Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/a744c4-5c24-48c2-ab06-60736859c0c4/1/WCBDwB163q3Zb1a9u-8nSOAIAjQ.mft
File:                     WCBDwB163q3Zb1a9u-8nSOAIAjQ.mft (raw, json)
Hash identifier:          WfdW1tBhxKv5BwfftqLT+iDlIZJ/XCMjUUZD5C11vFQ=
Subject key identifier:   F9:F5:7A:B7:BB:85:07:A3:4F:E7:6C:E7:C4:87:BC:A6:E9:5B:7D:AE
Authority key identifier: 58:20:43:C0:1D:7A:DE:AD:D9:6F:56:BD:BB:EF:27:48:E0:08:02:34
Certificate issuer:       /CN=582043c01d7adeadd96f56bdbbef2748e0080234
Certificate serial:       01984852CB12722393C63FD431CE14CA292D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WCBDwB163q3Zb1a9u-8nSOAIAjQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/a744c4-5c24-48c2-ab06-60736859c0c4/1/WCBDwB163q3Zb1a9u-8nSOAIAjQ.mft
Manifest number:          0278
Signing time:             Sat 26 Jul 2025 20:00:42 +0000
Manifest this update:     Sat 26 Jul 2025 20:00:42 +0000
Manifest next update:     Sun 27 Jul 2025 20:00:42 +0000
Files and hashes:         1: WCBDwB163q3Zb1a9u-8nSOAIAjQ.crl (hash: jzIyOkZZ9F03tM0i84svBDSem9ZrFakJKMNvzoV3CJo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/a744c4-5c24-48c2-ab06-60736859c0c4/1/WCBDwB163q3Zb1a9u-8nSOAIAjQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/a744c4-5c24-48c2-ab06-60736859c0c4/1/WCBDwB163q3Zb1a9u-8nSOAIAjQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WCBDwB163q3Zb1a9u-8nSOAIAjQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:52:cb:12:72:23:93:c6:3f:d4:31:ce:14:ca:29:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=582043c01d7adeadd96f56bdbbef2748e0080234
        Validity
            Not Before: Jul 26 20:00:42 2025 GMT
            Not After : Jul 27 20:00:42 2025 GMT
        Subject: CN=f9f57ab7bb8507a34fe76ce7c487bca6e95b7dae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:59:5d:57:5b:77:71:80:8e:3e:9c:6c:c4:2a:
                    20:05:23:eb:83:d9:ea:ee:b8:82:8e:57:c3:85:7b:
                    25:d7:21:7b:05:7a:d5:3d:2a:a6:ae:8b:48:5a:af:
                    61:1f:b3:0a:b7:e7:e2:76:48:ad:25:6f:46:0e:8c:
                    8e:c6:dd:21:1f:82:26:d4:76:aa:cc:21:36:1b:be:
                    ff:78:e6:99:5f:0c:52:70:3e:6b:fe:0f:1c:7c:95:
                    95:3c:dd:a9:39:79:de:c0:a2:02:44:04:c9:f3:5c:
                    86:84:91:f2:98:0f:8d:d9:43:af:0d:67:75:da:e5:
                    1c:86:9c:01:a9:c8:15:7c:1d:b7:b4:12:9b:a6:ed:
                    b3:f2:43:fe:d9:0f:14:70:ac:af:3b:50:7b:b4:7e:
                    1a:33:3e:62:e5:92:fd:54:aa:31:44:d3:32:ca:c7:
                    1e:c2:47:5c:10:10:e5:1d:a2:8b:1a:0f:91:19:87:
                    e9:d9:01:e4:4c:4d:15:b6:ef:9d:43:2d:01:ab:4e:
                    e4:44:c5:34:8b:5d:03:0a:5b:36:26:3c:e6:e8:1a:
                    4e:fa:fb:b4:21:95:e7:c2:1f:83:f1:35:7b:f0:f6:
                    3e:4c:27:6c:d2:59:77:8f:c1:a4:d0:74:9b:01:c2:
                    83:a7:db:ce:51:9f:e9:d3:eb:3c:3b:49:1d:80:c2:
                    b6:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:F5:7A:B7:BB:85:07:A3:4F:E7:6C:E7:C4:87:BC:A6:E9:5B:7D:AE
            X509v3 Authority Key Identifier:
                keyid:58:20:43:C0:1D:7A:DE:AD:D9:6F:56:BD:BB:EF:27:48:E0:08:02:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WCBDwB163q3Zb1a9u-8nSOAIAjQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/a744c4-5c24-48c2-ab06-60736859c0c4/1/WCBDwB163q3Zb1a9u-8nSOAIAjQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/a744c4-5c24-48c2-ab06-60736859c0c4/1/WCBDwB163q3Zb1a9u-8nSOAIAjQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:f7:60:49:4d:a0:ad:20:41:4e:46:a0:a2:1a:f3:3b:01:ce:
         4f:cc:16:b6:e7:aa:76:d4:fe:64:88:a9:b2:62:71:63:21:53:
         3c:a1:67:d0:c4:48:43:22:d7:e6:7e:5b:6a:12:13:58:a8:89:
         6b:20:ad:29:d5:06:e3:81:d7:91:bb:82:70:d0:ec:f3:19:78:
         f5:98:3a:6d:42:8c:47:4e:ac:44:c3:6c:1d:40:a1:d8:66:84:
         c3:7a:38:eb:98:83:77:f3:17:b4:cf:01:d8:d4:ac:63:4f:41:
         a0:47:cf:e2:c4:b0:f3:6b:82:cf:d3:62:e2:38:95:8c:da:a0:
         ee:11:7f:da:a7:bd:1a:af:51:79:de:eb:00:c7:df:fe:6b:77:
         41:1b:38:20:da:39:2b:ab:e8:7a:6a:7e:43:9a:d6:88:ce:d7:
         bb:64:f2:80:72:5f:c6:ee:04:9d:a8:a5:0c:39:a1:78:d4:bf:
         89:5d:5b:da:02:2e:ac:17:f2:ab:db:16:0e:43:2d:16:76:17:
         18:e2:6f:c9:14:25:54:5d:b5:ed:06:18:a7:cd:ab:25:80:32:
         c1:84:95:85:fd:d6:09:1a:96:c3:bb:d6:59:0b:4f:eb:13:3b:
         86:26:76:2d:99:33:9a:c8:64:51:08:9b:cd:09:50:bc:2e:d7:
         cc:dc:b8:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:38:52 2025 by rpki-client