Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/a4fe8e-4b4d-4ac7-9a92-7a3b31be7b38/1/WPJnqqyZvwydHo5CneAczTzJDsA.mft
File:                     WPJnqqyZvwydHo5CneAczTzJDsA.mft (raw, json)
Hash identifier:          Q5YhAVQdRnqBvw52dmCyz1P62n6YCbwFzxmyNQQixNc=
Subject key identifier:   AB:BC:86:ED:1D:5C:1C:F7:EB:38:1F:F4:B2:02:6E:47:17:B8:60:36
Authority key identifier: 58:F2:67:AA:AC:99:BF:0C:9D:1E:8E:42:9D:E0:1C:CD:3C:C9:0E:C0
Certificate issuer:       /CN=58f267aaac99bf0c9d1e8e429de01ccd3cc90ec0
Certificate serial:       01984AAEA7A5325D2EF04AEC6D81E4F2A722
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WPJnqqyZvwydHo5CneAczTzJDsA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/a4fe8e-4b4d-4ac7-9a92-7a3b31be7b38/1/WPJnqqyZvwydHo5CneAczTzJDsA.mft
Manifest number:          1605
Signing time:             Sun 27 Jul 2025 07:00:16 +0000
Manifest this update:     Sun 27 Jul 2025 07:00:16 +0000
Manifest next update:     Mon 28 Jul 2025 07:00:16 +0000
Files and hashes:         1: VxmO12w306gaXQmH0gdTcOIKrpc.roa (hash: yL/doTnHVquXpnwAcQ1RYhbKS8XdZRYVklJVmjcOaeU=)
                          2: WPJnqqyZvwydHo5CneAczTzJDsA.crl (hash: 545c5AL9Tvx1+dYojhA2m9skvPVqLOAOkt8QVc2cUUM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/a4fe8e-4b4d-4ac7-9a92-7a3b31be7b38/1/WPJnqqyZvwydHo5CneAczTzJDsA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/a4fe8e-4b4d-4ac7-9a92-7a3b31be7b38/1/WPJnqqyZvwydHo5CneAczTzJDsA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WPJnqqyZvwydHo5CneAczTzJDsA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:ae:a7:a5:32:5d:2e:f0:4a:ec:6d:81:e4:f2:a7:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58f267aaac99bf0c9d1e8e429de01ccd3cc90ec0
        Validity
            Not Before: Jul 27 07:00:16 2025 GMT
            Not After : Jul 28 07:00:16 2025 GMT
        Subject: CN=abbc86ed1d5c1cf7eb381ff4b2026e4717b86036
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e6:fd:b0:c5:6f:62:7b:72:38:01:3f:a5:4f:
                    bb:1a:35:7d:d2:bd:8d:5f:c8:fa:00:69:a0:5d:e2:
                    95:9a:ea:56:09:ae:e1:f6:ec:d2:be:fe:d9:a9:02:
                    c5:52:a9:60:96:4a:e0:c4:73:05:bc:31:4d:dc:52:
                    d5:f8:4e:3e:76:78:0d:55:ba:13:80:e2:a7:19:13:
                    62:55:4e:b2:77:d9:26:74:44:57:c5:36:4e:66:ce:
                    ab:96:39:9b:e0:77:4b:8c:57:d0:e9:48:f0:7b:49:
                    5c:ef:b3:5c:5d:ee:df:cd:2c:37:11:d2:e3:09:d9:
                    47:db:9e:e2:42:ee:35:c7:c7:10:39:bc:7e:c1:29:
                    34:7c:0e:16:59:22:4a:30:50:4a:77:87:46:51:c1:
                    48:f8:35:8f:f0:5f:a8:40:32:d5:18:d3:e3:69:5d:
                    ee:7b:bf:f0:41:31:bc:db:c4:02:d7:8a:66:1f:ac:
                    4b:0c:7c:38:95:a8:dd:21:da:79:85:e6:ff:4f:da:
                    0f:05:c3:2a:d0:c1:aa:ce:6b:b5:b9:3a:74:66:a7:
                    bf:16:7b:72:26:55:66:af:03:b9:6b:12:52:46:b6:
                    12:4b:59:81:73:19:13:ce:8b:71:78:b6:5a:fe:69:
                    2f:e5:f2:87:35:39:2a:e3:65:94:40:87:de:ae:a4:
                    8d:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:BC:86:ED:1D:5C:1C:F7:EB:38:1F:F4:B2:02:6E:47:17:B8:60:36
            X509v3 Authority Key Identifier:
                keyid:58:F2:67:AA:AC:99:BF:0C:9D:1E:8E:42:9D:E0:1C:CD:3C:C9:0E:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WPJnqqyZvwydHo5CneAczTzJDsA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a4fe8e-4b4d-4ac7-9a92-7a3b31be7b38/1/WPJnqqyZvwydHo5CneAczTzJDsA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a4fe8e-4b4d-4ac7-9a92-7a3b31be7b38/1/WPJnqqyZvwydHo5CneAczTzJDsA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:73:a6:d2:79:e7:c4:c8:59:4f:2c:00:fa:fe:c0:a7:6b:8a:
         e5:c0:98:ef:ac:78:09:d5:6f:d1:35:89:d7:92:82:39:8e:43:
         b5:d1:71:e6:72:6a:93:c9:6f:6c:7d:21:31:a5:6f:af:d2:1f:
         7e:b5:5f:c0:b3:c3:3b:41:db:06:50:71:fc:69:27:a8:21:2b:
         04:b3:97:2c:fa:d9:c3:fe:c0:77:90:fd:e1:8c:a2:5f:07:77:
         10:cd:2e:4b:09:80:c8:1a:c0:c6:fb:12:0f:d6:a9:5f:38:b9:
         3d:82:ec:8e:1a:cd:5a:77:82:7b:3d:09:42:8d:7e:9a:15:3d:
         24:c1:14:f7:10:55:6b:63:b0:09:df:6e:9f:62:7e:9d:4e:75:
         f1:4b:ca:38:a8:8a:59:e3:19:b1:df:13:10:92:fa:1f:97:21:
         28:36:7a:5b:8f:ab:b8:a1:53:45:ea:cf:02:81:4e:97:f5:03:
         5b:1a:7f:e0:e2:58:1d:9d:2d:9d:d1:f0:fa:47:a6:64:c6:95:
         2b:fc:15:bf:a1:93:1c:c3:f0:e9:c5:aa:91:c7:0b:d8:66:22:
         ad:2e:02:11:84:0c:1a:7b:a9:14:78:88:48:a8:26:1f:a6:8c:
         5a:6d:ae:7f:f7:39:46:bc:05:1d:85:05:7d:ff:f0:ec:0f:d1:
         a2:5c:73:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:30:43 2025 by rpki-client