Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/179bd8-fc68-4f76-86ff-68f316607376/1/Wjsd3asz5FUGrZdwQJJHIEF9Vog.mft
File:                     Wjsd3asz5FUGrZdwQJJHIEF9Vog.mft (raw, json)
Hash identifier:          geULgtCrv6do8S08GSWU1FrnV3ySOXq7pbXRvqMMHfM=
Subject key identifier:   78:A3:4D:62:85:D0:CB:3E:E5:E6:BC:0C:34:07:09:60:6F:54:C3:CB
Authority key identifier: 5A:3B:1D:DD:AB:33:E4:55:06:AD:97:70:40:92:47:20:41:7D:56:88
Certificate issuer:       /CN=5a3b1dddab33e45506ad977040924720417d5688
Certificate serial:       019922FAC9E45B462B881BFD351078657C94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wjsd3asz5FUGrZdwQJJHIEF9Vog.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/179bd8-fc68-4f76-86ff-68f316607376/1/Wjsd3asz5FUGrZdwQJJHIEF9Vog.mft
Manifest number:          0BBA
Signing time:             Sun 07 Sep 2025 07:01:24 +0000
Manifest this update:     Sun 07 Sep 2025 07:01:24 +0000
Manifest next update:     Mon 08 Sep 2025 07:01:24 +0000
Files and hashes:         1: Wjsd3asz5FUGrZdwQJJHIEF9Vog.crl (hash: al4B4x+B7iJb7WE5E4eR2cNkq0I+s8lzWULg56jQYZI=)
                          2: y0QD6cVeHITeOOUrewdmduPjNyw.roa (hash: d578B+uX2xF03DWPlSDJU4G4ivlMPauq0XylCe7obdU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/179bd8-fc68-4f76-86ff-68f316607376/1/Wjsd3asz5FUGrZdwQJJHIEF9Vog.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/179bd8-fc68-4f76-86ff-68f316607376/1/Wjsd3asz5FUGrZdwQJJHIEF9Vog.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Wjsd3asz5FUGrZdwQJJHIEF9Vog.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:fa:c9:e4:5b:46:2b:88:1b:fd:35:10:78:65:7c:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a3b1dddab33e45506ad977040924720417d5688
        Validity
            Not Before: Sep  7 07:01:24 2025 GMT
            Not After : Sep  8 07:01:24 2025 GMT
        Subject: CN=78a34d6285d0cb3ee5e6bc0c340709606f54c3cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:85:1c:bf:b7:f3:26:08:56:6a:cd:86:4a:3f:
                    40:41:f1:22:49:bb:42:66:6e:d2:04:05:3f:05:36:
                    ae:87:a7:d9:56:d2:ea:61:29:ee:5d:07:8e:bd:86:
                    1d:83:a6:8d:6a:1e:0a:78:ce:22:c1:11:11:39:b5:
                    c7:a9:c4:36:90:96:78:10:40:7d:d1:80:75:14:73:
                    60:2c:42:e6:01:e2:2b:e9:15:9e:b9:d5:95:db:b0:
                    1d:b5:16:ae:cc:8c:0d:13:23:1e:0f:12:30:83:e6:
                    83:bd:42:4d:f4:df:97:f3:e9:28:88:d8:1a:66:88:
                    78:a6:c8:51:2b:c8:e3:b4:32:16:f0:8f:a7:27:66:
                    3f:d9:8f:47:0c:17:7a:a7:40:cd:e1:ed:cd:aa:ce:
                    aa:53:46:01:0f:86:6c:3b:61:f6:28:13:c5:16:aa:
                    5c:0f:ee:d3:73:60:e5:36:bc:40:35:a0:ee:ba:bd:
                    70:70:f7:a5:78:30:18:e1:00:b9:05:f9:67:d1:49:
                    31:6a:31:c5:a6:92:b9:6f:ad:40:3f:86:98:af:10:
                    94:83:48:ba:39:21:36:78:8f:d6:65:c6:7b:38:5b:
                    05:da:96:78:c0:22:fc:21:88:58:87:4c:cd:b9:b5:
                    56:e0:ab:ac:2c:43:0a:b1:6f:b2:3c:96:db:99:01:
                    42:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:A3:4D:62:85:D0:CB:3E:E5:E6:BC:0C:34:07:09:60:6F:54:C3:CB
            X509v3 Authority Key Identifier:
                keyid:5A:3B:1D:DD:AB:33:E4:55:06:AD:97:70:40:92:47:20:41:7D:56:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wjsd3asz5FUGrZdwQJJHIEF9Vog.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/179bd8-fc68-4f76-86ff-68f316607376/1/Wjsd3asz5FUGrZdwQJJHIEF9Vog.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/179bd8-fc68-4f76-86ff-68f316607376/1/Wjsd3asz5FUGrZdwQJJHIEF9Vog.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:96:13:3c:da:7c:6c:a4:81:7f:24:5b:1d:f9:b8:47:91:e5:
         24:f5:2e:cb:d5:d7:39:c1:82:f0:f2:41:ce:5e:a5:dd:75:69:
         96:aa:92:3b:30:2c:9f:13:2b:37:fd:07:74:81:61:3b:70:30:
         7c:4d:5e:09:a2:3e:db:2d:0f:e3:95:15:de:78:ff:c8:54:41:
         37:62:83:1b:a0:06:de:04:7d:6e:79:a3:f6:7a:f6:ed:c7:29:
         3e:b4:81:25:1f:b2:e3:66:a8:68:75:b3:ff:bd:af:55:c5:f7:
         c1:15:cd:46:6f:bc:71:47:d6:ab:df:f3:30:9e:e3:8f:bf:f8:
         3d:bf:9c:76:3f:42:74:65:28:31:c3:90:0d:8c:64:c9:2e:c7:
         5d:83:39:8b:e4:a9:48:a0:17:3a:21:4f:0c:07:1a:70:60:22:
         91:a6:b0:42:ae:ac:58:66:e7:a6:69:50:bf:cd:64:49:8e:10:
         d4:61:09:e7:66:a6:88:a2:0d:97:57:bf:1a:d2:2b:4c:01:81:
         51:40:5c:e5:a3:24:ab:46:94:ad:a6:52:19:d9:86:74:3e:f1:
         95:98:f4:03:be:31:7b:cd:c2:7e:19:ca:8e:17:99:2e:da:b7:
         09:56:ae:72:c0:83:44:55:6d:29:79:88:b7:6a:54:2e:39:1f:
         f6:10:39:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:11:57 2025 by rpki-client