Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/9afd23-d280-495c-b252-f600317b1978/1/wHCBpvcho3qeHXmTFbs-onWLiHc.mft
File:                     wHCBpvcho3qeHXmTFbs-onWLiHc.mft (raw, json)
Hash identifier:          emPssSBVabtHGvpcVUWjg3wl7aGXkQ0DILZNNLxsofU=
Subject key identifier:   81:9E:A7:7C:F0:6C:B2:83:AA:89:01:78:9D:5B:C1:08:3D:7D:FA:78
Authority key identifier: C0:70:81:A6:F7:21:A3:7A:9E:1D:79:93:15:BB:3E:A2:75:8B:88:77
Certificate issuer:       /CN=c07081a6f721a37a9e1d799315bb3ea2758b8877
Certificate serial:       019922FA7072B3D403F31A9B014E4DBE4991
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wHCBpvcho3qeHXmTFbs-onWLiHc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/9afd23-d280-495c-b252-f600317b1978/1/wHCBpvcho3qeHXmTFbs-onWLiHc.mft
Manifest number:          05C6
Signing time:             Sun 07 Sep 2025 07:01:02 +0000
Manifest this update:     Sun 07 Sep 2025 07:01:02 +0000
Manifest next update:     Mon 08 Sep 2025 07:01:02 +0000
Files and hashes:         1: iBvouIeGNb-tETlrG7R7kd8KLJk.roa (hash: ZFh8TKmia8sW44WOw2BVZ15xBNpA9QpJzWskGjFsYMo=)
                          2: wHCBpvcho3qeHXmTFbs-onWLiHc.crl (hash: NQCKjY01gU4HzWFYfgZEhoKgdX5tNWIuiShIAexSuCo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/9afd23-d280-495c-b252-f600317b1978/1/wHCBpvcho3qeHXmTFbs-onWLiHc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/9afd23-d280-495c-b252-f600317b1978/1/wHCBpvcho3qeHXmTFbs-onWLiHc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wHCBpvcho3qeHXmTFbs-onWLiHc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:fa:70:72:b3:d4:03:f3:1a:9b:01:4e:4d:be:49:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c07081a6f721a37a9e1d799315bb3ea2758b8877
        Validity
            Not Before: Sep  7 07:01:02 2025 GMT
            Not After : Sep  8 07:01:02 2025 GMT
        Subject: CN=819ea77cf06cb283aa8901789d5bc1083d7dfa78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:8a:cc:17:a4:9e:f8:92:70:c6:dd:11:b7:3c:
                    d4:fe:13:58:7f:a2:d4:f9:0a:7e:62:f2:fe:a5:98:
                    09:9b:df:6c:1e:60:c5:63:49:41:7a:24:bc:dd:1e:
                    d5:57:e6:39:f9:1e:97:6f:ce:aa:35:fa:19:e3:73:
                    25:ea:1b:22:e7:17:7e:85:fb:95:6f:79:32:b3:79:
                    ef:ac:2a:f9:41:fc:a5:c3:80:ab:a3:f2:f2:50:05:
                    3d:54:5f:fa:b6:a0:b9:48:f0:15:78:6e:67:d3:6b:
                    37:d1:82:f2:cd:48:25:0a:8f:20:5c:a3:13:1a:b1:
                    9c:ce:24:bd:dc:0a:17:47:e6:d5:a8:c0:70:0d:33:
                    82:b8:f1:21:da:cd:c9:6d:a1:92:ca:15:b9:e7:f1:
                    47:9e:9c:09:0b:99:1b:1e:cf:90:ab:e9:5a:e6:a0:
                    89:0b:3a:f6:65:c4:8b:a3:b8:89:c2:af:11:6d:ea:
                    6d:3c:08:c3:0a:45:fa:23:e1:e5:52:f8:fb:02:1d:
                    5c:57:73:ed:88:7c:c9:e1:b5:5e:56:e0:56:29:06:
                    49:d4:03:5d:e4:23:53:76:e9:bd:38:ab:68:b0:ff:
                    8c:ed:03:af:64:91:d0:86:49:9d:23:d2:c2:d1:82:
                    83:41:bf:f5:af:17:60:a3:35:8b:4a:db:e7:3c:bf:
                    f5:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:9E:A7:7C:F0:6C:B2:83:AA:89:01:78:9D:5B:C1:08:3D:7D:FA:78
            X509v3 Authority Key Identifier:
                keyid:C0:70:81:A6:F7:21:A3:7A:9E:1D:79:93:15:BB:3E:A2:75:8B:88:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wHCBpvcho3qeHXmTFbs-onWLiHc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9afd23-d280-495c-b252-f600317b1978/1/wHCBpvcho3qeHXmTFbs-onWLiHc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/9afd23-d280-495c-b252-f600317b1978/1/wHCBpvcho3qeHXmTFbs-onWLiHc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:13:15:41:fc:84:e4:09:75:0d:0e:27:94:18:40:05:54:3f:
         b4:b4:48:18:df:88:2e:16:50:cf:a9:6a:31:06:e0:99:f9:1a:
         b4:f5:46:e0:5d:df:dc:d3:49:40:c9:5b:0c:7e:68:6c:5e:a6:
         7e:d1:38:7f:c8:fe:02:0b:48:98:4b:7d:e8:f1:5e:1b:c3:eb:
         2b:96:02:e4:f4:51:60:01:14:f1:93:48:df:ed:57:cd:87:35:
         dc:53:d7:40:10:06:a1:e7:52:6f:ee:28:e2:b2:83:b7:02:35:
         71:c3:a7:c9:bc:bf:a6:06:f2:21:02:4b:eb:46:d3:56:6f:09:
         a3:ff:58:5e:86:bf:0e:0e:b8:3d:30:0a:af:da:e3:f5:c7:0f:
         b1:84:4b:23:bc:cf:37:d6:c7:20:9a:72:80:29:89:7c:b6:ca:
         6f:1b:5e:cb:4c:b9:6b:09:c9:37:df:b8:ce:06:e4:b5:83:0e:
         30:9a:c7:db:ae:14:cb:b0:6a:48:ea:b0:7e:04:0f:c0:27:c4:
         e1:e1:0a:cb:e7:e9:e6:05:e7:f2:2b:f0:7d:d2:92:bf:02:78:
         e0:dd:81:6c:a2:d5:6a:e2:70:12:21:cf:bc:a0:5d:3c:37:49:
         52:d0:1a:e8:72:96:88:ab:ec:b0:c7:bf:55:b8:75:b0:3b:b4:
         68:bf:12:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:21:52 2025 by rpki-client