Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/839925-1555-4ff6-bc46-7feab48eee61/1/W5WpStrToolscgdNZnwbYgdZWMs.mft
File:                     W5WpStrToolscgdNZnwbYgdZWMs.mft (raw, json)
Hash identifier:          Sbx1xj5/XWCjB6dbPaSO0XPw6rHIwg2/yIkO01v+dag=
Subject key identifier:   A6:DA:DF:CA:FD:30:BE:2B:52:28:D2:EB:9C:07:D1:A7:C1:3A:84:58
Authority key identifier: 5B:95:A9:4A:DA:D3:A2:89:6C:72:07:4D:66:7C:1B:62:07:59:58:CB
Certificate issuer:       /CN=5b95a94adad3a2896c72074d667c1b62075958cb
Certificate serial:       019921B27E29DBC488A6EE031DD6FD186996
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W5WpStrToolscgdNZnwbYgdZWMs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/839925-1555-4ff6-bc46-7feab48eee61/1/W5WpStrToolscgdNZnwbYgdZWMs.mft
Manifest number:          0F35
Signing time:             Sun 07 Sep 2025 01:02:49 +0000
Manifest this update:     Sun 07 Sep 2025 01:02:49 +0000
Manifest next update:     Mon 08 Sep 2025 01:02:49 +0000
Files and hashes:         1: STQhTVEdoeGn3LGRCtz_IFAHWdM.roa (hash: lJA+P3xzpJoE/23kp+QFPprWwo01m1U/nvmFZ+Rh2tE=)
                          2: W5WpStrToolscgdNZnwbYgdZWMs.crl (hash: XSqofOFtkWIFb4HDLJkZI/QrbnEjEJ07Ufu7Nor8Q/s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/839925-1555-4ff6-bc46-7feab48eee61/1/W5WpStrToolscgdNZnwbYgdZWMs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/839925-1555-4ff6-bc46-7feab48eee61/1/W5WpStrToolscgdNZnwbYgdZWMs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W5WpStrToolscgdNZnwbYgdZWMs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 01:02:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:21:b2:7e:29:db:c4:88:a6:ee:03:1d:d6:fd:18:69:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b95a94adad3a2896c72074d667c1b62075958cb
        Validity
            Not Before: Sep  7 01:02:49 2025 GMT
            Not After : Sep  8 01:02:49 2025 GMT
        Subject: CN=a6dadfcafd30be2b5228d2eb9c07d1a7c13a8458
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:77:21:1f:29:48:1e:72:65:b7:0b:29:9a:ea:
                    1c:5a:27:72:c5:9b:90:8f:b9:7e:24:6f:5d:cf:c7:
                    ba:48:7d:d4:10:1b:9c:1c:98:89:2c:9d:e9:db:55:
                    fb:83:1b:9e:1f:c6:4f:cd:b2:5e:4d:0a:32:f9:31:
                    2a:cb:75:7c:2b:88:fc:ce:7d:2f:28:74:67:16:f2:
                    82:8d:51:e1:f3:37:9a:7e:d6:4e:80:e6:1f:01:4c:
                    9f:de:c1:28:ad:d2:1b:94:dd:6b:fd:95:c3:3c:e0:
                    3c:2f:3d:3c:5f:06:ef:d0:ab:78:d0:0f:c5:b5:ba:
                    36:38:11:38:ad:c4:7c:ed:00:5e:a1:6c:74:c6:77:
                    a4:12:9c:0f:8c:d8:92:28:66:fd:77:a4:0c:8b:46:
                    fa:12:74:4a:16:00:f4:57:0b:82:2b:99:16:af:5e:
                    87:f1:a0:47:68:4e:cb:9b:8d:ce:10:47:7d:77:20:
                    19:85:14:2a:34:a5:0e:72:28:b7:c8:bd:15:ae:b4:
                    88:e6:45:2c:ad:39:d7:29:39:bf:4e:e2:7d:cb:1a:
                    86:5b:ee:c4:32:39:c7:8a:df:3b:bd:73:c1:43:0a:
                    2c:08:8a:9b:cf:34:4d:d5:e9:d7:36:64:e1:fd:a1:
                    8a:e3:e1:ba:96:5e:2b:72:5e:a2:81:e2:0f:29:9d:
                    d3:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:DA:DF:CA:FD:30:BE:2B:52:28:D2:EB:9C:07:D1:A7:C1:3A:84:58
            X509v3 Authority Key Identifier:
                keyid:5B:95:A9:4A:DA:D3:A2:89:6C:72:07:4D:66:7C:1B:62:07:59:58:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W5WpStrToolscgdNZnwbYgdZWMs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/839925-1555-4ff6-bc46-7feab48eee61/1/W5WpStrToolscgdNZnwbYgdZWMs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/839925-1555-4ff6-bc46-7feab48eee61/1/W5WpStrToolscgdNZnwbYgdZWMs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:ef:35:63:b7:a4:7e:54:30:f4:1d:5f:35:b5:f8:df:88:a6:
         95:ad:f9:64:a9:f7:16:4b:82:63:4a:85:11:88:b6:e9:1d:1e:
         b0:bf:28:dd:65:d5:f8:39:28:91:3f:83:fc:ab:a1:37:8f:c2:
         cc:a0:b6:48:8d:6c:74:a0:90:d2:43:12:2d:8a:00:f4:99:67:
         bd:7f:5b:53:7d:18:a9:3a:53:55:74:96:72:48:2a:28:9f:0f:
         92:0f:25:5e:3c:08:81:b1:6e:08:db:cc:b9:87:b8:2f:39:38:
         2e:ff:3b:66:cb:2f:03:71:e0:4d:f7:3d:13:4b:d7:8d:d8:72:
         a1:bc:7d:96:50:10:77:64:1c:25:91:84:79:3f:d7:0c:ba:5d:
         a7:a3:2e:b1:8e:34:6d:56:06:6c:fe:ce:9b:3e:39:f3:bc:ce:
         b1:0a:e3:3c:cf:87:8a:62:c6:4e:b8:29:2e:99:c0:56:f7:29:
         de:8b:f4:b0:5c:4e:a8:11:39:11:b1:3f:ed:45:95:70:93:45:
         f9:b2:87:cc:36:41:cd:e3:df:53:72:b8:e6:77:51:47:69:23:
         ca:83:6f:06:5e:6b:c0:2d:c5:06:97:72:44:4a:5e:2b:d0:e0:
         b1:43:2e:20:44:81:0c:b2:8c:4e:af:21:99:78:f8:92:c2:16:
         b5:c3:61:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:20:56 2025 by rpki-client