Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/8b2040-8d3f-414b-8de8-1464b4f91672/1/wGWeHdFAebUh2SsfUsvE_TI-GNM.mft
File:                     wGWeHdFAebUh2SsfUsvE_TI-GNM.mft (raw, json)
Hash identifier:          insPmTBtE4vgO5Ni1apjOHNQE5Xv68HY0r3e9GT66RY=
Subject key identifier:   91:BE:3D:64:DC:9A:C2:24:F5:BB:DB:E0:5A:A8:C6:10:3B:02:78:6D
Authority key identifier: C0:65:9E:1D:D1:40:79:B5:21:D9:2B:1F:52:CB:C4:FD:32:3E:18:D3
Certificate issuer:       /CN=c0659e1dd14079b521d92b1f52cbc4fd323e18d3
Certificate serial:       0198529F650CF2A3E741D9688EA234C8401A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wGWeHdFAebUh2SsfUsvE_TI-GNM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/8b2040-8d3f-414b-8de8-1464b4f91672/1/wGWeHdFAebUh2SsfUsvE_TI-GNM.mft
Manifest number:          0317
Signing time:             Mon 28 Jul 2025 20:00:34 +0000
Manifest this update:     Mon 28 Jul 2025 20:00:34 +0000
Manifest next update:     Tue 29 Jul 2025 20:00:34 +0000
Files and hashes:         1: XmdSMCmint9DPZ--cCLmS94eFwY.roa (hash: Ecj0xnHDR2ooGxeY4fWUT554GHurKxl+Q6h8BrSfnec=)
                          2: wGWeHdFAebUh2SsfUsvE_TI-GNM.crl (hash: Mlo7wA141LoCFpwNRzrYwvQ16u6A4UApaE3YfmJf9N8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/8b2040-8d3f-414b-8de8-1464b4f91672/1/wGWeHdFAebUh2SsfUsvE_TI-GNM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/8b2040-8d3f-414b-8de8-1464b4f91672/1/wGWeHdFAebUh2SsfUsvE_TI-GNM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wGWeHdFAebUh2SsfUsvE_TI-GNM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Jul 2025 20:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:52:9f:65:0c:f2:a3:e7:41:d9:68:8e:a2:34:c8:40:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0659e1dd14079b521d92b1f52cbc4fd323e18d3
        Validity
            Not Before: Jul 28 20:00:34 2025 GMT
            Not After : Jul 29 20:00:34 2025 GMT
        Subject: CN=91be3d64dc9ac224f5bbdbe05aa8c6103b02786d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:7e:31:13:ec:55:f6:3b:de:8d:fe:5f:f0:60:
                    53:d4:c3:a8:3b:06:de:0c:ec:8a:3c:c6:2c:59:bc:
                    36:f9:99:76:88:34:cd:2d:c6:d6:41:02:89:ab:02:
                    1b:4d:a6:4e:70:81:60:95:ad:20:5b:76:88:3c:17:
                    e6:65:31:5d:59:01:fa:e5:aa:3e:3d:58:c3:ac:a5:
                    c2:3e:52:fa:36:3f:db:c3:4b:d8:f8:69:6d:f9:91:
                    a3:93:73:41:2a:a7:f4:cd:63:32:47:0a:b2:48:f5:
                    bf:0f:0a:11:ea:d3:f8:2a:33:0b:6e:96:47:77:0d:
                    cb:4a:bb:f8:59:2f:8a:9b:81:c3:f6:ea:3e:d7:b7:
                    d1:77:f9:05:0f:30:cf:ce:b3:28:05:73:69:d8:30:
                    df:cf:b6:b5:f7:c4:bc:7b:be:b2:c5:b4:f8:4e:fa:
                    ed:6e:a7:3b:7e:35:56:a8:f1:6c:22:96:e8:75:84:
                    73:06:39:a3:b0:1e:3e:e7:b9:50:d2:67:ac:19:ca:
                    33:6d:41:5c:f9:14:11:44:70:8b:0c:41:1b:6b:76:
                    cc:46:6f:af:0b:dc:27:6b:63:4f:dd:21:b7:36:6c:
                    c2:17:97:fd:c0:cc:59:de:bc:8c:6f:b4:8f:c3:df:
                    ef:1c:68:4f:79:41:0a:4f:31:6b:c3:ff:7b:9a:4c:
                    f3:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:BE:3D:64:DC:9A:C2:24:F5:BB:DB:E0:5A:A8:C6:10:3B:02:78:6D
            X509v3 Authority Key Identifier:
                keyid:C0:65:9E:1D:D1:40:79:B5:21:D9:2B:1F:52:CB:C4:FD:32:3E:18:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wGWeHdFAebUh2SsfUsvE_TI-GNM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/8b2040-8d3f-414b-8de8-1464b4f91672/1/wGWeHdFAebUh2SsfUsvE_TI-GNM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/8b2040-8d3f-414b-8de8-1464b4f91672/1/wGWeHdFAebUh2SsfUsvE_TI-GNM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:ea:c5:66:c6:9c:09:76:36:c0:77:fc:4b:ea:b3:57:45:44:
         03:b0:a2:73:52:91:c2:53:85:fd:23:9c:db:02:29:c6:88:68:
         68:f8:d3:e7:d0:4f:65:5d:9d:98:21:d8:ee:89:b9:d3:ad:68:
         0d:7b:57:a4:e4:13:b3:92:e9:ad:67:01:95:08:03:5d:9d:fa:
         72:dc:35:73:a1:7c:34:7d:2b:4b:1e:32:4a:68:4d:7f:09:89:
         b4:3a:07:7f:61:f0:b2:14:f4:22:79:b2:21:1d:77:0e:a4:67:
         a2:0b:b7:77:d0:99:65:83:91:23:d4:a8:53:10:1e:21:d7:2f:
         7e:79:af:50:17:d6:e4:e1:bb:48:5a:76:30:57:d0:77:1b:10:
         22:a2:9a:b7:5b:fb:6b:9c:4b:63:1c:d7:46:32:a6:7b:0e:7c:
         cd:01:97:28:5d:c9:16:02:65:90:0a:46:70:7c:2c:1b:e4:2e:
         2b:60:2c:96:ba:d1:81:2b:4b:77:9d:72:ce:90:48:18:82:9b:
         fc:e2:b8:9d:fe:0e:7b:d9:5d:47:64:61:3f:8e:16:20:1a:d8:
         5f:a7:fa:6e:06:5d:e7:cc:7f:dc:14:c8:9c:d1:24:a8:6f:21:
         fb:88:82:10:0f:94:56:cf:27:86:a5:6d:3d:3d:21:4b:31:0a:
         9b:28:b3:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 00:34:46 2025 by rpki-client