Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/e46168-9818-4b51-94ad-c618dec07462/1/wNBDfN98up85Z-syighobQbkfVY.mft
File:                     wNBDfN98up85Z-syighobQbkfVY.mft (raw, json)
Hash identifier:          5sRaNP/DBFE7qHJ3DgHgEtefsjwE7U72ZRQnq1fuZuA=
Subject key identifier:   B2:4A:41:29:D6:41:1C:F9:9D:4A:87:FC:D9:E0:1E:2B:A1:4E:BB:23
Authority key identifier: C0:D0:43:7C:DF:7C:BA:9F:39:67:EB:32:8A:08:68:6D:06:E4:7D:56
Certificate issuer:       /CN=c0d0437cdf7cba9f3967eb328a08686d06e47d56
Certificate serial:       01989592381129CD7475DE4F06CA2C8FB239
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wNBDfN98up85Z-syighobQbkfVY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/e46168-9818-4b51-94ad-c618dec07462/1/wNBDfN98up85Z-syighobQbkfVY.mft
Manifest number:          03CB
Signing time:             Sun 10 Aug 2025 20:00:44 +0000
Manifest this update:     Sun 10 Aug 2025 20:00:44 +0000
Manifest next update:     Mon 11 Aug 2025 20:00:44 +0000
Files and hashes:         1: RVpE5x4ewK-16qeOmC4zQhoP4D0.roa (hash: hUGCkNpwy4m/7VpqWBt6q2aDAeStLb3YaDGvbWD+DDQ=)
                          2: wNBDfN98up85Z-syighobQbkfVY.crl (hash: wbQozEABRE8T9b8x3HjgIc6NouN/4NQR3x80HwoQkI0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/e46168-9818-4b51-94ad-c618dec07462/1/wNBDfN98up85Z-syighobQbkfVY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/e46168-9818-4b51-94ad-c618dec07462/1/wNBDfN98up85Z-syighobQbkfVY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wNBDfN98up85Z-syighobQbkfVY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 17:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:95:92:38:11:29:cd:74:75:de:4f:06:ca:2c:8f:b2:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0d0437cdf7cba9f3967eb328a08686d06e47d56
        Validity
            Not Before: Aug 10 20:00:44 2025 GMT
            Not After : Aug 11 20:00:44 2025 GMT
        Subject: CN=b24a4129d6411cf99d4a87fcd9e01e2ba14ebb23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:91:d0:95:33:75:b2:40:79:d3:de:e4:79:20:
                    cb:2b:e3:3d:fa:a2:1f:f3:a7:ae:a6:60:96:2c:cb:
                    b9:fb:3b:fc:f2:8e:6c:26:c7:32:de:a0:53:3e:ff:
                    fd:34:58:74:7f:aa:77:2c:21:5d:19:18:bb:e8:4e:
                    aa:26:7c:57:0a:5f:a2:9b:a5:22:55:a3:a4:35:64:
                    b2:6a:85:48:f6:cf:f3:e7:12:91:ee:ed:70:cd:2e:
                    25:a3:2c:50:39:b2:a7:b6:03:cb:d4:1b:c8:39:1b:
                    3c:b8:35:a2:b5:28:c2:b0:49:12:25:45:8d:65:ee:
                    8e:80:23:63:71:f2:83:8f:ea:3b:c8:b1:6a:85:56:
                    2c:7c:85:24:40:ff:37:1f:a5:d6:74:2e:27:32:4e:
                    68:34:a6:5e:06:40:e0:ae:8b:69:93:c1:42:6e:70:
                    e3:ea:2c:4a:71:70:f5:7e:62:90:3b:41:55:67:b4:
                    50:bf:7f:5f:99:d0:07:a8:f9:f1:25:cf:c1:8d:48:
                    52:e6:58:09:d2:e2:a2:1d:3e:ca:f9:be:47:12:c3:
                    eb:e6:1e:a2:7a:1e:ed:4d:32:7e:84:3c:cc:ec:82:
                    5c:98:18:ed:c9:5e:be:bb:23:e1:b5:e6:e8:36:c0:
                    5b:34:79:58:fd:81:6d:f7:9f:50:5d:fc:fe:6a:23:
                    0d:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:4A:41:29:D6:41:1C:F9:9D:4A:87:FC:D9:E0:1E:2B:A1:4E:BB:23
            X509v3 Authority Key Identifier:
                keyid:C0:D0:43:7C:DF:7C:BA:9F:39:67:EB:32:8A:08:68:6D:06:E4:7D:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wNBDfN98up85Z-syighobQbkfVY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/e46168-9818-4b51-94ad-c618dec07462/1/wNBDfN98up85Z-syighobQbkfVY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/e46168-9818-4b51-94ad-c618dec07462/1/wNBDfN98up85Z-syighobQbkfVY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:fe:69:34:30:a0:d4:18:1e:98:c5:66:a8:14:da:b6:1d:c1:
         df:6f:5b:79:47:6a:52:33:ca:4a:11:27:c2:02:34:5f:66:01:
         6a:9b:32:6e:c0:08:cf:48:82:78:cd:0b:83:b0:e1:d6:31:31:
         8d:9f:f1:2e:ac:6c:ba:3a:b7:e4:a9:52:18:85:da:35:20:70:
         49:0d:9d:9f:8a:7c:b5:63:7c:91:e9:6b:e6:d3:65:06:ac:68:
         7b:e0:ad:7b:75:73:f2:41:ed:5f:18:e6:f4:51:ae:27:2d:c8:
         19:37:61:72:86:b5:d2:2a:4b:4f:0b:c5:e4:63:dd:58:26:38:
         fc:2b:08:a0:7e:86:c0:2d:c3:08:e1:62:91:aa:c5:de:1d:78:
         99:f9:d1:29:43:b3:44:da:ef:88:1a:af:5a:48:ca:cf:a4:7c:
         d3:bf:2f:09:3b:49:f1:b1:4f:36:c3:8b:e0:b8:8a:8f:eb:5c:
         2e:6d:06:7d:c8:80:d7:6e:be:99:5b:b8:c5:c2:df:b2:42:cf:
         d6:69:4f:ba:62:78:f4:a3:43:a3:21:b6:c6:a8:6c:2d:2e:c6:
         f2:d1:d1:af:2d:95:b7:6c:92:1f:ac:4e:e4:80:71:d0:46:12:
         70:c9:45:97:e6:eb:a9:10:78:26:85:3f:13:57:b9:24:fb:b6:
         5c:9b:6e:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 01:43:06 2025 by rpki-client