Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/eaa7e2-8af0-4de1-8241-a55ffae2ebd0/1/WQN6n-ViXtoBCB6y6QfP2bWl3Jo.mft
File:                     WQN6n-ViXtoBCB6y6QfP2bWl3Jo.mft (raw, json)
Hash identifier:          XKm+MPsvCNTLM/TXU0mZZjDmjfuhjMHxaWWLe3TxoRg=
Subject key identifier:   C5:D7:16:7E:A8:03:04:44:6F:45:42:40:C4:A8:97:3C:BE:23:A8:0F
Authority key identifier: 59:03:7A:9F:E5:62:5E:DA:01:08:1E:B2:E9:07:CF:D9:B5:A5:DC:9A
Certificate issuer:       /CN=59037a9fe5625eda01081eb2e907cfd9b5a5dc9a
Certificate serial:       0198496506FDE4A0B0091C4522C727E42931
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WQN6n-ViXtoBCB6y6QfP2bWl3Jo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/eaa7e2-8af0-4de1-8241-a55ffae2ebd0/1/WQN6n-ViXtoBCB6y6QfP2bWl3Jo.mft
Manifest number:          0F32
Signing time:             Sun 27 Jul 2025 01:00:14 +0000
Manifest this update:     Sun 27 Jul 2025 01:00:14 +0000
Manifest next update:     Mon 28 Jul 2025 01:00:14 +0000
Files and hashes:         1: WQN6n-ViXtoBCB6y6QfP2bWl3Jo.crl (hash: p3zgM0qir0f5byQVdmT6IBwqyeBt6jbsQPZLuYZLnUg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/eaa7e2-8af0-4de1-8241-a55ffae2ebd0/1/WQN6n-ViXtoBCB6y6QfP2bWl3Jo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/eaa7e2-8af0-4de1-8241-a55ffae2ebd0/1/WQN6n-ViXtoBCB6y6QfP2bWl3Jo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WQN6n-ViXtoBCB6y6QfP2bWl3Jo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:65:06:fd:e4:a0:b0:09:1c:45:22:c7:27:e4:29:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59037a9fe5625eda01081eb2e907cfd9b5a5dc9a
        Validity
            Not Before: Jul 27 01:00:14 2025 GMT
            Not After : Jul 28 01:00:14 2025 GMT
        Subject: CN=c5d7167ea80304446f454240c4a8973cbe23a80f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:55:de:26:93:b5:e0:a7:97:30:cc:a4:d8:75:
                    ae:e3:36:90:2e:fd:ec:91:20:0e:b9:5e:67:a0:4c:
                    c7:49:6a:b1:1a:f4:6c:49:b1:e3:4b:bc:2e:1e:d3:
                    f2:e7:bc:22:3c:87:40:e0:bc:b4:b6:c8:76:0b:1a:
                    e1:ea:04:19:b4:a3:24:8c:7e:fb:46:d0:91:e8:7d:
                    c1:bf:d7:f8:ef:ee:ac:b0:40:8a:f1:bd:b7:e9:b9:
                    88:9f:aa:1b:96:63:90:f3:b9:cb:7e:99:b9:d6:79:
                    eb:8c:58:68:f6:27:13:d7:38:0f:90:8b:9a:68:65:
                    e6:b2:a5:38:a7:3f:56:b3:f5:db:66:8d:d0:e5:8a:
                    a0:83:a9:e7:f2:0b:1b:e1:ce:08:6d:24:22:b6:04:
                    c8:c0:64:e4:a0:d3:a1:60:18:d5:a0:d5:b9:02:08:
                    1d:50:f2:f5:91:a1:f7:17:2d:15:a2:1a:3a:7c:58:
                    ff:3b:c1:c8:ba:e3:2b:15:58:c3:cf:06:f9:b6:52:
                    16:bc:2d:54:31:60:02:8a:3a:b4:70:24:98:fc:0e:
                    4b:b2:82:39:6c:57:ce:ca:5d:ee:ed:c0:68:f4:43:
                    1a:7b:d8:f5:e9:db:68:89:f9:8c:11:f4:aa:06:3a:
                    71:82:4f:5e:e1:e7:b4:24:8e:3f:35:07:d0:6a:c7:
                    23:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:D7:16:7E:A8:03:04:44:6F:45:42:40:C4:A8:97:3C:BE:23:A8:0F
            X509v3 Authority Key Identifier:
                keyid:59:03:7A:9F:E5:62:5E:DA:01:08:1E:B2:E9:07:CF:D9:B5:A5:DC:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WQN6n-ViXtoBCB6y6QfP2bWl3Jo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/eaa7e2-8af0-4de1-8241-a55ffae2ebd0/1/WQN6n-ViXtoBCB6y6QfP2bWl3Jo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/eaa7e2-8af0-4de1-8241-a55ffae2ebd0/1/WQN6n-ViXtoBCB6y6QfP2bWl3Jo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:1c:08:6d:62:eb:f2:62:f3:6a:57:a1:a8:35:c9:b2:d5:ff:
         81:aa:91:74:78:8b:3c:eb:37:32:6e:66:c5:b7:29:e6:13:2c:
         5a:c5:34:48:0e:9c:7e:b6:71:f3:bd:ad:35:7f:31:31:fd:af:
         40:ca:7d:8e:a7:e1:82:4e:f4:1d:59:48:d9:9c:2f:35:9b:a1:
         05:38:6b:39:e0:c6:75:b0:f4:0a:bd:cd:8a:98:f7:59:49:4e:
         30:fe:b2:57:20:59:05:cd:e2:59:81:33:63:57:d6:53:19:ac:
         97:5d:ff:b9:51:27:3f:73:60:b5:e7:e4:ff:d6:ac:7b:b3:91:
         75:4d:86:59:f1:a6:c5:f9:b8:05:fb:3b:0d:5f:64:52:4f:d9:
         2f:ee:16:bc:1b:c1:70:3b:0b:e3:82:16:f6:e0:55:cd:7c:c7:
         e7:64:a7:bb:58:10:53:ba:7a:2a:64:ef:88:e8:1f:1e:72:ea:
         43:f2:55:8a:16:82:86:cb:b5:9f:77:a7:17:70:41:32:c4:b3:
         3a:99:f8:49:19:b0:33:e0:87:5d:4c:2a:a7:3a:97:54:df:0f:
         37:eb:7a:33:f9:f7:5d:ea:a0:96:48:01:c5:52:0b:1b:6c:31:
         92:5a:9e:58:4d:02:11:eb:23:f1:53:f3:27:1f:66:56:9d:c6:
         f6:cf:bb:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 04:34:34 2025 by rpki-client