Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/d397c3-cf6f-44d0-9a0b-2b6f24bdd061/1/Wo2FsuHsHyHcrF1Yeeacs0L9FHk.mft
File:                     Wo2FsuHsHyHcrF1Yeeacs0L9FHk.mft (raw, json)
Hash identifier:          OTtN1NssCuFyCBVqrC92TLSgb9gFcED90qZUp8/ZT14=
Subject key identifier:   F9:AE:F9:11:66:93:37:4E:55:99:E7:00:C3:70:45:C4:7D:CA:D0:63
Authority key identifier: 5A:8D:85:B2:E1:EC:1F:21:DC:AC:5D:58:79:E6:9C:B3:42:FD:14:79
Certificate issuer:       /CN=5a8d85b2e1ec1f21dcac5d5879e69cb342fd1479
Certificate serial:       01984965337E3F48ACFE03B6C7C1903059D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wo2FsuHsHyHcrF1Yeeacs0L9FHk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/d397c3-cf6f-44d0-9a0b-2b6f24bdd061/1/Wo2FsuHsHyHcrF1Yeeacs0L9FHk.mft
Manifest number:          01A8
Signing time:             Sun 27 Jul 2025 01:00:25 +0000
Manifest this update:     Sun 27 Jul 2025 01:00:25 +0000
Manifest next update:     Mon 28 Jul 2025 01:00:25 +0000
Files and hashes:         1: Wo2FsuHsHyHcrF1Yeeacs0L9FHk.crl (hash: 3EwNIOCVCi+UKWFCtw0q+P/6wzJzeh+d+hQITmsfAc8=)
                          2: ua40xe-nVHZa06FKIiUk9wTe5FM.roa (hash: 73qF1PGF97l5Z0mjbYS8YfyN8FxoYFUMQ+beopo0LTk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/d397c3-cf6f-44d0-9a0b-2b6f24bdd061/1/Wo2FsuHsHyHcrF1Yeeacs0L9FHk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/d397c3-cf6f-44d0-9a0b-2b6f24bdd061/1/Wo2FsuHsHyHcrF1Yeeacs0L9FHk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Wo2FsuHsHyHcrF1Yeeacs0L9FHk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:65:33:7e:3f:48:ac:fe:03:b6:c7:c1:90:30:59:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a8d85b2e1ec1f21dcac5d5879e69cb342fd1479
        Validity
            Not Before: Jul 27 01:00:25 2025 GMT
            Not After : Jul 28 01:00:25 2025 GMT
        Subject: CN=f9aef9116693374e5599e700c37045c47dcad063
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:39:8f:d1:34:0f:64:b9:5d:77:cc:9b:eb:cb:
                    54:fa:e7:b5:07:f9:4b:d8:77:e9:fd:55:ad:93:e7:
                    fc:a8:7a:eb:9a:c6:78:3c:3b:35:8a:fd:5e:a7:5f:
                    67:7d:50:fd:32:f0:1a:80:cb:2b:82:36:78:6f:0a:
                    6c:13:3c:06:54:de:33:92:66:e3:20:95:2f:f2:f9:
                    34:37:b6:eb:b1:77:54:a9:7a:4f:95:69:64:6a:f2:
                    ac:15:3a:68:89:f9:76:d1:d4:a2:43:5f:40:fb:78:
                    3e:ab:44:94:75:a9:ca:43:de:f7:0f:53:6c:a9:26:
                    07:76:74:f6:10:57:19:ae:f9:14:db:4b:57:16:cf:
                    9b:06:2e:5b:64:92:77:9c:41:fa:5c:95:d3:ff:95:
                    38:81:1a:57:a7:10:e2:fd:b5:f6:8f:d1:3c:be:6b:
                    9f:d4:82:dd:c0:79:fd:82:1b:1c:40:73:28:06:24:
                    ba:82:8d:fe:21:04:2f:72:2a:c6:c3:4e:57:a5:80:
                    1d:49:e5:d6:4e:03:b7:0e:88:a1:c7:08:83:3d:6c:
                    46:b2:73:dc:7c:2d:b5:e1:72:11:45:45:22:84:71:
                    db:9a:83:3f:7f:b2:7a:7b:4f:7a:e8:a2:7f:4f:09:
                    6c:1c:e2:e7:29:17:ad:29:ae:9b:ae:0e:79:75:d2:
                    ef:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:AE:F9:11:66:93:37:4E:55:99:E7:00:C3:70:45:C4:7D:CA:D0:63
            X509v3 Authority Key Identifier:
                keyid:5A:8D:85:B2:E1:EC:1F:21:DC:AC:5D:58:79:E6:9C:B3:42:FD:14:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wo2FsuHsHyHcrF1Yeeacs0L9FHk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/d397c3-cf6f-44d0-9a0b-2b6f24bdd061/1/Wo2FsuHsHyHcrF1Yeeacs0L9FHk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/d397c3-cf6f-44d0-9a0b-2b6f24bdd061/1/Wo2FsuHsHyHcrF1Yeeacs0L9FHk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:91:c8:49:fc:6a:b3:4b:88:52:09:b8:29:86:e1:0a:7a:b9:
         64:0e:04:07:aa:8d:39:61:1f:41:a4:0d:6f:2b:5c:9e:5c:e5:
         98:dc:52:82:de:bf:3f:92:cd:95:52:5b:a3:ee:30:19:0e:ba:
         63:ea:d2:15:70:0a:34:b6:89:b5:27:f3:ca:24:98:54:9b:67:
         b9:d9:35:39:ef:19:28:83:3f:21:a3:cd:91:79:96:b0:7b:6d:
         02:1e:e6:04:57:ce:4c:c3:9c:c0:d2:f2:b5:c1:9f:fa:5a:29:
         35:e0:6b:2e:72:6c:64:d0:85:a6:b7:7b:fc:d5:fd:89:3f:22:
         f9:a6:95:97:01:6a:8f:ba:2a:8d:f7:92:80:18:83:77:f0:3b:
         c8:76:0a:74:25:fb:9d:1a:1a:ad:c8:e6:97:83:98:a3:c3:1c:
         1f:0e:fc:c5:33:dc:12:16:f3:45:a5:a8:ee:93:2f:b0:63:c9:
         3e:6e:94:65:85:3f:42:ae:3f:a7:98:a4:93:be:74:ce:e9:fa:
         65:82:00:e9:29:6f:6d:9f:70:f9:d6:e4:ea:9c:c2:ba:51:46:
         22:0a:23:76:c9:1c:56:f3:22:eb:2e:1a:e9:ff:08:28:03:c0:
         2f:a5:f5:21:4c:26:21:6b:07:44:a5:4e:be:81:31:88:e8:34:
         ef:71:ec:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:49:33 2025 by rpki-client