Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.mft
File:                     wtIegEq3cTrXh33eYDqngksxmDw.mft (raw, json)
Hash identifier:          WXJMVRhVW7Cm4L88yGPLi/y+LZ1T3P5SOafr6C0N07E=
Subject key identifier:   D7:B9:CC:FC:E2:C4:A4:3B:22:19:AA:F7:47:00:D4:CD:41:34:C4:96
Authority key identifier: C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C
Certificate issuer:       /CN=c2d21e804ab7713ad7877dde603aa7824b31983c
Certificate serial:       01983B04B2B435352C8A55ECD23EFB357CCB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.mft
Manifest number:          0F6C
Signing time:             Thu 24 Jul 2025 06:00:20 +0000
Manifest this update:     Thu 24 Jul 2025 06:00:20 +0000
Manifest next update:     Fri 25 Jul 2025 06:00:20 +0000
Files and hashes:         1: 6npNfqw9ft3wFBb5k5d8Au1GyrU.roa (hash: Ypl6gLmfJjGNPDL8Gk8ZFTBrn9giPszXF7Ziq9N8zCY=)
                          2: CEHno33Cl7h0GLAM4p0jfcTuU2k.roa (hash: VzZMvgTQCr8mQ/IevQojqSyjWV0o3WsjpJkJUVzQ2fo=)
                          3: F0e-LrOaO1fC5d8GXQ9bEeDZ160.roa (hash: cofTGB9X2CyIcikGAWppFcO24T6sgvWIjXIVxAl57xQ=)
                          4: GB4vtqTXSwKp7zeWzOQndrqFgF8.roa (hash: rdiyJfrKTAJ+PqJC+r6+QSHIQKbyvYvJTxSXGGM5e8w=)
                          5: GeAJ1HW4BIewoLPfGbb-SsL5NGw.roa (hash: srwRADwGDIIx52WT+/n/TTLrhpUiRbeWdmuzYXw/VCw=)
                          6: HGLfNFEmq1zoGMYRZBEFVC-KI2E.roa (hash: FKMG8ZBG6AFoA3ZFzEjcDqb09W6tPLhjGkfNe7kPOX4=)
                          7: JN30kUlZb2UdsgE-OutzbLQiERo.roa (hash: B/Z1tvVR2z8KZUGUWDKLU3ou6I+OjR3sN2Q9pxieTbk=)
                          8: biJknYRjE5L_jTv2KpvNG71JuZs.roa (hash: HCdhdiyjdtaidQONiCaAjw0Va1l2ztmngnp9upg/BOo=)
                          9: cMyuoWOy66eDKnjdJCEfhSkyz1E.roa (hash: LOQsteLks/Yul4nf8jy2hWFak5manC4iYDuO7o5PTtg=)
                          10: dxFo2JNSLNyFjO0-WsCs0C6Hof0.roa (hash: NmFePRA7yHk29wTet83LObHlNy/GZGPfuri37nzr9Xk=)
                          11: hdNNHQIFwnpnxNggYxU1p6Z-XGk.roa (hash: tOBVPWHOBl8156ZGKWKuty1/zjQtgPwsgL3f1n3MYGU=)
                          12: nq9QkGdX68nm-XUKViIxXutv5p0.roa (hash: LYeY4Ewyqeshu3FPO2U3xARlcYpAxYT/ihB3h+fhL+8=)
                          13: o0w1bPk9yQkEzOmquHjyTCzVPsc.roa (hash: m8T06/6PXu8/epS4UvU7PZ+M0wtlNs/1xaD5zm6hoAE=)
                          14: uZxgwvEf9WeuGM60Zi1VK8Mj4UI.roa (hash: 33y4OizHoHywglDgbvg5deRkLMeifLFTIVE+wULlWa4=)
                          15: vxkpUFyY_pV46Dy2vccW_kFg3Xg.roa (hash: qhf8yhleIujtWTxbbg63MczcaiHWwXzoRrg7MjpLcgQ=)
                          16: wtIegEq3cTrXh33eYDqngksxmDw.crl (hash: ZCZECSfUdemi5CnQSX3e0jknbd1Oor03WqMrhif0g6Y=)
                          17: wwFX4PAqfUeMNXpGS3KNseh4ppg.roa (hash: OLlfS0/X+1Yl71pRy+nk3a/H1A/qBK8IAfXsmm/hZsc=)
