Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/WA3dtRFgPkHCt6u6PSSdXvXtTRE.mft
File:                     WA3dtRFgPkHCt6u6PSSdXvXtTRE.mft (raw, json)
Hash identifier:          dSPkFDl+xcrAoVzjXqQCHj1sDzlrp6Jdcjb9ivIEL3k=
Subject key identifier:   8F:80:E3:D4:7E:53:11:01:F2:B2:26:58:DF:86:A8:93:7C:0E:FB:3A
Authority key identifier: 58:0D:DD:B5:11:60:3E:41:C2:B7:AB:BA:3D:24:9D:5E:F5:ED:4D:11
Certificate issuer:       /CN=580dddb511603e41c2b7abba3d249d5ef5ed4d11
Certificate serial:       01984B54936E4221DD0B740497DCEBCBE799
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WA3dtRFgPkHCt6u6PSSdXvXtTRE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/WA3dtRFgPkHCt6u6PSSdXvXtTRE.mft
Manifest number:          0368
Signing time:             Sun 27 Jul 2025 10:01:30 +0000
Manifest this update:     Sun 27 Jul 2025 10:01:30 +0000
Manifest next update:     Mon 28 Jul 2025 10:01:30 +0000
Files and hashes:         1: WA3dtRFgPkHCt6u6PSSdXvXtTRE.crl (hash: x3JbX+egxRjuXQ9QbFZhPNpWb7rrEfokeZqPqlKtX3g=)
                          2: e0MNfuXlfvKgRvC9CopzDlR6QJs.roa (hash: EP4IKQWQkDtxiqLTMMk/RcDKJIiLy3Rh0R6YqC1qh6A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/WA3dtRFgPkHCt6u6PSSdXvXtTRE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/WA3dtRFgPkHCt6u6PSSdXvXtTRE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WA3dtRFgPkHCt6u6PSSdXvXtTRE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4b:54:93:6e:42:21:dd:0b:74:04:97:dc:eb:cb:e7:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=580dddb511603e41c2b7abba3d249d5ef5ed4d11
        Validity
            Not Before: Jul 27 10:01:30 2025 GMT
            Not After : Jul 28 10:01:30 2025 GMT
        Subject: CN=8f80e3d47e531101f2b22658df86a8937c0efb3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:28:54:0a:d2:fa:b0:47:9f:6a:8c:18:0c:89:
                    46:94:06:a8:bd:82:35:73:16:95:91:79:d0:b8:f6:
                    77:c8:c2:58:72:92:4f:ce:b6:84:e6:a7:35:99:91:
                    f8:b0:16:47:83:21:15:1c:d3:ee:dc:ef:f8:56:62:
                    9f:f4:05:04:42:ac:44:78:e1:e3:a9:d1:2b:c5:f1:
                    4c:04:94:7b:c3:61:f0:f6:be:3a:8a:b1:6a:15:a5:
                    d3:1e:ab:a1:b0:79:8e:c1:97:95:1d:04:b1:2f:62:
                    ee:39:8b:15:97:19:4d:c4:70:fd:89:30:75:05:3a:
                    a3:6c:e5:ea:7a:26:3f:07:ef:47:8a:1f:96:86:4f:
                    2c:80:5f:b2:16:c5:28:83:b2:a2:8c:ac:a3:c1:1a:
                    23:0d:5e:6d:78:81:e2:a0:d6:bd:e9:70:24:52:c3:
                    85:55:58:fd:fd:d4:7a:91:04:3c:09:26:a8:a4:d0:
                    af:53:b9:af:88:cb:68:0f:8b:29:88:84:df:2d:d9:
                    2d:13:17:aa:8b:d0:48:9d:f6:32:4d:fd:6c:30:62:
                    3e:d5:d4:a8:b6:be:e8:ec:3f:f3:ae:01:c6:4c:ad:
                    a6:b7:60:49:30:a3:bb:fb:91:8a:13:9c:bf:1a:c3:
                    ea:11:e9:3e:f5:09:45:b1:8f:b5:44:a6:ba:e9:ff:
                    c3:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:80:E3:D4:7E:53:11:01:F2:B2:26:58:DF:86:A8:93:7C:0E:FB:3A
            X509v3 Authority Key Identifier:
                keyid:58:0D:DD:B5:11:60:3E:41:C2:B7:AB:BA:3D:24:9D:5E:F5:ED:4D:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WA3dtRFgPkHCt6u6PSSdXvXtTRE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/WA3dtRFgPkHCt6u6PSSdXvXtTRE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/fc96a4-36d1-4c3d-850b-3cd417aee9ce/1/WA3dtRFgPkHCt6u6PSSdXvXtTRE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:5c:36:01:17:4f:fe:ef:21:c3:90:3e:a5:da:e0:95:0a:59:
         e8:95:38:f6:8e:aa:0e:7c:12:7b:bf:c7:f1:e4:dd:82:56:bd:
         4a:6d:8d:73:f0:bf:4b:74:f9:e4:2d:cb:b7:4d:b6:84:a0:44:
         22:ba:92:f6:fc:d8:99:b5:79:b5:77:21:f5:5d:61:39:37:5b:
         c5:01:9d:71:1f:14:2d:39:71:b9:b6:5a:cf:5e:a6:ed:fe:90:
         09:25:b9:0f:72:f8:ee:8a:46:0b:fc:66:4d:65:09:ac:f6:25:
         15:67:6b:14:cf:4c:c8:35:e8:d3:9d:ed:38:04:90:11:27:e0:
         e1:e8:5d:e1:de:4a:17:75:70:eb:a7:cb:d4:98:1b:04:b1:01:
         3a:9f:6c:d6:40:45:97:8e:ac:25:9c:32:4c:83:96:22:eb:07:
         f2:62:79:5a:7f:27:93:2c:4d:15:0f:31:dd:2e:ef:b8:49:6e:
         5e:6a:d1:f1:50:11:06:6f:21:ab:88:6f:11:aa:9f:e1:f6:9f:
         76:03:1d:ac:21:80:8f:38:de:5a:56:3e:f5:95:f2:b4:61:e8:
         73:81:fd:c1:6b:c5:79:b0:02:6a:d5:1b:85:65:b8:76:fa:26:
         5a:7f:e0:36:24:b1:f9:c8:d0:89:93:75:a7:8c:7e:ed:a1:20:
         4e:aa:45:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 14:30:28 2025 by rpki-client