Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/871c28-66f3-406d-bb54-8e40435f4ba3/1/wuHdod9z8_9q5PXnx7JMqzXmhJ0.mft
File:                     wuHdod9z8_9q5PXnx7JMqzXmhJ0.mft (raw, json)
Hash identifier:          je9gnfNZsB5upxtx6VBUVfh8CDEpW8ztlMXtMoWoENM=
Subject key identifier:   DF:E1:57:E7:FE:C7:47:6C:02:91:E8:E4:BD:1E:FF:67:5E:12:2D:0A
Authority key identifier: C2:E1:DD:A1:DF:73:F3:FF:6A:E4:F5:E7:C7:B2:4C:AB:35:E6:84:9D
Certificate issuer:       /CN=c2e1dda1df73f3ff6ae4f5e7c7b24cab35e6849d
Certificate serial:       019921B23E517FC2AD91C97B193DC1BA61D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wuHdod9z8_9q5PXnx7JMqzXmhJ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/871c28-66f3-406d-bb54-8e40435f4ba3/1/wuHdod9z8_9q5PXnx7JMqzXmhJ0.mft
Manifest number:          166F
Signing time:             Sun 07 Sep 2025 01:02:33 +0000
Manifest this update:     Sun 07 Sep 2025 01:02:33 +0000
Manifest next update:     Mon 08 Sep 2025 01:02:33 +0000
Files and hashes:         1: C5Ye6AW-98gvfnKh3BLJSV5ipoY.roa (hash: 0TAu53NWs0YR6cx7TDfJzDZx9gyaFfPOZu8ZpGicQ9k=)
                          2: wuHdod9z8_9q5PXnx7JMqzXmhJ0.crl (hash: XoX9wXMfVNb9vKYjlQetNKoJqJIPfFvewRYlo+JOB8g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/871c28-66f3-406d-bb54-8e40435f4ba3/1/wuHdod9z8_9q5PXnx7JMqzXmhJ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/871c28-66f3-406d-bb54-8e40435f4ba3/1/wuHdod9z8_9q5PXnx7JMqzXmhJ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wuHdod9z8_9q5PXnx7JMqzXmhJ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 01:02:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:21:b2:3e:51:7f:c2:ad:91:c9:7b:19:3d:c1:ba:61:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2e1dda1df73f3ff6ae4f5e7c7b24cab35e6849d
        Validity
            Not Before: Sep  7 01:02:33 2025 GMT
            Not After : Sep  8 01:02:33 2025 GMT
        Subject: CN=dfe157e7fec7476c0291e8e4bd1eff675e122d0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:1a:87:9c:d7:18:67:9c:b4:23:96:48:a0:5e:
                    4b:c4:71:c9:f9:53:c4:70:b6:55:ed:cb:8e:81:88:
                    10:a9:05:0f:d3:60:8f:dd:48:57:6b:bd:20:5d:71:
                    eb:c8:61:ef:61:88:69:77:04:0c:33:c0:80:37:71:
                    05:d8:03:40:3e:c9:a7:a2:9f:18:2c:0a:0f:8b:8e:
                    7a:50:f6:2a:84:55:c3:33:ec:fb:e7:13:53:9e:2a:
                    e7:e9:8c:9a:4b:8d:3d:0c:df:19:44:ae:6a:61:cb:
                    5a:35:66:16:62:f2:ac:35:ad:88:fc:c8:99:26:19:
                    e4:c1:83:39:88:c1:63:86:b7:20:8c:a0:4f:11:76:
                    7a:bd:a3:04:90:e4:04:5f:a9:cd:22:b6:34:fd:1c:
                    0b:20:56:05:10:00:d6:2d:4d:05:97:d2:d6:5f:1f:
                    67:50:4b:9b:22:70:e9:4b:73:53:43:bd:59:7e:b1:
                    21:b5:db:60:ee:1d:3c:80:f4:57:f4:1d:16:59:d7:
                    01:1c:38:6f:2e:56:62:1d:4e:97:e7:23:7e:48:13:
                    e9:00:e2:e2:5d:53:d8:55:5c:d6:2a:46:ad:12:78:
                    86:83:5c:80:b5:7b:51:41:a1:cd:bc:66:33:bb:70:
                    41:b3:b0:71:c0:d0:3f:d3:04:4f:fb:f8:ca:8d:b7:
                    a9:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:E1:57:E7:FE:C7:47:6C:02:91:E8:E4:BD:1E:FF:67:5E:12:2D:0A
            X509v3 Authority Key Identifier:
                keyid:C2:E1:DD:A1:DF:73:F3:FF:6A:E4:F5:E7:C7:B2:4C:AB:35:E6:84:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wuHdod9z8_9q5PXnx7JMqzXmhJ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/871c28-66f3-406d-bb54-8e40435f4ba3/1/wuHdod9z8_9q5PXnx7JMqzXmhJ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/871c28-66f3-406d-bb54-8e40435f4ba3/1/wuHdod9z8_9q5PXnx7JMqzXmhJ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:d4:fb:f6:e5:98:6e:dd:4c:84:56:5f:f1:93:b6:8e:07:3d:
         05:76:b0:29:79:c3:71:54:14:bd:84:d1:69:82:c1:d1:98:89:
         00:ef:25:79:25:be:96:d6:75:c8:60:32:43:33:ef:38:2e:8e:
         d3:f4:15:45:77:42:55:a3:69:97:7c:89:d6:10:41:f1:1a:11:
         fc:1a:cf:a8:4d:95:44:e5:bf:1f:67:9f:fe:18:b6:8e:f7:98:
         a5:3a:36:31:b7:e4:45:84:e9:b7:4b:5c:d1:40:36:fc:47:42:
         98:8b:01:50:9d:68:27:9a:eb:68:51:94:52:45:69:af:98:98:
         a2:67:f1:cd:da:93:1b:36:25:02:16:66:57:e7:fc:95:b5:a8:
         a0:e4:49:ec:76:9e:9e:8b:b7:8e:6d:3b:d4:d0:37:c9:ca:21:
         f1:b7:fe:98:df:a2:5d:52:b9:df:84:9f:2e:f3:a8:b1:30:cd:
         1d:28:56:98:36:51:b2:c5:39:d5:82:cf:ff:ce:85:d8:af:57:
         d1:47:02:f8:d9:d7:92:f2:e6:45:56:a2:8d:25:25:3e:c6:5d:
         7a:18:5d:d5:67:98:08:67:b4:61:7b:53:09:65:a6:4b:15:d6:
         b0:a7:e4:5e:b0:43:9e:26:a5:84:36:68:40:1d:a3:fc:bd:e1:
         1f:c1:f8:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:53:01 2025 by rpki-client