                          18: z9W-SXWXNvPf50hBoKJTZsS-x88.roa (hash: Pj96ONEJXoTrBWw/wBWoBoF3HEpksk4ZBOjXYOlm2eQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Jul 2025 06:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:3b:04:b2:b4:35:35:2c:8a:55:ec:d2:3e:fb:35:7c:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2d21e804ab7713ad7877dde603aa7824b31983c
        Validity
            Not Before: Jul 24 06:00:20 2025 GMT
            Not After : Jul 25 06:00:20 2025 GMT
        Subject: CN=d7b9ccfce2c4a43b2219aaf74700d4cd4134c496
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:30:c1:1b:e5:4f:00:cd:18:ca:e2:25:f3:87:
                    c4:50:ba:bd:da:28:c5:c6:b2:33:d1:b8:61:74:cf:
                    97:9d:e5:13:4e:2f:78:e2:3b:59:59:d8:6b:a8:fd:
                    10:2a:c8:69:af:a3:6d:11:a5:ca:83:99:22:57:1c:
                    4a:59:e0:85:a4:5d:e4:61:5c:c8:19:b7:62:af:b0:
                    1a:ff:d1:d3:a6:30:56:56:4b:4d:a5:58:fe:63:e9:
                    77:bf:87:00:cd:52:af:bc:0a:af:a7:02:04:d4:19:
                    82:44:aa:58:a0:9a:fb:cb:14:35:8e:cc:29:06:94:
                    60:16:03:3f:5e:61:49:fb:d4:68:bf:86:47:30:6e:
                    0a:9f:26:cf:78:14:4c:00:b4:db:36:5d:6c:6b:cf:
                    4b:c1:4a:05:8a:c6:53:20:d2:17:7f:e9:3e:1a:14:
                    1a:83:72:34:a8:ff:34:b1:d0:0b:d2:e8:ba:5c:d2:
                    a7:3c:1a:c4:66:24:e7:4d:30:69:94:36:f0:c6:e3:
                    63:e6:b9:54:ff:37:94:b6:2f:d6:b2:58:45:fc:a0:
                    f9:88:54:db:b4:58:0c:1a:33:12:45:3a:f8:73:26:
                    49:38:b7:bf:a8:27:81:55:00:d3:99:9f:e8:6a:80:
                    39:a4:20:0d:85:59:f2:23:4c:4b:a0:b4:9f:96:8f:
                    ff:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:B9:CC:FC:E2:C4:A4:3B:22:19:AA:F7:47:00:D4:CD:41:34:C4:96
            X509v3 Authority Key Identifier:
                keyid:C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:29:52:69:b2:77:a3:fc:6e:33:04:22:6c:81:85:78:97:d8:
         b3:f2:44:f6:59:89:99:78:61:87:ed:64:ba:1d:5b:76:73:60:
         e4:83:2a:03:ae:fe:f2:07:cb:b8:ac:8c:c4:a1:94:59:55:3f:
         92:cb:1b:31:be:50:9e:8d:e3:b7:9d:0f:67:b1:43:ff:62:14:
         30:fa:8f:9e:3b:ff:04:c5:f5:d7:99:7f:a2:f6:d8:17:6c:01:
         7a:75:fc:b8:d4:67:65:0b:37:34:e4:70:c6:15:91:54:f4:17:
         57:1a:aa:c0:7c:98:da:b5:52:5a:ee:75:bc:00:a8:2d:68:ac:
         a7:80:d0:de:f3:03:ea:ea:0c:c9:8f:17:56:f3:46:1f:88:51:
         13:05:1a:04:f8:c5:2d:9d:15:7c:a7:56:db:ed:40:3f:32:2b:
         b1:de:a6:44:df:11:82:95:29:10:b8:20:5d:af:f8:3a:5f:27:
         d5:8c:b4:a3:7c:b4:b8:28:47:44:88:4f:98:2c:8e:a0:0e:59:
         ba:57:18:77:e6:02:6d:8b:20:18:83:af:5a:0a:32:ce:e5:ea:
         3e:23:a4:1a:8c:27:6c:7d:61:c3:c4:4b:ae:3e:6b:c3:b6:8f:
         8c:58:67:b8:96:2f:89:97:9e:6e:8f:96:66:24:62:d0:54:69:
         70:2b:cf:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 12:06:39 2025 by rpki-client