Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/4b908d-f43a-4882-a66f-b216844ac1e4/1/wa5jZUn1bYSFj_lsixYw6MuKSK8.mft
File:                     wa5jZUn1bYSFj_lsixYw6MuKSK8.mft (raw, json)
Hash identifier:          EB1ItGNMEy3kCO3/jz1ICszOIyIb7M67vflT4r2pupk=
Subject key identifier:   AE:86:7B:EC:2D:DB:5A:B5:D3:76:69:C6:AE:DC:B1:BB:0E:95:62:CF
Authority key identifier: C1:AE:63:65:49:F5:6D:84:85:8F:F9:6C:8B:16:30:E8:CB:8A:48:AF
Certificate issuer:       /CN=c1ae636549f56d84858ff96c8b1630e8cb8a48af
Certificate serial:       019849D3B11C2B4B8B3963A7466659C6CACB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wa5jZUn1bYSFj_lsixYw6MuKSK8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/4b908d-f43a-4882-a66f-b216844ac1e4/1/wa5jZUn1bYSFj_lsixYw6MuKSK8.mft
Manifest number:          1603
Signing time:             Sun 27 Jul 2025 03:01:06 +0000
Manifest this update:     Sun 27 Jul 2025 03:01:06 +0000
Manifest next update:     Mon 28 Jul 2025 03:01:06 +0000
Files and hashes:         1: hC6THvKHe5uSDROMW6kLELYwxL0.roa (hash: WD5tslYZuls5xxVxHqrkg7m1jUZOFnnaeXM0AUBhaiI=)
                          2: wa5jZUn1bYSFj_lsixYw6MuKSK8.crl (hash: VGWtP/jktQeBKM3hi+hNF/9lPQQCG1D8yLqnE1bS0x0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/4b908d-f43a-4882-a66f-b216844ac1e4/1/wa5jZUn1bYSFj_lsixYw6MuKSK8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/4b908d-f43a-4882-a66f-b216844ac1e4/1/wa5jZUn1bYSFj_lsixYw6MuKSK8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wa5jZUn1bYSFj_lsixYw6MuKSK8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 03:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:d3:b1:1c:2b:4b:8b:39:63:a7:46:66:59:c6:ca:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1ae636549f56d84858ff96c8b1630e8cb8a48af
        Validity
            Not Before: Jul 27 03:01:06 2025 GMT
            Not After : Jul 28 03:01:06 2025 GMT
        Subject: CN=ae867bec2ddb5ab5d37669c6aedcb1bb0e9562cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:77:da:35:bd:4a:53:cf:32:1e:79:23:ee:65:
                    12:c0:45:b0:6f:5d:07:69:0b:18:b0:0e:05:31:ac:
                    86:10:8b:98:6f:95:34:c7:0f:7c:69:f2:3d:6e:ff:
                    a5:0a:72:ad:30:8c:68:5c:31:2e:9b:0e:9b:f8:0d:
                    34:fd:70:7b:94:38:1e:f9:a3:7e:2d:62:a1:f8:28:
                    3f:85:60:40:89:82:b0:65:85:63:52:52:0f:ac:74:
                    79:25:bf:3b:a0:84:9a:71:24:2c:fc:7e:da:fa:8c:
                    7d:17:2b:e1:8e:02:fa:ea:da:a4:bc:47:af:2a:33:
                    19:f2:0d:b5:cf:80:41:49:55:f2:95:0a:8d:59:dd:
                    65:98:40:36:35:99:87:18:bb:ec:69:c9:22:f3:a3:
                    12:13:22:c6:82:df:75:6d:3b:ba:da:58:f9:15:09:
                    e0:aa:cd:72:b6:45:26:23:84:80:37:30:43:8a:09:
                    9e:b9:60:40:aa:37:86:97:b3:95:32:7c:41:e7:18:
                    13:e3:1f:f4:de:40:16:94:7d:fa:59:08:c7:a5:cd:
                    9b:f4:24:6b:99:2b:43:6c:2d:21:24:83:97:e4:31:
                    72:8b:71:ca:3f:aa:3f:31:b1:ca:3e:bb:2b:2c:9d:
                    93:4c:4b:a5:f4:48:e2:48:84:88:9e:1f:3f:2a:24:
