Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/0b58a8-6553-4f07-b0b7-2ffaed04738a/1/WIM97GVeGohzOhei3z2gmFq2YNU.mft
File:                     WIM97GVeGohzOhei3z2gmFq2YNU.mft (raw, json)
Hash identifier:          4bE29zqU8aC54APcrWIJhbtTL6sg/1tuiVKBlQtR/co=
Subject key identifier:   8C:A4:5F:06:64:99:4F:FB:27:F5:7B:04:1F:71:C0:FA:3B:DD:19:6C
Authority key identifier: 58:83:3D:EC:65:5E:1A:88:73:3A:17:A2:DF:3D:A0:98:5A:B6:60:D5
Certificate issuer:       /CN=58833dec655e1a88733a17a2df3da0985ab660d5
Certificate serial:       019882B049826628014F9B69857E223D0724
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WIM97GVeGohzOhei3z2gmFq2YNU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/0b58a8-6553-4f07-b0b7-2ffaed04738a/1/WIM97GVeGohzOhei3z2gmFq2YNU.mft
Manifest number:          1620
Signing time:             Thu 07 Aug 2025 04:00:47 +0000
Manifest this update:     Thu 07 Aug 2025 04:00:47 +0000
Manifest next update:     Fri 08 Aug 2025 04:00:47 +0000
Files and hashes:         1: B7Qe81-ujU6G37VntbWN3M7mmsU.roa (hash: HF+QNapcX0mnNM1QFFRETe22RTTFyu/iH5tzGUEdttU=)
                          2: WIM97GVeGohzOhei3z2gmFq2YNU.crl (hash: YqkLebNnnuzBn84kR3HQO3ELDOKf5xWFHn//LVMpcR4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/0b58a8-6553-4f07-b0b7-2ffaed04738a/1/WIM97GVeGohzOhei3z2gmFq2YNU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/0b58a8-6553-4f07-b0b7-2ffaed04738a/1/WIM97GVeGohzOhei3z2gmFq2YNU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WIM97GVeGohzOhei3z2gmFq2YNU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 08 Aug 2025 04:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:82:b0:49:82:66:28:01:4f:9b:69:85:7e:22:3d:07:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58833dec655e1a88733a17a2df3da0985ab660d5
        Validity
            Not Before: Aug  7 04:00:47 2025 GMT
            Not After : Aug  8 04:00:47 2025 GMT
        Subject: CN=8ca45f0664994ffb27f57b041f71c0fa3bdd196c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:64:e5:80:c6:fc:55:3f:ce:79:76:7a:6f:76:
                    be:20:68:e6:5f:c5:40:51:46:6e:44:43:7c:25:b3:
                    dc:84:e5:a6:ce:aa:ef:d2:8f:2f:3b:ad:5a:5f:72:
                    33:f4:7f:be:63:0d:fb:36:14:32:db:99:0a:77:2b:
                    e0:cc:8e:02:04:fc:0b:7e:0b:49:5b:51:1b:91:35:
                    df:e6:ea:98:72:00:fa:54:4d:a0:0b:1e:e8:e9:7b:
                    46:1c:42:1d:4d:37:0e:17:19:47:b6:85:8f:be:a8:
                    24:3f:ea:2e:76:a1:de:6d:0a:9b:04:28:0d:28:8a:
                    e6:ac:6a:83:48:03:20:ea:d3:7d:f4:68:9f:28:8d:
                    a8:1d:78:4f:a4:41:0b:f1:7a:82:b8:fd:93:d3:6f:
                    5d:8e:97:5e:50:7d:fe:f8:1d:3b:66:af:7c:ee:fa:
                    4d:ad:1e:28:3d:28:58:03:c3:74:60:35:2a:22:73:
                    a1:72:e3:79:1d:f8:b6:82:3e:72:3f:11:47:74:94:
                    9a:28:b0:f4:3f:e5:24:1c:34:52:40:0c:82:6a:1d:
                    6e:32:70:5c:b8:bf:80:f9:e5:23:e5:c5:6a:67:ca:
                    ed:a8:47:7e:c8:ab:fc:2f:91:23:15:50:e5:50:ce:
                    ac:87:49:6c:e7:70:63:c6:8e:12:4f:65:01:14:b3:
                    e3:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:A4:5F:06:64:99:4F:FB:27:F5:7B:04:1F:71:C0:FA:3B:DD:19:6C
            X509v3 Authority Key Identifier:
                keyid:58:83:3D:EC:65:5E:1A:88:73:3A:17:A2:DF:3D:A0:98:5A:B6:60:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIM97GVeGohzOhei3z2gmFq2YNU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/0b58a8-6553-4f07-b0b7-2ffaed04738a/1/WIM97GVeGohzOhei3z2gmFq2YNU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/0b58a8-6553-4f07-b0b7-2ffaed04738a/1/WIM97GVeGohzOhei3z2gmFq2YNU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:8d:a5:bb:f8:97:6b:62:a4:f4:f1:5d:80:1a:ff:52:6b:15:
         df:39:fc:7a:2d:d8:9c:26:99:c6:21:46:32:00:a8:58:a9:34:
         ee:a2:e6:a6:d8:d9:a7:74:76:b8:42:3f:19:7c:fa:0b:88:6b:
         39:f5:f8:d3:a6:32:53:89:ef:e0:a3:da:31:22:99:dd:cf:83:
         14:f9:2c:02:2c:27:37:d9:16:e6:9e:1d:40:54:6a:88:2e:0e:
         e7:d2:75:64:22:08:35:7d:dc:b0:3d:21:00:d4:c2:cd:e9:d0:
         e5:7e:4c:56:6c:16:16:48:f6:9a:dc:78:03:84:a9:d0:c6:21:
         cf:1c:ff:a3:0d:2a:b6:97:f5:85:a3:ad:31:bd:57:fb:b1:8d:
         5c:f2:91:91:0c:13:c6:74:dc:ac:f5:ba:cd:92:81:48:5e:0e:
         e8:df:11:c8:9a:03:9b:24:fb:c4:a9:c9:ea:03:e7:6d:9f:08:
         47:6d:0d:c0:d0:98:a0:f5:3e:84:54:8c:e6:1d:9a:b7:44:ae:
         ef:61:58:48:0a:d8:82:4a:91:49:e3:f2:1d:97:9a:81:4b:b8:
         86:8d:d6:f3:72:a7:fb:97:d6:b9:44:70:27:0d:0e:15:b5:26:
         26:21:cc:6c:85:2a:34:81:e4:3b:3b:44:0b:47:8f:94:a5:4d:
         45:70:b0:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 11:07:32 2025 by rpki-client