Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/9e1d5b-de61-4d9a-84bd-02792f9cf07b/1/wwQvXEeJyXxPku8hd-e4k4yN1cQ.mft
File:                     wwQvXEeJyXxPku8hd-e4k4yN1cQ.mft (raw, json)
Hash identifier:          BecwBEc1Q+JCDB51aJkTVNG5DxE3dGvFNJBpBWcOIKE=
Subject key identifier:   13:08:5F:BB:9B:AE:C9:A8:89:1D:8D:48:46:A6:72:A3:88:BF:BD:27
Authority key identifier: C3:04:2F:5C:47:89:C9:7C:4F:92:EF:21:77:E7:B8:93:8C:8D:D5:C4
Certificate issuer:       /CN=c3042f5c4789c97c4f92ef2177e7b8938c8dd5c4
Certificate serial:       019A4D3CC50D952C6E0A6ADE63DD5E838788
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wwQvXEeJyXxPku8hd-e4k4yN1cQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/9e1d5b-de61-4d9a-84bd-02792f9cf07b/1/wwQvXEeJyXxPku8hd-e4k4yN1cQ.mft
Manifest number:          0675
Signing time:             Tue 04 Nov 2025 05:00:19 +0000
Manifest this update:     Tue 04 Nov 2025 05:00:19 +0000
Manifest next update:     Wed 05 Nov 2025 05:00:19 +0000
Files and hashes:         1: 6x1tWIXawD8Riqi1QgPxJwArGQA.roa (hash: ZkQHVdarUIUp1voSPC7ADD2JtVlZaBPISLsacFmKkAY=)
                          2: E3s7OhtGyrgIjjo12EIie1mXMmw.roa (hash: 4Cmbw0eTd+X80C9DMxxbHj0mIwfhVE0v3GIUD2Q+CsM=)
                          3: LOXDeYMWSoSqHKGpdBJSbPBhAM4.roa (hash: qhHw+2YmH34b7VZrJfMxpamNK37LBwdu9TF5rYvLpBM=)
                          4: wwQvXEeJyXxPku8hd-e4k4yN1cQ.crl (hash: 45F9Mh2mU4qAnLYEziRGGLbAZ4awlvD59l1icssnMOo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/9e1d5b-de61-4d9a-84bd-02792f9cf07b/1/wwQvXEeJyXxPku8hd-e4k4yN1cQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/9e1d5b-de61-4d9a-84bd-02792f9cf07b/1/wwQvXEeJyXxPku8hd-e4k4yN1cQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wwQvXEeJyXxPku8hd-e4k4yN1cQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 05:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4d:3c:c5:0d:95:2c:6e:0a:6a:de:63:dd:5e:83:87:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3042f5c4789c97c4f92ef2177e7b8938c8dd5c4
        Validity
            Not Before: Nov  4 05:00:19 2025 GMT
            Not After : Nov  5 05:00:19 2025 GMT
        Subject: CN=13085fbb9baec9a8891d8d4846a672a388bfbd27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:cf:95:99:2c:ca:fb:9e:e8:5c:44:93:8a:67:
                    36:d8:85:5b:89:10:ea:b4:59:03:69:2e:a7:4f:08:
                    e3:f8:b8:4e:7f:2a:4e:c3:80:85:9b:49:8a:10:6e:
                    13:e0:75:c4:ea:b8:2e:c4:77:31:96:0a:21:8d:67:
                    4b:b4:5c:b3:de:b9:dc:9c:1b:9a:55:19:77:e4:a8:
                    12:85:46:87:d1:78:fa:f8:c9:17:34:71:c6:33:01:
                    16:74:81:ea:2f:d1:d7:70:69:d8:e7:ea:7f:fc:97:
                    f4:b4:3d:fa:46:b0:a6:2f:9d:46:15:a7:bb:bb:fe:
                    6a:f8:ba:83:8d:11:c5:d7:35:2f:6f:fe:be:f1:98:
                    ba:45:7b:e5:b3:06:2b:c5:bb:07:2f:cd:5f:9d:c0:
                    31:18:25:72:4a:6a:0c:5a:41:03:be:1a:e3:6e:a7:
                    b9:73:1d:95:8c:08:00:32:a7:39:10:49:31:1a:0d:
                    27:8c:d9:ae:39:d6:9c:f8:e6:97:18:18:c7:5e:3c:
                    42:f8:0a:f3:e3:8b:dc:6b:73:c9:78:48:92:e2:3e:
                    4c:d3:e2:47:9a:8a:64:81:d2:d0:0c:91:e3:9e:e8:
                    98:57:68:1f:e0:bd:78:18:46:1d:9d:81:a2:db:ed:
                    e7:b1:f5:40:ff:dc:35:09:53:52:d8:cd:61:a0:96:
                    30:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:08:5F:BB:9B:AE:C9:A8:89:1D:8D:48:46:A6:72:A3:88:BF:BD:27
            X509v3 Authority Key Identifier:
                keyid:C3:04:2F:5C:47:89:C9:7C:4F:92:EF:21:77:E7:B8:93:8C:8D:D5:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wwQvXEeJyXxPku8hd-e4k4yN1cQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/9e1d5b-de61-4d9a-84bd-02792f9cf07b/1/wwQvXEeJyXxPku8hd-e4k4yN1cQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/9e1d5b-de61-4d9a-84bd-02792f9cf07b/1/wwQvXEeJyXxPku8hd-e4k4yN1cQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:b6:6c:37:3b:e5:d4:25:a6:d6:d9:1d:64:4f:4a:1d:f8:c1:
         44:be:29:5b:d2:85:c2:a1:75:ed:73:ae:67:dc:a8:11:c7:92:
         f8:a9:d8:ac:10:d0:61:cc:24:4b:d4:dd:ad:4c:26:ac:d9:a8:
         fe:b8:2c:79:cb:fb:a0:17:8c:7c:24:6c:7b:5e:cf:52:9d:ff:
         87:cb:43:92:c2:dc:7c:cf:d9:a1:94:47:eb:52:0f:ba:f1:22:
         ec:9a:d6:6e:8f:c4:1d:74:cd:2f:62:52:6e:66:94:88:97:26:
         21:de:06:c2:d2:e3:40:cf:50:8b:ad:70:f0:4c:cb:11:ba:b4:
         95:a2:58:ab:64:3a:9c:04:b8:46:9e:f8:3e:87:0d:9e:cc:ee:
         c1:72:5c:22:16:59:7b:88:18:53:67:09:78:6c:d6:e8:cf:5f:
         c9:2b:8b:ca:c5:6c:b3:bb:c0:0e:73:35:23:c0:f3:a8:c1:66:
         10:d3:70:28:32:19:90:ff:82:bf:de:75:d6:3c:76:fb:17:7d:
         30:ac:41:3b:e6:6b:29:54:cb:e8:aa:27:b7:b6:bb:f3:04:28:
         07:2b:53:52:35:e4:41:52:71:bb:ea:8f:f8:e9:61:3b:70:5a:
         35:2c:ce:4f:61:eb:a1:fe:4e:2f:9e:6e:87:54:26:c0:da:fc:
         bb:ed:f2:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:20:50 2025 by rpki-client