Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/wig0jpBUlz16X4GTvU5cRPZzmeE.mft
File:                     wig0jpBUlz16X4GTvU5cRPZzmeE.mft (raw, json)
Hash identifier:          H882rQ9s5Crg5hHVJ64niNyaHcOaX4WZJkptGgpmN5k=
Subject key identifier:   0E:33:50:29:B6:4D:E7:D9:B2:DB:BB:94:92:F6:26:6D:ED:7F:CF:2C
Authority key identifier: C2:28:34:8E:90:54:97:3D:7A:5F:81:93:BD:4E:5C:44:F6:73:99:E1
Certificate issuer:       /CN=c228348e9054973d7a5f8193bd4e5c44f67399e1
Certificate serial:       019A4D73F678530B737825335C1DD74E06D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wig0jpBUlz16X4GTvU5cRPZzmeE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/wig0jpBUlz16X4GTvU5cRPZzmeE.mft
Manifest number:          171E
Signing time:             Tue 04 Nov 2025 06:00:36 +0000
Manifest this update:     Tue 04 Nov 2025 06:00:36 +0000
Manifest next update:     Wed 05 Nov 2025 06:00:36 +0000
Files and hashes:         1: 0QvCIwpxR3bpNP5RGisGcKh9tl4.roa (hash: o05fpl+QvO05aQyn7co8mtDbeJw4OqMmO6xVcG1jfvs=)
                          2: 3k6upSOdWy9zCNJpe2jRV6jVFps.roa (hash: KymeToQI2DhxJPw828I+qq4ysUMrfZXU0uXAbAf0KTU=)
                          3: 78o_FWZJdNx8y6lqNyGyQ8K6E58.roa (hash: IixtfvrQUner2Z+jcrj/ILDoom7eQRYfsR3spwo/Sp8=)
                          4: 8ye5aMnDN3H7sXuqJJReuxUEJXk.roa (hash: 5SBqUuPfoMeImGa+JEq3mqC1lLk8F5qTvpo0BQMOKDI=)
                          5: Aqt3jeaprsuKaHcOUqUUT28sbp8.roa (hash: EmCBxRRSxkg6mCxIsUzjtmNjSktnaiN0x5KAiYWphtY=)
                          6: BClXzEQANgLSEyYwbcinWsrBQ-g.roa (hash: yVBHkPkJIglcfOF7z6cfI7im3HPfB2TRKP3mvLzBmGg=)
                          7: Cm730G_AHSSBzZcSEbVAVS1nZYk.roa (hash: +l4oY660Xw3njFEI5BINOE+dJQFJ4tvjTaTZZwjdme4=)
                          8: D9-YU2ZDhJ0v1_AXcHBT_S48GwI.roa (hash: DMZSaMGentXeOZzVyA6LykLKHQIR9Ks1woE8+zLvzpk=)
                          9: ERLWTBMaBYD_unsIlsetr5st4fw.roa (hash: KpD3u3ug5GanNwgbi8bSe4vUjYbgUszyEQHqwM0V68A=)
                          10: EntV6VzXxjtJAhHc4d_vR-U-89U.roa (hash: 1AGpduD0aJJJJWhNq4TNumzYObxhPZ6xOeMP1fog8L4=)
                          11: G7_pBwgIb18W0bzx0vE-1R_iK4c.roa (hash: /gR04o7RTMGFCWJfgbmLvJDeNPnpOC+Ybn3q4mrVCbg=)
                          12: IgurgAZqMyXZW_Q9kx83TkpAvtY.roa (hash: S2jpYnrIhuuDh4c7AwFLs0DidvN0vHIICnCQLX4nXq4=)
                          13: Is_SubZgwqb_9F4vdFcPtqqAE_Q.roa (hash: xmxRpk/h+RREswL6FdQ3EYJu4suUIaG6Qi2dOEQuO0E=)
                          14: ItK4FWpjS5MvaBYu8Cw9ufPzz8M.roa (hash: ZxbilmAi3dMbN07yI1icrylrp1ISWW9blZJUQMbe0tE=)
                          15: Mk8KYt2G3egKSdt0jzQVPmKCVkw.roa (hash: cbkefvTY+ExyUo66CALX+XiVOUGydzynhYnpl1eVmus=)
                          16: OVtacBhFparFzA-VK57YO0y03m8.roa (hash: N6MabMbeLUr71XAZxpIYhW2kQPSVkUOZJml4SO6pE4k=)
                          17: PA-jfkanAVWfUpQmpSeB8oXIr0s.roa (hash: pCuvftglSJb2tleiBWc5aLM9vMUvfIEWsyAMH9nG+8A=)
