Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/WsRmzIn5204xxUANKueiv_2yJUc.mft
File:                     WsRmzIn5204xxUANKueiv_2yJUc.mft (raw, json)
Hash identifier:          MvXyYvFLBHrJRutpVt/HDJqVDpfl5Df6KxJ6d778w8k=
Subject key identifier:   07:A9:0D:C0:30:1E:CC:2C:6A:BD:39:1C:04:FC:D1:A1:04:33:DB:42
Authority key identifier: 5A:C4:66:CC:89:F9:DB:4E:31:C5:40:0D:2A:E7:A2:BF:FD:B2:25:47
Certificate issuer:       /CN=5ac466cc89f9db4e31c5400d2ae7a2bffdb22547
Certificate serial:       019875D1F9EC92BAA7A677A866C0FA1CC351
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WsRmzIn5204xxUANKueiv_2yJUc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/WsRmzIn5204xxUANKueiv_2yJUc.mft
Manifest number:          161A
Signing time:             Mon 04 Aug 2025 16:02:31 +0000
Manifest this update:     Mon 04 Aug 2025 16:02:31 +0000
Manifest next update:     Tue 05 Aug 2025 16:02:31 +0000
Files and hashes:         1: CWjWI1KElycGegFoxqel6BzyPu8.roa (hash: x51MkWgMWV9H4yeCpFeKV1piMOfEzcOof7b5UghQrtY=)
                          2: TIXlkFRgn5qDeTU5GPtZw50sFgg.roa (hash: StUjGKW5A9Vqz9JKMfVvVB0iqJDXj37ZwmT9ma7BuAQ=)
                          3: Udak3yr2UP3kErzFOUD6ejk40jQ.roa (hash: 0WEzkUde+4+TTVujXlHKRM8FF/Cn6zrziqOLiHqb9kc=)
                          4: WsRmzIn5204xxUANKueiv_2yJUc.crl (hash: jk3t4t8Xq3RSAXeBjJTOJB1I4Ld+YAFq9eoHrVgHH3g=)
                          5: j3Johs7tWdOjWP-RSLyuZS9QCYA.roa (hash: 73D0mNtTe5ysnKB7nrHua4L+6aN6MBQCZz1gs+mdS6U=)
                          6: nCwgDurwC06Anta3aqc5wbxK3GY.roa (hash: 6I1/PwDUPqtalY+y7tNas0+iP9HsSsWLUFXwql/UFbs=)
                          7: wW0am_Aqxc8qtKWqJuBRkTx7-vg.roa (hash: 3MA88INLD4dCx0oFXNeXIYeavG1gLlOTW77Nx0t2APU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/WsRmzIn5204xxUANKueiv_2yJUc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/WsRmzIn5204xxUANKueiv_2yJUc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WsRmzIn5204xxUANKueiv_2yJUc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 12:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:75:d1:f9:ec:92:ba:a7:a6:77:a8:66:c0:fa:1c:c3:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ac466cc89f9db4e31c5400d2ae7a2bffdb22547
        Validity
            Not Before: Aug  4 16:02:31 2025 GMT
            Not After : Aug  5 16:02:31 2025 GMT
        Subject: CN=07a90dc0301ecc2c6abd391c04fcd1a10433db42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:39:c2:a8:ab:82:1b:d2:09:52:46:83:d8:27:
                    f3:27:b2:1d:2c:92:15:60:2e:a1:74:51:65:bd:f8:
                    a0:f2:ba:11:fb:e0:3a:83:67:a1:26:0a:96:4d:7d:
                    a0:b7:38:8d:c3:8f:69:fa:13:1f:0f:45:be:a0:6c:
                    3f:d0:e5:18:49:3b:35:b4:af:1e:52:93:43:19:bc:
                    c2:4e:7f:96:c1:b6:5d:1f:a2:f8:78:91:c9:94:86:
                    94:7a:59:a9:4b:5d:45:1a:68:2f:d4:2d:a4:0c:45:
                    68:d8:21:cb:d5:09:e7:dc:4f:5d:5e:f0:bd:dd:f4:
                    82:61:5c:db:92:ca:e3:f5:a9:25:c4:a9:3b:78:31:
                    da:cd:cc:25:91:a5:98:3f:a7:5f:b1:83:ca:7f:46:
                    0d:54:6f:24:dc:63:4e:47:87:a7:65:b3:da:fe:41:
                    e8:19:fc:b7:92:eb:d9:d5:41:e8:32:58:3c:e4:0c:
                    e2:d5:f6:05:4f:e8:8f:79:1b:52:69:f4:77:9b:35:
                    80:32:38:18:dd:b5:89:4f:e4:26:81:33:bf:03:5f:
                    df:00:11:50:c4:91:f6:a1:50:f0:fe:0b:02:0f:e9:
                    f7:b6:92:36:18:22:32:51:c8:98:8d:08:b6:66:7c:
                    c8:62:ec:d4:c9:a9:81:04:4e:c1:a4:65:05:db:27:
                    a4:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:A9:0D:C0:30:1E:CC:2C:6A:BD:39:1C:04:FC:D1:A1:04:33:DB:42
            X509v3 Authority Key Identifier:
                keyid:5A:C4:66:CC:89:F9:DB:4E:31:C5:40:0D:2A:E7:A2:BF:FD:B2:25:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WsRmzIn5204xxUANKueiv_2yJUc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/WsRmzIn5204xxUANKueiv_2yJUc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/WsRmzIn5204xxUANKueiv_2yJUc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:e2:47:a9:82:45:83:0e:c0:93:d4:8f:06:07:42:1c:f9:e9:
         9c:b3:21:e7:72:68:cc:81:89:59:57:2a:7e:65:8a:2d:d5:c5:
         67:ea:66:cf:65:da:82:11:c3:88:f8:a9:6f:0a:49:9d:5c:83:
         0d:68:d8:d1:97:16:99:48:87:fe:b9:56:bb:06:09:e0:bf:c1:
         f8:83:58:f8:23:1e:fd:bc:b1:fc:92:0b:49:9c:d0:38:cc:89:
         5b:b0:33:a2:37:4c:3a:c8:63:28:67:d1:a9:77:8d:38:ac:44:
         c3:0c:cd:58:50:05:4f:f6:59:62:6f:98:b8:0e:19:89:20:c5:
         08:d3:cc:ed:6c:9a:28:cc:58:ca:20:51:61:a9:31:fa:2e:8e:
         2b:ed:3b:18:34:ba:21:01:e7:c8:1f:8d:16:70:68:b7:4e:01:
         21:89:ab:59:26:5d:44:55:d7:a9:1b:8e:dd:9d:ab:27:c7:81:
         f5:ab:c9:fb:32:be:d4:4c:24:f3:24:b8:b8:da:0c:bc:f5:0a:
         b4:44:2f:8e:af:9d:fe:b9:6f:e6:74:34:3c:71:23:98:cb:7a:
         6f:d3:79:e1:9b:f9:f2:db:51:19:6d:9c:b6:28:d6:1c:8b:65:
         e7:14:f3:37:00:7a:f4:d3:c7:1d:26:8d:b8:34:5a:37:34:bf:
         1d:2f:fa:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:38:41 2025 by rpki-client