                    d4:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:86:7B:EC:2D:DB:5A:B5:D3:76:69:C6:AE:DC:B1:BB:0E:95:62:CF
            X509v3 Authority Key Identifier:
                keyid:C1:AE:63:65:49:F5:6D:84:85:8F:F9:6C:8B:16:30:E8:CB:8A:48:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wa5jZUn1bYSFj_lsixYw6MuKSK8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4b908d-f43a-4882-a66f-b216844ac1e4/1/wa5jZUn1bYSFj_lsixYw6MuKSK8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4b908d-f43a-4882-a66f-b216844ac1e4/1/wa5jZUn1bYSFj_lsixYw6MuKSK8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:2d:13:a0:70:70:b4:82:7f:2b:85:32:23:31:0e:bf:a6:1b:
         85:36:03:65:b5:d6:b0:8a:2c:6d:8e:39:34:a0:69:e6:48:2f:
         c3:43:8f:ac:98:eb:f8:55:d9:17:c6:96:80:7c:df:a6:f2:d2:
         cb:71:83:16:8e:50:89:d1:92:be:b9:be:01:62:bb:5d:2f:97:
         d7:90:e9:a2:23:e3:43:b0:99:92:c8:1f:a4:a5:14:3d:d4:3b:
         19:ad:1b:ba:b5:36:52:8a:8a:15:5f:52:66:67:17:e8:43:a1:
         75:c5:e2:6e:1b:cd:ed:0f:bc:93:5a:d1:82:48:7d:62:81:04:
         b1:cf:45:ae:24:5e:f7:d7:e0:9b:67:05:5f:9c:7d:3b:6d:91:
         8a:73:18:1c:10:da:78:cc:72:40:95:cb:98:90:aa:e4:f0:39:
         6d:6f:b9:a2:db:d8:4b:ce:a9:a1:d5:b1:a7:6a:95:cc:f7:07:
         a6:d9:f2:95:75:df:67:e6:0f:9b:fd:90:14:5e:36:c5:41:aa:
         06:2e:2d:20:8b:57:ab:b5:f1:ba:43:82:28:b0:1d:bc:a0:e2:
         92:ae:9e:f0:d0:11:3c:9b:2b:88:95:91:c8:aa:42:1c:35:98:
         a5:43:c3:09:02:b7:c4:53:60:48:bb:ba:08:d4:4f:a3:42:e0:
         dc:ab:79:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJ07EcK0uLOWOnRmZZxsrLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxYWU2MzY1NDlmNTZkODQ4NThmZjk2YzhiMTYzMGU4Y2I4
YTQ4YWYwHhcNMjUwNzI3MDMwMTA2WhcNMjUwNzI4MDMwMTA2WjAzMTEwLwYDVQQD
EyhhZTg2N2JlYzJkZGI1YWI1ZDM3NjY5YzZhZWRjYjFiYjBlOTU2MmNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3faNb1KU88yHnkj7mUSwEWwb10H
aQsYsA4FMayGEIuYb5U0xw98afI9bv+lCnKtMIxoXDEumw6b+A00/XB7lDge+aN+
LWKh+Cg/hWBAiYKwZYVjUlIPrHR5Jb87oISacSQs/H7a+ox9FyvhjgL66tqkvEev
KjMZ8g21z4BBSVXylQqNWd1lmEA2NZmHGLvsacki86MSEyLGgt91bTu62lj5FQng
qs1ytkUmI4SANzBDigmeuWBAqjeGl7OVMnxB5xgT4x/03kAWlH36WQjHpc2b9CRr
mStDbC0hJIOX5DFyi3HKP6o/MbHKPrsrLJ2TTEul9EjiSISInh8/KiTUHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK6Ge+wt21q103Zpxq7csbsOlWLPMB8GA1UdIwQY
MBaAFMGuY2VJ9W2EhY/5bIsWMOjLikivMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2E1alpVbjFiWVNGal9sc2l4WXc2TXVLU0s4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi80YjkwOGQtZjQzYS00ODgyLWE2NmYt
YjIxNjg0NGFjMWU0LzEvd2E1alpVbjFiWVNGal9sc2l4WXc2TXVLU0s4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi80YjkwOGQtZjQzYS00ODgyLWE2NmYtYjIxNjg0NGFjMWU0
LzEvd2E1alpVbjFiWVNGal9sc2l4WXc2TXVLU0s4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlS0ToHBw
tIJ/K4UyIzEOv6YbhTYDZbXWsIosbY45NKBp5kgvw0OPrJjr+FXZF8aWgHzfpvLS
y3GDFo5QidGSvrm+AWK7XS+X15DpoiPjQ7CZksgfpKUUPdQ7Ga0burU2UoqKFV9S
ZmcX6EOhdcXibhvN7Q+8k1rRgkh9YoEEsc9FriRe99fgm2cFX5x9O22RinMYHBDa
eMxyQJXLmJCq5PA5bW+5otvYS86podWxp2qVzPcHptnylXXfZ+YPm/2QFF42xUGq
Bi4tIItXq7XxukOCKLAdvKDikq6e8NARPJsriJWRyKpCHDWYpUPDCQK3xFNgSLu6
CNRPo0Lg3Kt5NQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 13:08:26 2025 by rpki-client