Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/87688f-538a-4c25-b5da-ded5addbe5cf/1/WpeXnbcm_j5pPbktT6GP10G-dpk.mft
File:                     WpeXnbcm_j5pPbktT6GP10G-dpk.mft (raw, json)
Hash identifier:          1DxkjaaKs96H/IpoZxKhd+/LUd5oj/Cl6NQLbMPY9CA=
Subject key identifier:   64:2F:0F:96:95:69:21:50:FB:51:7F:A1:84:ED:9F:6A:DC:24:5B:ED
Authority key identifier: 5A:97:97:9D:B7:26:FE:3E:69:3D:B9:2D:4F:A1:8F:D7:41:BE:76:99
Certificate issuer:       /CN=5a97979db726fe3e693db92d4fa18fd741be7699
Certificate serial:       0199239FD289FA31987436BD29653E63E661
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WpeXnbcm_j5pPbktT6GP10G-dpk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/87688f-538a-4c25-b5da-ded5addbe5cf/1/WpeXnbcm_j5pPbktT6GP10G-dpk.mft
Manifest number:          0A62
Signing time:             Sun 07 Sep 2025 10:01:40 +0000
Manifest this update:     Sun 07 Sep 2025 10:01:40 +0000
Manifest next update:     Mon 08 Sep 2025 10:01:40 +0000
Files and hashes:         1: WpeXnbcm_j5pPbktT6GP10G-dpk.crl (hash: kMXYFm3Tq0gcXiZ/5JP+oeyRYyL5m1jqSwPIZsmKUXM=)
                          2: g8ik8LhTpez36WlLRS_uriZTLH8.roa (hash: YLceWIfaqnl3VHFv/2hpFigz+RqKWgu9tOc3uAbYAYQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/87688f-538a-4c25-b5da-ded5addbe5cf/1/WpeXnbcm_j5pPbktT6GP10G-dpk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/87688f-538a-4c25-b5da-ded5addbe5cf/1/WpeXnbcm_j5pPbktT6GP10G-dpk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WpeXnbcm_j5pPbktT6GP10G-dpk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:23:9f:d2:89:fa:31:98:74:36:bd:29:65:3e:63:e6:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a97979db726fe3e693db92d4fa18fd741be7699
        Validity
            Not Before: Sep  7 10:01:40 2025 GMT
            Not After : Sep  8 10:01:40 2025 GMT
        Subject: CN=642f0f9695692150fb517fa184ed9f6adc245bed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:36:08:da:40:e0:6c:a5:9f:e8:d2:24:70:18:
                    f3:c3:9a:97:11:d9:dc:a5:23:75:61:cc:25:7a:17:
                    3f:8c:6d:cf:de:73:68:49:72:6c:52:53:98:50:8b:
                    e9:62:37:2a:23:a2:a4:e4:03:08:78:53:57:71:9b:
                    91:9c:29:01:9b:63:9a:e5:1e:75:f0:24:d3:9d:66:
                    f5:d7:4a:b5:ba:47:95:6f:25:2d:5c:96:f3:b3:7e:
                    9a:44:ed:3c:bd:71:24:a7:c0:84:66:e2:7c:8f:fa:
                    71:d7:22:ec:eb:51:65:d8:c7:42:b6:0f:1b:f5:7c:
                    9b:df:cf:9e:53:09:58:c8:28:9d:55:52:82:e8:21:
                    47:92:ef:e4:3a:30:a8:2a:12:30:f1:c2:e6:f3:8a:
                    8c:66:52:35:8c:a3:06:53:44:ae:07:b2:8e:c6:07:
                    6b:f2:c7:e2:73:51:5b:dc:8d:0b:f2:2f:45:a6:ad:
                    cb:80:90:e6:21:47:a6:74:8d:9b:21:0e:61:d9:9e:
                    f9:aa:86:25:41:8b:7f:d8:1f:d4:aa:41:20:75:32:
                    af:c8:79:8c:1c:11:bb:18:00:0d:4e:f5:45:97:ee:
                    58:0a:9e:96:41:6f:52:40:d8:2b:8e:ad:15:41:f3:
                    6e:af:42:66:65:68:7b:45:26:a5:86:27:d0:4f:d6:
                    6f:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:2F:0F:96:95:69:21:50:FB:51:7F:A1:84:ED:9F:6A:DC:24:5B:ED
