Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/wSM4YSB6IwVk7zbxHgFXNEcx4_k.mft
File:                     wSM4YSB6IwVk7zbxHgFXNEcx4_k.mft (raw, json)
Hash identifier:          zXKX5PTAhRc3FiEjllu1cj3IrsknzYdQVBGHBUbmWnc=
Subject key identifier:   BB:85:EE:95:26:86:C1:88:6F:18:20:33:07:52:00:FB:CC:3B:F0:D4
Authority key identifier: C1:23:38:61:20:7A:23:05:64:EF:36:F1:1E:01:57:34:47:31:E3:F9
Certificate issuer:       /CN=c1233861207a230564ef36f11e0157344731e3f9
Certificate serial:       01988AA107B1B5C95FB44AFA67008C15B059
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wSM4YSB6IwVk7zbxHgFXNEcx4_k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/wSM4YSB6IwVk7zbxHgFXNEcx4_k.mft
Manifest number:          162B
Signing time:             Fri 08 Aug 2025 17:01:05 +0000
Manifest this update:     Fri 08 Aug 2025 17:01:05 +0000
Manifest next update:     Sat 09 Aug 2025 17:01:05 +0000
Files and hashes:         1: G0mfJKH5XthYEp56dZd7amNIFIg.roa (hash: ZdlmpS8KB0XJ2RMI8I0V6gnsbS1MxMfFNBLIs6WQ0tQ=)
                          2: J3tQAc-R4PT9iUkojothol4LOyU.roa (hash: 3yeSEY7/c0NLf9TAv7WKIHKi3Ggm4vF4/G3CEy8wx+U=)
                          3: SjT04nA7qX_MCmXA-4Xf2qOOvyk.roa (hash: hyMLCE9dKw6nHLTE5zUsN701ouIzmTXWz2+LUwVBqEU=)
                          4: mgF34y33vscxiS4stuO3BYu8JlE.roa (hash: G0qOZyPDZdpreKkYGFQ+RFa5w/ELVkiOatwZcMI9hrQ=)
                          5: wSM4YSB6IwVk7zbxHgFXNEcx4_k.crl (hash: rYSljFAHzFjmubM+0SZKr+QjO0QUjvjP6STIw2CFhPA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/wSM4YSB6IwVk7zbxHgFXNEcx4_k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/wSM4YSB6IwVk7zbxHgFXNEcx4_k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wSM4YSB6IwVk7zbxHgFXNEcx4_k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 11:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8a:a1:07:b1:b5:c9:5f:b4:4a:fa:67:00:8c:15:b0:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1233861207a230564ef36f11e0157344731e3f9
        Validity
            Not Before: Aug  8 17:01:05 2025 GMT
            Not After : Aug  9 17:01:05 2025 GMT
        Subject: CN=bb85ee952686c1886f182033075200fbcc3bf0d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:7b:da:1e:3e:72:fc:c9:05:bb:58:a2:d0:51:
                    0a:21:d9:b4:9b:26:d2:65:30:8d:42:5c:26:e6:e2:
                    d4:25:6d:f5:1e:aa:d1:20:f4:e8:5a:be:39:b6:21:
                    15:23:e3:f2:9c:ad:3d:89:f6:dd:5d:ea:b3:11:48:
                    fe:ab:4f:20:79:99:aa:17:b1:26:35:2f:48:d3:d3:
                    8e:71:57:c7:af:c2:15:29:65:2d:6d:d4:85:fb:f9:
                    38:11:b3:42:93:75:9b:40:ee:fd:62:61:fc:eb:ad:
                    0a:7e:73:61:bd:3e:60:41:ef:ef:b0:19:b5:fe:cf:
                    02:c4:84:ac:88:20:62:ef:ef:84:43:e2:eb:33:be:
                    51:79:98:e3:27:4f:68:81:56:88:87:cd:78:35:c2:
                    6c:01:53:01:a3:79:b7:d8:29:87:b7:73:27:35:41:
                    81:08:91:9f:3a:7f:31:c2:51:b2:49:65:46:3d:62:
                    35:1f:8b:fe:49:12:29:3e:25:4c:92:cd:0d:66:1f:
                    70:58:be:c5:2c:d1:cd:ea:d0:6e:bd:fb:79:ca:76:
                    ae:2c:a9:98:8d:86:72:c2:aa:33:89:68:c8:e5:38:
                    8c:98:20:9e:af:9e:66:2c:ae:ee:4b:03:be:50:5c:
                    d2:07:76:bb:8a:7c:31:8d:7f:70:51:81:88:1a:00:
                    ab:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:85:EE:95:26:86:C1:88:6F:18:20:33:07:52:00:FB:CC:3B:F0:D4
            X509v3 Authority Key Identifier:
                keyid:C1:23:38:61:20:7A:23:05:64:EF:36:F1:1E:01:57:34:47:31:E3:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSM4YSB6IwVk7zbxHgFXNEcx4_k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/wSM4YSB6IwVk7zbxHgFXNEcx4_k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/wSM4YSB6IwVk7zbxHgFXNEcx4_k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:f9:ad:85:d7:ae:71:f9:92:b4:63:01:a9:a8:69:c1:b6:be:
         64:47:df:a2:d0:ca:c9:94:20:94:70:0c:b9:cb:02:8c:03:a8:
         ac:86:ab:bb:06:c9:f6:87:b4:06:e1:0b:17:f1:42:29:ed:d6:
         84:6b:18:d9:29:3e:a9:d6:f9:25:e7:46:73:63:4a:7f:75:33:
         81:1f:42:ce:a2:9b:c2:ec:aa:4f:ad:75:37:2b:56:33:e2:a3:
         3c:72:a3:55:7c:38:0c:3d:69:30:22:11:42:27:69:0a:5c:58:
         2d:a1:ea:20:d9:61:1b:ee:ba:8d:b9:a9:71:9d:c4:d4:d8:77:
         40:8e:99:69:09:38:61:00:2c:5b:1d:94:0f:98:c1:18:5c:7c:
         c9:45:62:70:80:a9:1a:34:50:f0:9c:46:44:e1:b9:a0:a6:f2:
         c9:8e:7a:ff:20:b1:b0:3e:14:b1:4e:c7:f1:79:d0:f7:28:46:
         60:ef:ba:d2:e2:ec:1f:ae:35:fe:37:9b:d8:a4:f5:0a:08:b0:
         f2:ad:34:f0:f7:ad:a3:d5:6e:38:c7:fd:a9:17:14:ef:ad:41:
         3d:dc:b3:e9:37:a3:0c:db:7e:c1:68:31:3a:41:f8:f2:5a:24:
         d5:46:42:7f:60:df:f6:07:cf:29:a1:6a:ab:49:df:3a:e2:91:
         31:e6:c4:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:59:19 2025 by rpki-client