Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/414b46-db5e-4440-a1e4-3c54d11f872c/1/woBwgdb8Ir3_gNK9fsqP7A_F_vY.mft
File:                     woBwgdb8Ir3_gNK9fsqP7A_F_vY.mft (raw, json)
Hash identifier:          fBEuhRuKxIjNXu/Uojs9wq5h3tfqNV1K2IvD6J6vGBY=
Subject key identifier:   17:9F:00:28:32:C4:C1:48:38:5B:30:B8:0C:5E:E6:8F:34:96:F8:4D
Authority key identifier: C2:80:70:81:D6:FC:22:BD:FF:80:D2:BD:7E:CA:8F:EC:0F:C5:FE:F6
Certificate issuer:       /CN=c2807081d6fc22bdff80d2bd7eca8fec0fc5fef6
Certificate serial:       0199337FE3915257BC9702CB9AF0E1532821
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/woBwgdb8Ir3_gNK9fsqP7A_F_vY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/414b46-db5e-4440-a1e4-3c54d11f872c/1/woBwgdb8Ir3_gNK9fsqP7A_F_vY.mft
Manifest number:          160D
Signing time:             Wed 10 Sep 2025 12:00:43 +0000
Manifest this update:     Wed 10 Sep 2025 12:00:43 +0000
Manifest next update:     Thu 11 Sep 2025 12:00:43 +0000
Files and hashes:         1: cFpop9dizlBgkUyaV36_gGd8lnU.roa (hash: 4REvNTps3BupjiKoFenAilAIXfeTEPHale+uZfisCuc=)
                          2: woBwgdb8Ir3_gNK9fsqP7A_F_vY.crl (hash: 8ow9pYcpwbe3KeNeupHmhtZZxLnafizVamBBTIsKUnU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/414b46-db5e-4440-a1e4-3c54d11f872c/1/woBwgdb8Ir3_gNK9fsqP7A_F_vY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/414b46-db5e-4440-a1e4-3c54d11f872c/1/woBwgdb8Ir3_gNK9fsqP7A_F_vY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/woBwgdb8Ir3_gNK9fsqP7A_F_vY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Sep 2025 11:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:33:7f:e3:91:52:57:bc:97:02:cb:9a:f0:e1:53:28:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2807081d6fc22bdff80d2bd7eca8fec0fc5fef6
        Validity
            Not Before: Sep 10 12:00:43 2025 GMT
            Not After : Sep 11 12:00:43 2025 GMT
        Subject: CN=179f002832c4c148385b30b80c5ee68f3496f84d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:bb:0e:21:11:c8:f4:f6:4c:57:58:7d:04:8c:
                    fd:c1:87:24:81:53:eb:14:c5:78:99:c2:13:33:6a:
                    ec:de:02:b0:84:65:27:e1:ba:73:7c:a9:b4:4e:cf:
                    1b:75:07:64:b9:a4:6b:95:13:70:3d:7b:30:38:7d:
                    d0:db:f6:57:fc:2c:84:6d:4e:de:f5:c0:83:ef:b1:
                    5b:80:47:36:6e:44:a0:97:bb:6f:9f:da:a4:ad:4e:
                    e6:91:87:e9:59:c5:72:59:7d:77:82:e8:de:9a:b5:
                    5b:de:78:89:84:e9:49:00:a8:7e:7e:9a:82:b3:21:
                    c5:f5:8e:3e:d9:0d:2e:27:07:67:3c:cd:3c:69:98:
                    b8:cd:8f:18:0d:42:c7:16:b6:87:5c:0c:6e:e4:a4:
                    1a:48:86:de:32:56:4c:b8:c8:93:64:a1:6c:46:c4:
                    ea:df:cb:12:ec:bf:4e:f0:e0:bb:6b:0d:b4:bd:4e:
                    3d:f4:c7:d9:82:72:3a:47:1f:b6:05:f0:a0:b7:ff:
                    0d:50:79:80:61:50:6e:5d:c8:9c:8b:c4:8e:7d:cc:
                    b9:c0:52:9e:a0:ad:a1:99:87:e0:b1:f4:8a:57:b2:
                    f7:c6:0e:9b:fe:e0:0a:19:49:a4:18:90:de:4f:81:
                    1e:4d:f7:04:9d:44:d6:9e:5c:5b:c6:8f:9b:3d:cd:
                    14:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:9F:00:28:32:C4:C1:48:38:5B:30:B8:0C:5E:E6:8F:34:96:F8:4D
            X509v3 Authority Key Identifier:
                keyid:C2:80:70:81:D6:FC:22:BD:FF:80:D2:BD:7E:CA:8F:EC:0F:C5:FE:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/woBwgdb8Ir3_gNK9fsqP7A_F_vY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/414b46-db5e-4440-a1e4-3c54d11f872c/1/woBwgdb8Ir3_gNK9fsqP7A_F_vY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/414b46-db5e-4440-a1e4-3c54d11f872c/1/woBwgdb8Ir3_gNK9fsqP7A_F_vY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:21:5d:90:ca:c9:d9:17:89:8e:de:44:7b:fd:fd:7e:5d:f9:
         bb:6e:bc:20:06:4f:e8:f3:b0:c0:7d:4b:9c:f9:ea:cc:ab:ae:
         58:88:85:ba:3b:aa:93:cb:ee:3d:1b:84:e8:65:ef:f6:1b:e8:
         c2:6d:43:06:11:b9:a7:2f:56:f8:c4:b4:12:d2:97:70:de:ce:
         fa:7b:01:23:ae:e1:79:44:9f:e5:4e:3b:fe:6d:5c:f1:c6:9e:
         fb:62:e9:88:1f:8f:5d:40:e6:98:55:72:13:1c:ae:1e:0b:9c:
         d0:7f:05:4c:36:b5:95:80:44:b9:4a:53:6a:e9:bb:3c:e3:b3:
         f9:e6:0c:0f:1d:08:ce:5e:f1:77:d4:47:bb:65:c5:8d:c4:5a:
         fd:aa:ce:fd:d5:05:60:5f:83:de:c6:0a:42:a9:d8:43:77:a1:
         8e:31:10:9d:1a:3d:fe:e8:67:8f:a6:1d:2e:70:8d:b8:db:b7:
         74:17:9d:92:2c:46:cb:f7:4e:e2:61:cc:e3:f8:85:ae:44:f8:
         8f:95:54:c9:ba:36:01:38:92:13:54:9c:bb:e8:5e:71:c2:c2:
         dc:c2:7d:c3:a7:77:d6:10:7e:4c:e8:ee:22:ac:e6:64:e7:46:
         4f:a9:92:ac:ed:67:24:f4:3c:85:0a:1d:5a:76:ad:ed:00:e5:
         84:e1:d3:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 14:22:06 2025 by rpki-client