Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/ea41e0-7b51-490f-8d1f-77d65ef305b0/1/WQSr6w7U_4ZsBl_jbCxihOJSC0I.mft
File:                     WQSr6w7U_4ZsBl_jbCxihOJSC0I.mft (raw, json)
Hash identifier:          2DFWXG2tmzDltj+/MDcjlAA3G7QiFAG3ZCSAwJfduF4=
Subject key identifier:   6F:BB:52:97:8E:00:86:0E:8B:DA:98:1D:F2:9F:72:8F:37:1C:E2:51
Authority key identifier: 59:04:AB:EB:0E:D4:FF:86:6C:06:5F:E3:6C:2C:62:84:E2:52:0B:42
Certificate issuer:       /CN=5904abeb0ed4ff866c065fe36c2c6284e2520b42
Certificate serial:       019872985AC79139B01FA14F75786EE92BE8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WQSr6w7U_4ZsBl_jbCxihOJSC0I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/ea41e0-7b51-490f-8d1f-77d65ef305b0/1/WQSr6w7U_4ZsBl_jbCxihOJSC0I.mft
Manifest number:          1617
Signing time:             Mon 04 Aug 2025 01:00:43 +0000
Manifest this update:     Mon 04 Aug 2025 01:00:43 +0000
Manifest next update:     Tue 05 Aug 2025 01:00:43 +0000
Files and hashes:         1: WQSr6w7U_4ZsBl_jbCxihOJSC0I.crl (hash: GPxjyRkMz2Gu6g04oviQxUqRQvBJisZlZ8hYZ/75dLM=)
                          2: p2E40VAywU1E-b5C3yq5INQnhfY.roa (hash: +wh8lIkPmW8LdXYFPZaG+wiXZeTnTUYIdRcRymup/Rw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/ea41e0-7b51-490f-8d1f-77d65ef305b0/1/WQSr6w7U_4ZsBl_jbCxihOJSC0I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/ea41e0-7b51-490f-8d1f-77d65ef305b0/1/WQSr6w7U_4ZsBl_jbCxihOJSC0I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WQSr6w7U_4ZsBl_jbCxihOJSC0I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 01:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:72:98:5a:c7:91:39:b0:1f:a1:4f:75:78:6e:e9:2b:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5904abeb0ed4ff866c065fe36c2c6284e2520b42
        Validity
            Not Before: Aug  4 01:00:43 2025 GMT
            Not After : Aug  5 01:00:43 2025 GMT
        Subject: CN=6fbb52978e00860e8bda981df29f728f371ce251
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:9b:59:b2:44:27:5f:c7:45:80:ab:a4:3d:d4:
                    25:e1:66:21:ed:a3:9f:4a:84:b5:c9:a5:36:5f:38:
                    75:a0:03:be:63:7c:05:ee:83:3d:77:ce:0f:40:c9:
                    5f:4f:a1:73:1f:62:91:c9:c8:3e:5e:4a:3c:8d:60:
                    8b:14:a7:6b:d3:e9:fe:c1:83:f9:cb:ce:55:4b:63:
                    af:23:85:fd:c3:96:46:79:c5:67:60:7e:a8:35:e0:
                    9e:a9:7f:cc:1b:cc:9a:09:55:56:66:e1:1d:e4:2b:
                    28:5c:b9:a2:91:04:23:62:68:ee:63:04:26:dc:c0:
                    a6:3f:bc:11:51:7c:f7:03:da:fe:4b:c1:16:e2:4a:
                    cf:45:46:71:16:39:9d:e0:8a:e4:2e:b9:17:49:a4:
                    53:54:8e:66:67:58:74:93:83:0d:5b:e4:9e:90:1a:
                    e6:82:41:a0:d0:bb:cc:77:b4:cc:8a:84:ce:b1:f3:
                    f3:9d:fe:85:d3:e5:5d:5c:2e:01:67:4c:be:40:d1:
                    aa:5e:44:66:31:e6:66:f0:47:90:05:1f:a5:01:2d:
                    35:f8:4d:6b:30:09:07:5b:13:d5:59:be:2c:a6:4b:
                    a0:0a:c1:66:23:9b:bf:7c:c6:a6:c0:03:5c:26:fb:
                    ab:09:c0:21:6f:3f:dd:d7:6d:aa:a1:ca:19:42:5a:
                    af:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:BB:52:97:8E:00:86:0E:8B:DA:98:1D:F2:9F:72:8F:37:1C:E2:51
            X509v3 Authority Key Identifier:
                keyid:59:04:AB:EB:0E:D4:FF:86:6C:06:5F:E3:6C:2C:62:84:E2:52:0B:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WQSr6w7U_4ZsBl_jbCxihOJSC0I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/ea41e0-7b51-490f-8d1f-77d65ef305b0/1/WQSr6w7U_4ZsBl_jbCxihOJSC0I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/ea41e0-7b51-490f-8d1f-77d65ef305b0/1/WQSr6w7U_4ZsBl_jbCxihOJSC0I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:93:cd:3f:10:ef:d5:9a:20:c8:2a:8f:59:ab:dc:b6:43:53:
         a2:5c:51:52:08:62:6d:d2:d4:77:40:75:34:61:1b:1d:05:22:
         26:6f:eb:7d:b9:30:9e:37:eb:d2:50:21:ec:0d:b7:c3:dd:0f:
         71:0e:e8:89:1f:e1:da:9f:86:2e:53:71:dc:97:64:0d:9c:c0:
         6f:d7:0b:3e:8c:c2:6a:9a:08:a4:16:1d:60:03:d7:9f:08:05:
         e4:4a:23:c5:f0:50:0d:11:c3:ff:c0:73:0b:2d:1a:24:ff:d8:
         94:14:11:7e:47:5c:be:e0:cc:e8:41:a2:12:f7:cb:5f:79:18:
         f6:7f:39:65:61:f2:48:eb:b5:5b:a1:17:9e:df:7b:60:b5:36:
         08:b1:21:46:24:c5:1b:9f:55:05:14:67:ce:47:8e:61:7e:e7:
         6b:63:6c:02:40:d1:3b:87:c8:4b:38:52:ff:af:eb:36:36:da:
         ab:08:a7:5e:a0:b3:b8:e0:55:68:41:d4:a0:db:74:fc:6e:b7:
         f5:a9:b5:1e:6f:3f:dd:22:5c:cf:8b:b9:84:74:1f:b3:1d:c6:
         57:84:2d:fc:ec:ce:79:2c:79:db:12:e8:a5:4e:fb:ac:9b:98:
         fa:a4:76:c4:34:c5:5d:dc:23:bf:31:8c:91:c5:16:6d:aa:c3:
         81:8b:54:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:59:04 2025 by rpki-client