Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/eff18d-5cc4-423f-9518-eb843e17c05e/1/W2k88e71-wv3LtXC4ihn0RJK89g.mft
File:                     W2k88e71-wv3LtXC4ihn0RJK89g.mft (raw, json)
Hash identifier:          JrCIi4nOIY7WCrtG5YIXX3jIMCGBQUhzmKjOAGLBDR0=
Subject key identifier:   7F:06:98:79:85:3C:B3:26:40:58:59:AF:2D:C9:3F:08:30:C9:9C:75
Authority key identifier: 5B:69:3C:F1:EE:F5:FB:0B:F7:2E:D5:C2:E2:28:67:D1:12:4A:F3:D8
Certificate issuer:       /CN=5b693cf1eef5fb0bf72ed5c2e22867d1124af3d8
Certificate serial:       019922C344D194A87E8DCF2A8C258823618D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W2k88e71-wv3LtXC4ihn0RJK89g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/eff18d-5cc4-423f-9518-eb843e17c05e/1/W2k88e71-wv3LtXC4ihn0RJK89g.mft
Manifest number:          1672
Signing time:             Sun 07 Sep 2025 06:00:46 +0000
Manifest this update:     Sun 07 Sep 2025 06:00:46 +0000
Manifest next update:     Mon 08 Sep 2025 06:00:46 +0000
Files and hashes:         1: SV9kNq2IEFMcsiU27EYmGZik5t0.roa (hash: 4jyjlSiN/7n2r//5rSK3grDPFtbjn3ApiThCyxJ+2wk=)
                          2: W2k88e71-wv3LtXC4ihn0RJK89g.crl (hash: JVJUzvcJ/7D6SMlbThJ9314vntYY+VqoUwL3lpTeggQ=)
                          3: g9aC_a7wC7cSS4kHbVuXcaoZ9W0.roa (hash: Vtrkb6OsU8qQ3CnvGKXLNE1uPP6pvCa3n/XLcp+xWOc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/eff18d-5cc4-423f-9518-eb843e17c05e/1/W2k88e71-wv3LtXC4ihn0RJK89g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/eff18d-5cc4-423f-9518-eb843e17c05e/1/W2k88e71-wv3LtXC4ihn0RJK89g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W2k88e71-wv3LtXC4ihn0RJK89g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:c3:44:d1:94:a8:7e:8d:cf:2a:8c:25:88:23:61:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b693cf1eef5fb0bf72ed5c2e22867d1124af3d8
        Validity
            Not Before: Sep  7 06:00:46 2025 GMT
            Not After : Sep  8 06:00:46 2025 GMT
        Subject: CN=7f069879853cb326405859af2dc93f0830c99c75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c3:db:25:cf:10:51:0c:6b:8a:d4:e3:a4:ae:
                    fd:7c:eb:c6:cc:a1:29:fe:1f:4e:aa:07:b0:e1:1f:
                    ad:7f:db:17:31:0d:f1:bf:88:ab:d7:c3:90:38:19:
                    59:03:76:19:41:8d:26:8f:3c:53:b5:7c:3c:40:c7:
                    32:62:b2:85:b8:03:f1:a9:7b:fa:ec:a5:b0:d7:be:
                    43:f7:c0:02:12:d7:ac:76:a5:6c:8e:4d:ef:20:62:
                    21:cb:85:ef:f2:e6:81:8e:45:76:1e:b9:b2:89:a6:
                    ae:99:ed:fd:4b:d2:8e:c8:7d:e6:e5:92:6b:01:64:
                    ce:62:0a:44:c5:98:97:14:ee:34:b3:21:0d:eb:53:
                    f3:03:84:35:92:50:ed:2e:90:78:7c:30:d2:a7:31:
                    f6:ee:68:bf:8b:0d:50:d5:29:fc:53:f1:a7:93:40:
                    8b:3b:58:d0:3c:b2:73:34:0a:08:99:2e:ac:2e:2b:
                    47:13:07:62:d6:80:a1:ae:e8:51:c7:21:18:48:44:
                    51:a4:1a:3c:22:59:dd:a9:df:1a:b3:94:0f:df:39:
                    8d:b4:ab:41:90:ea:e8:e0:52:ff:10:b3:9f:67:be:
                    b7:88:8a:ee:ec:97:d4:ff:a3:b0:72:4d:d7:d1:a2:
                    95:2f:6b:0a:8b:e9:74:3a:60:a5:fb:52:45:78:1e:
                    f9:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:06:98:79:85:3C:B3:26:40:58:59:AF:2D:C9:3F:08:30:C9:9C:75
            X509v3 Authority Key Identifier:
                keyid:5B:69:3C:F1:EE:F5:FB:0B:F7:2E:D5:C2:E2:28:67:D1:12:4A:F3:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2k88e71-wv3LtXC4ihn0RJK89g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/eff18d-5cc4-423f-9518-eb843e17c05e/1/W2k88e71-wv3LtXC4ihn0RJK89g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/eff18d-5cc4-423f-9518-eb843e17c05e/1/W2k88e71-wv3LtXC4ihn0RJK89g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:ec:c0:51:84:4f:2b:d5:f9:25:14:d9:70:bf:fe:80:7c:aa:
         f9:a3:bd:f8:ef:03:55:3b:26:18:d9:1e:b7:4a:e7:c4:b7:ce:
         58:cc:3e:db:be:f4:0b:03:28:d7:75:db:79:6a:d3:f9:91:d2:
         62:11:68:af:db:db:39:80:e6:1b:15:06:ed:b8:b1:89:91:15:
         52:c6:e9:c1:78:3b:d0:3b:de:42:3a:46:d8:29:93:30:a2:49:
         26:58:83:04:b1:8c:5d:be:61:ea:bf:f3:13:98:8d:79:05:c9:
         5d:d7:92:78:ae:d0:c8:c1:75:51:65:6e:31:0d:6d:a6:ce:d9:
         28:13:22:00:af:57:65:95:88:bb:05:24:b5:6f:c6:d8:36:08:
         38:39:8a:3e:e3:e6:87:1b:1f:04:98:22:c5:d4:18:1f:b8:ce:
         8c:cd:b5:22:a0:0f:7b:59:e8:28:9b:40:8f:62:da:31:ed:67:
         b5:98:06:76:a0:c0:54:64:51:b1:e1:07:34:a5:86:b4:4d:6b:
         8f:72:94:92:c4:e2:5d:56:39:ab:48:d8:0f:80:2a:23:7e:cc:
         06:04:e7:0e:aa:8c:cd:2b:80:6c:10:a4:22:c8:00:cc:aa:e5:
         34:94:04:ba:c8:13:63:99:fc:0f:28:fb:5a:07:a2:2d:bf:94:
         ad:0a:f3:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:21:48 2025 by rpki-client