Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/29440b-c59a-4608-bc63-a4ca3363d701/1/Wv2_mIPBjEzhZdi4UDxiAXRdaIc.mft
File:                     Wv2_mIPBjEzhZdi4UDxiAXRdaIc.mft (raw, json)
Hash identifier:          1n4A0cOWOW7UIHqjxRPU/v5+uCTPIFJ+pK04ed2/Cpk=
Subject key identifier:   3A:8D:74:C5:6F:AC:4A:35:35:EF:C0:41:42:FE:12:63:7F:A7:A2:11
Authority key identifier: 5A:FD:BF:98:83:C1:8C:4C:E1:65:D8:B8:50:3C:62:01:74:5D:68:87
Certificate issuer:       /CN=5afdbf9883c18c4ce165d8b8503c6201745d6887
Certificate serial:       0198744FF486A50FAE9521C84A64BE35CB71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wv2_mIPBjEzhZdi4UDxiAXRdaIc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/29440b-c59a-4608-bc63-a4ca3363d701/1/Wv2_mIPBjEzhZdi4UDxiAXRdaIc.mft
Manifest number:          1084
Signing time:             Mon 04 Aug 2025 09:00:53 +0000
Manifest this update:     Mon 04 Aug 2025 09:00:53 +0000
Manifest next update:     Tue 05 Aug 2025 09:00:53 +0000
Files and hashes:         1: ORzdYgpKmwSJL1fVNUo6LmyhjSk.roa (hash: LmFlM+n+lX0yoflgNqGYgZ3G5C5DbphEooeee/wY1iM=)
                          2: Wv2_mIPBjEzhZdi4UDxiAXRdaIc.crl (hash: UVQlsA8RGRmPKWcWxCGyJ6lnHUi/UQopH6UhVyRT9pU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/29440b-c59a-4608-bc63-a4ca3363d701/1/Wv2_mIPBjEzhZdi4UDxiAXRdaIc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/29440b-c59a-4608-bc63-a4ca3363d701/1/Wv2_mIPBjEzhZdi4UDxiAXRdaIc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Wv2_mIPBjEzhZdi4UDxiAXRdaIc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:4f:f4:86:a5:0f:ae:95:21:c8:4a:64:be:35:cb:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5afdbf9883c18c4ce165d8b8503c6201745d6887
        Validity
            Not Before: Aug  4 09:00:53 2025 GMT
            Not After : Aug  5 09:00:53 2025 GMT
        Subject: CN=3a8d74c56fac4a3535efc04142fe12637fa7a211
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e2:50:69:4c:0b:b0:f6:8d:82:ef:f2:33:e6:
                    17:b5:a8:64:e6:12:c2:b4:43:c3:3c:87:c9:34:18:
                    75:76:0e:99:92:f3:82:8b:22:3a:99:d5:aa:ad:bb:
                    28:59:b0:26:7e:90:3d:07:4d:2b:1b:db:1d:f4:9b:
                    1f:5f:03:98:71:61:16:39:e6:ba:87:fd:ff:f0:d5:
                    9a:df:c5:62:7c:13:ae:64:ac:93:65:5b:78:41:15:
                    2c:f0:51:81:17:ec:22:4e:4a:ec:7b:68:2c:ee:fd:
                    8d:20:07:bf:6a:8b:55:0d:e9:34:d0:87:50:a1:57:
                    54:1b:99:33:ab:88:0b:af:a8:08:29:3f:a4:8f:e7:
                    88:04:fa:b0:94:79:7d:c0:f3:a6:c3:11:08:4a:30:
                    0e:40:db:7c:a8:39:9c:bc:8f:87:33:33:b2:0f:b4:
                    7f:53:6c:35:3c:ec:2c:19:56:d8:3c:f3:70:ac:2c:
                    3c:bd:83:0e:06:e2:49:4b:a0:85:b2:af:76:40:1f:
                    79:1c:71:7b:dc:79:56:5d:ba:56:eb:5a:f7:d8:b7:
                    97:5a:4a:e8:45:01:d7:86:e0:49:3c:a0:1a:13:b7:
                    68:80:a3:11:8f:4d:1c:8c:02:60:55:b8:a5:f2:0c:
                    e0:02:23:96:65:b8:57:6f:42:0d:d6:31:37:f7:4b:
                    37:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:8D:74:C5:6F:AC:4A:35:35:EF:C0:41:42:FE:12:63:7F:A7:A2:11
            X509v3 Authority Key Identifier:
                keyid:5A:FD:BF:98:83:C1:8C:4C:E1:65:D8:B8:50:3C:62:01:74:5D:68:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wv2_mIPBjEzhZdi4UDxiAXRdaIc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/29440b-c59a-4608-bc63-a4ca3363d701/1/Wv2_mIPBjEzhZdi4UDxiAXRdaIc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/29440b-c59a-4608-bc63-a4ca3363d701/1/Wv2_mIPBjEzhZdi4UDxiAXRdaIc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:33:4d:1d:69:01:32:3f:9d:53:9a:0b:7c:6e:4e:d9:d5:eb:
         ff:81:75:ab:7a:dd:b4:6d:9d:4b:11:de:06:72:28:fe:25:9e:
         5b:ca:6a:c9:85:0b:bb:65:9b:21:ad:cb:49:55:c1:e6:14:ff:
         d9:c0:a6:a4:34:ab:83:a4:60:3c:2b:62:df:5e:21:16:1a:87:
         2c:f6:5e:8c:4e:1c:c3:59:c0:25:e2:f5:ba:9d:52:98:c6:c0:
         d6:16:52:5c:f1:68:30:0e:3b:62:7d:53:57:82:ed:ca:eb:b2:
         e3:e8:6b:d0:bd:9c:8e:59:8a:40:8a:3b:d2:96:8e:64:4f:4a:
         91:9f:f2:fb:a0:e3:08:6d:3a:1b:05:1d:7e:0b:95:1e:b7:bb:
         a5:2e:b1:9a:23:92:16:46:0d:ac:29:c7:80:c8:b4:74:1e:9e:
         42:7b:d8:9a:df:f2:a3:95:ab:60:1a:d8:c7:0c:53:27:04:9e:
         bb:e7:13:2c:7a:e3:fb:32:fb:96:b0:ef:83:91:44:0f:6f:dc:
         79:8a:93:97:96:9c:54:79:ce:ad:b0:be:4d:d3:0f:16:a8:e7:
         12:86:f9:6e:e9:8b:0e:09:06:ad:63:c8:73:03:7f:df:62:53:
         ea:79:f2:af:ba:6d:87:d9:97:c9:2f:3d:7f:00:b6:3d:57:98:
         c3:55:e4:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:07:25 2025 by rpki-client