Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.mft
File:                     wb-PPmCQcoiedN0PtOJ_m6xHs7A.mft (raw, json)
Hash identifier:          6paWKFEkdSbVOeZaDXPcfS6IbOLAB8w1bo3UCrQiKww=
Subject key identifier:   64:F2:44:61:AA:56:AF:0D:53:7D:D5:2F:F7:58:DE:EF:5A:FF:EE:02
Authority key identifier: C1:BF:8F:3E:60:90:72:88:9E:74:DD:0F:B4:E2:7F:9B:AC:47:B3:B0
Certificate issuer:       /CN=c1bf8f3e609072889e74dd0fb4e27f9bac47b3b0
Certificate serial:       019854FD0B5F94BFFBAA7AB9B64761011E06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wb-PPmCQcoiedN0PtOJ_m6xHs7A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.mft
Manifest number:          1611
Signing time:             Tue 29 Jul 2025 07:02:06 +0000
Manifest this update:     Tue 29 Jul 2025 07:02:06 +0000
Manifest next update:     Wed 30 Jul 2025 07:02:06 +0000
Files and hashes:         1: DIDvdbb3GKHM4R0fThp87ONTKIg.roa (hash: PpLadHjUjIbh3z8TdW7x9p2zKoB60tTFsLSNrfKJGP0=)
                          2: NiiYntce0l2g8rM0crSiQd9ju9Q.roa (hash: dXNA4zFEqgeMGWVbP7xCDHL9Yv22/YkYEyRq1Xgq0Qk=)
                          3: TKLzQ3aUn5r9wRqdWWY_X3np5Nw.roa (hash: FHEE5b54dYwOgG8q4mFeJQWJCBG47+yi4U4T7p61+TU=)
                          4: UwTNWro9evVq9A2tmjUi9EC7e1U.roa (hash: blbaLMvxLnOeS1jYks60LVjVa40KZBXbFkM1K6NYTsw=)
                          5: aQ15-5dar1aqgdmTJxXJsHa1LDw.roa (hash: 1rVI43V3MOJKO7UAkMxeh1LlYc7UXyA9BgVQnSxTc5I=)
                          6: awX-yLV9QhTtYIRH8dzM3NZ-YyE.roa (hash: cUBeWKNk+8N9DHilcnVglMXRUVzQzFqcjW7BKF+It/4=)
                          7: hXz87hx_B-hbL3xb1XWOpeq_ghU.roa (hash: qgegZ0Q4MVtx4Pfhi+QnSP0PfWput13BxQSPM+9zyGM=)
                          8: nGG-OUODAxwLxi6jNHbpt8RGNb8.roa (hash: CE5MyGR9lb1V5N4ocRK2ocMWINjBM6Y8ecSTUiTujPU=)
                          9: wb-PPmCQcoiedN0PtOJ_m6xHs7A.crl (hash: i2S17tD9RYxTlZvGrHKS8qtdSWxpWbkTpUtDKCiCM/8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wb-PPmCQcoiedN0PtOJ_m6xHs7A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Jul 2025 07:02:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:54:fd:0b:5f:94:bf:fb:aa:7a:b9:b6:47:61:01:1e:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1bf8f3e609072889e74dd0fb4e27f9bac47b3b0
        Validity
            Not Before: Jul 29 07:02:06 2025 GMT
            Not After : Jul 30 07:02:06 2025 GMT
        Subject: CN=64f24461aa56af0d537dd52ff758deef5affee02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:fa:2d:5d:bc:ae:4d:a8:3c:71:83:2f:95:d1:
                    c8:98:a6:c9:06:e0:08:fa:c9:4d:22:0b:4f:24:39:
                    99:02:c9:1a:91:d2:58:a4:b2:02:7d:d9:a8:5c:f7:
                    74:e8:b8:a7:4a:22:9b:8d:ab:14:67:9e:72:b1:8a:
                    f5:16:bb:1d:17:7c:6b:4c:c1:4f:68:70:41:f0:0c:
                    36:a3:e5:e7:c2:e7:50:91:e6:f1:f5:04:85:9a:47:
                    11:cb:c2:cf:87:ba:50:b7:35:de:f1:28:fc:2a:aa:
                    5b:8f:30:d2:32:d6:67:02:08:bd:c4:f9:ff:9e:f5:
                    2c:6d:df:96:be:d0:38:a6:aa:aa:aa:29:fd:dc:47:
                    e5:7a:dc:13:83:84:e5:b9:bc:75:a6:43:d4:9f:24:
                    17:f7:c6:d6:b1:21:df:77:ee:aa:a6:29:a9:10:f2:
                    e3:ab:63:a8:bf:5b:ab:c3:de:c2:ad:f6:a3:6f:a6:
                    aa:fe:3a:9a:6d:ff:91:e9:fe:40:ab:0f:ff:53:fb:
                    f7:5e:35:37:a1:54:9d:d5:1c:fa:0b:7d:04:0b:b2:
                    1c:8a:9c:7f:4c:27:64:3b:5e:d5:fc:3d:b9:a9:a5:
                    98:29:65:02:99:d2:c7:36:b7:b1:ff:49:89:8b:a7:
                    ea:5b:22:27:c8:bf:4c:b5:9a:ee:ae:2a:1e:f7:c7:
                    3f:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:F2:44:61:AA:56:AF:0D:53:7D:D5:2F:F7:58:DE:EF:5A:FF:EE:02
            X509v3 Authority Key Identifier:
                keyid:C1:BF:8F:3E:60:90:72:88:9E:74:DD:0F:B4:E2:7F:9B:AC:47:B3:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wb-PPmCQcoiedN0PtOJ_m6xHs7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:e5:a4:08:48:d4:70:05:71:59:4f:dc:e1:16:a2:8c:91:7e:
         21:8c:00:9f:d1:82:f6:5b:74:42:27:21:fc:fa:ac:81:80:ac:
         08:1f:00:e2:44:56:e0:c1:64:0f:cb:0b:65:f0:64:f7:96:19:
         9b:59:83:08:57:88:fe:ac:1b:bd:ca:ae:7d:ca:48:3c:7a:8d:
         e3:14:a6:d9:08:bf:dc:cd:4e:a4:df:c5:25:6d:e5:78:31:b1:
         ab:42:2f:38:33:e0:e0:da:11:0b:7e:cc:46:10:75:11:25:99:
         09:8c:aa:3f:17:4b:af:45:b8:f7:ff:07:32:de:b3:59:21:b2:
         06:68:f2:0b:0a:24:db:32:cf:53:7c:04:4e:1c:09:71:8f:c6:
         83:ba:2b:b2:de:59:2a:6d:79:ad:96:6c:d4:5f:22:3d:70:fa:
         f5:e2:31:5d:4d:a4:a1:c1:57:1c:dd:9e:87:b8:77:a7:cd:34:
         50:01:53:75:df:bb:2a:f4:a6:d4:72:85:fb:e0:d0:4f:a2:10:
         20:8e:65:35:22:34:5a:81:c9:73:a4:08:d5:11:56:3f:1d:fe:
         fe:d4:e1:72:c6:bf:37:23:1e:ac:77:ab:31:14:50:52:ef:5a:
         19:61:08:32:1b:f7:9a:ac:bf:66:ee:d3:6e:9a:fa:94:68:16:
         72:e6:c3:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 14:41:48 2025 by rpki-client