Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/eeedf6-52c1-4a01-9097-a6cf16c85ce4/1/IsWgwqw7FnlJmpa-MeQ76FzwmVM.mft
File:                     IsWgwqw7FnlJmpa-MeQ76FzwmVM.mft (raw, json)
Hash identifier:          SDeygc9kvvmYD+lxuWSwgxTTz/oxJfF3vCPjWWRiLIQ=
Subject key identifier:   70:11:30:65:60:ED:CE:E8:7C:52:53:18:8C:34:B5:5C:1B:43:A5:B1
Authority key identifier: 22:C5:A0:C2:AC:3B:16:79:49:9A:96:BE:31:E4:3B:E8:5C:F0:99:53
Certificate issuer:       /CN=22c5a0c2ac3b1679499a96be31e43be85cf09953
Certificate serial:       0198733D09776DAF3011429C69F500767A79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IsWgwqw7FnlJmpa-MeQ76FzwmVM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/eeedf6-52c1-4a01-9097-a6cf16c85ce4/1/IsWgwqw7FnlJmpa-MeQ76FzwmVM.mft
Manifest number:          0DCB
Signing time:             Mon 04 Aug 2025 04:00:36 +0000
Manifest this update:     Mon 04 Aug 2025 04:00:36 +0000
Manifest next update:     Tue 05 Aug 2025 04:00:36 +0000
Files and hashes:         1: IsWgwqw7FnlJmpa-MeQ76FzwmVM.crl (hash: OiMIZsYehXV3TUhPyv1OtdB7zcoceUj153xjvpxaX3I=)
                          2: XEwYa6CNvkLJC5LAUGlV5sU-Q7E.roa (hash: lSmShr06n6oTDTvfvIY+6+zA1Q+CWsMk4yBsQNB5LQo=)
                          3: d2wksXhCd5wl5AD5yX7cxgOMqWE.roa (hash: d845mWomVKLCLy4AeHi3nVtLKMNrF2F8tv4m480Itc0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/eeedf6-52c1-4a01-9097-a6cf16c85ce4/1/IsWgwqw7FnlJmpa-MeQ76FzwmVM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/eeedf6-52c1-4a01-9097-a6cf16c85ce4/1/IsWgwqw7FnlJmpa-MeQ76FzwmVM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IsWgwqw7FnlJmpa-MeQ76FzwmVM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:3d:09:77:6d:af:30:11:42:9c:69:f5:00:76:7a:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22c5a0c2ac3b1679499a96be31e43be85cf09953
        Validity
            Not Before: Aug  4 04:00:36 2025 GMT
            Not After : Aug  5 04:00:36 2025 GMT
        Subject: CN=7011306560edcee87c5253188c34b55c1b43a5b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:5e:a4:45:e2:2c:51:9c:55:f3:94:07:9a:76:
                    14:ea:a0:1d:7a:e9:c2:41:53:48:97:85:d8:6a:5c:
                    d9:71:45:bc:23:d7:83:06:7a:89:ad:4c:20:2c:50:
                    ed:b3:ce:2d:8b:85:f4:de:4c:a4:2b:85:83:40:29:
                    00:b8:e5:1e:2b:66:be:50:80:5d:ee:4e:29:21:fb:
                    06:d5:26:5d:5d:f3:25:c1:92:f3:ca:5b:8d:b2:97:
                    27:b9:7a:a8:e5:b3:d0:a6:d5:50:6e:c9:39:22:3a:
                    53:9d:01:0a:a1:0a:2f:f9:07:c9:0f:23:15:15:83:
                    27:b2:3e:c8:76:cc:d2:30:64:01:ba:77:69:26:b4:
                    57:e6:d7:28:d1:bb:94:8f:d7:b5:24:a6:d4:a0:25:
                    d0:04:8e:31:31:e8:d0:81:38:d6:b1:2f:6e:b8:63:
                    8f:50:64:1c:19:ac:54:06:ee:fa:12:67:81:b1:0e:
                    05:8e:90:c7:8b:06:24:69:ad:80:86:01:bd:ce:06:
                    63:07:87:62:a7:a5:a2:5c:4c:30:b8:f5:d9:a8:32:
                    dc:f9:ae:be:56:f5:e6:14:1a:3d:ab:6e:cb:21:f3:
                    19:cb:c9:9b:4c:0f:35:af:0c:23:0e:7e:5b:7a:a3:
                    12:e1:fd:33:5d:15:12:44:57:78:ed:0b:86:f0:6c:
                    70:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:11:30:65:60:ED:CE:E8:7C:52:53:18:8C:34:B5:5C:1B:43:A5:B1
            X509v3 Authority Key Identifier:
                keyid:22:C5:A0:C2:AC:3B:16:79:49:9A:96:BE:31:E4:3B:E8:5C:F0:99:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsWgwqw7FnlJmpa-MeQ76FzwmVM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/eeedf6-52c1-4a01-9097-a6cf16c85ce4/1/IsWgwqw7FnlJmpa-MeQ76FzwmVM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/eeedf6-52c1-4a01-9097-a6cf16c85ce4/1/IsWgwqw7FnlJmpa-MeQ76FzwmVM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:cd:b2:4a:91:ce:b2:33:82:24:37:8f:c0:7c:54:85:5b:9b:
         fc:5d:74:07:17:f9:e9:2d:18:d8:4e:0d:c5:0b:80:22:05:71:
         75:bf:60:bb:25:e0:db:e6:ee:da:bc:96:2c:01:7e:11:1e:fd:
         06:48:82:0a:ac:1f:ae:7b:e5:fd:68:d8:d7:20:bc:da:46:34:
         fb:ed:b2:56:7f:39:e5:0f:56:8d:61:8c:6a:12:ac:79:9b:74:
         72:e9:57:ad:51:d6:b9:7f:a1:56:1c:05:77:ef:52:02:cf:9e:
         d4:39:af:bb:10:09:b0:3e:6d:30:73:4c:fd:d4:f6:97:ee:e2:
         ec:09:bc:fa:69:3d:33:a7:b4:cb:0f:88:43:67:c6:15:45:9a:
         3f:97:56:df:61:19:ab:4c:b1:19:bd:69:13:95:6d:33:23:76:
         88:36:eb:b8:b7:1f:47:32:0d:25:97:71:5e:af:99:46:64:7c:
         8a:07:9f:92:d8:12:dc:43:35:71:a2:4a:51:a8:00:0c:90:57:
         4f:f6:1c:e2:4a:f3:32:64:37:16:38:2e:16:00:f1:9a:e6:1e:
         b8:ea:5a:80:f4:96:53:e1:42:33:40:d4:1f:5c:ee:0c:c7:5b:
         c5:46:33:22:7e:d1:d2:d1:98:ee:98:c9:f1:13:1a:7b:7f:c6:
         6f:73:d8:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:04:16 2025 by rpki-client