Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.mft
File:                     WXXVGd4jnPFky5SmZgwlMM6u8lQ.mft (raw, json)
Hash identifier:          M8joQKL15qrn6xgYTpNy7XxhFuYVs6JKN9eqOgXBkQk=
Subject key identifier:   40:1C:83:3A:B1:F2:49:01:C1:80:92:8B:B2:28:EC:08:5A:82:57:99
Authority key identifier: 59:75:D5:19:DE:23:9C:F1:64:CB:94:A6:66:0C:25:30:CE:AE:F2:54
Certificate issuer:       /CN=5975d519de239cf164cb94a6660c2530ceaef254
Certificate serial:       01992B8F7E8D2C68B6BC4996FB07577AAAD5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WXXVGd4jnPFky5SmZgwlMM6u8lQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.mft
Manifest number:          0BA9
Signing time:             Mon 08 Sep 2025 23:00:48 +0000
Manifest this update:     Mon 08 Sep 2025 23:00:48 +0000
Manifest next update:     Tue 09 Sep 2025 23:00:48 +0000
Files and hashes:         1: 5eabaHyJMZC6xaOfXyNUDeK_Rik.roa (hash: TiX60vap4EuHd5z3yDdwzlNIdcxuV5BI27iNpoK9+cI=)
                          2: 9IgQeewcmfQZ2of_HORQ6vbbFA8.roa (hash: sNpLBHfgEi3gbYovfnENOUMmh30fF1DezNwtozBcHSM=)
                          3: GhuWyLVOMNHxmFtEArmLaJYowk4.roa (hash: Ywh/XerdCYDMoWXCvI6EJekE/VduBkzUPrWkloYwW84=)
                          4: IVogcCidyN1dNuwpsamnpeeBOzo.roa (hash: dkkhuPZPZuxNohscz0NJjTL21i/+81ygggp48FtsTTU=)
                          5: Iz0OKJRfyer26_x0SY8wqmCTEJs.roa (hash: HkA+qgxdvNNdPmwk6Y1yGdSU/udB+TT9eU5dbnjc99g=)
                          6: K7_-PsZV6UL3Qz-SZyzWxL0ztrE.roa (hash: Yhb6Fai21E+jsd4/blJv2P5GA32ORQPomY/nTv3MFQg=)
                          7: WXXVGd4jnPFky5SmZgwlMM6u8lQ.crl (hash: nUcSpa+yIY132ru889Dij4Frlx7Qpk7+bzJIZqUfmrc=)
                          8: Y5p6F4UgeyNdjbmOK_eI5DEFB6I.roa (hash: cOCeggTPuj6BKNRi52gDbXr0EhrC3FJB715+fnKK0y0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WXXVGd4jnPFky5SmZgwlMM6u8lQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 09 Sep 2025 21:42:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:2b:8f:7e:8d:2c:68:b6:bc:49:96:fb:07:57:7a:aa:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5975d519de239cf164cb94a6660c2530ceaef254
        Validity
            Not Before: Sep  8 23:00:48 2025 GMT
            Not After : Sep  9 23:00:48 2025 GMT
        Subject: CN=401c833ab1f24901c180928bb228ec085a825799
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:4a:3e:3d:78:e5:a3:4d:d5:02:9b:bf:17:ab:
                    7f:64:11:86:62:45:1e:7d:c3:1b:d0:02:42:ee:2b:
                    9a:fb:ae:8f:fa:3e:7a:e4:67:fe:d9:23:da:3a:cb:
                    60:bf:b7:e5:b6:7b:ae:c5:b6:d4:83:9b:ba:98:aa:
                    6a:2b:2b:c7:f7:01:5b:49:5c:82:86:f3:a7:e7:f0:
                    ed:ab:f8:7f:18:80:f4:a4:bf:e9:c4:37:24:a1:f2:
                    c8:28:80:16:36:2a:2c:7b:6b:cd:91:bf:a6:86:0f:
                    c3:82:9a:40:3c:90:19:15:19:9f:e2:cd:b1:ca:99:
                    11:94:a7:38:1b:47:ad:63:53:ec:c1:5b:bc:9e:7d:
                    33:f1:6f:6e:9e:40:35:d4:91:b7:e9:a5:ee:98:dc:
                    51:87:f1:17:e0:2f:e2:00:bb:97:9f:78:ea:31:7b:
                    e1:33:fd:2e:2c:df:70:51:da:c4:3a:7d:b5:07:79:
                    14:6c:07:49:1a:71:cc:5f:d5:50:9d:19:8f:f0:ca:
                    89:56:18:a3:aa:a6:cc:e3:30:d7:23:61:74:a4:fe:
                    85:ca:0b:57:15:3c:28:e4:17:14:6f:8f:dc:20:d9:
                    78:70:28:b5:be:c3:72:85:b9:ac:82:8d:11:b8:ef:
                    4c:88:38:a0:08:25:ab:a6:f6:db:31:20:a3:13:28:
                    65:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:1C:83:3A:B1:F2:49:01:C1:80:92:8B:B2:28:EC:08:5A:82:57:99
            X509v3 Authority Key Identifier:
                keyid:59:75:D5:19:DE:23:9C:F1:64:CB:94:A6:66:0C:25:30:CE:AE:F2:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXXVGd4jnPFky5SmZgwlMM6u8lQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:b1:e7:06:d2:4e:64:1f:32:79:1c:e5:f5:a5:4e:91:8a:4a:
         4c:e8:c3:24:1b:aa:0e:20:d3:be:79:d3:05:5d:10:52:8d:ba:
         4c:68:cf:be:f6:56:cf:fc:89:f1:f6:ff:7b:5b:dc:a6:df:0b:
         95:df:f5:b6:65:01:c1:f3:99:6b:70:02:8e:8f:55:df:60:35:
         27:36:7a:32:80:2d:40:d9:15:2a:65:4c:71:e3:d4:d3:d2:c5:
         1c:60:3f:85:e4:4b:d8:94:f0:fe:aa:c9:4d:a4:a8:af:26:c0:
         77:40:58:68:31:47:c7:74:ee:8e:7b:26:78:7c:30:1a:4d:da:
         2b:86:12:d8:d6:3f:c4:06:60:8f:21:03:c4:fb:21:bb:bb:27:
         7d:60:88:98:ef:ae:ca:42:0a:7c:29:2b:25:25:62:5e:60:b7:
         bd:27:76:50:28:1c:f4:62:07:51:b2:30:24:16:8d:33:d2:5f:
         9f:44:ad:de:96:dc:be:57:57:26:d9:b0:d5:f0:c2:be:a4:e0:
         2d:ec:66:bf:c4:92:14:81:e7:1a:13:79:d2:97:4d:25:67:47:
         86:f1:50:5c:19:0f:45:59:40:77:3b:c7:46:04:23:cb:59:b9:
         ab:86:b2:ab:26:73:8d:af:11:f7:a4:d4:b1:5e:9c:03:71:ab:
         5b:11:1e:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 00:45:23 2025 by rpki-client