Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/e8d4c5-5d11-4d79-82ed-83f6852bf958/1/WpMlkBT1t2SEcHLDc07LUoByIY0.mft
File:                     WpMlkBT1t2SEcHLDc07LUoByIY0.mft (raw, json)
Hash identifier:          8gJRuTHWg1G4Jir2zfKfRRzCm/smMvVt/Bd9XnukNQI=
Subject key identifier:   59:5A:FC:56:00:EF:E5:77:5E:5F:B7:18:E1:99:60:4E:80:F1:D4:8F
Authority key identifier: 5A:93:25:90:14:F5:B7:64:84:70:72:C3:73:4E:CB:52:80:72:21:8D
Certificate issuer:       /CN=5a93259014f5b764847072c3734ecb528072218d
Certificate serial:       01988A699D33895C15A0F24141D02C96F4B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WpMlkBT1t2SEcHLDc07LUoByIY0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/e8d4c5-5d11-4d79-82ed-83f6852bf958/1/WpMlkBT1t2SEcHLDc07LUoByIY0.mft
Manifest number:          1624
Signing time:             Fri 08 Aug 2025 16:00:33 +0000
Manifest this update:     Fri 08 Aug 2025 16:00:33 +0000
Manifest next update:     Sat 09 Aug 2025 16:00:33 +0000
Files and hashes:         1: WpMlkBT1t2SEcHLDc07LUoByIY0.crl (hash: zrAXGU1NQ0J080TCkSTmzXp1mnNBdVxblfmMUjTSdgo=)
                          2: xrn9wGcZNgBUBClFEOmA1ETirQc.roa (hash: pd4BjALDo2lB/niA3gPglIgN5zsXIWGcWxmGYdPS/DU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/e8d4c5-5d11-4d79-82ed-83f6852bf958/1/WpMlkBT1t2SEcHLDc07LUoByIY0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/e8d4c5-5d11-4d79-82ed-83f6852bf958/1/WpMlkBT1t2SEcHLDc07LUoByIY0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WpMlkBT1t2SEcHLDc07LUoByIY0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 16:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8a:69:9d:33:89:5c:15:a0:f2:41:41:d0:2c:96:f4:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a93259014f5b764847072c3734ecb528072218d
        Validity
            Not Before: Aug  8 16:00:33 2025 GMT
            Not After : Aug  9 16:00:33 2025 GMT
        Subject: CN=595afc5600efe5775e5fb718e199604e80f1d48f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:65:b2:aa:b8:1a:23:6a:62:c0:46:2c:09:62:
                    5a:9b:7b:e1:75:32:78:fa:b3:ce:84:45:1e:cb:7b:
                    ff:9a:60:ee:6d:f8:27:ba:fa:aa:c6:a8:31:3b:86:
                    e4:f8:2d:bf:e2:12:4e:ea:8d:8d:32:da:33:29:f4:
                    d7:f2:0d:a8:bd:7a:80:b2:90:10:47:c2:69:36:af:
                    4f:0c:84:5e:53:f7:06:e6:dd:f9:d8:d1:44:e9:cf:
                    bc:7e:1c:a3:1b:73:a2:22:50:3d:38:e8:af:39:bc:
                    f0:cb:5b:3b:54:77:9b:14:11:63:f5:cf:e0:3d:8c:
                    e9:6d:93:12:ed:6b:cd:3d:b9:e2:89:2e:56:14:98:
                    56:6b:b1:37:1b:b4:c0:e5:66:02:d5:fa:66:64:af:
                    60:01:5b:77:04:9b:b4:9e:39:36:30:d9:9b:3e:65:
                    5a:f0:61:5b:54:d3:a6:c7:d1:d6:90:48:78:5b:8b:
                    ee:ba:08:97:63:cd:7e:f8:b9:1c:da:5d:b5:2d:7f:
                    55:c3:95:88:d5:29:d6:49:b2:b9:52:82:fa:09:27:
                    84:47:2c:b7:89:74:67:a2:a7:f4:ed:b4:2c:42:27:
                    b7:a7:98:f2:73:0c:2a:e2:1d:42:9c:0c:8e:05:44:
                    6d:4f:18:43:ec:1d:b0:3c:70:92:00:7b:37:ad:47:
                    80:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:5A:FC:56:00:EF:E5:77:5E:5F:B7:18:E1:99:60:4E:80:F1:D4:8F
            X509v3 Authority Key Identifier:
                keyid:5A:93:25:90:14:F5:B7:64:84:70:72:C3:73:4E:CB:52:80:72:21:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WpMlkBT1t2SEcHLDc07LUoByIY0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e8d4c5-5d11-4d79-82ed-83f6852bf958/1/WpMlkBT1t2SEcHLDc07LUoByIY0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/e8d4c5-5d11-4d79-82ed-83f6852bf958/1/WpMlkBT1t2SEcHLDc07LUoByIY0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:3f:b8:2f:3a:0d:11:ce:a2:9a:51:79:93:af:bf:f5:66:1e:
         be:7c:6a:8d:dd:53:92:21:10:87:40:22:04:ce:27:18:aa:c8:
         f2:ed:6c:dd:bc:3e:de:ee:ef:45:a4:93:25:5f:80:1b:27:ed:
         d5:5f:47:37:74:21:db:51:9c:c9:24:8e:5d:12:44:eb:87:bc:
         13:b3:a0:9d:cd:47:62:43:a3:ec:46:15:e4:00:ab:45:4e:d8:
         93:0f:3c:f7:32:5a:2b:c6:60:85:04:88:0b:3d:dd:55:c4:69:
         c9:a6:68:28:9b:f3:3d:18:de:b9:15:79:9f:40:dc:75:ec:ec:
         21:77:1c:ee:2b:d6:1f:c8:93:34:04:0f:1a:cd:80:91:66:25:
         68:32:7b:a5:65:9e:10:20:8e:ac:35:1c:18:30:5b:12:27:17:
         38:ea:d3:a0:5c:23:17:72:50:b9:f1:ea:55:97:5d:f4:40:69:
         57:0e:d2:4c:2c:ea:37:d8:eb:71:84:30:c1:70:76:d3:91:2a:
         50:0c:45:7d:e0:fb:b8:18:49:6b:0f:e0:e9:da:c5:33:68:5d:
         f9:c2:6c:f2:1a:00:38:f4:3a:62:24:cf:1c:91:72:00:0e:1b:
         09:2a:2e:31:c1:3c:1f:1a:a5:b2:58:3c:15:a2:11:8d:46:18:
         39:e4:cd:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:23:11 2025 by rpki-client