Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/e45fd0-e69b-4e32-a427-8b1052ffcf6d/1/WVTHt-bfdXhGbYK1JxXLIJ9_IcU.mft
File:                     WVTHt-bfdXhGbYK1JxXLIJ9_IcU.mft (raw, json)
Hash identifier:          SGL4Gzla6SDiyOUgFaj6V14VDmZPMDPVWOjYHvJr04U=
Subject key identifier:   79:EB:11:0F:C6:BA:D7:0E:AC:63:C2:45:2D:29:0D:04:2D:40:5D:D4
Authority key identifier: 59:54:C7:B7:E6:DF:75:78:46:6D:82:B5:27:15:CB:20:9F:7F:21:C5
Certificate issuer:       /CN=5954c7b7e6df7578466d82b52715cb209f7f21c5
Certificate serial:       019A4DAA672D1FB990F7F29D594A0C4109B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WVTHt-bfdXhGbYK1JxXLIJ9_IcU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/e45fd0-e69b-4e32-a427-8b1052ffcf6d/1/WVTHt-bfdXhGbYK1JxXLIJ9_IcU.mft
Manifest number:          1711
Signing time:             Tue 04 Nov 2025 07:00:04 +0000
Manifest this update:     Tue 04 Nov 2025 07:00:04 +0000
Manifest next update:     Wed 05 Nov 2025 07:00:04 +0000
Files and hashes:         1: WQIOJXHFculSf7VKNcTI4G1FzB0.roa (hash: 1m31qu3p2ND5PEv0/zfE1Skv8FXpx3eh76tg/GNUGqE=)
                          2: WVTHt-bfdXhGbYK1JxXLIJ9_IcU.crl (hash: iOYdqLPKzuajXNycRDnC4nmpkJId1U5AUHD3RUjBhWU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/e45fd0-e69b-4e32-a427-8b1052ffcf6d/1/WVTHt-bfdXhGbYK1JxXLIJ9_IcU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/e45fd0-e69b-4e32-a427-8b1052ffcf6d/1/WVTHt-bfdXhGbYK1JxXLIJ9_IcU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WVTHt-bfdXhGbYK1JxXLIJ9_IcU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 07:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4d:aa:67:2d:1f:b9:90:f7:f2:9d:59:4a:0c:41:09:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5954c7b7e6df7578466d82b52715cb209f7f21c5
        Validity
            Not Before: Nov  4 07:00:04 2025 GMT
            Not After : Nov  5 07:00:04 2025 GMT
        Subject: CN=79eb110fc6bad70eac63c2452d290d042d405dd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:40:c9:45:a0:e3:df:c4:fd:6d:b8:b1:e7:d8:
                    06:36:e5:9a:96:c0:e6:2b:90:14:c7:3a:1a:3c:da:
                    91:9c:bb:ed:14:3e:72:de:0e:79:c8:30:38:dd:eb:
                    98:51:51:96:7b:5c:28:99:08:74:4c:2c:7e:99:6b:
                    d5:c8:29:6e:97:fc:39:ad:c8:4e:28:eb:a5:05:be:
                    f5:9b:9e:ee:54:da:07:8d:b7:b8:a8:e7:e0:2e:91:
                    aa:8b:56:e4:34:6c:71:40:fa:3d:da:c3:2a:8d:65:
                    7a:8e:4f:d4:73:d8:3a:fe:bd:69:b8:56:c8:45:1e:
                    9c:34:30:dc:3c:9a:58:d8:ff:bf:7d:60:fb:c9:f1:
                    20:f1:da:71:3f:b2:0d:86:a9:e4:f0:55:ea:cb:52:
                    24:0a:86:5c:ee:03:f2:32:b0:2a:2d:65:ec:bf:1f:
                    23:b8:6a:ab:5e:4f:78:d5:53:26:ee:8d:4e:33:30:
                    d2:ce:8f:8b:00:d5:74:93:d6:a7:94:d9:f2:06:b9:
                    33:5b:b3:43:e2:9b:81:f4:34:8d:b3:c1:d7:f8:0d:
                    c5:e1:64:ad:6c:43:31:16:ad:c0:12:ba:74:7b:1d:
                    e6:70:6e:46:d8:a5:cc:06:55:b6:b5:49:27:b9:7e:
                    ab:4c:1d:1d:47:38:90:3f:a7:f2:2c:8f:9d:a0:54:
                    11:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:EB:11:0F:C6:BA:D7:0E:AC:63:C2:45:2D:29:0D:04:2D:40:5D:D4
            X509v3 Authority Key Identifier:
                keyid:59:54:C7:B7:E6:DF:75:78:46:6D:82:B5:27:15:CB:20:9F:7F:21:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WVTHt-bfdXhGbYK1JxXLIJ9_IcU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/e45fd0-e69b-4e32-a427-8b1052ffcf6d/1/WVTHt-bfdXhGbYK1JxXLIJ9_IcU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/e45fd0-e69b-4e32-a427-8b1052ffcf6d/1/WVTHt-bfdXhGbYK1JxXLIJ9_IcU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:01:65:03:8d:7f:10:ab:43:81:dc:06:c6:10:7e:38:a2:4f:
         bf:1f:47:bd:13:d7:c7:01:da:0e:80:c7:e1:93:0e:7e:a0:1e:
         32:17:23:00:8b:96:51:e1:84:78:d1:b3:e2:17:74:95:45:30:
         92:6f:4a:c7:b3:26:3a:49:f3:a1:9e:6c:d4:20:a1:40:7a:a4:
         94:71:d9:52:bb:72:a8:66:f0:e6:e7:ca:e0:0f:cc:e6:90:fb:
         34:45:ed:ef:9d:79:85:95:58:4e:40:37:3f:da:34:ee:f8:83:
         14:57:39:66:6c:7f:1e:9b:aa:79:d8:a6:c0:09:0a:00:2b:81:
         ac:0e:71:e8:a7:d5:13:cb:d9:8f:e0:4b:40:7c:ea:84:d0:f8:
         a7:d3:8e:37:56:bc:37:d6:dc:b7:e6:62:ab:73:0e:4b:3c:d6:
         1c:f4:27:b1:e4:04:0d:00:9e:d2:31:c8:ce:b7:ba:91:61:a4:
         bd:a0:76:c8:3a:2c:5a:3b:38:5c:fb:b8:df:b8:4a:92:0e:ec:
         c3:ed:12:0d:e2:cf:77:99:4d:1b:0b:40:82:24:01:0e:f6:98:
         f9:3e:42:21:79:49:9d:6a:ac:4f:bc:17:94:62:60:cd:c9:42:
         f8:20:6f:f5:2c:62:41:b0:6f:fe:1a:b9:cc:01:00:9f:4e:11:
         61:5d:2b:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:46:59 2025 by rpki-client