43:38:26:90:20:7c:61:33:18:24:fd:39:28:88:10:6f:a5:47:
         8b:84:33:49:57:3b:f4:97:d2:f0:8e:09:47:14:d9:21:96:39:
         77:bf:ae:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 03:47:43 2025 by rpki-client