Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/ce12ca-ab7e-4854-bc67-8c600eae7d80/1/W-XxlT4DHSeYZPPDvv8LxnWgDuQ.mft
File:                     W-XxlT4DHSeYZPPDvv8LxnWgDuQ.mft (raw, json)
Hash identifier:          64/skKEiUbxaagPI6cPAwtub7GhVSyzc6KRKnZyDxhs=
Subject key identifier:   9E:A9:CA:DC:88:2B:02:FB:1B:55:12:A7:50:05:3D:BE:4C:0F:0F:7E
Authority key identifier: 5B:E5:F1:95:3E:03:1D:27:98:64:F3:C3:BE:FF:0B:C6:75:A0:0E:E4
Certificate issuer:       /CN=5be5f1953e031d279864f3c3beff0bc675a00ee4
Certificate serial:       019849D2C3571C797C62BDF5D8DC037CCAA2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W-XxlT4DHSeYZPPDvv8LxnWgDuQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/ce12ca-ab7e-4854-bc67-8c600eae7d80/1/W-XxlT4DHSeYZPPDvv8LxnWgDuQ.mft
Manifest number:          139A
Signing time:             Sun 27 Jul 2025 03:00:05 +0000
Manifest this update:     Sun 27 Jul 2025 03:00:05 +0000
Manifest next update:     Mon 28 Jul 2025 03:00:05 +0000
Files and hashes:         1: W-XxlT4DHSeYZPPDvv8LxnWgDuQ.crl (hash: F1/1sEtQMy7m8wjJsIdaT6KjcyZ2oJ3kV86PVhGYHD0=)
                          2: yA5B5VXhOCm628j2BmlmI-fci1Y.roa (hash: QTSh8buWKlIWj0giqvjbzYLkHrxbOtA9phJCik8JbFI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/ce12ca-ab7e-4854-bc67-8c600eae7d80/1/W-XxlT4DHSeYZPPDvv8LxnWgDuQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/ce12ca-ab7e-4854-bc67-8c600eae7d80/1/W-XxlT4DHSeYZPPDvv8LxnWgDuQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W-XxlT4DHSeYZPPDvv8LxnWgDuQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:d2:c3:57:1c:79:7c:62:bd:f5:d8:dc:03:7c:ca:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5be5f1953e031d279864f3c3beff0bc675a00ee4
        Validity
            Not Before: Jul 27 03:00:05 2025 GMT
            Not After : Jul 28 03:00:05 2025 GMT
        Subject: CN=9ea9cadc882b02fb1b5512a750053dbe4c0f0f7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:c1:6e:63:8e:ac:89:9e:94:06:aa:48:9d:a0:
                    34:c2:36:66:6c:ff:a6:63:28:00:eb:41:da:23:76:
                    38:33:ac:a6:1d:5b:e3:96:a4:8c:8a:77:ca:bf:bc:
                    6d:cf:40:bd:a2:55:79:3d:8b:d3:70:d6:89:eb:fb:
                    47:fa:ae:6c:46:d2:5c:66:f1:d8:bb:83:e4:86:2a:
                    5a:29:17:96:8f:d8:92:eb:d7:cf:14:fa:d3:20:a4:
                    f9:43:47:4b:46:a6:bf:a8:bc:fd:88:8e:59:26:d7:
                    80:90:8c:87:62:27:d0:83:84:ef:05:76:31:73:ee:
                    aa:a4:b3:f9:aa:8a:3c:3e:f3:c5:4f:bd:23:3b:2a:
                    69:4e:0b:81:71:1b:37:3c:b5:bf:93:89:e9:3a:97:
                    c4:4e:d0:fe:36:d0:f0:38:fd:56:a6:85:a6:71:1a:
                    31:f9:c0:81:f9:a2:7a:4d:59:05:b7:2c:39:a3:49:
                    65:83:15:18:b3:f2:81:90:9b:ef:21:a7:1a:15:7c:
                    7b:27:c9:db:5b:93:79:c2:30:18:e5:dc:9e:6b:c7:
                    93:04:59:20:e5:07:3d:68:61:2b:05:6c:b9:0c:54:
                    e3:86:d2:6a:00:60:84:3a:5c:bd:31:30:dc:fa:f9:
                    b3:33:37:97:ce:ec:56:8f:7d:4c:64:cc:9d:56:ff:
                    84:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:A9:CA:DC:88:2B:02:FB:1B:55:12:A7:50:05:3D:BE:4C:0F:0F:7E
            X509v3 Authority Key Identifier:
                keyid:5B:E5:F1:95:3E:03:1D:27:98:64:F3:C3:BE:FF:0B:C6:75:A0:0E:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-XxlT4DHSeYZPPDvv8LxnWgDuQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ce12ca-ab7e-4854-bc67-8c600eae7d80/1/W-XxlT4DHSeYZPPDvv8LxnWgDuQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ce12ca-ab7e-4854-bc67-8c600eae7d80/1/W-XxlT4DHSeYZPPDvv8LxnWgDuQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:ea:02:25:47:6f:bc:07:eb:e3:f2:4b:14:e0:ab:df:aa:4e:
         ac:5c:a5:5a:71:80:d9:ac:47:57:91:cf:db:76:f3:26:db:dc:
         e8:34:1f:00:37:f8:e1:21:2b:51:67:c5:1b:d9:c7:14:c7:b8:
         65:10:52:db:2e:3f:3a:e8:e6:f6:6c:6b:30:c2:7b:66:8f:a8:
         0b:07:0c:d3:e8:e9:61:ab:77:ee:68:0d:ca:9d:17:74:70:6b:
         1f:65:02:0a:b5:ff:64:4d:ea:5e:a0:f0:3c:1b:17:4a:a9:0b:
         b1:09:bd:bd:cb:e8:7a:3b:32:a1:62:5d:74:00:c2:c1:b0:25:
         d9:b4:c5:84:ea:39:ce:2f:95:15:4b:a5:f8:6f:c7:1a:2f:96:
         a1:53:49:8c:bb:ae:75:d8:72:78:5d:41:07:17:93:4a:f9:22:
         52:b8:c0:af:9c:db:1f:58:71:31:57:76:78:1b:1c:62:d6:b2:
         66:7e:bf:5d:05:a6:5a:64:4b:95:9a:b0:9b:a4:4a:c5:41:e8:
         45:eb:b8:2b:03:8b:77:b0:c3:ed:02:6e:ed:18:e9:6c:9e:3f:
         84:e8:9e:48:d7:ca:a3:8f:46:f0:e4:d9:c6:31:08:12:5e:a6:
         a2:11:dd:5c:b3:c4:c4:7f:3a:fa:3b:bf:8d:28:73:f4:b5:1b:
         57:8d:f0:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:20:24 2025 by rpki-client