Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/7108f6-285a-44ed-84d3-24c73884bd04/1/W9eff_HFf_wSxUw94Yi7onQGqIw.mft
File:                     W9eff_HFf_wSxUw94Yi7onQGqIw.mft (raw, json)
Hash identifier:          CkpH9vgHBTioGcP27fwiVLAWxWd9IPHWGhm2fJ1JpmA=
Subject key identifier:   E3:F2:F0:E0:15:31:23:51:06:C3:DE:8E:2A:19:12:63:84:66:9F:65
Authority key identifier: 5B:D7:9F:7F:F1:C5:7F:FC:12:C5:4C:3D:E1:88:BB:A2:74:06:A8:8C
Certificate issuer:       /CN=5bd79f7ff1c57ffc12c54c3de188bba27406a88c
Certificate serial:       019A503E1FE279185A8C4F3F92005A8EDB59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W9eff_HFf_wSxUw94Yi7onQGqIw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/7108f6-285a-44ed-84d3-24c73884bd04/1/W9eff_HFf_wSxUw94Yi7onQGqIw.mft
Manifest number:          0305
Signing time:             Tue 04 Nov 2025 19:00:39 +0000
Manifest this update:     Tue 04 Nov 2025 19:00:39 +0000
Manifest next update:     Wed 05 Nov 2025 19:00:39 +0000
Files and hashes:         1: W9eff_HFf_wSxUw94Yi7onQGqIw.crl (hash: xZAxt4qoY2RikZ5EGXJmAP4OVfzT3KCqSf+F03tAu88=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/7108f6-285a-44ed-84d3-24c73884bd04/1/W9eff_HFf_wSxUw94Yi7onQGqIw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/7108f6-285a-44ed-84d3-24c73884bd04/1/W9eff_HFf_wSxUw94Yi7onQGqIw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W9eff_HFf_wSxUw94Yi7onQGqIw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 18:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:50:3e:1f:e2:79:18:5a:8c:4f:3f:92:00:5a:8e:db:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5bd79f7ff1c57ffc12c54c3de188bba27406a88c
        Validity
            Not Before: Nov  4 19:00:39 2025 GMT
            Not After : Nov  5 19:00:39 2025 GMT
        Subject: CN=e3f2f0e01531235106c3de8e2a19126384669f65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:18:7f:98:c3:b3:c0:e9:04:1f:3c:14:ba:93:
                    46:3f:2f:fc:49:7a:5f:5a:2f:d8:f9:b6:e8:56:1c:
                    53:fd:b3:08:e1:45:e0:54:51:61:2f:4d:ab:23:bf:
                    04:dc:b9:f4:9e:ff:e2:03:f4:82:ae:24:77:4e:04:
                    19:8e:ab:c4:d0:7e:3c:ba:24:e7:7e:03:67:e3:15:
                    8e:07:ce:7b:74:10:cc:94:ee:73:2b:59:ed:f1:03:
                    bf:ac:6c:40:2a:05:c6:b9:6b:d7:f0:20:45:08:e3:
                    ac:09:1c:f5:93:ec:17:58:f0:f8:cb:4b:fe:ef:f7:
                    4b:5f:d6:09:25:a7:67:66:a6:7a:72:a0:a4:59:33:
                    b3:30:e7:38:fe:cb:80:52:50:24:67:5d:ec:9f:f8:
                    a2:e0:fa:97:7a:dd:fb:17:8a:72:95:10:ac:5f:d1:
                    92:99:7e:e0:4b:61:14:f3:22:d0:66:dd:05:f7:6e:
                    5b:01:36:c9:be:68:bc:e3:52:00:d1:91:45:a7:52:
                    fd:9b:d1:59:1d:e0:c0:80:76:69:29:a0:4d:61:c7:
                    11:1f:3a:71:89:00:ab:0f:54:be:8f:37:8e:3c:4a:
                    c0:d4:af:95:1a:fe:35:c0:81:f0:b9:cd:6a:29:a7:
                    33:5f:48:02:c0:d8:de:90:8e:45:ee:25:08:10:85:
                    08:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:F2:F0:E0:15:31:23:51:06:C3:DE:8E:2A:19:12:63:84:66:9F:65
            X509v3 Authority Key Identifier:
                keyid:5B:D7:9F:7F:F1:C5:7F:FC:12:C5:4C:3D:E1:88:BB:A2:74:06:A8:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W9eff_HFf_wSxUw94Yi7onQGqIw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7108f6-285a-44ed-84d3-24c73884bd04/1/W9eff_HFf_wSxUw94Yi7onQGqIw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7108f6-285a-44ed-84d3-24c73884bd04/1/W9eff_HFf_wSxUw94Yi7onQGqIw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:d1:7b:f6:4d:68:f5:db:ce:2c:59:7c:02:40:78:e1:cf:2a:
         90:7d:16:64:a1:bd:1d:6d:ae:5d:44:30:d1:13:31:24:e4:35:
         c3:59:c2:59:b3:3c:53:2a:2b:4b:b8:f6:92:c2:fe:20:1f:84:
         71:d0:ac:58:f2:43:38:eb:91:57:25:11:92:a4:8e:e0:16:d0:
         bf:5e:a3:22:f5:bb:70:15:2b:ad:43:26:50:8a:e7:49:c4:e6:
         33:8c:c9:95:c3:48:86:19:ba:5a:81:7e:5e:44:18:ed:cf:fe:
         07:42:47:04:f9:03:f5:1e:e1:98:10:7e:cb:90:3e:8d:03:65:
         2f:27:b9:3d:a9:54:2b:50:0d:fd:ac:ef:d6:0f:49:76:6f:11:
         92:9d:e6:f0:67:45:4c:d5:26:b2:28:b8:f4:5d:fb:cc:35:f7:
         d4:13:be:3a:29:94:f5:cb:e9:fd:fd:04:6f:fc:ad:df:b0:f5:
         be:39:43:3b:58:4c:ea:28:34:cf:0b:e9:54:d6:9f:68:f6:5e:
         1c:e2:7a:9a:bc:de:bb:2b:3d:42:98:cd:d0:be:6e:48:d3:eb:
         43:58:8a:60:49:39:bb:8b:83:ab:5d:f2:c5:8c:2e:a8:31:82:
         84:fa:87:85:9d:8a:aa:53:7d:1a:a3:3a:7e:ce:8d:03:0e:e6:
         05:ae:86:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:47:44 2025 by rpki-client