Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.mft
File:                     WD12BRAX0K-pFfz7eQoA9GZ7Cog.mft (raw, json)
Hash identifier:          GNUrfBsmhuDfxG2Mns4xLydn6Vk1BXpkWi4eehwYAak=
Subject key identifier:   F8:FB:2C:25:A1:FF:49:23:4C:90:ED:AF:8A:37:26:19:42:8F:BF:25
Authority key identifier: 58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
Certificate issuer:       /CN=583d76051017d0afa915fcfb790a00f4667b0a88
Certificate serial:       019931C8F94E1AF709386A76651ACA55082A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.mft
Manifest number:          1697
Signing time:             Wed 10 Sep 2025 04:01:18 +0000
Manifest this update:     Wed 10 Sep 2025 04:01:18 +0000
Manifest next update:     Thu 11 Sep 2025 04:01:18 +0000
Files and hashes:         1: 0yv-YpT7EAlDFfaPmF8_vcpGZrw.roa (hash: FCFF4a6p1Kz9hIASitWn3Cuesp3ppA1vaf6u6HK9VUE=)
                          2: 4hbMBM1nzDwcq0Z5poawjitTY60.roa (hash: XP1CU+CY23GAE6mFffgmeePRICbliFurLSIMPRQ5f40=)
                          3: 7WcUp7VboIfJPuJw_2eN0YJowc0.roa (hash: hMptUTx/SKmaFCbNu4ZMxGpB4nXnLhPIpWMOPwFNEdE=)
                          4: 83DWjPDI0qHPOk7NLbQWjtD2D1c.roa (hash: AxnYuoBRuJSqvAH9Bx3fTRR+QoVXwEkv5G6gCkg2Bao=)
                          5: 9IywKX9fS2qo6y4BwiBKFOJ_RRo.roa (hash: Ac1uBlsnhCZRDyKHF7yrUh45o1zwGsvgTvH8xD0tKfw=)
                          6: D1fRR18dq9Gv4qp3l9TcLZyyEDI.roa (hash: +8YA8GsmgHc3axYa2P7GfhxaqtQ7FE/tjUAeHRPwr9g=)
                          7: GKke9u-g19ORaszjeZzhH6pAcUM.roa (hash: xdtY9xo6gnGlpB3ETcBJ3YBkjHIlQqwLDRHWq8GtahI=)
                          8: Ig1WTTEJWSAB8ImVaoKPLwHQgbc.roa (hash: UMRsVJllHBv632Y31OJYoImld0QNRvOFUdYe6AzQydE=)
                          9: N5rVf1hY_OzEZp1xY8pg3j4it1A.roa (hash: Ue3CSgwWVTQ+G81bsGOQJFm164xkm8Ru6ylUCKhvmpA=)
                          10: NKkYiFJn1s2WgleQ4AP23RspTLQ.roa (hash: ZWB9OaLcmJzVZyAY2vxQN6pq/rnTZE2SqRawNV1XHtQ=)
                          11: SOIu77MViH9HrW2wOhBa4ctl-s4.roa (hash: EeJItN2QFTFRmLAW0Mvz7rV5W+XgeuLcsUy4tvkAsoI=)
                          12: TDV0BLKDE1p7Ns450Mfu7Kq6ad8.roa (hash: lTO5embQ4JVR03qf/66D4vxj/cbH77aYRTX0QvQ4wLY=)
                          13: TaAWX6RunIkoavVYyto4LyLZbsg.roa (hash: LLRLNHFstGywhUJHWDeOxplmy9vdy8UuI67N0/rWKkI=)
                          14: UQnmCoONwiJ5kPJipbbPRWpehRQ.roa (hash: R7SJq+v1gPef9CcZYgNLA5yueggHvGhRS4pnX+i+42s=)
                          15: WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl (hash: Sr36bappcv/Y0Td+0mXyuMAjzKu+GVFw9dhJQJ1ObfI=)
                          16: WJFDvIJS5VxJPhXMRZ7xWWjaaEY.roa (hash: OpV4tgEanecwJP3L/2htD3wFwFErrWLFYPu5S83daZo=)
                          17: Wj9UBZ8lyGpizZyCVs5Soop7w2k.roa (hash: nghObD8IVMMvgf7Cs34GYm/ZtGFtMr/E9cOGO8F0TDk=)
                          18: iystaYSJXuGKhhCiyAWE4u7UEyk.roa (hash: XXypNZES5+tt8lWlXBej3/0Gq3tgIRPeDyU4cGhm/qQ=)
                          19: j8S8_OZUpxB9k7LHRFPXRAKfkWU.roa (hash: k8mQUf/NuQPokL0zcpiZfvFdtMY/J1/bRRQuRB+KB/M=)
                          20: qMr-LBReCBqYRhVBoJttXFZAERs.roa (hash: +wcj7meQsd/DFjEen1Pm4EtbrLhEFNBjzasK/qwIzFY=)
                          21: skag_VnN9GBJjb3tko75iVexHSM.roa (hash: C1SS1bYL61kZQdi8QWgGkq7ptTOfGOQLi9q7iiXlFU0=)
