Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/bb5627-d627-4161-a2b3-9d25c3349d11/1/W8KZyUmzraue-TUmM_zsw7cr1Rg.mft
File:                     W8KZyUmzraue-TUmM_zsw7cr1Rg.mft (raw, json)
Hash identifier:          a9DsuAEKws6LS2QiHulDRYxR4aDHjRz4TOeVxeFia/g=
Subject key identifier:   1F:D0:3B:D2:9C:65:CD:D7:D9:74:F5:7D:6A:F6:EA:83:CB:4A:61:9C
Authority key identifier: 5B:C2:99:C9:49:B3:AD:AB:9E:F9:35:26:33:FC:EC:C3:B7:2B:D5:18
Certificate issuer:       /CN=5bc299c949b3adab9ef9352633fcecc3b72bd518
Certificate serial:       01987450DC7A5D2DB0C9893F75A88B647883
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W8KZyUmzraue-TUmM_zsw7cr1Rg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/bb5627-d627-4161-a2b3-9d25c3349d11/1/W8KZyUmzraue-TUmM_zsw7cr1Rg.mft
Manifest number:          1327
Signing time:             Mon 04 Aug 2025 09:01:52 +0000
Manifest this update:     Mon 04 Aug 2025 09:01:52 +0000
Manifest next update:     Tue 05 Aug 2025 09:01:52 +0000
Files and hashes:         1: W8KZyUmzraue-TUmM_zsw7cr1Rg.crl (hash: gz1Arpi+utw0fjaf1cJRslXk7l0o8gM4k/Q7pqi7jOA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/bb5627-d627-4161-a2b3-9d25c3349d11/1/W8KZyUmzraue-TUmM_zsw7cr1Rg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/bb5627-d627-4161-a2b3-9d25c3349d11/1/W8KZyUmzraue-TUmM_zsw7cr1Rg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W8KZyUmzraue-TUmM_zsw7cr1Rg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 09:01:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:50:dc:7a:5d:2d:b0:c9:89:3f:75:a8:8b:64:78:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5bc299c949b3adab9ef9352633fcecc3b72bd518
        Validity
            Not Before: Aug  4 09:01:52 2025 GMT
            Not After : Aug  5 09:01:52 2025 GMT
        Subject: CN=1fd03bd29c65cdd7d974f57d6af6ea83cb4a619c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ac:c8:bf:5b:e1:ce:78:66:41:02:cd:fd:86:
                    09:e3:3d:f2:ad:0d:41:62:59:39:c5:72:a6:af:8b:
                    fd:77:ab:df:bd:cb:71:3e:92:54:c9:e3:dc:45:c4:
                    d3:b0:77:45:a1:7c:92:e4:83:31:0f:af:31:b5:b6:
                    1e:c9:bb:64:bf:a3:73:11:3f:fa:98:83:23:55:7a:
                    1e:ba:c5:fa:00:87:9f:10:0a:a0:4e:1f:02:18:e8:
                    3c:d7:56:c4:81:c7:b6:12:e4:60:9b:0a:82:ac:fc:
                    0c:2a:79:b1:df:64:e9:e7:09:c5:01:ac:fe:15:6a:
                    9f:92:5b:b1:38:93:53:85:ed:79:4a:7c:3e:e1:c8:
                    72:eb:e6:b5:38:87:89:2a:5b:b5:0d:3b:40:39:f4:
                    52:f6:b8:89:fb:50:21:20:8d:a9:cd:1e:8d:f1:8d:
                    5a:e8:a5:3a:24:9f:09:49:3e:b3:90:b5:ed:86:10:
                    93:50:7a:ab:56:49:8a:8d:49:be:6e:b9:86:7e:56:
                    2f:e8:a4:b2:8f:94:a7:a7:c7:70:5c:29:09:92:3a:
                    ea:2d:55:ce:90:3b:e0:41:fa:e0:87:2e:de:3e:d7:
                    ae:f5:da:37:2c:aa:d4:a5:5d:84:25:36:36:f2:a8:
                    00:31:33:7d:ce:c8:76:d9:52:3a:d2:75:36:44:50:
                    90:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:D0:3B:D2:9C:65:CD:D7:D9:74:F5:7D:6A:F6:EA:83:CB:4A:61:9C
            X509v3 Authority Key Identifier:
                keyid:5B:C2:99:C9:49:B3:AD:AB:9E:F9:35:26:33:FC:EC:C3:B7:2B:D5:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W8KZyUmzraue-TUmM_zsw7cr1Rg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bb5627-d627-4161-a2b3-9d25c3349d11/1/W8KZyUmzraue-TUmM_zsw7cr1Rg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bb5627-d627-4161-a2b3-9d25c3349d11/1/W8KZyUmzraue-TUmM_zsw7cr1Rg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:7c:dc:f4:38:87:c0:86:7e:b8:e9:4f:c0:f5:19:8c:35:05:
         b5:6e:98:a4:43:3b:cd:90:6d:e4:26:34:36:6f:22:78:da:02:
         fc:8d:55:43:18:43:71:4a:b1:85:fc:69:6e:87:ca:87:c1:59:
         00:31:05:8f:99:17:fc:9c:b8:df:19:6b:05:d3:a4:11:e7:86:
         19:71:d7:9d:9c:bb:52:7e:31:3d:1f:bb:df:31:84:ef:dc:79:
         59:1a:68:29:60:6b:5f:4d:2f:39:27:d9:bb:ca:4b:3a:91:1d:
         9c:8c:a9:3a:12:74:1f:a8:12:b4:22:9d:2e:a0:42:dc:74:d5:
         75:0c:bd:36:d6:74:16:48:43:60:82:fc:e4:91:3b:90:3d:4d:
         35:03:c4:c8:3c:3a:a4:ad:3c:5c:91:69:fc:d8:0e:13:e3:ad:
         aa:34:e2:62:26:39:51:1b:1d:ee:39:7d:26:d9:78:d8:46:58:
         f0:d1:12:dd:68:5b:4c:b4:e7:9c:5c:29:2a:53:2a:f1:2a:61:
         ec:1d:e1:05:51:f3:e9:6e:b0:15:22:a4:03:3a:6b:04:c6:82:
         c8:9a:46:21:60:e0:ea:27:aa:3f:27:dd:12:ea:87:2d:a4:84:
         df:b0:18:92:0e:d4:7e:2b:21:87:26:2d:a0:89:76:b3:24:a0:
         17:02:e8:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:14:28 2025 by rpki-client