            X509v3 Authority Key Identifier:
                keyid:5A:97:97:9D:B7:26:FE:3E:69:3D:B9:2D:4F:A1:8F:D7:41:BE:76:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WpeXnbcm_j5pPbktT6GP10G-dpk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/87688f-538a-4c25-b5da-ded5addbe5cf/1/WpeXnbcm_j5pPbktT6GP10G-dpk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/87688f-538a-4c25-b5da-ded5addbe5cf/1/WpeXnbcm_j5pPbktT6GP10G-dpk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:8e:7f:5b:22:40:04:b7:f3:2d:79:4b:45:3e:96:f4:8a:94:
         99:84:09:17:28:ff:49:c1:3a:91:c7:bb:33:af:5f:8a:75:ce:
         86:d5:76:63:69:74:16:1b:98:3f:9e:0d:4d:79:f2:b8:e3:73:
         f5:a9:db:64:9e:18:05:37:90:a0:4c:0e:26:91:22:11:6a:b7:
         47:ca:86:03:6c:be:f8:8a:70:a2:5a:cc:79:45:c2:03:67:2b:
         f9:ef:e1:b4:77:59:0c:98:a2:1a:a4:b5:a0:18:c8:c8:28:02:
         09:0a:0c:30:92:c9:17:0e:9b:41:6e:27:6a:35:14:ab:46:e8:
         9b:9d:70:2f:fb:98:26:8d:44:a9:57:bb:dc:4b:79:2c:e5:f6:
         5b:57:d7:48:64:7b:d7:db:f3:96:d2:1b:7f:36:d0:e5:47:78:
         51:7d:94:03:ce:be:b1:ce:34:d3:13:26:b4:67:71:95:ee:94:
         60:02:a9:26:b1:20:dd:08:fb:90:2c:88:92:03:f6:65:0b:ea:
         75:80:b1:d8:66:84:3c:1d:76:e1:d0:34:08:0e:ff:b9:25:23:
         18:59:14:b7:d7:3d:e6:d7:b5:16:b7:ff:c2:f1:8d:27:8c:57:
         92:23:ca:ae:0d:e7:19:36:98:03:34:37:41:e2:f3:7b:e4:97:
         7b:60:5b:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjn9KJ+jGYdDa9KWU+Y+ZhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhOTc5NzlkYjcyNmZlM2U2OTNkYjkyZDRmYTE4ZmQ3NDFi
ZTc2OTkwHhcNMjUwOTA3MTAwMTQwWhcNMjUwOTA4MTAwMTQwWjAzMTEwLwYDVQQD
Eyg2NDJmMGY5Njk1NjkyMTUwZmI1MTdmYTE4NGVkOWY2YWRjMjQ1YmVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jYI2kDgbKWf6NIkcBjzw5qXEdnc
pSN1Ycwlehc/jG3P3nNoSXJsUlOYUIvpYjcqI6Kk5AMIeFNXcZuRnCkBm2Oa5R51
8CTTnWb110q1ukeVbyUtXJbzs36aRO08vXEkp8CEZuJ8j/px1yLs61Fl2MdCtg8b
9Xyb38+eUwlYyCidVVKC6CFHku/kOjCoKhIw8cLm84qMZlI1jKMGU0SuB7KOxgdr
8sfic1Fb3I0L8i9Fpq3LgJDmIUemdI2bIQ5h2Z75qoYlQYt/2B/UqkEgdTKvyHmM
HBG7GAANTvVFl+5YCp6WQW9SQNgrjq0VQfNur0JmZWh7RSalhifQT9ZvHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGQvD5aVaSFQ+1F/oYTtn2rcJFvtMB8GA1UdIwQY
MBaAFFqXl523Jv4+aT25LU+hj9dBvnaZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3BlWG5iY21fajVwUGJrdFQ2R1AxMEctZHBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi84NzY4OGYtNTM4YS00YzI1LWI1ZGEt
ZGVkNWFkZGJlNWNmLzEvV3BlWG5iY21fajVwUGJrdFQ2R1AxMEctZHBrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi84NzY4OGYtNTM4YS00YzI1LWI1ZGEtZGVkNWFkZGJlNWNm
LzEvV3BlWG5iY21fajVwUGJrdFQ2R1AxMEctZHBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPo5/WyJA
BLfzLXlLRT6W9IqUmYQJFyj/ScE6kce7M69finXOhtV2Y2l0FhuYP54NTXnyuONz
9anbZJ4YBTeQoEwOJpEiEWq3R8qGA2y++IpwolrMeUXCA2cr+e/htHdZDJiiGqS1
oBjIyCgCCQoMMJLJFw6bQW4najUUq0bom51wL/uYJo1EqVe73Et5LOX2W1fXSGR7
19vzltIbfzbQ5Ud4UX2UA86+sc400xMmtGdxle6UYAKpJrEg3Qj7kCyIkgP2ZQvq
dYCx2GaEPB124dA0CA7/uSUjGFkUt9c95te1Frf/wvGNJ4xXkiPKrg3nGTaYAzQ3
QeLze+SXe2Bbxw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:26:04 2025 by rpki-client