                          22: sqtDA5C4zTAF8EU1UanGLhNGqBE.roa (hash: mht2D+EpFezejVvclFV759gknFNR6V1vy0XD94YDkwU=)
                          23: vWXWhkktZWC2_i0zKz5vdi-IvuE.roa (hash: D7lRMIA1f5sBgefITMxbK3yGHotRr10qyY6m4yVQx28=)
                          24: vtkF5xB1D7H9fdDA64y1mC_-PnI.roa (hash: OGKHwlKleDXCssmiFinFxLB6pzcbwPx2Ei0tajdkieQ=)
                          25: w_nsALBEni9bN7oziLT6x-v5vMw.roa (hash: bV1O6/pTWkVcLgUfCwZY2geOQH931QXPvOJiCvTyGdc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Sep 2025 02:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:31:c8:f9:4e:1a:f7:09:38:6a:76:65:1a:ca:55:08:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=583d76051017d0afa915fcfb790a00f4667b0a88
        Validity
            Not Before: Sep 10 04:01:18 2025 GMT
            Not After : Sep 11 04:01:18 2025 GMT
        Subject: CN=f8fb2c25a1ff49234c90edaf8a372619428fbf25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:19:bc:e9:b6:a2:f1:af:2a:a7:e3:91:ac:c1:
                    f3:85:bc:12:1a:95:65:87:4a:74:34:70:a0:49:31:
                    c6:26:2a:2c:ad:0c:75:f1:b1:6d:8d:d9:74:c6:6d:
                    ef:05:7e:6a:af:32:37:a1:62:1c:57:df:8c:6e:43:
                    a3:1d:53:be:8b:78:ba:55:16:34:60:21:d2:07:f5:
                    10:da:8e:d6:04:8e:51:4c:95:64:a5:4d:1a:0c:f5:
                    a4:bf:7d:c9:b7:e1:ca:39:07:5a:a3:ee:40:f0:1b:
                    fd:ca:c4:f4:33:bf:f3:3a:45:f4:7c:25:a1:08:e6:
                    79:93:24:5d:cc:33:f6:fd:ef:fa:81:1e:78:00:b8:
                    26:34:f0:8a:94:dd:e2:33:0e:39:8f:29:ef:d5:af:
                    3e:02:b3:10:20:31:24:2a:e0:ad:4f:7b:7e:10:82:
                    e3:b1:db:01:e4:ce:36:17:90:b0:74:9c:0a:56:65:
                    54:6d:eb:01:bc:ca:c9:b9:fa:f5:fa:4a:08:d8:f3:
                    50:6d:b4:0d:68:f4:ec:1e:27:42:2b:cd:73:d7:84:
                    c7:df:f5:e0:f3:09:f6:e6:91:fe:03:10:e6:44:24:
                    08:f4:0c:7f:60:db:02:b5:c7:ce:48:cc:1b:7d:3d:
                    c0:4f:90:b7:be:5f:1b:8b:89:77:d6:cf:ad:11:fb:
                    c6:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:FB:2C:25:A1:FF:49:23:4C:90:ED:AF:8A:37:26:19:42:8F:BF:25
            X509v3 Authority Key Identifier:
                keyid:58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:f5:5a:78:61:37:27:36:86:24:bb:5c:3a:d5:e4:d0:9b:bb:
         7b:d2:e8:8d:1f:bd:26:66:10:9c:5f:e5:1c:3d:8d:47:9d:e7:
         34:02:33:0c:68:ca:40:fe:10:78:22:7e:86:ef:52:6c:72:49:
         0e:73:c8:2a:79:6c:d4:9b:a1:42:a0:10:db:18:fa:b7:38:1b:
         96:95:21:9c:f2:a4:5c:9a:24:02:c2:ad:45:ef:28:52:0a:97:
         3a:da:71:74:e2:7d:da:8e:95:12:50:57:c9:0b:b2:21:00:40:
         dd:d4:a8:ff:ed:43:28:bc:66:5b:ab:90:93:1f:e1:a9:18:cc:
         a5:17:5c:85:07:9d:49:70:53:9a:2d:ab:a2:ff:db:5b:9d:a8:
         56:26:a6:69:4f:a0:d6:7f:1d:4f:73:a9:10:65:84:93:25:8a:
         f7:87:59:29:d3:bc:f0:54:11:ec:04:e6:a3:61:b4:15:d0:92:
         68:28:66:91:24:a4:fc:d3:ed:c2:ff:3e:a2:e5:08:97:a7:40:
         d5:e0:28:f5:9c:6f:5a:e0:65:cd:e3:17:88:47:e7:e5:fc:d2:
         5a:af:95:37:d9:f3:c3:04:5f:68:75:22:60:2d:81:20:e6:ac:
         e3:f7:be:ef:e0:ef:5d:7e:2e:a0:00:8c:5f:1f:3b:97:5a:b1:
         43:6b:64:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 10:24:44 2025 by rpki-client