Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2901ce-67e7-44f5-99ea-2373a1ba6d0b/1/wGLmqllGb-VhqTq81NzfPepNwmc.mft
File:                     wGLmqllGb-VhqTq81NzfPepNwmc.mft (raw, json)
Hash identifier:          3y82EVGP3BQ019A4TRTtYI45BSPJHv4fNsJrrozFwgE=
Subject key identifier:   02:28:62:DA:C9:B4:3D:E6:54:75:F4:37:13:EF:09:2A:AE:51:00:15
Authority key identifier: C0:62:E6:AA:59:46:6F:E5:61:A9:3A:BC:D4:DC:DF:3D:EA:4D:C2:67
Certificate issuer:       /CN=c062e6aa59466fe561a93abcd4dcdf3dea4dc267
Certificate serial:       019A4DE22B20E33BF37ACBABCC936683CBF8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wGLmqllGb-VhqTq81NzfPepNwmc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/2901ce-67e7-44f5-99ea-2373a1ba6d0b/1/wGLmqllGb-VhqTq81NzfPepNwmc.mft
Manifest number:          05EC
Signing time:             Tue 04 Nov 2025 08:00:59 +0000
Manifest this update:     Tue 04 Nov 2025 08:00:59 +0000
Manifest next update:     Wed 05 Nov 2025 08:00:59 +0000
Files and hashes:         1: wGLmqllGb-VhqTq81NzfPepNwmc.crl (hash: YYUUcvecFn24mAWpAB5grc3jYfzE0CVKNN7Y6nu8PmE=)
                          2: yDU1rEJ62ylcENkxxq9-gc-Am2g.roa (hash: 7IZ7rxbnUahaLcCnP9skdbmiM7UlbVpGLatma5hP9yw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/2901ce-67e7-44f5-99ea-2373a1ba6d0b/1/wGLmqllGb-VhqTq81NzfPepNwmc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/2901ce-67e7-44f5-99ea-2373a1ba6d0b/1/wGLmqllGb-VhqTq81NzfPepNwmc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wGLmqllGb-VhqTq81NzfPepNwmc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 08:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4d:e2:2b:20:e3:3b:f3:7a:cb:ab:cc:93:66:83:cb:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c062e6aa59466fe561a93abcd4dcdf3dea4dc267
        Validity
            Not Before: Nov  4 08:00:59 2025 GMT
            Not After : Nov  5 08:00:59 2025 GMT
        Subject: CN=022862dac9b43de65475f43713ef092aae510015
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d3:d2:3b:a1:6b:e9:ce:b3:5e:53:07:e1:6f:
                    32:a4:36:10:56:48:38:b1:55:5d:49:d5:a0:39:61:
                    27:bb:28:f4:60:d1:7b:29:5b:b6:ef:36:75:36:e6:
                    7d:e6:7c:d6:1f:98:4f:3e:e3:e9:b2:6f:be:70:9a:
                    71:fa:1c:a0:e2:63:ef:bc:9d:68:b9:bf:40:33:73:
                    75:28:29:0c:a1:07:bf:f9:b2:4b:02:e7:13:61:0e:
                    71:d2:90:cd:da:79:ec:9d:f1:d0:e9:35:32:b9:8a:
                    2f:75:36:17:81:ce:4a:ba:2d:cf:10:6e:ab:03:66:
                    e6:51:9a:d5:9a:e8:16:8e:ec:8b:4f:ee:56:58:18:
                    a2:5f:ad:67:29:58:fc:d8:f4:3f:1d:3f:ba:43:cf:
                    96:af:2a:ce:55:9c:84:9f:21:3d:6e:32:9c:11:b8:
                    59:d6:f9:7f:f8:87:76:3b:fb:07:b7:0c:e0:59:f2:
                    35:c3:1c:0d:bf:75:da:86:72:90:e4:f0:a7:e9:28:
                    fe:70:c7:07:2e:c5:1c:35:66:8b:26:87:00:9d:77:
                    15:c4:35:16:6c:a0:56:bf:10:18:cf:83:39:ec:6d:
                    29:b2:f5:ee:b5:1b:f2:d8:a4:df:23:06:e5:52:c9:
                    03:42:77:2a:14:05:98:1e:34:21:a5:55:c1:87:4a:
