Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1540c1-9867-403d-8b9b-f3d9f63d5d97/1/W1t31kWP-tmE5R3zNPPo-YOCrCQ.mft
File:                     W1t31kWP-tmE5R3zNPPo-YOCrCQ.mft (raw, json)
Hash identifier:          3GR3+WLQJVk2fm6TSz3il2G4mjFxRRGE2ATUq64MebU=
Subject key identifier:   20:78:5B:04:6B:27:2D:D0:7D:90:9B:F9:33:92:E1:EE:71:DE:15:15
Authority key identifier: 5B:5B:77:D6:45:8F:FA:D9:84:E5:1D:F3:34:F3:E8:F9:83:82:AC:24
Certificate issuer:       /CN=5b5b77d6458ffad984e51df334f3e8f98382ac24
Certificate serial:       0198A197125691DB7E829AEB30D904131719
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W1t31kWP-tmE5R3zNPPo-YOCrCQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/1540c1-9867-403d-8b9b-f3d9f63d5d97/1/W1t31kWP-tmE5R3zNPPo-YOCrCQ.mft
Manifest number:          0478
Signing time:             Wed 13 Aug 2025 04:01:29 +0000
Manifest this update:     Wed 13 Aug 2025 04:01:29 +0000
Manifest next update:     Thu 14 Aug 2025 04:01:29 +0000
Files and hashes:         1: W1t31kWP-tmE5R3zNPPo-YOCrCQ.crl (hash: xwUQCmbdYZz7dpEx0UmM4jXo0YNoHPNNzNf4TD6xLY0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/1540c1-9867-403d-8b9b-f3d9f63d5d97/1/W1t31kWP-tmE5R3zNPPo-YOCrCQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/1540c1-9867-403d-8b9b-f3d9f63d5d97/1/W1t31kWP-tmE5R3zNPPo-YOCrCQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W1t31kWP-tmE5R3zNPPo-YOCrCQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 Aug 2025 22:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:a1:97:12:56:91:db:7e:82:9a:eb:30:d9:04:13:17:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b5b77d6458ffad984e51df334f3e8f98382ac24
        Validity
            Not Before: Aug 13 04:01:29 2025 GMT
            Not After : Aug 14 04:01:29 2025 GMT
        Subject: CN=20785b046b272dd07d909bf93392e1ee71de1515
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:8b:75:6f:f1:3f:d9:f1:6d:6a:dd:a6:ca:5e:
                    de:cd:5c:32:08:48:6d:55:73:70:40:1e:35:fe:a6:
                    76:2b:48:86:57:cc:ed:0e:7a:73:3d:c8:4e:13:3a:
                    34:4d:35:1c:d3:6b:fc:e8:36:b7:44:0e:37:43:33:
                    69:ce:40:88:38:95:3c:11:12:32:38:56:75:91:32:
                    9c:9d:d8:d0:54:a9:33:25:82:da:bc:ca:67:0c:fc:
                    ec:1a:c5:ce:41:bf:ab:c9:0b:88:96:c8:32:6e:4b:
                    36:02:eb:56:1e:6c:83:c1:50:43:5f:bc:02:a5:de:
                    2f:83:bf:ec:68:b5:5a:3e:94:1f:cc:03:c5:50:1e:
                    43:c0:4b:e7:a8:88:44:3b:53:3c:44:83:e0:8c:91:
                    c0:b0:ef:6f:36:a7:8a:53:c9:40:35:85:66:a4:a8:
                    c7:30:9e:77:e1:d3:46:17:d1:7c:66:ad:59:60:c7:
                    06:da:60:63:c6:54:ab:d9:cf:1b:45:62:82:00:d6:
                    e7:f8:68:f7:b9:b4:2a:56:ab:d6:8d:86:ab:4d:f4:
                    ef:32:b9:b6:05:e3:6d:82:44:3b:36:ca:95:15:c9:
                    e4:76:b3:b1:63:5e:c9:6e:e3:30:ef:bf:65:aa:42:
                    ca:8c:a5:91:f7:8e:ad:f1:ef:66:ca:b6:13:1a:31:
                    ff:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:78:5B:04:6B:27:2D:D0:7D:90:9B:F9:33:92:E1:EE:71:DE:15:15
            X509v3 Authority Key Identifier:
                keyid:5B:5B:77:D6:45:8F:FA:D9:84:E5:1D:F3:34:F3:E8:F9:83:82:AC:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W1t31kWP-tmE5R3zNPPo-YOCrCQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1540c1-9867-403d-8b9b-f3d9f63d5d97/1/W1t31kWP-tmE5R3zNPPo-YOCrCQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1540c1-9867-403d-8b9b-f3d9f63d5d97/1/W1t31kWP-tmE5R3zNPPo-YOCrCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:71:40:4b:23:df:37:5c:e3:d0:f5:23:2d:7c:8d:1b:3d:f7:
         d1:ad:5b:f6:4a:82:f3:ac:19:6f:63:9f:c3:97:38:fd:a1:11:
         d4:b3:8d:3f:59:5e:42:77:4a:d9:94:b2:0f:aa:19:a8:0d:cb:
         c1:81:ea:6f:d9:3d:9b:11:5a:b3:3b:84:29:01:ab:df:6c:1b:
         cb:09:ec:37:50:67:fe:70:36:98:ae:10:f5:5a:64:66:78:af:
         f0:26:15:08:55:c5:5d:0e:e2:f4:f4:c0:a4:f0:38:35:f5:6f:
         d9:af:63:0e:7e:ec:47:d4:d2:73:09:b5:29:aa:a3:81:94:98:
         4e:8a:f1:b0:1a:38:16:98:23:6a:16:d7:4d:d0:b0:5c:34:da:
         a2:68:24:e4:39:96:3b:71:fb:fd:1e:13:38:9c:06:11:23:a0:
         7a:24:54:5d:d3:1d:fe:18:9f:b9:c3:43:e1:b1:9d:d3:7b:a5:
         ec:2b:c9:3e:34:9c:2d:ff:0c:24:50:94:93:7b:f7:90:b9:3c:
         fe:c3:55:69:27:53:ee:7e:d2:e0:44:f2:9e:ca:60:cd:11:db:
         aa:5e:fb:1f:cb:27:7f:1b:2a:c2:ff:8c:6c:ea:f3:a8:81:84:
         20:99:87:28:78:0e:35:0a:0f:c8:60:1c:53:bd:01:0d:4f:31:
         eb:63:6e:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:51:28 2025 by rpki-client