Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/bc2cd4-fd37-4c41-b5dc-9a803f736c4a/1/WIwyAnRlop-4Ty3QXz8L6AQnsMk.mft
File:                     WIwyAnRlop-4Ty3QXz8L6AQnsMk.mft (raw, json)
Hash identifier:          d548h0E3i7OE+nj+R4fdf3R9L1h6PVEN3y+mep8SuJM=
Subject key identifier:   1C:77:10:5B:4E:69:F5:F8:E2:A8:33:BC:C5:15:D4:A4:38:9C:C4:74
Authority key identifier: 58:8C:32:02:74:65:A2:9F:B8:4F:2D:D0:5F:3F:0B:E8:04:27:B0:C9
Certificate issuer:       /CN=588c32027465a29fb84f2dd05f3f0be80427b0c9
Certificate serial:       0198A15F8E86B45D349207ABDEDEF7B115B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WIwyAnRlop-4Ty3QXz8L6AQnsMk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/bc2cd4-fd37-4c41-b5dc-9a803f736c4a/1/WIwyAnRlop-4Ty3QXz8L6AQnsMk.mft
Manifest number:          09DA
Signing time:             Wed 13 Aug 2025 03:00:50 +0000
Manifest this update:     Wed 13 Aug 2025 03:00:50 +0000
Manifest next update:     Thu 14 Aug 2025 03:00:50 +0000
Files and hashes:         1: WIwyAnRlop-4Ty3QXz8L6AQnsMk.crl (hash: lKwxAdnsGnpFmhjIhqZmi/rXTCPdDRPLzYTrAwoXkpU=)
                          2: gS4jeqALacaf51dl93Py-I7kfls.roa (hash: OBdPPMpWE3pFYQDOuw6u5rVnnXeeNEwg98LVQA2Wi/s=)
                          3: gfhu0UMjPTGrZruaeirhOo04QTw.roa (hash: HYAZtY2G7JxVkFUj22KQMYwy01JLPX5+ssTDK0gFTRw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/bc2cd4-fd37-4c41-b5dc-9a803f736c4a/1/WIwyAnRlop-4Ty3QXz8L6AQnsMk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/bc2cd4-fd37-4c41-b5dc-9a803f736c4a/1/WIwyAnRlop-4Ty3QXz8L6AQnsMk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WIwyAnRlop-4Ty3QXz8L6AQnsMk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 Aug 2025 22:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:a1:5f:8e:86:b4:5d:34:92:07:ab:de:de:f7:b1:15:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=588c32027465a29fb84f2dd05f3f0be80427b0c9
        Validity
            Not Before: Aug 13 03:00:50 2025 GMT
            Not After : Aug 14 03:00:50 2025 GMT
        Subject: CN=1c77105b4e69f5f8e2a833bcc515d4a4389cc474
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:4f:60:9a:eb:a1:73:7b:cb:6d:df:60:10:a8:
                    b1:c0:10:1b:58:98:57:51:03:4e:27:b3:fd:a2:54:
                    6a:0e:b2:61:09:8a:54:85:8d:c2:f0:7b:8b:dd:94:
                    3e:9b:19:3a:24:fd:17:48:0b:8b:1b:f4:f9:fc:27:
                    f4:e9:1c:4b:e2:39:53:de:b2:1f:32:c4:09:14:66:
                    38:5f:4f:9f:e5:d7:ab:d0:bf:e4:61:78:ef:7b:ba:
                    cb:d7:90:ee:27:2f:05:00:5a:42:e9:ef:c0:e8:f3:
                    a9:eb:c2:36:59:71:12:b3:26:d2:cb:6f:a0:46:b4:
                    0d:57:b5:1d:69:9b:94:e2:61:8c:59:be:0b:75:af:
                    2b:53:7f:e5:4a:75:bd:8f:a8:ef:91:dc:48:c3:ae:
                    8a:8f:46:bc:39:4b:7e:a1:cc:4b:22:67:0f:8d:9b:
                    4e:14:46:95:7c:e2:5f:89:cd:87:bb:74:49:1f:a1:
                    8d:e5:68:3d:38:f2:b4:f9:3b:4e:91:79:3e:19:05:
                    0d:a2:08:b3:4b:bd:2a:cd:dd:95:82:7c:55:5d:9d:
                    fb:f3:19:d4:23:04:db:c8:f8:a8:63:c3:24:16:e1:
                    84:02:eb:39:86:f7:0c:9f:44:95:ab:9c:93:d5:56:
                    f7:af:f0:ac:86:2c:f1:b4:6f:81:1d:ed:c3:11:5c:
                    ed:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:77:10:5B:4E:69:F5:F8:E2:A8:33:BC:C5:15:D4:A4:38:9C:C4:74
            X509v3 Authority Key Identifier:
                keyid:58:8C:32:02:74:65:A2:9F:B8:4F:2D:D0:5F:3F:0B:E8:04:27:B0:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIwyAnRlop-4Ty3QXz8L6AQnsMk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/bc2cd4-fd37-4c41-b5dc-9a803f736c4a/1/WIwyAnRlop-4Ty3QXz8L6AQnsMk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/bc2cd4-fd37-4c41-b5dc-9a803f736c4a/1/WIwyAnRlop-4Ty3QXz8L6AQnsMk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:a7:21:dd:46:fe:47:fc:a5:5f:92:10:64:c4:ff:5e:c2:36:
         3e:bf:5a:71:78:97:87:6f:83:a0:c8:09:16:38:81:d3:0e:e0:
         38:d5:e8:d2:6b:b7:61:67:bb:a2:8c:d6:7c:f7:fb:5a:79:c3:
         4a:c8:e7:8b:df:8f:d0:85:39:8e:01:19:ed:1a:0a:36:5b:50:
         d8:be:95:55:f6:c5:54:7f:80:25:69:9d:14:e9:7c:78:6d:70:
         27:73:30:bb:2d:19:1f:4a:31:3d:94:24:f6:de:d7:fc:24:ca:
         e0:76:57:a9:92:d0:1f:6a:f4:0c:9b:fd:ca:5c:a7:52:a4:80:
         d3:f3:bb:ab:d0:7b:ff:49:c2:1f:73:01:64:47:04:33:c2:4e:
         fd:1e:52:1d:3e:a7:e9:dc:e6:c7:d6:42:7e:25:3f:77:a4:3f:
         f9:57:28:70:ab:1d:52:02:9d:b8:d1:ec:eb:f7:17:51:6d:d5:
         2a:d6:97:0d:00:2b:62:f3:44:19:e1:1d:df:fc:7a:5c:3b:a3:
         2e:7e:5b:fc:0d:a4:b6:93:43:93:3c:54:64:d9:03:10:b1:3f:
         26:dd:f0:7b:e5:15:ea:e4:56:94:2a:59:6d:c0:88:50:70:0f:
         47:9a:b8:17:2b:a3:dc:d9:80:ba:14:c1:a0:2d:4e:4e:df:eb:
         e5:b4:c8:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:52:34 2025 by rpki-client