                          18: QGsUTlp6_BEFTYCsH7OHXModcUQ.roa (hash: VOTvEoonXB+enjAqNX+KysvO9X3bauhfk46eSsAk6MY=)
                          19: Vx21t_oagyVMf4O40v7qZsXeXQU.roa (hash: UL9yz0GAvk+ZvI8LYI9Sctm68iPWeqJLY2M1tPCrmus=)
                          20: YIU-4qo-oAuRHLmOCynpaPalSF0.roa (hash: JsQyAb9PtTIbmB15wOfkyewNwt/4cFt2DHNCYba33k0=)
                          21: _COwDv5XkoYYyhJgP_qwBSHFm50.roa (hash: b7Iyv+8YJpp6HOm25cqap6uTGeszF/qdRTBIxvC6pFU=)
                          22: _bX74_w1oEwgLrgAZnQVIU-cSZ4.roa (hash: KHaAUhSlqOxQmRu7iriH0WDDD4QIxMf3JGOZ+VNOHOo=)
                          23: awP_9rkml_sm7zeUyIk-hWOcaNM.roa (hash: /WFwmRIxgInGSPEa5mh27hc+5dvYTjv7SOciwYm7Yqo=)
                          24: dHYWEJSWET067N4qclUpm0XFJ7o.roa (hash: S4EKIPK+IYCyvgM4xfHGDmmF/Oz7ejFlhnvB8trqAd8=)
                          25: f9FMqbsGCQTR2I_pSghMmyxXvQo.roa (hash: z+cFX5s0n92Drw/RVVSHwoX4sUW+bw76H7mDsPuHcRQ=)
                          26: gH2Ml08pkcNQk3L7CCHmTjTSwKQ.roa (hash: d4RSH6+xorxY40URBoEfRdGUVfAgCYRaB6RGA++Wipc=)
                          27: ja4l9ymf5vogAzY_c1pZ9r2JQl0.roa (hash: QV8yo4Y7S4RMw1tYaqfomW+XF6w6Y5Rkf38FTGtBaCc=)
                          28: jhlmLh--Fe0ICj7hvW7KAqjvWqw.roa (hash: 1FZCflmFpzFt5lOiwrwcCB3daxKRGAB3UUOelBugZLE=)
                          29: l7a_kNrevPjxNodupeNHSdCWEr8.roa (hash: df9hdqTFrMwkzFMkErR0XGiaeVzL8O1w6wVxDJsaOfc=)
                          30: lwXNaXod425LZYgrYh4gZBb1l7A.roa (hash: xPJa4H0AiEaccJwObXy0o6a7JoSiYl8+9hHgmFuSLDg=)
                          31: pmytThn77KyfY62XUmuBTmJmlEU.roa (hash: veYyBmTbvHZFT2kyetYWhwPTKHkYv0ENqtloF/dQJ4g=)
                          32: su_1DPB7Zp9ePwa-RHRem-w70CY.roa (hash: NSbW9yzN/6/DTloMlYOQZADFDTunvCQs/5F9HlR2sjU=)
                          33: tXpAR6snYYdl9lnSZFlZrlTwOtU.roa (hash: amfZ9AmgB5LnsYibO/xBS7f3HIiKaJ443EHi9bke7DY=)
                          34: wig0jpBUlz16X4GTvU5cRPZzmeE.crl (hash: hGPKvA3Xhcg6LccaiSyQl90/1ML72LK7txdCLxsqvqA=)
                          35: xX5hP5dyXaRRP0j4wd3WK2HuKs8.roa (hash: LUqqIedij3MsZ4xdDrj2P77W4YSkhRHXS4bSs5DH+Z0=)
                          36: zdnRo8hsG_ekUtB6UXgJfPq6Drs.roa (hash: OHzg7i+zGnHbWGtkMSWmdg/OlccAvO2NXEsZMfvBT88=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/wig0jpBUlz16X4GTvU5cRPZzmeE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/wig0jpBUlz16X4GTvU5cRPZzmeE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wig0jpBUlz16X4GTvU5cRPZzmeE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 06:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4d:73:f6:78:53:0b:73:78:25:33:5c:1d:d7:4e:06:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c228348e9054973d7a5f8193bd4e5c44f67399e1
        Validity
            Not Before: Nov  4 06:00:36 2025 GMT
