Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/d734fa-6e83-4683-bf49-87122b514e69/1/WYjwhVxEeNG5Srio1tnZxRHzFCY.mft
File:                     WYjwhVxEeNG5Srio1tnZxRHzFCY.mft (raw, json)
Hash identifier:          Hhxk+5IvaI9VcZ8TIONCt7R8URhtx0bVl9wTh1+LIUQ=
Subject key identifier:   65:D0:5E:26:6B:57:15:B4:D2:76:84:E9:75:6E:49:39:C3:BA:79:9D
Authority key identifier: 59:88:F0:85:5C:44:78:D1:B9:4A:B8:A8:D6:D9:D9:C5:11:F3:14:26
Certificate issuer:       /CN=5988f0855c4478d1b94ab8a8d6d9d9c511f31426
Certificate serial:       01984776CBDBB64690E894B5FC293335D4AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WYjwhVxEeNG5Srio1tnZxRHzFCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/d734fa-6e83-4683-bf49-87122b514e69/1/WYjwhVxEeNG5Srio1tnZxRHzFCY.mft
Manifest number:          0CB6
Signing time:             Sat 26 Jul 2025 16:00:24 +0000
Manifest this update:     Sat 26 Jul 2025 16:00:24 +0000
Manifest next update:     Sun 27 Jul 2025 16:00:24 +0000
Files and hashes:         1: WYjwhVxEeNG5Srio1tnZxRHzFCY.crl (hash: FcXjUAnsyKuImax/K55GkSOqDd4D03PY/SrSDf3W1NY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/d734fa-6e83-4683-bf49-87122b514e69/1/WYjwhVxEeNG5Srio1tnZxRHzFCY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/d734fa-6e83-4683-bf49-87122b514e69/1/WYjwhVxEeNG5Srio1tnZxRHzFCY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WYjwhVxEeNG5Srio1tnZxRHzFCY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:47:76:cb:db:b6:46:90:e8:94:b5:fc:29:33:35:d4:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5988f0855c4478d1b94ab8a8d6d9d9c511f31426
        Validity
            Not Before: Jul 26 16:00:24 2025 GMT
            Not After : Jul 27 16:00:24 2025 GMT
        Subject: CN=65d05e266b5715b4d27684e9756e4939c3ba799d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c1:15:d7:1b:06:f0:66:25:72:f6:ce:e4:db:
                    60:47:a4:59:a1:d1:95:63:b3:67:44:a8:32:30:25:
                    fc:64:9d:9f:5d:6a:7a:15:89:1f:8b:67:03:91:d8:
                    8a:9a:24:fe:15:23:98:61:4b:77:59:25:ae:45:be:
                    e9:81:b3:86:8f:8c:16:34:a4:67:fe:0a:08:4c:f0:
                    e5:22:a2:0b:a8:e3:ec:3c:68:e4:aa:ee:64:8e:97:
                    59:4d:24:1d:d5:de:5f:47:fc:89:35:bd:d4:dd:7f:
                    78:4a:7d:71:f8:a5:8c:0a:fe:21:b7:90:e6:5a:61:
                    7f:4b:b7:d7:15:d1:25:10:e4:b2:05:65:4d:fa:6b:
                    fc:f5:48:82:c1:fb:24:f5:7e:19:ed:a8:ef:6f:5d:
                    30:f1:0a:26:ec:ed:05:8f:24:76:c2:6f:02:ab:b2:
                    05:7d:cb:e9:31:dd:1f:5c:9b:0d:9d:89:78:f1:9e:
                    46:95:d1:ba:17:cf:b9:aa:a9:8d:04:bc:06:12:f3:
                    b7:b0:f0:d4:9e:47:94:0c:f4:1d:b6:08:3c:41:13:
                    b3:f7:77:83:49:79:51:6e:08:a9:90:f2:7c:7f:e8:
                    b5:bc:1e:5c:73:c3:73:7d:16:85:91:9a:c4:56:d7:
                    a0:be:f1:82:45:16:01:7f:26:f5:f3:27:03:19:90:
                    a4:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:D0:5E:26:6B:57:15:B4:D2:76:84:E9:75:6E:49:39:C3:BA:79:9D
            X509v3 Authority Key Identifier:
                keyid:59:88:F0:85:5C:44:78:D1:B9:4A:B8:A8:D6:D9:D9:C5:11:F3:14:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WYjwhVxEeNG5Srio1tnZxRHzFCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d734fa-6e83-4683-bf49-87122b514e69/1/WYjwhVxEeNG5Srio1tnZxRHzFCY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d734fa-6e83-4683-bf49-87122b514e69/1/WYjwhVxEeNG5Srio1tnZxRHzFCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:bd:e1:7d:bb:dc:4f:0f:75:d5:4b:ee:9d:04:ab:81:f7:6b:
         1a:b6:c5:40:4e:54:d9:2f:8d:28:c0:1d:01:1f:a2:0a:53:cd:
         6a:23:fd:e3:5f:32:97:b0:ad:fd:f5:7e:a2:7d:11:e2:b9:23:
         9c:af:89:6f:8a:bf:45:a6:60:4b:8f:6d:77:e9:f4:95:b0:bb:
         5f:9e:73:a4:6d:5f:4b:08:60:84:ac:f4:5b:8d:23:2a:ee:41:
         68:06:b7:3d:5b:98:3f:c9:21:86:0b:b3:1e:1d:4a:d1:ab:51:
         84:25:0d:21:65:83:8e:1a:f7:4d:9f:15:f2:60:c0:c7:80:1c:
         59:4c:15:bc:45:9c:28:66:f4:4f:79:b8:47:1f:30:30:46:20:
         06:bc:71:0f:e4:92:4c:f9:61:be:38:18:5f:cb:e7:7a:38:d1:
         cb:0d:8e:a2:c3:3a:88:d4:86:8b:e8:0f:4f:b4:ea:73:0f:32:
         3b:28:21:16:a9:dc:7a:b6:de:f9:a1:12:a4:a8:5c:bb:13:a1:
         ed:be:be:7e:cd:10:5f:16:23:69:c3:cd:80:c1:de:e2:13:92:
         2d:50:63:e5:ed:1c:c4:65:fd:b3:41:6b:60:d4:71:c7:24:cf:
         72:e3:18:99:ee:8a:e4:ca:d1:c2:a8:ce:0a:f9:0f:44:18:6f:
         17:b6:fc:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:42:37 2025 by rpki-client