Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/7a0b3f-8942-4d47-86dc-7c2d409ac89a/1/wAVeMuzXcq4oA6TDVtd2h4fnLiA.mft
File:                     wAVeMuzXcq4oA6TDVtd2h4fnLiA.mft (raw, json)
Hash identifier:          4r2WKYpxZbamO0/t08nk8UKKV3GNumh2WwSS3EIzNjw=
Subject key identifier:   F8:F0:1D:D1:98:03:42:5A:02:26:9A:EC:3E:CB:E4:7D:B1:66:93:F1
Authority key identifier: C0:05:5E:32:EC:D7:72:AE:28:03:A4:C3:56:D7:76:87:87:E7:2E:20
Certificate issuer:       /CN=c0055e32ecd772ae2803a4c356d7768787e72e20
Certificate serial:       019A4D06A8752A2C19C3CFEA56804F514FCC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wAVeMuzXcq4oA6TDVtd2h4fnLiA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/7a0b3f-8942-4d47-86dc-7c2d409ac89a/1/wAVeMuzXcq4oA6TDVtd2h4fnLiA.mft
Manifest number:          11B5
Signing time:             Tue 04 Nov 2025 04:01:13 +0000
Manifest this update:     Tue 04 Nov 2025 04:01:13 +0000
Manifest next update:     Wed 05 Nov 2025 04:01:13 +0000
Files and hashes:         1: wAVeMuzXcq4oA6TDVtd2h4fnLiA.crl (hash: Rc/h9Mpcykx0F9qIPBXaYcviNGh9ETSTQR6+kvtmYew=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/7a0b3f-8942-4d47-86dc-7c2d409ac89a/1/wAVeMuzXcq4oA6TDVtd2h4fnLiA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/7a0b3f-8942-4d47-86dc-7c2d409ac89a/1/wAVeMuzXcq4oA6TDVtd2h4fnLiA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wAVeMuzXcq4oA6TDVtd2h4fnLiA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 04:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4d:06:a8:75:2a:2c:19:c3:cf:ea:56:80:4f:51:4f:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0055e32ecd772ae2803a4c356d7768787e72e20
        Validity
            Not Before: Nov  4 04:01:13 2025 GMT
            Not After : Nov  5 04:01:13 2025 GMT
        Subject: CN=f8f01dd19803425a02269aec3ecbe47db16693f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a9:9e:7c:c7:71:87:cc:b8:15:ab:d7:cf:3e:
                    7f:cd:15:dc:ed:36:65:a2:43:87:78:98:93:55:3b:
                    d3:64:19:b9:7e:0d:7f:45:49:d5:f9:56:4b:75:8c:
                    2b:e0:4f:8e:f8:42:8e:0c:ec:5e:d7:f8:3a:9d:72:
                    db:1f:03:66:a7:87:62:1b:fc:ad:23:b6:00:0c:ea:
                    1d:66:36:e9:62:a4:d5:76:f8:53:95:d6:fe:cf:26:
                    b9:58:5a:2f:69:8f:62:4d:ed:ef:94:a3:db:0b:d2:
                    a9:ef:ac:87:26:6b:da:d6:65:88:06:9c:a0:4b:14:
                    81:fe:58:3c:a5:ca:ae:db:1f:cf:ad:d1:b2:80:ac:
                    42:bb:2b:ff:04:85:71:e9:e1:f6:8e:68:a2:c5:77:
                    f9:a8:cc:0a:8d:24:e8:76:ad:8b:a7:79:c4:66:4c:
                    5a:8a:bf:52:67:df:9d:da:89:64:6b:13:07:b4:82:
                    fe:10:3a:2b:da:00:02:ee:7c:20:b1:15:51:91:e5:
                    e4:32:dd:d6:44:94:84:4a:7c:1f:7a:af:cc:5a:28:
                    10:07:27:ed:e0:54:3c:bb:de:ac:c5:50:26:5a:d9:
                    a5:8e:83:28:0e:9e:60:c9:14:e9:81:fa:d6:da:c7:
                    cd:62:64:68:53:6e:14:cb:25:a2:8a:8f:8c:50:f7:
                    df:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:F0:1D:D1:98:03:42:5A:02:26:9A:EC:3E:CB:E4:7D:B1:66:93:F1
            X509v3 Authority Key Identifier:
                keyid:C0:05:5E:32:EC:D7:72:AE:28:03:A4:C3:56:D7:76:87:87:E7:2E:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wAVeMuzXcq4oA6TDVtd2h4fnLiA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/7a0b3f-8942-4d47-86dc-7c2d409ac89a/1/wAVeMuzXcq4oA6TDVtd2h4fnLiA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/7a0b3f-8942-4d47-86dc-7c2d409ac89a/1/wAVeMuzXcq4oA6TDVtd2h4fnLiA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:40:f0:59:23:be:a5:e6:d9:e9:85:a3:45:8f:4b:9e:38:f1:
         12:0c:82:e5:63:58:db:9a:07:72:2f:a8:e6:6c:77:54:4f:f2:
         b7:78:bc:37:e5:48:4c:c8:f6:60:13:86:91:46:3a:39:78:b0:
         80:24:1e:8a:33:40:aa:46:37:9f:7e:f3:c7:dd:d3:ca:e0:11:
         ec:db:b9:c9:c6:d3:01:1d:17:49:54:69:56:1d:13:9c:a0:50:
         ac:04:bd:58:17:74:ca:87:c9:59:4f:00:d6:f4:71:a8:53:77:
         47:21:0b:e2:1f:f7:f9:e7:7d:2f:cf:2e:a8:4f:bf:7d:23:0f:
         88:e6:9d:7f:d1:24:e6:50:ab:52:88:ae:2a:d9:f1:f5:5c:ea:
         0a:21:e0:fa:1c:2c:01:4f:a1:97:1d:64:be:ee:44:c5:9e:a3:
         e3:2e:36:9e:15:d6:cb:c5:5e:f0:74:84:c3:3e:3e:f3:70:f5:
         15:79:40:01:0b:5f:00:6b:7f:95:42:f8:9b:46:6a:8a:0e:e2:
         10:7c:73:3c:8e:a3:96:9f:56:7c:94:e6:c5:41:1a:7a:28:eb:
         d3:9f:39:21:87:32:19:23:24:db:ce:94:69:96:9f:62:3e:28:
         b6:ba:1b:d4:1c:6c:f6:b5:40:ec:cc:59:bc:d9:da:ee:f5:d2:
         20:34:6b:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:00:45 2025 by rpki-client