Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/02966a-a7ae-4054-ab34-f7e73ddef4e2/1/wDleyIIdj4GJQTOSvYdte9eVwWw.mft
File:                     wDleyIIdj4GJQTOSvYdte9eVwWw.mft (raw, json)
Hash identifier:          ZAZYlZL+BF1wvhzNbSsHtfI4NXMzfY17u3F/AZqq/fc=
Subject key identifier:   2A:1E:7D:A7:F0:36:8E:9E:28:A9:03:C1:FA:EC:F9:7A:EB:7E:50:F9
Authority key identifier: C0:39:5E:C8:82:1D:8F:81:89:41:33:92:BD:87:6D:7B:D7:95:C1:6C
Certificate issuer:       /CN=c0395ec8821d8f8189413392bd876d7bd795c16c
Certificate serial:       019874F506D125D1FE56DB33F1701CE8E44A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wDleyIIdj4GJQTOSvYdte9eVwWw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/02966a-a7ae-4054-ab34-f7e73ddef4e2/1/wDleyIIdj4GJQTOSvYdte9eVwWw.mft
Manifest number:          1619
Signing time:             Mon 04 Aug 2025 12:01:11 +0000
Manifest this update:     Mon 04 Aug 2025 12:01:11 +0000
Manifest next update:     Tue 05 Aug 2025 12:01:11 +0000
Files and hashes:         1: P3YoBo67vazrugYfMD3lybaWtAo.roa (hash: /AdjcQW3/wvGSZ4+BEuR5TlveAfDafAH3hNdQ89CSF4=)
                          2: wDleyIIdj4GJQTOSvYdte9eVwWw.crl (hash: ptQr3N1PZv3SzKzJAevd5+fbonJpXIREF+zyeY4ypT8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/02966a-a7ae-4054-ab34-f7e73ddef4e2/1/wDleyIIdj4GJQTOSvYdte9eVwWw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/02966a-a7ae-4054-ab34-f7e73ddef4e2/1/wDleyIIdj4GJQTOSvYdte9eVwWw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wDleyIIdj4GJQTOSvYdte9eVwWw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 12:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:f5:06:d1:25:d1:fe:56:db:33:f1:70:1c:e8:e4:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0395ec8821d8f8189413392bd876d7bd795c16c
        Validity
            Not Before: Aug  4 12:01:11 2025 GMT
            Not After : Aug  5 12:01:11 2025 GMT
        Subject: CN=2a1e7da7f0368e9e28a903c1faecf97aeb7e50f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:5f:68:20:dd:57:f4:a0:b3:ff:d6:bd:c0:d8:
                    50:75:41:a0:c2:d8:d9:4c:fc:7f:41:99:c9:2d:b9:
                    57:c1:4a:d2:d3:69:2b:2f:05:eb:33:4f:69:3e:44:
                    a9:f2:0b:af:80:d8:30:27:11:d7:b4:f5:2d:a1:69:
                    06:a2:cf:25:28:79:fa:21:c9:4d:62:5c:d4:6f:ee:
                    68:63:ea:3b:14:ad:89:dc:13:6e:a1:02:f3:d3:68:
                    34:34:19:1c:b3:11:25:bb:7b:e9:ef:ab:22:00:51:
                    10:e3:42:17:39:59:f8:ea:80:ca:8c:b5:9d:94:0c:
                    1a:95:8f:83:9b:3f:ce:b0:23:be:87:16:da:b2:9f:
                    7f:c2:76:39:6d:63:3f:7d:02:66:f8:e0:2f:7d:16:
                    27:96:95:a5:18:a2:86:ed:0c:82:40:f1:a4:88:7d:
                    05:ae:64:5a:01:7c:9a:ed:66:df:60:1a:83:6e:4f:
                    b3:14:e2:5d:d5:38:8c:c2:cd:79:49:21:63:87:1b:
                    7c:cb:b6:da:40:13:af:28:fa:e3:b1:46:54:8d:ce:
                    de:b4:de:fe:4a:70:90:78:0c:85:e0:5b:c7:05:6d:
                    39:f4:92:8e:dd:98:f3:26:c2:97:07:27:a0:33:30:
                    48:12:a1:9e:5b:8d:cd:6e:9b:92:d3:c1:49:e6:61:
                    70:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:1E:7D:A7:F0:36:8E:9E:28:A9:03:C1:FA:EC:F9:7A:EB:7E:50:F9
            X509v3 Authority Key Identifier:
                keyid:C0:39:5E:C8:82:1D:8F:81:89:41:33:92:BD:87:6D:7B:D7:95:C1:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wDleyIIdj4GJQTOSvYdte9eVwWw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/02966a-a7ae-4054-ab34-f7e73ddef4e2/1/wDleyIIdj4GJQTOSvYdte9eVwWw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/02966a-a7ae-4054-ab34-f7e73ddef4e2/1/wDleyIIdj4GJQTOSvYdte9eVwWw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:ea:92:de:06:a1:84:21:15:d6:35:77:ea:92:6d:85:2c:b9:
         61:68:4b:51:86:25:94:89:b9:cb:46:e6:f4:90:7b:52:46:f3:
         28:50:f6:c5:5c:c2:b2:c7:28:f8:c7:28:4f:66:f1:19:48:d7:
         58:2b:05:c3:53:ce:de:e9:b6:62:d7:14:1a:02:25:24:e7:c5:
         b8:4f:94:b8:19:32:81:eb:c7:fa:76:7a:5e:fd:ab:f4:14:25:
         2a:de:24:50:c3:ff:4b:9c:d0:78:2b:02:e7:47:ce:65:61:f7:
         10:b1:0b:79:7c:ce:d1:db:ae:53:7d:19:84:83:52:9b:0e:cc:
         c4:8e:6a:bb:d8:ca:27:53:bf:9d:cc:76:a8:90:30:b7:ed:c6:
         96:99:73:eb:04:87:be:63:fa:96:d0:3b:67:73:54:a7:b0:76:
         e1:35:51:4f:db:40:19:7d:85:3d:32:3b:bd:cb:17:8c:30:4e:
         8b:eb:51:1a:6b:00:67:b9:d7:e0:42:15:dd:3a:a6:17:08:c6:
         1f:46:35:4f:08:bb:bd:6f:35:93:b1:72:1f:6c:6b:ff:dd:fb:
         61:68:6a:c3:d9:15:04:68:b7:5b:9d:ff:dc:9c:10:5e:be:95:
         4d:a7:b0:4e:81:ec:3a:10:91:eb:43:12:aa:04:5e:2a:0e:7a:
         07:b3:2e:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:35:57 2025 by rpki-client