Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/87688f-538a-4c25-b5da-ded5addbe5cf/1/WpeXnbcm_j5pPbktT6GP10G-dpk.mft
File:                     WpeXnbcm_j5pPbktT6GP10G-dpk.mft (raw, json)
Hash identifier:          ybj8mGhxVqqArRumB4uvTUSAe/ojQlIMU694dJUTGIY=
Subject key identifier:   5A:28:00:00:27:6E:12:D5:A7:8C:C4:A5:93:85:41:6A:E4:52:42:C6
Authority key identifier: 5A:97:97:9D:B7:26:FE:3E:69:3D:B9:2D:4F:A1:8F:D7:41:BE:76:99
Certificate issuer:       /CN=5a97979db726fe3e693db92d4fa18fd741be7699
Certificate serial:       01988167DDF03FBB4A543402DBDD15E88DB4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WpeXnbcm_j5pPbktT6GP10G-dpk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/87688f-538a-4c25-b5da-ded5addbe5cf/1/WpeXnbcm_j5pPbktT6GP10G-dpk.mft
Manifest number:          0A0E
Signing time:             Wed 06 Aug 2025 22:02:04 +0000
Manifest this update:     Wed 06 Aug 2025 22:02:04 +0000
Manifest next update:     Thu 07 Aug 2025 22:02:04 +0000
Files and hashes:         1: WpeXnbcm_j5pPbktT6GP10G-dpk.crl (hash: sLyRc1SlMSklymz3Kn8k1lLI92OKm7LSSgvQyp/wrx0=)
                          2: g8ik8LhTpez36WlLRS_uriZTLH8.roa (hash: YLceWIfaqnl3VHFv/2hpFigz+RqKWgu9tOc3uAbYAYQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/87688f-538a-4c25-b5da-ded5addbe5cf/1/WpeXnbcm_j5pPbktT6GP10G-dpk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/87688f-538a-4c25-b5da-ded5addbe5cf/1/WpeXnbcm_j5pPbktT6GP10G-dpk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WpeXnbcm_j5pPbktT6GP10G-dpk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:46:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:81:67:dd:f0:3f:bb:4a:54:34:02:db:dd:15:e8:8d:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a97979db726fe3e693db92d4fa18fd741be7699
        Validity
            Not Before: Aug  6 22:02:04 2025 GMT
            Not After : Aug  7 22:02:04 2025 GMT
        Subject: CN=5a280000276e12d5a78cc4a59385416ae45242c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:4b:a1:ce:18:7b:22:b1:70:4b:6c:92:a5:28:
                    79:5b:a9:46:f8:53:ac:35:47:74:7e:4c:ef:0d:f6:
                    48:8d:df:25:f8:3d:a7:b9:68:67:2e:aa:a9:d6:65:
                    a2:42:ef:12:bb:ef:b8:65:14:d0:99:bd:6d:dd:b2:
                    9f:67:fe:43:ba:c5:0e:ff:02:ec:96:ec:98:cd:ed:
                    ff:b6:16:6e:f6:b4:65:86:1a:8a:41:1c:b1:b5:9c:
                    f2:38:ac:45:64:60:3c:db:c4:2c:35:a5:71:83:7c:
                    26:be:50:2e:84:70:31:2e:76:59:7e:d1:1e:d5:93:
                    62:01:2a:3f:93:df:3e:20:29:65:b1:71:97:96:09:
                    2f:15:95:16:04:c8:24:cd:a0:a4:3c:93:06:7f:28:
                    6b:07:50:fb:e1:e9:62:4f:de:0c:45:9d:c1:ff:70:
                    24:a8:91:90:0d:15:c2:dc:fb:cb:6c:f2:cb:fd:34:
                    42:d1:bc:fb:7f:1a:e8:8d:f4:14:fb:d2:06:f2:aa:
                    76:59:c7:82:ea:90:37:9a:d2:57:3a:20:c4:e3:2a:
                    27:cb:59:7b:f0:fa:56:1c:01:97:6e:fb:f4:de:85:
                    8f:64:0c:d4:02:3e:1c:5f:14:64:92:83:ee:ed:c9:
                    80:b7:bf:c4:c8:40:f3:2d:75:e1:91:0c:b0:26:2f:
                    f9:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:28:00:00:27:6E:12:D5:A7:8C:C4:A5:93:85:41:6A:E4:52:42:C6
            X509v3 Authority Key Identifier:
                keyid:5A:97:97:9D:B7:26:FE:3E:69:3D:B9:2D:4F:A1:8F:D7:41:BE:76:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WpeXnbcm_j5pPbktT6GP10G-dpk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/87688f-538a-4c25-b5da-ded5addbe5cf/1/WpeXnbcm_j5pPbktT6GP10G-dpk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/87688f-538a-4c25-b5da-ded5addbe5cf/1/WpeXnbcm_j5pPbktT6GP10G-dpk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:1b:81:1f:f5:89:fe:be:38:b6:9b:9d:49:e7:40:83:d8:31:
         24:a0:a0:d6:15:92:6f:71:e5:86:02:2b:e7:bc:9e:a9:1b:37:
         6b:68:46:83:f0:82:1c:e8:bb:75:b7:94:c8:b8:d3:2d:06:90:
         0c:e3:47:d2:a8:23:cc:bf:e9:3d:d2:7a:9c:b5:bf:d1:56:82:
         c2:ba:3a:66:5b:09:df:ec:33:c9:81:8b:5b:42:3e:12:20:2d:
         21:bb:aa:f5:6b:c4:81:a7:14:36:84:f4:4e:de:de:02:7f:9a:
         7b:08:24:1b:eb:8f:0e:47:2f:8e:93:c7:d1:88:3a:88:31:8b:
         1d:ea:a9:1b:72:53:d8:27:53:67:47:15:fd:18:b8:1c:5c:09:
         0e:7d:99:65:f5:a1:26:a3:68:50:9c:7e:73:6e:5e:49:16:52:
         97:42:9c:a2:0d:aa:b2:d3:46:5a:e8:be:2e:aa:72:c2:d1:8f:
         d4:0e:b6:78:f6:fc:2d:38:f8:d0:b9:ea:fe:3e:14:ee:f6:08:
         e4:b4:e2:94:b3:2a:e4:ed:28:53:a4:c4:52:99:40:a5:59:31:
         4a:d8:eb:b0:f0:f9:7a:23:4a:d4:15:6d:f1:2a:91:44:c1:38:
         ce:4e:65:1c:90:e8:07:8d:bf:ac:02:7d:07:9b:2b:66:71:38:
         47:d4:2b:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 05:08:55 2025 by rpki-client