Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/78b1a7-9fbd-4f6f-8eb4-7b622ddf84f4/1/WIOU45ENlKe_Cnig8wLQKumQcnM.mft
File:                     WIOU45ENlKe_Cnig8wLQKumQcnM.mft (raw, json)
Hash identifier:          Y4q0nqQYC1iBzyvXy0dIqet0/kuFgWLKcirjGjny3TI=
Subject key identifier:   FF:26:58:E0:1D:09:36:56:CD:02:5C:79:52:39:F3:31:AB:66:19:9C
Authority key identifier: 58:83:94:E3:91:0D:94:A7:BF:0A:78:A0:F3:02:D0:2A:E9:90:72:73
Certificate issuer:       /CN=588394e3910d94a7bf0a78a0f302d02ae9907273
Certificate serial:       0198462D5180ADACEDCB1BC0FC16D4309FA1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WIOU45ENlKe_Cnig8wLQKumQcnM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/78b1a7-9fbd-4f6f-8eb4-7b622ddf84f4/1/WIOU45ENlKe_Cnig8wLQKumQcnM.mft
Manifest number:          15FE
Signing time:             Sat 26 Jul 2025 10:00:31 +0000
Manifest this update:     Sat 26 Jul 2025 10:00:31 +0000
Manifest next update:     Sun 27 Jul 2025 10:00:31 +0000
Files and hashes:         1: WIOU45ENlKe_Cnig8wLQKumQcnM.crl (hash: ZovTVjA4INu4LP4SeQ9fQkArY3SYNQMyBsZaf4VHKmM=)
                          2: pkgQahpzHWh56tzgd9d98n8d-uM.roa (hash: YQurlMI/tTqNmD2eoDZiGf6050yJ+e+y29w7dKL/U9c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/78b1a7-9fbd-4f6f-8eb4-7b622ddf84f4/1/WIOU45ENlKe_Cnig8wLQKumQcnM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/78b1a7-9fbd-4f6f-8eb4-7b622ddf84f4/1/WIOU45ENlKe_Cnig8wLQKumQcnM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WIOU45ENlKe_Cnig8wLQKumQcnM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 10:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:46:2d:51:80:ad:ac:ed:cb:1b:c0:fc:16:d4:30:9f:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=588394e3910d94a7bf0a78a0f302d02ae9907273
        Validity
            Not Before: Jul 26 10:00:31 2025 GMT
            Not After : Jul 27 10:00:31 2025 GMT
        Subject: CN=ff2658e01d093656cd025c795239f331ab66199c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:df:e2:ae:33:7e:74:ba:97:5d:a0:36:3f:bb:
                    d0:75:cc:7d:cf:bc:a1:67:ba:bf:d5:46:8c:cc:38:
                    4b:16:8d:08:d2:b8:57:19:ba:5e:1f:7a:c1:86:bf:
                    ad:10:0f:ed:a6:1a:11:fd:21:82:a7:50:4c:0e:24:
                    e8:1b:88:00:59:3c:db:ff:f6:db:97:2d:6d:f2:c8:
                    96:af:bd:08:87:f6:2a:60:bd:be:20:20:2e:2e:fe:
                    99:01:7b:8d:f0:f3:f7:d6:c2:e2:44:4e:15:70:d2:
                    42:ae:5a:d3:ac:07:fa:c8:78:f5:69:90:93:ba:7d:
                    93:4f:32:a4:c2:83:b8:87:3a:e3:3b:91:47:6a:34:
                    c7:a3:e1:b6:82:4c:fe:0c:65:cd:3a:6a:7d:da:85:
                    86:54:a8:86:99:1b:f2:d8:58:fc:0e:19:47:05:6d:
                    5b:4f:f5:56:82:c8:0d:7c:08:4a:e1:ed:b1:c5:b9:
                    9b:84:cb:bb:5f:72:f3:2b:85:3e:88:c0:d8:3d:e5:
                    f0:a6:14:44:af:5a:58:2d:2b:ac:a1:85:89:af:d3:
                    49:4d:63:5e:75:bd:91:94:90:0d:4c:d8:a7:c4:7d:
                    99:e3:22:a3:16:99:38:d0:46:63:ac:ab:fe:54:ab:
                    03:23:14:67:59:96:d2:df:f5:a9:b5:f8:2f:ca:c2:
                    55:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:26:58:E0:1D:09:36:56:CD:02:5C:79:52:39:F3:31:AB:66:19:9C
            X509v3 Authority Key Identifier:
                keyid:58:83:94:E3:91:0D:94:A7:BF:0A:78:A0:F3:02:D0:2A:E9:90:72:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIOU45ENlKe_Cnig8wLQKumQcnM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/78b1a7-9fbd-4f6f-8eb4-7b622ddf84f4/1/WIOU45ENlKe_Cnig8wLQKumQcnM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/78b1a7-9fbd-4f6f-8eb4-7b622ddf84f4/1/WIOU45ENlKe_Cnig8wLQKumQcnM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:82:97:88:46:37:0f:4f:18:29:3e:3d:98:8d:7c:3d:31:e5:
         e8:92:b9:95:0d:99:96:81:2d:ae:31:fd:99:42:f8:b7:3d:36:
         aa:d9:0b:ca:41:92:c4:34:fd:12:dd:0d:01:7e:b7:bd:6a:aa:
         fe:1e:ac:d1:2e:e9:57:e9:1e:6f:a5:96:7e:f5:05:ef:05:9f:
         64:ff:78:3d:9a:2b:ea:2c:8b:81:db:56:61:0c:2f:f5:d3:e0:
         25:db:49:ed:0b:4c:00:1c:de:f1:7b:c3:66:62:15:ec:6b:b3:
         66:86:a3:c1:1f:dd:54:e6:76:99:f7:cb:ab:8b:ea:df:2b:f7:
         e5:f0:ab:35:f1:9a:f1:7a:e9:1e:42:7b:44:30:0d:60:cd:57:
         f2:dd:f1:38:be:15:28:9a:1d:5b:2c:05:8e:26:aa:4e:43:d2:
         62:68:55:6e:77:c3:09:df:3f:0b:61:cf:4f:2a:f4:30:ca:cd:
         8e:90:15:73:fc:28:34:b0:d6:a8:6e:8e:81:9b:82:30:77:35:
         67:6e:ee:2a:01:1d:06:fb:29:e3:28:b2:8d:9b:c8:6e:08:9a:
         08:48:04:1f:43:57:46:4d:e9:cb:04:08:5a:95:dc:ce:ab:7c:
         43:6c:bc:03:3b:a2:c8:9b:cd:12:33:bb:11:fc:00:e6:5a:65:
         09:b2:26:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 19:07:02 2025 by rpki-client