Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/54fd84-6e96-47b2-97a5-f2b556ed6990/1/WoZV6_lEUAAlpfB1unveZBWE_aY.mft
File:                     WoZV6_lEUAAlpfB1unveZBWE_aY.mft (raw, json)
Hash identifier:          FAhTHS+Ro6yMqEDTf542CVkg36ahvZegTjeSp6/MqHU=
Subject key identifier:   F7:6F:DE:EF:5D:13:D9:4D:1D:D8:BA:B8:00:24:73:8D:47:9D:9C:EB
Authority key identifier: 5A:86:55:EB:F9:44:50:00:25:A5:F0:75:BA:7B:DE:64:15:84:FD:A6
Certificate issuer:       /CN=5a8655ebf944500025a5f075ba7bde641584fda6
Certificate serial:       019893A41823834C6BFE179A62C23571A1C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WoZV6_lEUAAlpfB1unveZBWE_aY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/54fd84-6e96-47b2-97a5-f2b556ed6990/1/WoZV6_lEUAAlpfB1unveZBWE_aY.mft
Manifest number:          10D1
Signing time:             Sun 10 Aug 2025 11:01:01 +0000
Manifest this update:     Sun 10 Aug 2025 11:01:01 +0000
Manifest next update:     Mon 11 Aug 2025 11:01:01 +0000
Files and hashes:         1: WoZV6_lEUAAlpfB1unveZBWE_aY.crl (hash: jZZpqj054lXj3/KXO1EHKZzNoC5CixxZeSYIW2zUVLY=)
                          2: whcvZpTpzvlbrJt7O3nmd0nRfXA.roa (hash: uHBrfBFZVuPLEmFMxJBXGMMbHMabPdSiEixhmy3o8Bs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/54fd84-6e96-47b2-97a5-f2b556ed6990/1/WoZV6_lEUAAlpfB1unveZBWE_aY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/54fd84-6e96-47b2-97a5-f2b556ed6990/1/WoZV6_lEUAAlpfB1unveZBWE_aY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WoZV6_lEUAAlpfB1unveZBWE_aY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 11:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:93:a4:18:23:83:4c:6b:fe:17:9a:62:c2:35:71:a1:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a8655ebf944500025a5f075ba7bde641584fda6
        Validity
            Not Before: Aug 10 11:01:01 2025 GMT
            Not After : Aug 11 11:01:01 2025 GMT
        Subject: CN=f76fdeef5d13d94d1dd8bab80024738d479d9ceb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:52:1f:0a:e5:74:2d:45:ee:80:8a:9a:c8:a9:
                    94:b4:ed:4d:b1:9d:3f:3d:30:d7:0f:a2:91:b9:18:
                    79:13:84:5f:18:5f:96:c5:15:70:32:bc:49:88:7a:
                    91:9a:7b:8c:52:4f:3e:ed:66:fd:d6:dd:a4:3a:4d:
                    b4:ad:11:bf:bc:11:f4:f7:10:5d:2a:72:aa:00:31:
                    5d:e9:b4:59:f8:e8:16:e7:a8:63:3c:56:0b:bf:ac:
                    b0:6c:1d:dd:1d:28:8c:1e:97:c8:be:4c:e9:6f:32:
                    ec:c0:f4:a0:53:0d:7d:95:5e:ed:85:f3:06:7e:b2:
                    44:39:30:a7:59:07:81:e4:dd:e7:b1:fa:ea:57:15:
                    d1:ca:53:04:c5:fd:0a:6c:fc:d6:19:13:02:40:1b:
                    9b:32:54:23:c9:3e:06:a6:d6:ef:6a:82:2e:e1:4c:
                    b1:bc:89:17:05:af:24:f3:29:f0:cb:d8:98:0f:75:
                    2a:97:ea:87:ed:dd:f2:46:32:b3:bd:f4:db:f6:d7:
                    e8:5a:22:45:78:79:8e:f6:0b:00:95:9d:75:a9:dc:
                    09:b1:4e:de:fe:67:69:d4:b9:46:e5:41:c3:fa:2a:
                    0b:7c:aa:5a:64:70:f1:44:8f:34:d3:ce:10:fe:e3:
                    22:57:b7:06:87:a3:67:7d:0f:0b:73:bb:d7:41:ca:
                    bd:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:6F:DE:EF:5D:13:D9:4D:1D:D8:BA:B8:00:24:73:8D:47:9D:9C:EB
            X509v3 Authority Key Identifier:
                keyid:5A:86:55:EB:F9:44:50:00:25:A5:F0:75:BA:7B:DE:64:15:84:FD:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WoZV6_lEUAAlpfB1unveZBWE_aY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/54fd84-6e96-47b2-97a5-f2b556ed6990/1/WoZV6_lEUAAlpfB1unveZBWE_aY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/54fd84-6e96-47b2-97a5-f2b556ed6990/1/WoZV6_lEUAAlpfB1unveZBWE_aY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:47:65:2b:46:1c:5a:4a:cc:17:34:4b:47:33:9f:58:ba:cc:
         07:87:cc:c0:e1:35:63:a3:6d:a0:d4:21:4e:c1:de:4a:7a:51:
         43:b0:18:70:fb:36:2a:e9:7b:da:ee:35:6b:cf:0b:5e:dc:1a:
         ca:9c:45:81:11:aa:e9:0e:3f:cc:68:52:04:27:f1:89:22:c6:
         df:76:46:f2:2e:c1:3a:0b:b3:6f:06:48:1a:08:05:ac:89:b0:
         e2:a9:1a:3e:59:38:2b:34:45:ba:95:25:94:7b:96:0e:82:2b:
         3a:36:60:6b:a3:bb:72:49:ec:8b:3c:03:ae:ce:f1:7f:39:3a:
         0d:58:30:ac:7d:5a:1e:65:b7:7e:63:b1:7c:2d:39:53:a6:46:
         2e:66:97:05:9e:e8:48:48:9b:aa:9a:91:a7:62:14:ea:4f:32:
         6f:69:c0:84:5c:1c:74:2c:e5:a3:e2:a5:f7:15:ec:c6:40:15:
         5f:f5:f5:e7:1f:37:ff:37:1f:29:44:96:f6:6e:9d:a3:47:21:
         22:c6:c2:65:22:d6:66:33:bb:98:58:ae:78:46:b9:60:de:75:
         1f:1f:50:2a:23:e9:9d:18:f0:da:67:90:18:a0:43:ff:6a:34:
         09:c3:3c:6d:ba:90:5e:1f:61:60:c3:34:d8:b0:c5:0f:cf:61:
         71:44:4f:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 21:02:24 2025 by rpki-client