Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.mft
File:                     WAbaWlklEnXOsYaU4XQVNSrt1qo.mft (raw, json)
Hash identifier:          NmrMznaUyR0VHmjnkfcvUvBW5wC2FIxm1eTMzqsqONo=
Subject key identifier:   47:46:DD:75:31:42:64:FC:42:76:B3:19:3D:2F:94:93:0A:B5:D7:77
Authority key identifier: 58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA
Certificate issuer:       /CN=5806da5a59251275ceb18694e17415352aedd6aa
Certificate serial:       01983616E311E1C77FC89F010E1C51FE623F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.mft
Manifest number:          132D
Signing time:             Wed 23 Jul 2025 07:02:06 +0000
Manifest this update:     Wed 23 Jul 2025 07:02:06 +0000
Manifest next update:     Thu 24 Jul 2025 07:02:06 +0000
Files and hashes:         1: 5vJKf9rRscQn60NceOgS-TYmgqo.roa (hash: m3zVFgk+rH9oeWk1CAQpiduJ6luxwEoOtZqabqE5W9Y=)
                          2: 6y4ef_E4buArdFR0VyJFJok-UQk.roa (hash: SLHYiqzLk1jqb05UW5GYDuNyyYKGiUgX1kAE2Okbj9U=)
                          3: L_L38dK9gn6JqpNMMZxPFrUBe3Y.roa (hash: K1PZCMBxSKerpN6ZYGV0oTGEJDr/K9Pijlk59rNCqys=)
                          4: QEHVevEfx97qRJzJKuZ_hmMRmcM.roa (hash: aOeQS/kAS4LIy+SM9GDPJaSv9Th7AJl/ZfLJY/RA0+Q=)
                          5: UVXJSMlcwPvX9wSFHlr_2BxTeBY.roa (hash: v4olu8knUOXGZo95yikqn7i0UUi9wj0a7lPXPrL3ohE=)
                          6: WAbaWlklEnXOsYaU4XQVNSrt1qo.crl (hash: SsfqSXhjkqgxJgG0gPPKF45wYWGR8yJSukqtWdhx0Ao=)
                          7: ZoTWcdrv2djCVVfjgwvpRHQ3NWg.roa (hash: seWv3Mu7Rv0gJUXQQdGo+KhenjTFqKj5MrZW9ZOh7XY=)
                          8: fY72RfJewKqE4BHfcDuBb7MuOUw.roa (hash: 1mSgSmq4Rwdfnxbkvm6ofs3NzARS1zrBjPxW4IoDGxA=)
                          9: gYjsJ-y7W3H1wSU0byQOrkeesKo.roa (hash: KMtB8kZ8a2+tb8V0dKPceRxW3qb73A3bHe6TsN48as4=)
                          10: rAEwzbDeabIwAl_0o9I5pV2p3gY.roa (hash: SwHzGigoMnrXH3tS8tZKql5tagaBzvPXk5oyiOZAhcM=)
                          11: sFzZTT6lGhCS-BjAKzgtmJjkbyg.roa (hash: u07+w3FCYnOPK1CWqMt4bvUQwt/NentthMLbDs3pSwM=)
                          12: vZu3eYiAxsNMVIi9dRGMaIb3zVw.roa (hash: LwyZth4BvDGg7r81c9JhkWiCU6TWnZDhRC0M5M601zo=)
                          13: w0wAwCKFIqoAmbB301MrAM7vQ4M.roa (hash: 2yGF3Y9Vr7k2FqKTETKlWzM6DlGaxlS+0cuWig86hMw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Jul 2025 06:24:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:36:16:e3:11:e1:c7:7f:c8:9f:01:0e:1c:51:fe:62:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5806da5a59251275ceb18694e17415352aedd6aa
        Validity
            Not Before: Jul 23 07:02:06 2025 GMT
            Not After : Jul 24 07:02:06 2025 GMT
        Subject: CN=4746dd75314264fc4276b3193d2f94930ab5d777