            Not After : Nov  5 06:00:36 2025 GMT
        Subject: CN=0e335029b64de7d9b2dbbb9492f6266ded7fcf2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:12:39:4d:a1:bb:a9:30:18:db:e4:f9:9b:25:
                    5b:86:50:59:93:5c:18:2b:09:75:a3:a9:9f:be:43:
                    44:f8:d7:4b:5b:f7:d5:49:32:b9:bc:92:dc:ca:1e:
                    9b:7f:11:cf:88:a8:a3:7d:04:b1:6c:9b:ed:c1:93:
                    e9:20:f3:01:19:9f:11:4b:bd:4a:49:02:c0:ff:1f:
                    e7:b3:e1:6e:7b:c5:84:9a:06:62:c0:bc:be:b4:d8:
                    aa:19:25:47:73:a7:38:01:0b:92:14:e9:07:4d:3b:
                    b0:ed:3b:6b:d4:3c:2b:a6:4a:1a:ad:01:49:70:62:
                    8e:9e:06:60:aa:20:8a:d0:7d:68:aa:72:58:19:7f:
                    79:c0:6c:7d:6b:44:91:02:e2:e4:2c:6f:da:12:f1:
                    d7:95:37:84:53:20:75:db:ee:89:41:bb:e0:47:05:
                    e2:0c:9b:f4:3c:93:7d:36:30:e1:26:05:7e:9c:86:
                    82:3e:b6:3a:1e:26:7d:e0:a3:29:13:b5:12:ce:f3:
                    ce:ce:d6:33:39:6c:1d:bb:48:5c:fa:d7:27:1c:05:
                    c6:46:90:ba:ec:6d:f9:9e:88:a8:fa:0f:cf:5d:f1:
                    a9:cc:33:33:5f:da:87:c4:99:2a:0b:34:08:a3:9a:
                    82:da:ba:6f:c1:9e:64:8c:59:c1:ca:1c:b3:8f:fa:
                    eb:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:33:50:29:B6:4D:E7:D9:B2:DB:BB:94:92:F6:26:6D:ED:7F:CF:2C
            X509v3 Authority Key Identifier:
                keyid:C2:28:34:8E:90:54:97:3D:7A:5F:81:93:BD:4E:5C:44:F6:73:99:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wig0jpBUlz16X4GTvU5cRPZzmeE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/wig0jpBUlz16X4GTvU5cRPZzmeE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/wig0jpBUlz16X4GTvU5cRPZzmeE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:b6:1d:ec:cb:01:e6:9b:dd:98:53:0c:1f:02:91:f1:28:59:
         8f:91:80:7e:1f:89:59:4b:b4:0b:2e:d8:c2:a8:d6:7b:44:eb:
         51:2a:1d:c8:f9:54:5c:ee:7a:cd:d5:0d:f5:4b:d2:29:8e:57:
         d5:74:d1:b7:44:67:c0:d9:e4:ab:57:41:a9:e4:8b:f8:ec:4a:
         0a:54:90:65:05:1c:bf:ac:6a:09:70:b0:f9:b9:9f:62:18:91:
         aa:8d:b0:50:b0:00:42:a0:cd:b9:14:6c:b0:84:f8:92:53:c8:
         b7:b9:83:92:3a:03:0d:8b:a5:b8:ef:4a:62:d8:46:2d:1c:ee:
         f2:ea:ac:0c:50:53:df:40:71:0c:ab:a0:d8:df:e6:68:d5:58:
         bd:16:6b:57:c7:c4:24:aa:f0:57:72:3f:c2:08:96:ed:e6:4e:
         36:11:20:2f:4f:c9:97:fc:98:75:2e:8e:66:fa:51:f2:05:cc:
         ab:aa:b2:43:65:96:69:83:46:01:2f:41:76:f3:8f:a0:da:3c:
         2d:ad:5c:73:46:c3:2c:c2:e3:a2:99:c0:62:3c:1f:f3:d0:86:
         80:58:d6:2a:c5:19:7f:60:ba:fe:bd:06:58:0d:fe:ff:e9:ee:
         0c:b2:35:f1:08:69:ad:f2:f3:fb:63:9d:56:73:aa:ab:3b:a3:
         29:73:d2:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:00:44 2025 by rpki-client