Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/0e93d3-e72d-45f9-8ef5-94be8d33b9d3/1/wtwaJyuq59B3NPatRjevotLRsxI.mft
File:                     wtwaJyuq59B3NPatRjevotLRsxI.mft (raw, json)
Hash identifier:          U3u/dnHecLcVxc/7/e+RCaES1xrpmjz8g+djByrvaEY=
Subject key identifier:   DE:AB:B9:02:13:E5:1B:A7:78:12:F1:FF:30:6B:37:8A:6E:84:94:F4
Authority key identifier: C2:DC:1A:27:2B:AA:E7:D0:77:34:F6:AD:46:37:AF:A2:D2:D1:B3:12
Certificate issuer:       /CN=c2dc1a272baae7d07734f6ad4637afa2d2d1b312
Certificate serial:       0199240CF0A86C927E34F4FA6D96170AAC34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wtwaJyuq59B3NPatRjevotLRsxI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/0e93d3-e72d-45f9-8ef5-94be8d33b9d3/1/wtwaJyuq59B3NPatRjevotLRsxI.mft
Manifest number:          0A5E
Signing time:             Sun 07 Sep 2025 12:00:51 +0000
Manifest this update:     Sun 07 Sep 2025 12:00:51 +0000
Manifest next update:     Mon 08 Sep 2025 12:00:51 +0000
Files and hashes:         1: RZAsu3ZzPjbXj9YVfQwdh_v0Wwo.roa (hash: WabOb6iYWPViHfgLBS9pTtVU1Jn9wGfO4xF3paFZqEI=)
                          2: wtwaJyuq59B3NPatRjevotLRsxI.crl (hash: +bJb8yF3jk41mFtnERfx2bgWIrcwyxA4t4k3VbGFLRE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/0e93d3-e72d-45f9-8ef5-94be8d33b9d3/1/wtwaJyuq59B3NPatRjevotLRsxI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/0e93d3-e72d-45f9-8ef5-94be8d33b9d3/1/wtwaJyuq59B3NPatRjevotLRsxI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wtwaJyuq59B3NPatRjevotLRsxI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 07:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:24:0c:f0:a8:6c:92:7e:34:f4:fa:6d:96:17:0a:ac:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2dc1a272baae7d07734f6ad4637afa2d2d1b312
        Validity
            Not Before: Sep  7 12:00:51 2025 GMT
            Not After : Sep  8 12:00:51 2025 GMT
        Subject: CN=deabb90213e51ba77812f1ff306b378a6e8494f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:b4:9d:73:25:dd:d0:93:9e:3b:af:df:ae:20:
                    cc:dc:2f:c8:c5:82:72:56:ff:8b:10:30:1f:27:88:
                    2b:d3:7e:c7:46:50:c3:25:69:77:cc:d6:e9:df:f9:
                    a7:df:e5:40:b9:35:90:39:0e:32:55:25:cd:b3:86:
                    d5:27:04:ba:37:1b:9c:e2:e2:22:65:00:1c:92:95:
                    e8:59:a9:48:3e:9b:4d:8a:33:95:37:37:b2:a8:b8:
                    7e:4a:e2:6a:d9:ba:30:0c:d4:db:41:f4:ec:66:12:
                    92:68:40:a6:a0:df:2f:93:f1:32:f1:e7:c9:2e:15:
                    54:16:d0:12:00:6f:08:18:5c:fe:7b:1a:7e:57:86:
                    c0:1f:15:79:9e:f5:3f:ee:1e:fb:75:90:6a:48:8f:
                    98:74:ec:7f:f1:ef:f7:e9:82:c3:b4:50:28:34:4e:
                    68:01:70:f9:aa:db:66:59:e1:1e:b1:12:f3:9b:21:
                    a1:a7:47:38:76:86:c7:e4:d3:cb:af:54:2e:85:97:
                    cb:97:16:34:85:d6:b6:15:11:f6:e8:2e:2d:10:a7:
                    c7:2d:d7:1e:1a:bc:72:d3:be:5a:3e:a2:d6:0e:3d:
                    d5:c3:fa:98:ac:cc:75:3c:50:aa:a1:db:ed:f4:e9:
                    9b:d9:64:c4:cc:88:45:52:a7:48:a8:02:e1:e0:f6:
                    71:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:AB:B9:02:13:E5:1B:A7:78:12:F1:FF:30:6B:37:8A:6E:84:94:F4
            X509v3 Authority Key Identifier:
                keyid:C2:DC:1A:27:2B:AA:E7:D0:77:34:F6:AD:46:37:AF:A2:D2:D1:B3:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtwaJyuq59B3NPatRjevotLRsxI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/0e93d3-e72d-45f9-8ef5-94be8d33b9d3/1/wtwaJyuq59B3NPatRjevotLRsxI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/0e93d3-e72d-45f9-8ef5-94be8d33b9d3/1/wtwaJyuq59B3NPatRjevotLRsxI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:9c:fa:c0:6b:48:2a:28:f3:a6:a5:a3:ed:53:ab:81:ee:a9:
         3b:86:f1:fd:6b:76:aa:b7:dc:0d:62:23:99:d6:83:b3:ff:5f:
         5d:93:50:55:dc:25:6a:b5:ba:5e:f4:9b:31:9a:4b:6a:be:1d:
         ac:28:7a:14:d5:e8:09:79:17:c9:53:71:60:3e:c7:4c:3d:39:
         9a:9d:09:28:16:b7:16:76:3b:59:04:0c:f4:ae:28:bd:bf:5a:
         68:8f:18:7a:59:15:53:d4:54:a1:a2:ab:68:0e:03:04:ad:93:
         ca:fe:96:73:b6:33:d4:5c:c7:ef:fa:68:7c:1b:da:56:28:4c:
         ae:9a:1f:7f:d0:ce:f0:13:04:c9:fb:a8:a7:b9:39:9a:9a:f3:
         1e:60:71:34:d4:9b:c8:37:cf:46:56:5f:a8:24:c9:ab:2e:66:
         f3:95:68:ff:de:b5:c3:bb:a3:3f:77:ba:fc:d4:83:7a:ff:d7:
         28:39:44:83:1f:ec:f3:4f:09:b0:e1:62:cc:4f:c0:2b:a4:58:
         31:4c:62:61:c0:4c:f1:47:82:d4:58:c6:4d:53:0b:e3:90:0e:
         a1:fb:83:11:10:f5:ee:8d:72:ba:42:42:92:b6:df:6f:83:f8:
         c2:ee:0c:5c:71:e3:83:a1:23:46:6b:82:dc:33:ea:79:88:7b:
         d2:50:09:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:49:38 2025 by rpki-client