
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/657197-c628-48b1-956d-effe955a5d64/1/wei4jx4wVzoOIOR51boAtOkYJ7Y.mft
File:                     wei4jx4wVzoOIOR51boAtOkYJ7Y.mft (raw, json)
Hash identifier:          IhSg0LiXSrU3W/VxqgWKPEoXKdR06jVp+MUMgu22Itw=
Subject key identifier:   EF:9A:D9:16:F8:09:51:DE:2A:96:1A:03:E6:D0:2F:EA:67:6D:62:BC
Authority key identifier: C1:E8:B8:8F:1E:30:57:3A:0E:20:E4:79:D5:BA:00:B4:E9:18:27:B6
Certificate issuer:       /CN=c1e8b88f1e30573a0e20e479d5ba00b4e91827b6
Certificate serial:       019A4C9859712ABAE21F2A57552447EB4DF6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wei4jx4wVzoOIOR51boAtOkYJ7Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/657197-c628-48b1-956d-effe955a5d64/1/wei4jx4wVzoOIOR51boAtOkYJ7Y.mft
Manifest number:          170B
Signing time:             Tue 04 Nov 2025 02:00:43 +0000
Manifest this update:     Tue 04 Nov 2025 02:00:43 +0000
Manifest next update:     Wed 05 Nov 2025 02:00:43 +0000
Files and hashes:         1: X1Gl7pI0OMRR6ajfA3cvno5vstw.roa (hash: zVVJwLgXELHLdhQ+YSrbw1EHdsK7mWsiuWthVrRspkM=)
                          2: wei4jx4wVzoOIOR51boAtOkYJ7Y.crl (hash: c1UOEtbUJveyRr6OY8PwTmlOxHD4q76a5jySXDomU08=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/657197-c628-48b1-956d-effe955a5d64/1/wei4jx4wVzoOIOR51boAtOkYJ7Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/657197-c628-48b1-956d-effe955a5d64/1/wei4jx4wVzoOIOR51boAtOkYJ7Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wei4jx4wVzoOIOR51boAtOkYJ7Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 02:00:43 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4c:98:59:71:2a:ba:e2:1f:2a:57:55:24:47:eb:4d:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1e8b88f1e30573a0e20e479d5ba00b4e91827b6
        Validity
            Not Before: Nov  4 02:00:43 2025 GMT
            Not After : Nov  5 02:00:43 2025 GMT
        Subject: CN=ef9ad916f80951de2a961a03e6d02fea676d62bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:aa:ce:3b:88:7f:d1:27:64:0a:68:04:f8:cd:
                    27:d8:a6:4b:b0:1f:e1:f0:31:29:3f:11:29:c8:82:
                    85:e6:b7:fd:ec:92:40:35:59:73:72:8d:7a:a3:f1:
                    e8:f2:cc:3b:3d:fa:44:5a:dc:42:44:fc:c6:83:84:
                    a0:fd:2d:20:43:d3:d5:f1:aa:f6:20:48:9c:22:35:
                    5b:36:f2:e5:9f:4f:f2:1d:6c:ce:1a:ca:8b:4e:f9:
                    fb:12:53:63:9b:7f:93:7d:99:94:3a:df:43:6b:11:
                    16:08:e2:f3:71:36:14:dd:42:fb:25:b5:ec:6a:13:
                    75:c9:3e:d5:1c:d2:ee:c4:e8:3d:3e:c4:59:40:95:
                    38:26:f9:69:52:63:b2:ff:a1:94:d0:35:d4:6e:55:
                    0e:79:4e:33:a0:14:3f:5c:88:6e:64:c9:c9:75:26:
                    18:ae:62:ec:fd:37:48:81:9a:f6:0e:b8:0e:f0:4e:
                    84:56:5c:77:b7:f6:fe:1a:53:c2:64:de:ba:60:f9:
                    3e:58:a0:ac:6a:fa:41:3b:bf:c1:5d:e3:79:cb:32:
                    a6:17:56:61:8b:22:1b:3a:a3:dd:6f:23:95:e6:cf:
                    2e:3c:38:76:08:cc:37:1b:24:ff:f7:3a:02:7c:03:
                    14:5d:51:e1:71:37:c1:1b:26:da:17:40:9c:f6:53:
                    f5:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:9A:D9:16:F8:09:51:DE:2A:96:1A:03:E6:D0:2F:EA:67:6D:62:BC
            X509v3 Authority Key Identifier:
                keyid:C1:E8:B8:8F:1E:30:57:3A:0E:20:E4:79:D5:BA:00:B4:E9:18:27:B6
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wei4jx4wVzoOIOR51boAtOkYJ7Y.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/657197-c628-48b1-956d-effe955a5d64/1/wei4jx4wVzoOIOR51boAtOkYJ7Y.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/657197-c628-48b1-956d-effe955a5d64/1/wei4jx4wVzoOIOR51boAtOkYJ7Y.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         10:16:63:7b:f1:50:0e:91:8d:77:2d:c6:b0:38:f6:a3:af:ed:
         c8:34:9a:c5:dd:e0:ac:e3:e0:d1:82:74:87:f9:a7:cc:56:00:
         b5:59:4f:00:dd:12:0c:c3:e5:49:13:b8:a6:22:8a:e4:57:7d:
         dc:79:f6:1a:40:5c:23:3c:a2:c2:24:e7:ab:78:dc:9a:20:bc:
         36:93:3a:4a:97:16:d3:68:b0:c8:9d:1a:fe:98:88:db:29:57:
         22:2c:1f:b6:91:45:4a:b7:3a:a6:c6:0b:34:4a:a1:4a:f9:40:
         48:51:ab:3a:9c:17:a3:61:8c:e9:f0:eb:e3:3d:c7:62:0a:10:
         78:d0:3e:6b:ff:e1:b8:79:7a:88:38:a8:47:2c:c5:0e:9a:91:
         14:e5:95:fa:59:b2:60:85:b9:00:af:af:88:55:78:40:3f:fe:
         6f:29:f5:c0:27:03:1f:33:86:ef:28:2a:fd:94:75:8c:4f:6a:
         fb:16:65:34:03:79:2b:6c:6a:b5:19:0c:8c:4c:2b:66:0b:46:
         ef:0f:a1:22:1f:a2:7b:71:96:ad:b8:ee:f9:fd:ba:a6:9f:c5:
         b1:83:44:cc:03:c6:b2:7c:ed:f0:65:22:41:30:13:2c:b5:9e:
         26:b2:3b:a6:53:ba:39:14:8e:28:c2:28:a0:9b:be:cb:cd:05:
         3e:16:c3:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 11:20:48 2025 by rpki-client