Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/a733bc-68f8-499f-850f-8e924ffbe584/1/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.mft
File:                     wJ_IoGf6bSR2vc4kr_-tFxMdnoY.mft (raw, json)
Hash identifier:          qPmQ8kLeQHh4XQfiKGfb1Pmzk94DzcSQZEbViKkmP68=
Subject key identifier:   4C:CB:AB:43:E1:3A:5F:DA:22:1F:DB:44:73:0E:9E:A4:9D:15:EC:D2
Authority key identifier: C0:9F:C8:A0:67:FA:6D:24:76:BD:CE:24:AF:FF:AD:17:13:1D:9E:86
Certificate issuer:       /CN=c09fc8a067fa6d2476bdce24afffad17131d9e86
Certificate serial:       019A51F5BF24DB4B2F111A01CD15B331A7D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/a733bc-68f8-499f-850f-8e924ffbe584/1/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.mft
Manifest number:          12A5
Signing time:             Wed 05 Nov 2025 03:00:51 +0000
Manifest this update:     Wed 05 Nov 2025 03:00:51 +0000
Manifest next update:     Thu 06 Nov 2025 03:00:51 +0000
Files and hashes:         1: CAuOaF0DyRmCYIaIX9MOqTPSAYc.roa (hash: OgksKEIvnkHiH651enb6l1ninF2syHQEYUUQOdcbbz8=)
                          2: Ee1jCF-1mClSEqfFjmxX85gyL_Y.roa (hash: YHDEDxsAZ2bBTaAOCwBWd3d+f6kyqV9CwZkNGiqG6mw=)
                          3: rWkQj7TgOLZZA8E4J5xTwZUZtCA.roa (hash: iVc6rEsxLhBO15L95WXzTOEAvF+Pam9QPl5V09KJqGI=)
                          4: wJ_IoGf6bSR2vc4kr_-tFxMdnoY.crl (hash: 2VoVUjzoq+e7nAkm8KS2G5ZHX/+vQj4DcH9F3jexAk0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/a733bc-68f8-499f-850f-8e924ffbe584/1/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/a733bc-68f8-499f-850f-8e924ffbe584/1/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 06 Nov 2025 03:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:51:f5:bf:24:db:4b:2f:11:1a:01:cd:15:b3:31:a7:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c09fc8a067fa6d2476bdce24afffad17131d9e86
        Validity
            Not Before: Nov  5 03:00:51 2025 GMT
            Not After : Nov  6 03:00:51 2025 GMT
        Subject: CN=4ccbab43e13a5fda221fdb44730e9ea49d15ecd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:c2:8f:df:31:c2:db:90:04:18:b5:37:b8:04:
                    d6:6e:3f:83:e9:5d:c3:2e:ba:a1:9b:99:42:f7:d2:
                    e6:73:ad:8f:ca:9b:d9:6c:3b:71:a7:5e:93:5e:27:
                    c9:64:b9:4b:85:8e:de:e2:b7:68:3b:0a:cd:02:c1:
                    03:79:6f:52:f6:8a:ec:27:0d:40:1c:4b:7b:ba:ff:
                    7e:7f:92:9e:b3:00:43:4a:44:f3:a8:cc:00:73:b1:
                    b9:e0:9f:0e:3e:7d:0d:6f:5c:dc:cf:4c:c5:38:91:
                    91:60:2b:b0:69:71:c4:0e:54:b9:7a:a4:1b:bf:f6:
                    9f:63:b7:22:e2:49:42:2b:31:0b:69:23:fc:57:be:
                    ae:b1:1c:71:37:37:02:7b:4c:7e:cf:8b:3f:53:b0:
                    00:fa:68:f2:d5:f0:af:3c:f2:77:8d:1d:2c:27:46:
                    91:be:b0:dc:10:a4:3d:28:e9:0f:60:f1:b4:b7:90:
                    8d:47:d8:38:6a:22:ed:02:a0:c2:37:65:56:da:fb:
                    0c:f2:e0:0d:5b:1b:b0:3d:99:42:36:f6:1a:36:13:
                    7d:90:cf:44:be:77:28:69:46:c9:11:69:9b:9e:72:
                    2d:a0:de:bc:57:b4:0f:73:ec:13:72:22:1e:d5:e3:
                    58:7d:a8:ff:dc:cf:43:75:90:3a:29:76:08:35:92:
                    1e:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:CB:AB:43:E1:3A:5F:DA:22:1F:DB:44:73:0E:9E:A4:9D:15:EC:D2
            X509v3 Authority Key Identifier:
                keyid:C0:9F:C8:A0:67:FA:6D:24:76:BD:CE:24:AF:FF:AD:17:13:1D:9E:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a733bc-68f8-499f-850f-8e924ffbe584/1/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/a733bc-68f8-499f-850f-8e924ffbe584/1/wJ_IoGf6bSR2vc4kr_-tFxMdnoY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:09:9c:a2:6d:e9:57:65:a7:18:71:6b:94:2f:4f:1b:65:a3:
         9c:ed:eb:e6:dc:ec:2c:80:b9:03:3f:69:e1:e6:e3:dc:94:ab:
         74:7d:dd:ca:1d:87:7d:3e:1a:fc:13:25:04:41:38:44:6d:be:
         35:6e:09:72:33:56:17:99:8c:91:33:44:41:c8:29:6b:c2:13:
         d7:65:a7:b5:84:ec:2b:82:58:46:3b:e5:6d:4c:55:c8:39:9d:
         91:e6:6a:fa:bf:a3:c4:49:77:60:a8:50:01:6a:4d:6e:30:a1:
         27:7a:b9:f8:c7:3b:c2:36:bd:fe:83:ae:45:44:0c:0e:8b:37:
         04:31:59:9b:bc:78:16:aa:d6:dc:b4:0c:7d:98:74:9f:94:53:
         e3:05:18:f0:c4:aa:ea:94:5b:b5:b6:a3:50:ab:89:fc:ff:a6:
         43:43:13:cd:06:75:be:8d:22:a3:7e:33:06:06:dc:56:7c:48:
         93:8d:3b:30:fd:b0:76:fa:ef:9b:b9:ce:e5:83:cc:1e:ba:40:
         c1:ba:0d:87:1f:d6:73:8b:b4:3f:f0:4a:d6:bb:19:ce:63:4c:
         22:a8:5b:12:e4:e1:f5:1f:96:cd:3d:70:6c:a7:45:cf:49:60:
         df:05:60:6c:e3:e7:1b:39:38:a5:43:1b:38:09:ea:5c:72:2e:
         bd:b8:53:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:57:05 2025 by rpki-client