Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/26cacb-9e91-4911-8456-5ded766a5506/1/Wx-lLx6fNRDCzSriRhVSoa0uPTo.mft
File:                     Wx-lLx6fNRDCzSriRhVSoa0uPTo.mft (raw, json)
Hash identifier:          dPscxoWw8ZfjsAbLfsl0rm7oL0P5J0cwialJwC9b02k=
Subject key identifier:   92:7E:E2:DD:FB:7D:7B:20:86:F2:28:2F:19:2A:52:6F:E9:E4:94:8C
Authority key identifier: 5B:1F:A5:2F:1E:9F:35:10:C2:CD:2A:E2:46:15:52:A1:AD:2E:3D:3A
Certificate issuer:       /CN=5b1fa52f1e9f3510c2cd2ae2461552a1ad2e3d3a
Certificate serial:       019921B27CCCE429EED1D164C8D3CB917C41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wx-lLx6fNRDCzSriRhVSoa0uPTo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/26cacb-9e91-4911-8456-5ded766a5506/1/Wx-lLx6fNRDCzSriRhVSoa0uPTo.mft
Manifest number:          10F6
Signing time:             Sun 07 Sep 2025 01:02:49 +0000
Manifest this update:     Sun 07 Sep 2025 01:02:49 +0000
Manifest next update:     Mon 08 Sep 2025 01:02:49 +0000
Files and hashes:         1: Wx-lLx6fNRDCzSriRhVSoa0uPTo.crl (hash: YuE0TkheP33NK4NuJZ9J30JeikfX0/uflSV0ue0Qgto=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/26cacb-9e91-4911-8456-5ded766a5506/1/Wx-lLx6fNRDCzSriRhVSoa0uPTo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/26cacb-9e91-4911-8456-5ded766a5506/1/Wx-lLx6fNRDCzSriRhVSoa0uPTo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Wx-lLx6fNRDCzSriRhVSoa0uPTo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 01:02:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:21:b2:7c:cc:e4:29:ee:d1:d1:64:c8:d3:cb:91:7c:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b1fa52f1e9f3510c2cd2ae2461552a1ad2e3d3a
        Validity
            Not Before: Sep  7 01:02:49 2025 GMT
            Not After : Sep  8 01:02:49 2025 GMT
        Subject: CN=927ee2ddfb7d7b2086f2282f192a526fe9e4948c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:1a:08:bc:30:5d:8e:83:c6:ad:31:ec:02:05:
                    bb:32:61:8e:64:87:10:c5:c5:f2:a4:61:fc:1e:d4:
                    a6:bb:1d:8a:7a:64:2c:27:92:b4:20:db:9e:01:d6:
                    d7:5b:75:53:48:0d:ef:e9:77:41:4c:22:28:94:d5:
                    ab:4b:39:fe:7d:9f:72:8d:31:5c:cd:42:ce:34:5b:
                    48:82:e1:75:82:8b:46:74:fe:00:62:df:8e:95:86:
                    3c:54:25:63:d2:d1:ba:d9:45:10:b5:c8:1a:b1:0d:
                    d9:19:d2:ef:c0:5d:54:38:05:43:91:73:11:98:e2:
                    c7:16:a0:58:12:5a:18:a3:7b:ef:b7:7b:4c:21:ed:
                    c4:b3:7f:45:be:c7:99:39:9b:02:4c:5d:af:6c:be:
                    80:3f:0b:b8:52:ef:d7:1c:16:54:1d:be:ca:e3:83:
                    11:b9:93:85:59:3e:07:b7:68:cf:62:7c:a6:c6:92:
                    6d:97:cc:f0:dd:3d:82:57:8f:05:ea:a2:63:94:5e:
                    37:38:47:10:e8:18:9d:8c:57:f4:3f:a2:e7:7b:06:
                    f2:28:27:99:b0:21:96:6a:62:6b:e8:76:5e:e9:4e:
                    75:8b:a9:30:2f:f0:dc:cf:12:74:a0:23:67:d2:08:
                    0c:fd:26:a2:99:82:b2:af:19:10:e8:a7:6f:37:f9:
                    d3:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:7E:E2:DD:FB:7D:7B:20:86:F2:28:2F:19:2A:52:6F:E9:E4:94:8C
            X509v3 Authority Key Identifier:
                keyid:5B:1F:A5:2F:1E:9F:35:10:C2:CD:2A:E2:46:15:52:A1:AD:2E:3D:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wx-lLx6fNRDCzSriRhVSoa0uPTo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/26cacb-9e91-4911-8456-5ded766a5506/1/Wx-lLx6fNRDCzSriRhVSoa0uPTo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/26cacb-9e91-4911-8456-5ded766a5506/1/Wx-lLx6fNRDCzSriRhVSoa0uPTo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:09:72:cc:9a:22:27:58:97:e0:5f:ed:94:c6:78:57:cf:55:
         1b:0a:ef:a1:94:aa:43:61:7b:5a:bf:8c:5c:ae:6a:1b:02:e5:
         65:b5:16:de:4b:03:8a:3f:20:0e:0c:0d:18:9a:af:53:fa:9e:
         0f:9a:41:37:88:8f:d4:03:b4:64:f4:8a:ba:ff:96:10:be:72:
         fe:eb:c3:1b:39:a7:cc:95:a8:3f:b1:06:0c:55:27:32:bf:12:
         09:ca:97:e7:fd:e8:30:da:b1:3e:ad:82:ec:cc:a4:e4:cc:a8:
         57:d9:90:4b:00:b1:d2:ee:e4:35:48:b8:d1:50:86:ae:8f:e0:
         17:fa:61:be:73:9a:0f:98:24:e4:65:2d:4f:66:31:13:0f:74:
         09:dc:61:18:dd:4d:63:ba:8a:a5:88:39:ee:ee:f0:06:0b:5b:
         46:ec:62:75:9f:f3:ca:76:93:a7:61:c5:a8:93:95:ea:40:d8:
         b5:bd:36:52:5b:65:c1:5b:9e:37:40:30:36:38:ee:d1:6d:2d:
         ba:6c:e7:5e:c9:26:31:58:0d:96:1e:83:35:1d:ae:31:85:25:
         2d:ee:09:4c:a8:7e:5f:75:46:2e:51:d7:c2:46:ec:96:37:ae:
         01:07:46:b7:8e:e7:59:35:96:56:16:fe:ee:80:88:4f:23:26:
         f7:ca:aa:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:01:53 2025 by rpki-client