                    24:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:28:62:DA:C9:B4:3D:E6:54:75:F4:37:13:EF:09:2A:AE:51:00:15
            X509v3 Authority Key Identifier:
                keyid:C0:62:E6:AA:59:46:6F:E5:61:A9:3A:BC:D4:DC:DF:3D:EA:4D:C2:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wGLmqllGb-VhqTq81NzfPepNwmc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2901ce-67e7-44f5-99ea-2373a1ba6d0b/1/wGLmqllGb-VhqTq81NzfPepNwmc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2901ce-67e7-44f5-99ea-2373a1ba6d0b/1/wGLmqllGb-VhqTq81NzfPepNwmc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:54:29:2b:d1:74:18:ce:3f:41:d2:bd:2d:07:c0:56:47:54:
         0f:70:af:7a:2a:91:30:b5:01:84:f0:c1:f4:2f:ff:cc:46:f2:
         9e:db:49:24:44:85:ca:6b:0d:1e:3f:91:73:0c:82:ba:3b:40:
         b6:55:3d:a2:b6:1b:66:d2:11:a8:9a:42:53:7e:c1:75:52:41:
         a0:20:ee:74:81:70:91:e3:31:5d:96:4a:80:29:b7:36:59:05:
         72:1b:01:42:0a:59:82:71:67:a5:ee:15:bd:a4:bb:ea:3c:b1:
         cd:db:8a:d4:c1:29:10:fe:13:35:de:e5:c5:fe:0d:66:a4:fa:
         59:20:ea:48:11:65:66:23:e3:56:15:98:e1:cf:b6:04:53:42:
         6c:e3:d6:33:25:13:45:3d:56:a6:f1:dd:19:a4:36:40:76:f2:
         dd:5c:4b:2a:d8:c8:c8:ed:f2:52:44:b7:78:52:e6:7e:55:51:
         cf:c2:9f:62:d8:04:6b:49:9c:d2:db:f0:d2:d1:4a:05:d6:1a:
         27:93:e0:7d:43:1e:3b:7e:14:38:21:2c:b0:1c:aa:fb:95:22:
         01:de:bf:cd:8f:18:09:cf:66:0e:42:8b:a4:98:7f:99:ed:e5:
         1f:ac:7d:9d:6f:3f:a5:f4:74:53:b3:dd:2c:28:a3:3a:3c:4c:
         51:5f:59:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpN4isg4zvzesurzJNmg8v4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwNjJlNmFhNTk0NjZmZTU2MWE5M2FiY2Q0ZGNkZjNkZWE0
ZGMyNjcwHhcNMjUxMTA0MDgwMDU5WhcNMjUxMTA1MDgwMDU5WjAzMTEwLwYDVQQD
EygwMjI4NjJkYWM5YjQzZGU2NTQ3NWY0MzcxM2VmMDkyYWFlNTEwMDE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodPSO6Fr6c6zXlMH4W8ypDYQVkg4
sVVdSdWgOWEnuyj0YNF7KVu27zZ1NuZ95nzWH5hPPuPpsm++cJpx+hyg4mPvvJ1o
ub9AM3N1KCkMoQe/+bJLAucTYQ5x0pDN2nnsnfHQ6TUyuYovdTYXgc5Kui3PEG6r
A2bmUZrVmugWjuyLT+5WWBiiX61nKVj82PQ/HT+6Q8+WryrOVZyEnyE9bjKcEbhZ
1vl/+Id2O/sHtwzgWfI1wxwNv3XahnKQ5PCn6Sj+cMcHLsUcNWaLJocAnXcVxDUW
bKBWvxAYz4M57G0psvXutRvy2KTfIwblUskDQncqFAWYHjQhpVXBh0okHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAIoYtrJtD3mVHX0NxPvCSquUQAVMB8GA1UdIwQY
MBaAFMBi5qpZRm/lYak6vNTc3z3qTcJnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0dMbXFsbEdiLVZocVRxODFOemZQZXBOd21jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8yOTAxY2UtNjdlNy00NGY1LTk5ZWEt
MjM3M2ExYmE2ZDBiLzEvd0dMbXFsbEdiLVZocVRxODFOemZQZXBOd21jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8yOTAxY2UtNjdlNy00NGY1LTk5ZWEtMjM3M2ExYmE2ZDBi
LzEvd0dMbXFsbEdiLVZocVRxODFOemZQZXBOd21jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJlQpK9F0
GM4/QdK9LQfAVkdUD3CveiqRMLUBhPDB9C//zEbynttJJESFymsNHj+RcwyCujtA
tlU9orYbZtIRqJpCU37BdVJBoCDudIFwkeMxXZZKgCm3NlkFchsBQgpZgnFnpe4V
vaS76jyxzduK1MEpEP4TNd7lxf4NZqT6WSDqSBFlZiPjVhWY4c+2BFNCbOPWMyUT
RT1WpvHdGaQ2QHby3VxLKtjIyO3yUkS3eFLmflVRz8KfYtgEa0mc0tvw0tFKBdYa
J5PgfUMeO34UOCEssByq+5UiAd6/zY8YCc9mDkKLpJh/me3lH6x9nW8/pfR0U7Pd
LCijOjxMUV9ZBg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:59:51 2025 by rpki-client