Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/7ea00d-6047-4e12-a881-18940cb372bd/1/WRM4ph9qD1SEIKk5IDf0gRdJUIo.mft
File:                     WRM4ph9qD1SEIKk5IDf0gRdJUIo.mft (raw, json)
Hash identifier:          UxDznG3dIVDnSoSDoA7jP5R2rgCsEiiThtmE3Qwze94=
Subject key identifier:   8C:A4:CB:3C:45:B3:3E:02:13:3D:11:E9:C6:76:5F:5F:E7:58:80:ED
Authority key identifier: 59:13:38:A6:1F:6A:0F:54:84:20:A9:39:20:37:F4:81:17:49:50:8A
Certificate issuer:       /CN=591338a61f6a0f548420a9392037f4811749508a
Certificate serial:       019847E534297B84BB9B1002ED352D046794
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WRM4ph9qD1SEIKk5IDf0gRdJUIo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/7ea00d-6047-4e12-a881-18940cb372bd/1/WRM4ph9qD1SEIKk5IDf0gRdJUIo.mft
Manifest number:          0363
Signing time:             Sat 26 Jul 2025 18:01:00 +0000
Manifest this update:     Sat 26 Jul 2025 18:01:00 +0000
Manifest next update:     Sun 27 Jul 2025 18:01:00 +0000
Files and hashes:         1: QvzIuDIPsfNvbsiu-OpMImndcj4.roa (hash: Zd0Oz2LJKbUfeoowQWU8WhWLnHtXOXflOCBLaOBPWyw=)
                          2: WRM4ph9qD1SEIKk5IDf0gRdJUIo.crl (hash: h3+/MI50ZwqqD14gcqmh7xM+Fyt9TcxPAuRXa2c5dqs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/7ea00d-6047-4e12-a881-18940cb372bd/1/WRM4ph9qD1SEIKk5IDf0gRdJUIo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/7ea00d-6047-4e12-a881-18940cb372bd/1/WRM4ph9qD1SEIKk5IDf0gRdJUIo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WRM4ph9qD1SEIKk5IDf0gRdJUIo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:47:e5:34:29:7b:84:bb:9b:10:02:ed:35:2d:04:67:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=591338a61f6a0f548420a9392037f4811749508a
        Validity
            Not Before: Jul 26 18:01:00 2025 GMT
            Not After : Jul 27 18:01:00 2025 GMT
        Subject: CN=8ca4cb3c45b33e02133d11e9c6765f5fe75880ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:5a:f1:bb:82:92:a2:e5:99:96:10:3a:52:f6:
                    9a:f9:63:72:df:95:2c:0d:00:89:e4:4c:7a:44:3f:
                    21:78:98:0b:bb:65:d6:10:ad:db:46:19:31:37:72:
                    cc:1a:c5:a2:e6:f1:9f:55:5b:11:a6:8e:9f:84:d3:
                    37:f7:e7:94:5f:d7:34:96:75:42:a7:cc:61:56:6b:
                    40:dc:d7:45:ee:eb:37:50:55:e0:65:ad:64:8e:39:
                    fc:9f:d6:09:09:3b:5d:35:ac:b6:76:a0:49:13:a8:
                    db:82:04:33:78:33:dc:63:e8:ba:d8:a7:39:9b:11:
                    23:b1:54:cb:14:12:9c:4d:8e:d2:2c:ac:a7:0e:b7:
                    2f:c4:06:b0:ab:59:51:bc:1a:1a:29:21:85:32:a2:
                    32:a0:73:27:32:ad:30:98:bd:3b:00:b9:9d:a9:c3:
                    5b:7e:a7:9d:f7:75:2c:7a:7e:d1:cc:c2:ae:dd:c6:
                    77:50:66:40:25:f5:97:34:f5:94:58:df:c3:93:f7:
                    c8:b5:5f:45:3f:4d:74:4e:10:27:45:21:3e:db:6c:
                    52:71:3e:f3:a0:4b:95:9c:de:c3:83:9d:f3:02:7e:
                    1e:95:2f:0b:c8:e6:61:e8:ce:cf:1f:d8:ab:b3:30:
                    03:fa:64:72:10:ce:71:9e:c1:0c:a7:f7:c6:76:8f:
                    13:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:A4:CB:3C:45:B3:3E:02:13:3D:11:E9:C6:76:5F:5F:E7:58:80:ED
            X509v3 Authority Key Identifier:
                keyid:59:13:38:A6:1F:6A:0F:54:84:20:A9:39:20:37:F4:81:17:49:50:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WRM4ph9qD1SEIKk5IDf0gRdJUIo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/7ea00d-6047-4e12-a881-18940cb372bd/1/WRM4ph9qD1SEIKk5IDf0gRdJUIo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/7ea00d-6047-4e12-a881-18940cb372bd/1/WRM4ph9qD1SEIKk5IDf0gRdJUIo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:78:0e:c2:74:d6:6e:c6:ae:ef:19:0d:73:e6:df:77:c2:34:
         27:1b:f5:ef:4c:f9:f9:0a:f6:0f:47:95:88:1c:00:4a:c1:1e:
         a0:95:35:9d:3d:a0:5b:3c:4a:d0:eb:c2:ab:9a:7e:ce:dc:0b:
         66:92:15:f3:0e:1e:eb:b4:e4:53:f8:6b:8b:bb:5b:57:98:e8:
         89:b2:de:cb:24:bb:b7:f3:ec:8b:11:28:89:df:1d:f3:43:1f:
         64:d1:4a:44:79:91:31:e1:ef:86:af:45:7a:11:64:a3:49:b0:
         5e:b1:d5:89:36:35:29:d0:82:8c:dc:56:36:93:53:19:60:a2:
         d0:24:e9:43:d6:7e:8c:6f:61:45:50:94:51:71:89:d4:7e:81:
         3b:74:56:62:89:40:fe:ba:5c:25:70:4b:5d:09:2b:1c:ce:80:
         90:e6:e4:96:d4:de:50:7a:b3:cb:c6:db:3f:6d:96:dc:53:ad:
         6b:d1:ea:d8:42:92:cd:6a:97:c4:71:f5:a7:ff:17:0b:a5:36:
         57:1f:ea:70:af:05:f2:a1:60:2d:10:56:1e:7f:7f:be:57:87:
         74:dd:b9:0a:28:03:51:c6:d5:59:57:88:b1:1c:59:c6:f6:be:
         f4:14:4f:2b:60:85:b5:79:57:18:66:fe:43:0a:60:2c:11:18:
         8c:2c:5a:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:46:32 2025 by rpki-client