Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/be863f-b33b-4334-bbd2-4094106786a9/1/WMv-CDT45mUS9VvXjMB1t-1W9Ak.mft
File:                     WMv-CDT45mUS9VvXjMB1t-1W9Ak.mft (raw, json)
Hash identifier:          gY9iSYp0GpdKDAuMn663anHP7cujD0IWulFBFTTNJjE=
Subject key identifier:   14:DE:EC:FC:56:F2:49:DD:67:2E:99:88:AF:E4:97:69:84:F0:66:AA
Authority key identifier: 58:CB:FE:08:34:F8:E6:65:12:F5:5B:D7:8C:C0:75:B7:ED:56:F4:09
Certificate issuer:       /CN=58cbfe0834f8e66512f55bd78cc075b7ed56f409
Certificate serial:       019833823DFC32857349D4DBA82B70FD9095
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WMv-CDT45mUS9VvXjMB1t-1W9Ak.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/be863f-b33b-4334-bbd2-4094106786a9/1/WMv-CDT45mUS9VvXjMB1t-1W9Ak.mft
Manifest number:          04AE
Signing time:             Tue 22 Jul 2025 19:00:30 +0000
Manifest this update:     Tue 22 Jul 2025 19:00:30 +0000
Manifest next update:     Wed 23 Jul 2025 19:00:30 +0000
Files and hashes:         1: QEzw4CiK6CiHgldhyTg0boyDFI4.roa (hash: ffDuLw/6EUMQBC9wlTrHOAlboOryP+rRmytNZtNkFZU=)
                          2: WMv-CDT45mUS9VvXjMB1t-1W9Ak.crl (hash: DygiV8TPIp7Alj0TC/QqBM9RqWPhhlhW3nx7w/cyGAY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/be863f-b33b-4334-bbd2-4094106786a9/1/WMv-CDT45mUS9VvXjMB1t-1W9Ak.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/be863f-b33b-4334-bbd2-4094106786a9/1/WMv-CDT45mUS9VvXjMB1t-1W9Ak.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WMv-CDT45mUS9VvXjMB1t-1W9Ak.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Jul 2025 19:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:33:82:3d:fc:32:85:73:49:d4:db:a8:2b:70:fd:90:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58cbfe0834f8e66512f55bd78cc075b7ed56f409
        Validity
            Not Before: Jul 22 19:00:30 2025 GMT
            Not After : Jul 23 19:00:30 2025 GMT
        Subject: CN=14deecfc56f249dd672e9988afe4976984f066aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:d1:ee:39:16:70:d5:b4:1f:a4:1c:25:07:7b:
                    26:f4:71:05:c8:c6:ee:72:dd:07:89:e9:7c:d2:ff:
                    aa:62:35:4b:9f:fd:62:e2:3b:0b:21:40:3e:c6:f8:
                    12:f6:16:ca:89:1b:65:6c:58:e7:cd:5f:32:80:f4:
                    81:50:f5:52:3e:f5:5c:b0:2b:5f:39:95:6c:ba:3a:
                    cd:b0:b9:9c:cb:1a:ec:a0:46:bd:30:64:82:41:d7:
                    b7:b2:9d:14:4c:de:c7:62:10:ca:c9:26:ab:0f:33:
                    7a:22:10:8c:69:f9:77:c6:82:4d:f4:7f:0f:69:09:
                    b2:20:fa:42:de:da:7e:2c:b3:4f:cf:02:3b:99:b6:
                    4d:9c:e5:9c:84:cb:68:73:6f:af:01:d9:13:56:bb:
                    7f:85:e0:19:a1:45:7f:ca:5b:04:21:c4:57:5d:b4:
                    34:93:b7:3f:e1:8c:11:8b:72:68:11:ef:bc:a6:53:
                    89:d0:a5:ab:4b:0f:b0:4a:c6:32:f4:b6:69:cb:7d:
                    2e:d1:35:1d:bc:e1:49:48:32:e6:4e:37:29:81:b8:
                    85:ef:ef:5d:f4:4d:4c:fa:62:fe:83:d9:8a:a4:87:
                    a7:da:95:1f:b9:d7:0a:53:a0:48:5b:7b:83:6d:e1:
                    27:c9:82:fc:85:6a:4c:15:59:ed:57:d8:49:ac:11:
                    35:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:DE:EC:FC:56:F2:49:DD:67:2E:99:88:AF:E4:97:69:84:F0:66:AA
            X509v3 Authority Key Identifier:
                keyid:58:CB:FE:08:34:F8:E6:65:12:F5:5B:D7:8C:C0:75:B7:ED:56:F4:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WMv-CDT45mUS9VvXjMB1t-1W9Ak.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/be863f-b33b-4334-bbd2-4094106786a9/1/WMv-CDT45mUS9VvXjMB1t-1W9Ak.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/be863f-b33b-4334-bbd2-4094106786a9/1/WMv-CDT45mUS9VvXjMB1t-1W9Ak.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:a6:58:7e:e2:eb:27:0a:55:d4:04:47:b5:9b:c4:41:f1:0e:
         ff:2a:81:6d:8c:ae:b4:7b:24:30:17:45:ad:e9:10:02:a1:8f:
         dd:fb:98:bc:54:57:31:16:0d:9e:2e:44:83:29:9e:35:4f:9e:
         8e:d3:f3:9e:3d:10:00:5f:f5:93:7c:80:4b:b4:44:6f:ed:e1:
         7a:f6:75:13:e7:27:89:19:dc:a4:d4:0a:8e:f3:d2:d1:0f:bb:
         7c:fa:60:23:05:e5:bd:ed:d7:45:32:c1:ec:63:c8:c1:e7:10:
         72:ba:20:c4:da:c7:85:21:dc:74:bb:64:b2:40:9d:f0:70:46:
         8e:4b:1b:36:27:14:68:a2:84:46:78:c7:d2:8b:59:e0:19:88:
         03:9e:85:78:32:1d:fc:0c:a8:0f:61:be:d9:6e:25:4e:25:ca:
         3a:ba:26:36:90:00:55:18:a7:32:0c:e9:d5:3d:42:5b:e1:bb:
         8f:e2:40:f5:25:4b:94:c4:ec:a2:55:d1:17:41:ba:4f:25:6d:
         eb:6c:d2:65:00:0d:8e:38:f0:25:48:fd:60:23:27:35:a2:c6:
         52:69:31:94:7f:ad:09:75:69:b8:ef:8e:fa:29:ee:0b:24:6a:
         3d:a1:97:8f:33:04:9d:65:1b:94:1b:c7:9b:4d:64:82:90:5e:
         e0:ed:d9:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 01:57:24 2025 by rpki-client