Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/a06407-a1f2-4b47-96c7-0a9e3cb4dc13/1/WH7X6fmKHxl17p-8sJXDrfoorsA.mft
File:                     WH7X6fmKHxl17p-8sJXDrfoorsA.mft (raw, json)
Hash identifier:          hZfX6nt+SgWTFLY9t0VQ04ugQz+yxKbqamWBLTMinTs=
Subject key identifier:   77:DF:D7:95:CD:75:E5:7F:28:23:AC:66:25:09:CA:A1:AF:BC:4B:CC
Authority key identifier: 58:7E:D7:E9:F9:8A:1F:19:75:EE:9F:BC:B0:95:C3:AD:FA:28:AE:C0
Certificate issuer:       /CN=587ed7e9f98a1f1975ee9fbcb095c3adfa28aec0
Certificate serial:       01987E65AFDF4E7F1E1FDD458F02B4A4D254
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WH7X6fmKHxl17p-8sJXDrfoorsA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/a06407-a1f2-4b47-96c7-0a9e3cb4dc13/1/WH7X6fmKHxl17p-8sJXDrfoorsA.mft
Manifest number:          15FD
Signing time:             Wed 06 Aug 2025 08:00:49 +0000
Manifest this update:     Wed 06 Aug 2025 08:00:49 +0000
Manifest next update:     Thu 07 Aug 2025 08:00:49 +0000
Files and hashes:         1: 19CW3KILFYPXEhHk2Ol76tPUYYc.roa (hash: vdEeJmbxLIeIAD2w3zH+n6I7kJJZC/K9fF2eOSXSZV8=)
                          2: WH7X6fmKHxl17p-8sJXDrfoorsA.crl (hash: FZ58pqndx4Y/LVTOvyR5rIu6x7ee397z1ecWh4WS7b0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/a06407-a1f2-4b47-96c7-0a9e3cb4dc13/1/WH7X6fmKHxl17p-8sJXDrfoorsA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/a06407-a1f2-4b47-96c7-0a9e3cb4dc13/1/WH7X6fmKHxl17p-8sJXDrfoorsA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WH7X6fmKHxl17p-8sJXDrfoorsA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 08:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7e:65:af:df:4e:7f:1e:1f:dd:45:8f:02:b4:a4:d2:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=587ed7e9f98a1f1975ee9fbcb095c3adfa28aec0
        Validity
            Not Before: Aug  6 08:00:49 2025 GMT
            Not After : Aug  7 08:00:49 2025 GMT
        Subject: CN=77dfd795cd75e57f2823ac662509caa1afbc4bcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c7:ba:e4:09:71:73:55:d1:cd:cb:8c:87:9d:
                    6b:d3:e1:f1:e1:f5:4c:63:10:55:53:7d:b8:09:ab:
                    4c:98:fd:bd:c6:a1:a3:35:66:95:ce:ff:59:03:58:
                    d3:71:57:b9:91:5a:db:4e:88:3f:55:56:b0:46:09:
                    c5:6f:22:16:97:93:38:b8:b9:36:56:8c:b8:92:8c:
                    9e:d9:52:1c:3c:b2:d1:e9:d7:6e:48:35:98:ae:08:
                    d0:e9:53:d6:b1:05:4f:54:2c:73:18:0d:1a:2c:ee:
                    89:92:7c:59:c7:96:98:3f:be:70:72:80:a5:45:5f:
                    c5:82:60:ab:64:c2:b2:9b:e0:13:ac:c0:ee:9a:0e:
                    21:9e:96:0f:9a:4f:1c:20:17:20:cb:b6:cc:a0:02:
                    76:2c:20:5f:fd:0d:28:b0:6b:2f:ec:9b:23:67:0f:
                    48:31:65:71:f0:49:d1:c8:a2:3e:a3:c1:9b:3a:2f:
                    8e:e6:95:aa:af:87:50:51:38:8e:09:64:eb:0e:57:
                    a2:a5:4c:7a:03:0e:bb:96:6e:3f:4b:e8:27:d1:25:
                    7c:12:f9:55:33:46:69:16:e7:4e:ad:db:da:5d:82:
                    46:ba:f7:74:7c:a5:4d:c3:6c:5b:c0:81:39:7d:b9:
                    d7:22:6e:a5:11:5d:ff:ee:2e:ef:8e:47:ed:a6:c5:
                    e8:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:DF:D7:95:CD:75:E5:7F:28:23:AC:66:25:09:CA:A1:AF:BC:4B:CC
            X509v3 Authority Key Identifier:
                keyid:58:7E:D7:E9:F9:8A:1F:19:75:EE:9F:BC:B0:95:C3:AD:FA:28:AE:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WH7X6fmKHxl17p-8sJXDrfoorsA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a06407-a1f2-4b47-96c7-0a9e3cb4dc13/1/WH7X6fmKHxl17p-8sJXDrfoorsA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/a06407-a1f2-4b47-96c7-0a9e3cb4dc13/1/WH7X6fmKHxl17p-8sJXDrfoorsA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:1a:20:ab:26:fc:90:cb:97:28:63:5a:4c:66:16:ef:23:72:
         74:fb:a3:d4:da:03:75:71:56:b7:bc:ca:8d:5f:d4:9d:90:ef:
         f9:e4:1e:c3:37:1b:91:bd:ca:0b:77:d4:7d:92:07:a1:0d:ff:
         c4:c0:e1:fe:91:ef:52:7d:41:e9:6d:6d:61:de:b8:b2:24:17:
         28:4d:bf:8c:3f:5a:7f:e6:2f:e0:7c:4d:5b:5d:f1:aa:8e:9c:
         72:34:2f:7e:7e:0e:11:63:33:50:62:4d:4b:c5:61:89:8d:87:
         fc:89:a5:46:26:eb:99:58:8b:4e:1f:1d:eb:1d:b6:28:f8:dc:
         c4:a9:bb:78:d6:d9:c6:b0:f9:7f:2c:52:be:45:fe:a0:c0:61:
         1e:d9:d4:d1:40:13:eb:df:11:5e:78:40:b8:69:73:9d:02:ce:
         b0:63:79:5e:b5:14:f0:35:62:11:87:5b:a5:3b:67:b0:85:b1:
         36:ac:91:c0:69:20:e1:50:bb:02:02:d7:36:51:6e:4d:46:1b:
         ae:06:da:82:cb:80:c8:0d:e8:55:92:43:4d:cb:eb:10:d0:ae:
         43:7c:a3:dc:5e:64:82:72:e3:f4:f1:ca:f5:54:b7:03:e2:13:
         69:27:d9:0a:3b:73:4c:d9:f6:1b:c5:a3:b5:23:8c:8b:de:fa:
         3b:1f:7a:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:23:44 2025 by rpki-client