Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/e76814-d227-40ca-b383-4693d806e8c9/1/wSWw9XiOWBEj5eSfAB1S16f89a8.mft
File:                     wSWw9XiOWBEj5eSfAB1S16f89a8.mft (raw, json)
Hash identifier:          5jAcgYglrR6GNemUSjKHtFdEwANsWESJSxuftB14CdI=
Subject key identifier:   1B:5E:4B:56:2C:00:D2:D0:C0:4A:29:61:99:76:47:19:49:8B:59:C4
Authority key identifier: C1:25:B0:F5:78:8E:58:11:23:E5:E4:9F:00:1D:52:D7:A7:FC:F5:AF
Certificate issuer:       /CN=c125b0f5788e581123e5e49f001d52d7a7fcf5af
Certificate serial:       019918E46358F110EDA270EE48CCA86ED2E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wSWw9XiOWBEj5eSfAB1S16f89a8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/e76814-d227-40ca-b383-4693d806e8c9/1/wSWw9XiOWBEj5eSfAB1S16f89a8.mft
Manifest number:          C7
Signing time:             Fri 05 Sep 2025 08:00:44 +0000
Manifest this update:     Fri 05 Sep 2025 08:00:44 +0000
Manifest next update:     Sat 06 Sep 2025 08:00:44 +0000
Files and hashes:         1: navuee4FJbu9Mu_giIFAY0BYzaM.roa (hash: 6gSGweu9FwNJJ/ezj94dZmef8nFklycxHKre4DDzNBE=)
                          2: wSWw9XiOWBEj5eSfAB1S16f89a8.crl (hash: Ry247hfg3S08NAkbpJagcbUweoUs4A+e4b/kNkemaVE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/e76814-d227-40ca-b383-4693d806e8c9/1/wSWw9XiOWBEj5eSfAB1S16f89a8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/e76814-d227-40ca-b383-4693d806e8c9/1/wSWw9XiOWBEj5eSfAB1S16f89a8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wSWw9XiOWBEj5eSfAB1S16f89a8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Sep 2025 01:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:18:e4:63:58:f1:10:ed:a2:70:ee:48:cc:a8:6e:d2:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c125b0f5788e581123e5e49f001d52d7a7fcf5af
        Validity
            Not Before: Sep  5 08:00:44 2025 GMT
            Not After : Sep  6 08:00:44 2025 GMT
        Subject: CN=1b5e4b562c00d2d0c04a296199764719498b59c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:d3:bc:db:40:dc:d7:83:9d:d2:39:ad:52:9b:
                    0c:26:73:fa:d3:df:2b:26:7d:e6:c3:1d:19:23:4b:
                    b7:81:9b:3f:3d:49:83:33:d8:4b:af:48:f6:d6:68:
                    8e:5b:a7:fd:79:54:c9:8b:d9:1a:3b:73:e7:1f:4f:
                    61:14:71:90:52:15:3d:6c:fb:98:9c:e9:f9:ba:39:
                    31:ad:56:c0:4f:e8:e5:dd:7f:74:75:86:b7:7e:3b:
                    90:ed:81:a8:fa:ae:fc:2c:8a:f8:93:79:84:78:27:
                    d0:04:dc:2a:5f:ed:a6:24:40:7c:a6:1c:f0:69:0e:
                    b8:41:cf:34:73:26:02:5a:1c:75:8e:1a:20:e5:a5:
                    1b:26:2e:aa:b6:3c:ed:de:5b:93:20:4b:81:23:39:
                    15:7e:4b:af:78:e9:ff:06:dc:bf:a6:68:3f:bb:aa:
                    ba:7c:6f:ab:61:60:f9:c1:35:9b:b7:46:ac:6f:ee:
                    51:6f:5e:67:ef:6b:82:47:67:44:c5:44:3c:b4:fe:
                    81:5a:42:c3:8e:35:ba:5a:81:09:1f:e4:bc:d2:fc:
                    90:ec:9a:f4:8b:37:91:f3:11:47:06:1a:89:e9:13:
                    f6:2c:36:47:0a:fe:ac:32:05:97:76:e7:e6:66:59:
                    aa:0a:67:33:86:af:f2:8e:bc:5e:e9:98:6b:74:03:
                    61:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:5E:4B:56:2C:00:D2:D0:C0:4A:29:61:99:76:47:19:49:8B:59:C4
            X509v3 Authority Key Identifier:
                keyid:C1:25:B0:F5:78:8E:58:11:23:E5:E4:9F:00:1D:52:D7:A7:FC:F5:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSWw9XiOWBEj5eSfAB1S16f89a8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/e76814-d227-40ca-b383-4693d806e8c9/1/wSWw9XiOWBEj5eSfAB1S16f89a8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/e76814-d227-40ca-b383-4693d806e8c9/1/wSWw9XiOWBEj5eSfAB1S16f89a8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:33:81:70:ae:64:2e:5e:11:d2:74:91:6a:20:47:df:0f:fe:
         6b:d9:24:16:af:35:1a:a1:68:e1:7f:b0:e2:4a:d8:7c:f1:59:
         89:9e:79:9f:22:b9:c6:ef:30:54:15:06:2f:9d:4e:d9:93:5a:
         4a:8b:87:f8:e3:b5:b2:25:45:56:bf:e3:24:d0:87:d9:e8:80:
         31:fb:2c:f0:41:75:97:9c:83:fd:f4:2f:75:29:cb:cc:7f:b1:
         75:cf:89:be:a0:48:28:b6:03:dc:d7:fa:a1:14:6f:51:38:c8:
         33:13:69:46:73:96:a7:91:93:5c:77:7a:a6:77:67:49:59:8e:
         f6:be:5e:ce:e6:35:81:e7:d7:09:f4:99:03:eb:70:f5:7d:fc:
         15:2b:bb:91:bd:a0:32:34:32:2b:ea:c1:aa:13:8e:a3:cc:ee:
         b0:53:7e:f7:52:1b:3a:0a:da:03:3a:a5:1f:14:80:69:65:e7:
         4f:e6:71:dc:5b:0a:ef:c0:9b:0b:28:55:79:28:80:ca:d3:ae:
         4d:95:97:d5:e3:28:bb:32:50:18:ab:d8:e6:77:9a:7b:7d:c0:
         44:eb:e5:dd:67:d8:0e:d4:37:fe:c4:2e:46:ff:6b:85:0a:0c:
         05:c7:67:e2:e9:a9:03:c9:0e:16:87:ae:23:0a:1d:fb:df:75:
         7a:7d:43:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 09:52:03 2025 by rpki-client