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ea:fd:10:cb:b3:44:90:fc:10:19:b9:f6:ac:
                    c5:56:da:c2:0a:e2:a8:d4:a9:46:30:25:d0:55:0f:
                    bb:bd:a4:33:0d:73:8c:58:dc:a6:f3:28:c0:5a:a9:
                    b6:79:10:74:20:81:20:29:23:49:85:47:2c:85:0d:
                    65:fc:02:dc:75:83:e8:3e:56:75:f6:4b:4e:37:a6:
                    99:b9:b6:cb:92:87:06:c0:1f:dc:85:1a:92:7c:3f:
                    86:08:fc:48:53:0b:f5:44:59:88:84:33:69:78:7d:
                    35:8c:e3:0a:a3:fb:ab:f1:0f:84:2d:6e:68:f9:78:
                    b7:f2:f9:14:cd:5f:21:5b:1d:53:3e:b6:ba:4a:a8:
                    c8:79:a6:90:f5:2f:9d:44:48:a5:dc:69:b4:e2:e3:
                    f7:7c:cc:0c:71:ba:7c:22:ce:55:d6:3e:20:61:b6:
                    61:98:7e:f0:da:d3:83:1e:ce:e2:8e:1d:7e:71:d9:
                    de:74:16:99:b6:52:ac:ea:4d:ac:f7:1b:76:1a:ab:
                    be:f6:2e:72:15:56:80:74:26:9c:b6:f7:59:95:b4:
                    78:03:e4:59:b5:dc:a3:ce:e7:15:04:62:82:9f:2b:
                    10:36:c2:c5:94:9b:e7:71:d8:f3:0d:48:3e:99:33:
                    ba:f9:a7:06:96:32:9a:f2:fb:6f:d8:0a:20:7c:31:
                    ae:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:46:DD:75:31:42:64:FC:42:76:B3:19:3D:2F:94:93:0A:B5:D7:77
            X509v3 Authority Key Identifier:
                keyid:58:06:DA:5A:59:25:12:75:CE:B1:86:94:E1:74:15:35:2A:ED:D6:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WAbaWlklEnXOsYaU4XQVNSrt1qo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5df119-b1df-4ceb-bd4f-f79ccc3f4eaf/1/WAbaWlklEnXOsYaU4XQVNSrt1qo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:80:79:e1:7b:4e:be:ab:3a:b5:49:a6:f5:cf:4a:6b:05:c6:
         a1:36:07:0c:b9:89:de:b3:af:c0:13:b1:32:eb:3d:e0:42:5d:
         86:bd:51:a8:57:88:a6:2f:4b:4e:27:7b:cf:2d:66:ef:ce:64:
         53:b8:40:eb:30:12:44:51:3e:e8:06:fc:da:5f:fc:f0:b4:a1:
         6c:9f:78:79:84:18:35:72:fe:6c:29:93:a9:f3:03:ec:8c:45:
         c3:7e:06:86:b4:3b:76:cf:89:7a:56:42:31:0d:7d:72:f3:13:
         9a:27:c0:d5:9f:64:01:ce:a3:07:36:41:7e:4b:27:95:32:73:
         02:1a:bb:cf:61:52:7e:1a:a6:b3:d9:03:b8:5a:9b:1b:3a:a1:
         02:95:07:58:18:5f:67:46:f8:c4:e8:fd:67:e8:6e:5e:f2:28:
         68:48:f5:41:14:53:16:e3:96:b3:55:e8:a0:b5:8c:d7:6d:4f:
         14:2b:e4:7d:98:8b:fc:72:96:6b:4e:04:72:9c:32:6e:60:d9:
         a5:a6:77:27:92:a5:66:7e:de:10:4d:79:3f:1d:e6:d0:b3:d7:
         ff:aa:39:2e:25:a2:70:72:5d:e0:ec:99:c0:89:4f:a0:f6:55:
         79:79:57:30:02:ab:ce:14:41:a4:74:41:90:dc:4c:dc:9a:0c:
         6c:32:53:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 07:56:39 2025 by rpki-client