Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/5e0489-17cf-422c-aa40-2fb0944b5194/1/wdsEGvq_2MEfCxC1I3mbZc_eOQg.mft
File:                     wdsEGvq_2MEfCxC1I3mbZc_eOQg.mft (raw, json)
Hash identifier:          aWm/GTgnLVLUn/uoau4OlW0hECDsiylV0yqEM0JgVjc=
Subject key identifier:   63:B7:98:5B:FE:FF:DE:0A:10:AC:3C:08:C2:D3:A6:A6:8C:39:10:E2
Authority key identifier: C1:DB:04:1A:FA:BF:D8:C1:1F:0B:10:B5:23:79:9B:65:CF:DE:39:08
Certificate issuer:       /CN=c1db041afabfd8c11f0b10b523799b65cfde3908
Certificate serial:       01987C402995ABE32ACBE496D506AE225EFD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wdsEGvq_2MEfCxC1I3mbZc_eOQg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/5e0489-17cf-422c-aa40-2fb0944b5194/1/wdsEGvq_2MEfCxC1I3mbZc_eOQg.mft
Manifest number:          05D4
Signing time:             Tue 05 Aug 2025 22:00:36 +0000
Manifest this update:     Tue 05 Aug 2025 22:00:36 +0000
Manifest next update:     Wed 06 Aug 2025 22:00:36 +0000
Files and hashes:         1: pHhGl7hC09oju4TJunou2EvQcgs.roa (hash: 2VlBpUDieZUHkJYBbPMMtM8Or6vr8jhJfvPVbdLnF2s=)
                          2: wdsEGvq_2MEfCxC1I3mbZc_eOQg.crl (hash: 296OXCrrYBHYtlHhsCwuh4QR8QFFXbKEndLMbDZ+PcY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/5e0489-17cf-422c-aa40-2fb0944b5194/1/wdsEGvq_2MEfCxC1I3mbZc_eOQg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/5e0489-17cf-422c-aa40-2fb0944b5194/1/wdsEGvq_2MEfCxC1I3mbZc_eOQg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wdsEGvq_2MEfCxC1I3mbZc_eOQg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 17:44:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7c:40:29:95:ab:e3:2a:cb:e4:96:d5:06:ae:22:5e:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1db041afabfd8c11f0b10b523799b65cfde3908
        Validity
            Not Before: Aug  5 22:00:36 2025 GMT
            Not After : Aug  6 22:00:36 2025 GMT
        Subject: CN=63b7985bfeffde0a10ac3c08c2d3a6a68c3910e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:db:9f:7d:9b:99:8c:ee:12:34:04:a9:3f:33:
                    f7:cc:2d:c9:31:43:ae:c4:9e:c7:94:26:df:13:f3:
                    1e:4e:fe:74:96:31:96:77:2a:c1:5b:d3:f3:05:f9:
                    84:3e:99:66:3b:bb:58:84:47:d9:16:99:5d:a7:b3:
                    fa:31:04:79:bc:17:87:47:1c:cf:02:3c:32:39:db:
                    61:22:f3:d1:0b:86:25:c6:09:a5:74:00:4d:9b:e7:
                    8a:46:af:f0:5b:21:17:fe:37:fd:82:96:e9:07:e4:
                    13:40:ad:bf:0d:68:39:6f:30:80:35:8d:6f:41:ca:
                    2c:b3:1b:13:63:15:d7:5f:4c:65:86:56:d7:94:bc:
                    7b:9e:db:2d:cc:6c:bb:1f:7b:56:2c:e6:8e:7e:af:
                    9d:a9:a7:2e:54:4d:79:f0:3c:aa:71:a1:57:c5:24:
                    3e:7d:ce:f3:99:18:91:e4:8a:47:e6:a8:7f:18:83:
                    7a:14:3f:07:f9:23:48:17:de:87:ed:c5:b2:b1:68:
                    cd:9b:28:90:07:fe:42:12:9e:27:62:a0:8e:48:1d:
                    65:d9:ca:c5:fd:ec:2f:7d:e9:1a:42:dd:bc:73:21:
                    ff:1c:1d:f5:3e:47:54:25:62:f9:1a:6c:bb:8c:83:
                    95:e5:6f:73:51:35:5c:9e:9e:75:c1:08:54:c9:28:
                    ae:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:B7:98:5B:FE:FF:DE:0A:10:AC:3C:08:C2:D3:A6:A6:8C:39:10:E2
            X509v3 Authority Key Identifier:
                keyid:C1:DB:04:1A:FA:BF:D8:C1:1F:0B:10:B5:23:79:9B:65:CF:DE:39:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wdsEGvq_2MEfCxC1I3mbZc_eOQg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5e0489-17cf-422c-aa40-2fb0944b5194/1/wdsEGvq_2MEfCxC1I3mbZc_eOQg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5e0489-17cf-422c-aa40-2fb0944b5194/1/wdsEGvq_2MEfCxC1I3mbZc_eOQg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:f5:52:99:9a:14:8f:e0:55:26:9e:55:92:ec:46:f7:d3:0f:
         f9:39:7c:09:66:55:27:4a:1b:cc:a5:d4:88:d5:96:2d:99:d3:
         e9:7e:74:c9:01:0d:cf:1d:2f:23:a2:be:85:76:b5:1e:6e:44:
         fc:ca:38:99:61:9d:7d:5f:fd:c6:78:cd:ad:88:b5:3f:ce:66:
         a7:3c:a1:5b:05:bd:70:c1:88:63:6c:e5:c6:1d:4d:db:5d:7f:
         d1:03:9e:8e:39:20:d3:6e:7d:5c:84:b6:ec:6f:5e:61:89:37:
         00:23:ae:cf:d7:46:6d:60:e4:a4:e2:7f:9e:d7:d5:a2:e4:c5:
         45:87:82:28:46:fe:db:5b:c1:18:b1:b8:c7:fe:13:66:60:00:
         fb:84:f7:a8:d4:23:2d:6d:43:bc:b4:43:a9:a9:fa:83:89:b5:
         ba:94:a6:2b:98:1d:6d:33:d5:48:c0:b9:9b:64:8f:35:d1:7e:
         3e:8d:9e:71:ff:a9:33:2a:87:03:6c:88:cb:db:ac:13:dd:d8:
         b3:be:eb:4d:ab:1e:cc:2d:fc:15:1c:2e:30:0a:f3:45:8b:98:
         db:04:0e:10:71:fa:5f:fd:ae:03:d0:53:e1:26:4f:1a:ad:16:
         48:05:84:74:17:fb:1b:90:3e:11:30:79:f5:9a:b6:92:d3:0d:
         f5:0d:5f:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:40:18 2025 by rpki-client