Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/WWDmzRsbAGOxiQ94B0XCRWBtz3M.mft
File:                     WWDmzRsbAGOxiQ94B0XCRWBtz3M.mft (raw, json)
Hash identifier:          qdi5Z1YtmJVHLjqHd29/ufzS/1evkRT0L5t9Tx4aVrs=
Subject key identifier:   4A:7E:CD:07:6D:74:CB:F8:66:3E:B2:72:3B:BF:35:C4:B3:D9:C5:18
Authority key identifier: 59:60:E6:CD:1B:1B:00:63:B1:89:0F:78:07:45:C2:45:60:6D:CF:73
Certificate issuer:       /CN=5960e6cd1b1b0063b1890f780745c245606dcf73
Certificate serial:       019879E4147D5461072C5FE22A5EE398B378
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WWDmzRsbAGOxiQ94B0XCRWBtz3M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/WWDmzRsbAGOxiQ94B0XCRWBtz3M.mft
Manifest number:          161A
Signing time:             Tue 05 Aug 2025 11:00:47 +0000
Manifest this update:     Tue 05 Aug 2025 11:00:47 +0000
Manifest next update:     Wed 06 Aug 2025 11:00:47 +0000
Files and hashes:         1: 8Z3aUD_PAmXD6dv52YsOghcqB84.roa (hash: yqXiM+cGXnQH3xEwReOpDqFoSkq0y2lHcTn04sbV7Go=)
                          2: WWDmzRsbAGOxiQ94B0XCRWBtz3M.crl (hash: tG9ftmHAHcR5pYTzfgzO0Ubmk34p85Aea/e/Ab7YE8Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/WWDmzRsbAGOxiQ94B0XCRWBtz3M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/WWDmzRsbAGOxiQ94B0XCRWBtz3M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WWDmzRsbAGOxiQ94B0XCRWBtz3M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 11:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:79:e4:14:7d:54:61:07:2c:5f:e2:2a:5e:e3:98:b3:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5960e6cd1b1b0063b1890f780745c245606dcf73
        Validity
            Not Before: Aug  5 11:00:47 2025 GMT
            Not After : Aug  6 11:00:47 2025 GMT
        Subject: CN=4a7ecd076d74cbf8663eb2723bbf35c4b3d9c518
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:fd:d5:93:2a:5c:4a:a5:83:22:d8:04:be:b2:
                    23:1e:66:d2:2b:1a:fc:e9:b0:a6:bd:4c:0a:df:6e:
                    8d:9c:d7:2f:34:8d:08:38:51:87:e7:d3:56:4d:a3:
                    76:29:30:94:9d:72:3a:30:8d:cd:76:d1:ef:76:9b:
                    d9:6e:e5:f8:60:32:b2:0f:0e:03:75:c3:82:de:b7:
                    0f:0e:21:5e:75:36:19:7a:bd:e9:28:1d:13:bd:62:
                    68:ba:93:f4:b9:eb:43:e3:31:df:a4:e0:e0:14:b3:
                    d8:8e:d0:c9:ad:80:2f:6c:0d:5e:a1:21:49:00:62:
                    9a:c4:0a:80:8e:5d:2b:77:f7:99:60:a5:bf:31:3b:
                    70:57:ec:01:0c:45:76:61:89:bf:8a:24:60:94:77:
                    f9:8b:0c:32:e1:e7:df:8b:be:af:d7:bb:3d:c0:e9:
                    94:54:51:62:7c:f9:1d:70:76:7d:9f:75:48:ba:b5:
                    9d:d3:fa:e1:9a:22:ac:96:c5:6d:09:26:58:be:40:
                    37:81:51:0c:68:e3:a6:1a:f8:80:50:b4:c1:e3:8a:
                    42:85:0f:c8:e1:ff:c3:2a:b4:87:89:68:86:dd:84:
                    81:07:4b:4c:20:14:69:49:f0:bf:aa:df:ee:c8:ec:
                    bc:67:53:7c:c2:be:79:fd:fc:3a:56:81:b0:fb:d7:
                    05:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:7E:CD:07:6D:74:CB:F8:66:3E:B2:72:3B:BF:35:C4:B3:D9:C5:18
            X509v3 Authority Key Identifier:
                keyid:59:60:E6:CD:1B:1B:00:63:B1:89:0F:78:07:45:C2:45:60:6D:CF:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WWDmzRsbAGOxiQ94B0XCRWBtz3M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/WWDmzRsbAGOxiQ94B0XCRWBtz3M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/WWDmzRsbAGOxiQ94B0XCRWBtz3M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:48:62:56:da:2b:df:9c:09:43:02:58:74:aa:24:ce:2e:3d:
         ee:05:84:f5:74:ae:63:c4:38:5a:10:51:ea:39:2b:ac:5d:1a:
         77:6d:9e:c9:c5:1a:00:aa:c9:41:56:56:88:a7:fd:4a:a4:cb:
         76:30:3b:cd:76:a2:f3:2f:8b:d8:3e:84:63:6f:f1:85:87:12:
         85:91:1c:87:0b:01:01:dd:eb:48:60:12:f9:c0:d3:f5:c2:f8:
         63:e2:9c:b9:62:3b:06:5e:55:07:30:e9:75:a5:98:a7:d2:13:
         28:a2:02:6f:93:e2:c1:00:c9:d8:ee:6c:2a:a8:43:3a:ff:e9:
         0f:24:4e:35:65:fc:87:a6:43:ef:a6:cf:7b:4b:30:11:b9:f5:
         4a:c6:11:b2:93:3e:60:65:63:cd:b6:fa:09:97:42:0d:7f:02:
         8a:58:06:d9:73:93:93:19:42:e1:b4:40:a7:36:99:fc:44:f3:
         16:68:69:04:bc:4a:3d:69:e2:4f:7d:3e:fa:a1:40:a0:15:e9:
         4d:e5:f5:41:3c:f2:1c:16:14:56:33:11:0e:cb:51:43:90:c0:
         3d:41:08:56:50:cc:68:0c:f2:ff:ab:ba:48:36:d6:fd:b0:ef:
         58:e7:c8:30:0d:3a:67:4c:b7:8f:d4:1c:60:aa:7d:9d:8e:91:
         24:fe:bd:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:08:49 2025 by rpki-client