Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/a8de56-edcc-40b1-b87f-4a07f97e98a9/1/WzSxhIYRAAcf5Ns92oSoLMG7zGI.mft
File:                     WzSxhIYRAAcf5Ns92oSoLMG7zGI.mft (raw, json)
Hash identifier:          ECk6ZsvhW63k0NfbJKIfYRmtKUg2lO+ZZpCz4CqIH/k=
Subject key identifier:   A0:09:D5:61:CC:74:AC:4B:FD:62:9C:18:B9:B2:1E:F6:00:90:FB:DF
Authority key identifier: 5B:34:B1:84:86:11:00:07:1F:E4:DB:3D:DA:84:A8:2C:C1:BB:CC:62
Certificate issuer:       /CN=5b34b184861100071fe4db3dda84a82cc1bbcc62
Certificate serial:       01988F902B88267D026F3B2CE71463DED80F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WzSxhIYRAAcf5Ns92oSoLMG7zGI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/a8de56-edcc-40b1-b87f-4a07f97e98a9/1/WzSxhIYRAAcf5Ns92oSoLMG7zGI.mft
Manifest number:          0A9D
Signing time:             Sat 09 Aug 2025 16:00:46 +0000
Manifest this update:     Sat 09 Aug 2025 16:00:46 +0000
Manifest next update:     Sun 10 Aug 2025 16:00:46 +0000
Files and hashes:         1: WzSxhIYRAAcf5Ns92oSoLMG7zGI.crl (hash: tOA+3zQWRe7bdyjYnJmU+uVUjZ33iZ1IsftHmujwJAU=)
                          2: euH012EDGUcPvCsGZK3_XSPmReQ.roa (hash: 4a2YJ6UV9i6dy+y4QlBQdoAoRR/Frnfv0MzkbXJqY/U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/a8de56-edcc-40b1-b87f-4a07f97e98a9/1/WzSxhIYRAAcf5Ns92oSoLMG7zGI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/a8de56-edcc-40b1-b87f-4a07f97e98a9/1/WzSxhIYRAAcf5Ns92oSoLMG7zGI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WzSxhIYRAAcf5Ns92oSoLMG7zGI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8f:90:2b:88:26:7d:02:6f:3b:2c:e7:14:63:de:d8:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b34b184861100071fe4db3dda84a82cc1bbcc62
        Validity
            Not Before: Aug  9 16:00:46 2025 GMT
            Not After : Aug 10 16:00:46 2025 GMT
        Subject: CN=a009d561cc74ac4bfd629c18b9b21ef60090fbdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:fa:a1:d3:71:22:f6:eb:a1:7d:c4:98:8a:32:
                    dc:75:56:1c:18:80:1b:e8:29:d2:19:fa:a4:d7:8c:
                    9f:10:a2:20:ce:66:92:9d:1a:8a:c6:e7:11:b6:eb:
                    48:d8:83:61:70:d3:49:be:04:b1:04:c5:b5:22:db:
                    22:6f:69:9f:4d:d0:b9:00:ef:3c:a9:96:eb:3a:8f:
                    bb:9c:b9:64:2a:b6:fd:2c:19:ba:6f:0e:e8:f0:f5:
                    b3:83:d4:5e:ab:f1:0a:a2:0d:4f:4a:a4:84:d2:93:
                    c1:ad:4f:e3:e2:10:5a:eb:19:d4:f5:4b:61:a3:5c:
                    aa:27:1e:12:9e:65:64:58:9b:17:51:a7:01:e4:9d:
                    96:55:ab:d7:ea:6b:38:46:1d:70:bf:47:57:e1:d1:
                    08:13:b8:99:ae:0f:90:dd:cd:24:db:ea:d9:a8:de:
                    6e:2e:a1:9e:ed:5f:fa:85:42:89:2e:ba:88:da:96:
                    63:93:4f:8d:e3:82:ce:80:90:d0:a7:f4:16:b3:26:
                    71:72:42:1a:8e:9a:62:f8:a2:4a:fc:63:eb:99:56:
                    f8:8c:2f:58:61:c0:be:e4:c1:0d:71:f6:7a:96:6d:
                    8c:4a:2a:be:fd:c2:0d:b3:27:52:11:b7:7d:96:c6:
                    d3:b8:2e:b7:62:a0:d8:c9:34:22:c6:c4:90:90:96:
                    03:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:09:D5:61:CC:74:AC:4B:FD:62:9C:18:B9:B2:1E:F6:00:90:FB:DF
            X509v3 Authority Key Identifier:
                keyid:5B:34:B1:84:86:11:00:07:1F:E4:DB:3D:DA:84:A8:2C:C1:BB:CC:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WzSxhIYRAAcf5Ns92oSoLMG7zGI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a8de56-edcc-40b1-b87f-4a07f97e98a9/1/WzSxhIYRAAcf5Ns92oSoLMG7zGI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a8de56-edcc-40b1-b87f-4a07f97e98a9/1/WzSxhIYRAAcf5Ns92oSoLMG7zGI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:4d:a7:96:09:87:0c:4f:5b:8f:53:57:29:71:ea:1b:4c:80:
         0f:97:09:77:88:67:08:9d:37:18:67:f1:dc:41:ff:6e:b2:d2:
         ba:9f:27:2e:70:08:cd:84:31:4e:48:c4:66:a0:7c:52:47:7d:
         f6:56:eb:12:19:d8:1a:a7:67:87:4e:f6:87:b1:03:66:a6:68:
         81:c5:7d:fd:15:56:c4:0f:f7:52:a7:f6:f5:0c:d1:b5:44:49:
         f8:99:dc:5d:3f:b4:9f:48:17:4f:fd:43:ff:a4:1d:9f:6c:82:
         26:0e:36:8c:47:d5:ef:39:fc:be:e3:45:18:74:3d:30:e2:eb:
         6d:9f:9b:93:cc:2c:04:85:df:14:fa:69:24:2a:a4:e9:d2:43:
         64:cb:78:48:19:83:f5:ca:d3:41:41:74:1f:93:f0:4e:79:af:
         a7:de:b2:d2:9b:a7:fe:23:61:fc:12:0c:a6:df:d8:63:f6:75:
         e4:82:52:ff:2e:87:6e:75:d7:b4:94:1f:c9:c9:d3:54:a6:d3:
         76:67:11:4d:96:3e:25:35:3c:bd:43:75:dc:ac:77:27:3a:ee:
         84:ed:7c:9b:bf:c7:09:1e:4a:25:fa:00:ff:6b:c9:0f:aa:1c:
         31:00:52:e5:f8:2b:5b:03:67:49:be:90:bc:08:39:05:2e:d5:
         e1:30:9a:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:31:49 2025 by rpki-client