Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/f35424-944f-4064-afc0-1123cc9ddccc/1/wWz7mmhJxB5fEXBbj9cWCF1chUk.mft
File:                     wWz7mmhJxB5fEXBbj9cWCF1chUk.mft (raw, json)
Hash identifier:          Fbm4m6cgHGrmQ/X07fG+mTDr7b0AR2iBVHz2e8+DJ2E=
Subject key identifier:   C3:5F:31:02:4C:02:7D:D7:8E:02:87:9B:40:87:CD:C5:87:87:75:92
Authority key identifier: C1:6C:FB:9A:68:49:C4:1E:5F:11:70:5B:8F:D7:16:08:5D:5C:85:49
Certificate issuer:       /CN=c16cfb9a6849c41e5f11705b8fd716085d5c8549
Certificate serial:       019A4C97C815AE0D11C4598B054C08A249AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wWz7mmhJxB5fEXBbj9cWCF1chUk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/f35424-944f-4064-afc0-1123cc9ddccc/1/wWz7mmhJxB5fEXBbj9cWCF1chUk.mft
Manifest number:          05E9
Signing time:             Tue 04 Nov 2025 02:00:06 +0000
Manifest this update:     Tue 04 Nov 2025 02:00:06 +0000
Manifest next update:     Wed 05 Nov 2025 02:00:06 +0000
Files and hashes:         1: j9CtwOJGnVKS-HP6AHjaP4QX-mE.roa (hash: IQH0ZG03X6EDOf/JP581Nh+0AIMYOTDDiB4SyvCG/2A=)
                          2: wWz7mmhJxB5fEXBbj9cWCF1chUk.crl (hash: ITXRJbcqWN/01HDvKRQpPBmzl6v4674P3jG5romRvoc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/f35424-944f-4064-afc0-1123cc9ddccc/1/wWz7mmhJxB5fEXBbj9cWCF1chUk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/f35424-944f-4064-afc0-1123cc9ddccc/1/wWz7mmhJxB5fEXBbj9cWCF1chUk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wWz7mmhJxB5fEXBbj9cWCF1chUk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 02:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4c:97:c8:15:ae:0d:11:c4:59:8b:05:4c:08:a2:49:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c16cfb9a6849c41e5f11705b8fd716085d5c8549
        Validity
            Not Before: Nov  4 02:00:06 2025 GMT
            Not After : Nov  5 02:00:06 2025 GMT
        Subject: CN=c35f31024c027dd78e02879b4087cdc587877592
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:0a:05:03:55:55:e3:4a:d7:d8:9a:e8:d0:c6:
                    2f:a8:6f:21:91:5a:03:69:37:3d:5c:a9:6d:39:64:
                    8f:8c:67:aa:ae:a7:ea:44:68:18:9a:4e:fe:a0:2a:
                    4f:3b:89:d3:8c:2a:33:df:19:c6:cc:a6:88:92:fa:
                    f2:59:74:b1:33:9c:ca:d7:c3:c5:06:3f:3f:42:26:
                    8f:e6:f1:9c:55:8c:34:f5:c6:d2:3a:a9:83:d4:99:
                    9e:60:92:e1:8c:20:a8:d8:ae:85:c7:df:f4:53:dd:
                    24:3e:50:74:5b:93:25:16:f7:82:ce:13:db:3e:bf:
                    34:cf:a0:5c:35:c7:da:18:06:a9:24:6a:34:96:5e:
                    ab:ae:6f:44:0d:e5:c4:bf:a0:e9:62:6c:91:37:f3:
                    d5:e5:90:80:df:97:89:e7:4b:be:94:02:a1:41:82:
                    c9:d3:f8:12:bc:ae:72:08:81:72:08:c1:7f:71:a9:
                    8d:9e:48:64:6a:39:cb:43:03:85:ef:de:b3:aa:50:
                    c5:65:07:00:5a:d2:3a:89:e3:ce:d2:5d:6d:a1:61:
                    3a:af:58:48:ce:7d:f0:d4:96:36:ba:fb:29:e5:7b:
                    2e:f6:98:53:6a:2d:ab:7b:00:9e:fa:84:d7:c3:bd:
                    02:46:41:6d:e9:a7:36:7e:b1:c0:79:26:48:4d:97:
                    73:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:5F:31:02:4C:02:7D:D7:8E:02:87:9B:40:87:CD:C5:87:87:75:92
            X509v3 Authority Key Identifier:
                keyid:C1:6C:FB:9A:68:49:C4:1E:5F:11:70:5B:8F:D7:16:08:5D:5C:85:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wWz7mmhJxB5fEXBbj9cWCF1chUk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f35424-944f-4064-afc0-1123cc9ddccc/1/wWz7mmhJxB5fEXBbj9cWCF1chUk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f35424-944f-4064-afc0-1123cc9ddccc/1/wWz7mmhJxB5fEXBbj9cWCF1chUk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:6b:c5:a4:71:9e:22:ff:df:2c:93:bf:1c:44:b8:aa:14:fa:
         e0:1b:10:c0:61:ca:c6:3d:88:c9:73:d8:28:f4:03:a9:f1:bb:
         55:8b:34:a3:85:66:3d:dd:23:e6:22:c2:90:66:b9:5f:38:5d:
         dd:0b:12:8f:51:ce:cb:39:9e:e4:0f:99:bb:30:e5:98:39:7d:
         81:bf:23:76:ca:8d:17:fe:1e:78:0f:fd:7b:f1:3d:76:eb:65:
         17:28:13:d0:af:8b:a0:12:63:f1:db:df:54:c7:5c:1f:5a:8c:
         f6:b1:ad:16:eb:d1:4e:1e:ef:21:cb:55:25:3f:7c:23:fc:9b:
         3e:9f:ae:1e:a1:6a:53:10:b0:72:d3:78:db:36:c4:48:cc:85:
         d7:9b:5e:b9:7e:77:f4:7d:e9:59:93:1e:d6:c5:74:73:c8:b4:
         0a:40:04:6f:ac:d6:20:92:20:74:89:ac:12:d6:57:09:a5:32:
         a4:72:0a:86:27:21:0d:cf:4f:e9:00:65:23:d0:49:ef:ba:c6:
         08:6c:56:f7:2f:3e:ea:b1:e5:ed:3b:1c:fc:8b:fd:2b:2b:9b:
         0f:56:b8:ae:4d:a2:97:bf:4a:1e:dd:db:ba:26:dd:2b:df:96:
         c9:e8:ae:9f:ef:0a:fa:ff:5c:74:46:44:0b:73:4e:2a:42:d5:
         7c:3b:5a:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:56:10 2025 by rpki-client