Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/6d663a-4538-4cbf-ad1f-857580fc6167/1/w4UgGjO1J8ZEqtWuzTeCxqjC9R8.mft
File:                     w4UgGjO1J8ZEqtWuzTeCxqjC9R8.mft (raw, json)
Hash identifier:          SvdofZWS2gPla8E2JMeue2mqE6JDqHyf5GV1fpzZFTs=
Subject key identifier:   E2:01:42:CC:78:72:B4:94:FA:7B:86:F4:63:89:8F:6A:C9:E8:3E:C5
Authority key identifier: C3:85:20:1A:33:B5:27:C6:44:AA:D5:AE:CD:37:82:C6:A8:C2:F5:1F
Certificate issuer:       /CN=c385201a33b527c644aad5aecd3782c6a8c2f51f
Certificate serial:       019893A3F89143CED32CFAC37E30FBD33D78
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w4UgGjO1J8ZEqtWuzTeCxqjC9R8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/6d663a-4538-4cbf-ad1f-857580fc6167/1/w4UgGjO1J8ZEqtWuzTeCxqjC9R8.mft
Manifest number:          1626
Signing time:             Sun 10 Aug 2025 11:00:53 +0000
Manifest this update:     Sun 10 Aug 2025 11:00:53 +0000
Manifest next update:     Mon 11 Aug 2025 11:00:53 +0000
Files and hashes:         1: H9QpnLm8fW1NfasYmS-Z-4wW9K0.roa (hash: ZMCXrj27lV/u3oSg3kl26pqz/wenN/+jeAtwxfISyBE=)
                          2: w4UgGjO1J8ZEqtWuzTeCxqjC9R8.crl (hash: fBcVW829fys30383NJ0dWFRz8a2bIdGdHLFN85oplGE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/6d663a-4538-4cbf-ad1f-857580fc6167/1/w4UgGjO1J8ZEqtWuzTeCxqjC9R8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/6d663a-4538-4cbf-ad1f-857580fc6167/1/w4UgGjO1J8ZEqtWuzTeCxqjC9R8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w4UgGjO1J8ZEqtWuzTeCxqjC9R8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 11:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:93:a3:f8:91:43:ce:d3:2c:fa:c3:7e:30:fb:d3:3d:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c385201a33b527c644aad5aecd3782c6a8c2f51f
        Validity
            Not Before: Aug 10 11:00:53 2025 GMT
            Not After : Aug 11 11:00:53 2025 GMT
        Subject: CN=e20142cc7872b494fa7b86f463898f6ac9e83ec5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:74:cf:6f:73:57:bd:3a:14:d4:e7:ac:33:39:
                    7f:26:33:83:96:3a:e0:1c:75:2b:85:14:cf:23:dc:
                    8c:af:d2:08:1a:f6:8e:8e:78:fc:28:75:e5:85:06:
                    00:26:fd:40:ec:4a:fe:49:65:99:75:0d:c0:f3:ab:
                    61:3d:7f:00:4a:a3:99:45:67:c3:71:f6:81:95:5d:
                    d2:87:57:8f:0c:23:6a:b6:ed:b3:3f:e6:4e:7a:e3:
                    44:cb:ed:f6:8b:81:bb:20:18:fd:7d:ee:35:b4:2a:
                    b3:8a:cc:7d:23:5d:60:f0:08:92:17:6f:ec:3e:41:
                    b3:24:31:86:b9:3a:31:0a:34:e2:1b:92:8e:6f:da:
                    6c:35:1a:25:42:fb:4f:b3:35:e8:6c:3b:5c:29:85:
                    49:27:ec:15:4e:3f:8c:5d:63:4b:07:92:c4:76:79:
                    e8:74:b5:9d:bc:ee:76:10:a9:a9:d2:19:ef:0e:43:
                    6f:ef:07:ff:29:f2:4e:86:be:b6:39:e9:7c:cc:d2:
                    8c:d3:a6:bc:c8:62:d2:46:3d:d6:30:3f:14:bd:51:
                    d3:e3:70:c6:ed:81:7b:87:69:de:d5:47:af:ad:07:
                    21:44:76:90:98:ac:02:fe:fc:aa:76:d6:40:85:a7:
                    02:c5:26:fb:fa:d1:a9:96:96:d8:b7:05:4b:24:37:
                    d8:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:01:42:CC:78:72:B4:94:FA:7B:86:F4:63:89:8F:6A:C9:E8:3E:C5
            X509v3 Authority Key Identifier:
                keyid:C3:85:20:1A:33:B5:27:C6:44:AA:D5:AE:CD:37:82:C6:A8:C2:F5:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w4UgGjO1J8ZEqtWuzTeCxqjC9R8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6d663a-4538-4cbf-ad1f-857580fc6167/1/w4UgGjO1J8ZEqtWuzTeCxqjC9R8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6d663a-4538-4cbf-ad1f-857580fc6167/1/w4UgGjO1J8ZEqtWuzTeCxqjC9R8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:d8:e0:e1:da:2e:12:da:a0:fc:04:4f:7a:27:db:2d:23:4b:
         77:58:6f:1e:e4:08:5b:7f:2d:d4:81:c0:6c:bd:3f:f1:b3:f6:
         ed:7c:c9:14:06:c9:36:e0:6d:82:df:20:0a:68:32:ab:57:cf:
         40:4e:ae:a7:60:7f:78:b6:8f:6f:d2:b5:f7:8a:65:f2:13:39:
         27:c3:40:0f:06:e4:a8:68:1a:cd:2b:cd:05:ea:47:ca:59:ea:
         99:15:73:00:60:af:16:f2:8a:be:95:f4:5e:49:f5:6c:af:45:
         b9:19:df:3d:c6:95:62:a9:0f:f4:19:13:5f:5b:7c:cb:83:a6:
         06:ac:02:50:37:9e:d1:6d:de:3a:b4:38:84:b3:16:a0:67:82:
         73:59:bd:43:27:47:61:de:c7:ca:31:f1:c9:e1:a8:3d:8e:76:
         bb:e5:e0:6a:dc:2f:e8:58:04:8d:d1:18:20:1a:f5:3e:2e:55:
         be:39:46:68:6c:3d:90:65:be:e5:30:2b:b3:c8:73:e9:6b:70:
         62:ca:26:e0:a0:20:ba:6f:e6:3c:b4:49:d3:5b:ce:36:95:6b:
         b4:1f:c2:c7:7b:46:08:5a:1b:73:d4:10:5e:df:b4:f4:d8:4f:
         c1:3d:ab:35:9f:0d:ee:38:36:5a:38:da:e8:0c:d0:86:ae:4f:
         2d:aa:db:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:53:47 2025 by rpki-client