
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/5e0489-17cf-422c-aa40-2fb0944b5194/1/wdsEGvq_2MEfCxC1I3mbZc_eOQg.mft
File:                     wdsEGvq_2MEfCxC1I3mbZc_eOQg.mft (raw, json)
Hash identifier:          6YzrY8Wa5t+HUj1MvgDOUK1xkFM2LtJiN9nzOnB4pmQ=
Subject key identifier:   F7:6F:3D:31:8F:99:69:A0:AF:82:7B:F4:07:8E:C8:72:6D:71:4A:CF
Authority key identifier: C1:DB:04:1A:FA:BF:D8:C1:1F:0B:10:B5:23:79:9B:65:CF:DE:39:08
Certificate issuer:       /CN=c1db041afabfd8c11f0b10b523799b65cfde3908
Certificate serial:       019A4D744E37A46F21FCC9F8DECFA10B519E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wdsEGvq_2MEfCxC1I3mbZc_eOQg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/5e0489-17cf-422c-aa40-2fb0944b5194/1/wdsEGvq_2MEfCxC1I3mbZc_eOQg.mft
Manifest number:          06C5
Signing time:             Tue 04 Nov 2025 06:00:59 +0000
Manifest this update:     Tue 04 Nov 2025 06:00:59 +0000
Manifest next update:     Wed 05 Nov 2025 06:00:59 +0000
Files and hashes:         1: pHhGl7hC09oju4TJunou2EvQcgs.roa (hash: 2VlBpUDieZUHkJYBbPMMtM8Or6vr8jhJfvPVbdLnF2s=)
                          2: wdsEGvq_2MEfCxC1I3mbZc_eOQg.crl (hash: irkSsV/J2XIQp5Bf6JsBKPCK70OV2/GwHmSq95Fe5rg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/5e0489-17cf-422c-aa40-2fb0944b5194/1/wdsEGvq_2MEfCxC1I3mbZc_eOQg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/5e0489-17cf-422c-aa40-2fb0944b5194/1/wdsEGvq_2MEfCxC1I3mbZc_eOQg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wdsEGvq_2MEfCxC1I3mbZc_eOQg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 06:00:59 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4d:74:4e:37:a4:6f:21:fc:c9:f8:de:cf:a1:0b:51:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1db041afabfd8c11f0b10b523799b65cfde3908
        Validity
            Not Before: Nov  4 06:00:59 2025 GMT
            Not After : Nov  5 06:00:59 2025 GMT
        Subject: CN=f76f3d318f9969a0af827bf4078ec8726d714acf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:17:10:a1:54:70:a8:a9:dc:f8:2b:c8:ec:ea:
                    26:a5:68:ca:e9:4f:f1:0c:20:92:0e:c1:0f:f4:d7:
                    02:62:df:1a:d5:ef:6a:13:d2:a5:0b:9b:c2:2c:d4:
                    ea:f1:c9:11:22:05:72:9d:78:5a:74:99:b3:4f:22:
                    d8:fe:52:83:be:73:29:4a:4b:dd:6b:9b:45:34:c9:
                    4e:6a:35:e0:94:39:d0:36:fe:af:3f:55:38:28:b8:
                    14:44:26:82:ee:88:65:d9:ff:17:51:5c:41:d7:81:
                    e0:c6:86:27:0c:ec:d2:e8:f7:11:0c:ce:d1:8c:fd:
                    2b:f7:a5:f6:58:f1:bc:d7:fb:b5:34:94:66:bb:a9:
                    f1:1f:0d:db:f6:08:37:b6:cd:8d:2e:7e:40:0b:78:
                    59:ab:89:15:0d:d9:68:17:03:6b:d7:3e:55:fe:3d:
                    5c:6f:17:f9:6f:88:9b:a6:98:a6:c4:d8:47:9c:55:
                    f1:de:80:16:18:05:af:6c:a7:fd:0a:65:97:c8:6c:
                    e8:59:85:6d:6c:d5:76:d6:fc:8d:19:35:b7:5e:00:
                    fd:8e:26:56:00:ea:f9:eb:04:e9:32:9e:5b:07:72:
                    c5:c1:d6:8f:87:2e:da:50:fc:90:45:ac:a1:74:0c:
                    b2:1f:bd:f4:95:02:d8:1f:41:cc:11:63:a2:53:2d:
                    e9:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:6F:3D:31:8F:99:69:A0:AF:82:7B:F4:07:8E:C8:72:6D:71:4A:CF
            X509v3 Authority Key Identifier:
                keyid:C1:DB:04:1A:FA:BF:D8:C1:1F:0B:10:B5:23:79:9B:65:CF:DE:39:08
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wdsEGvq_2MEfCxC1I3mbZc_eOQg.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5e0489-17cf-422c-aa40-2fb0944b5194/1/wdsEGvq_2MEfCxC1I3mbZc_eOQg.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5e0489-17cf-422c-aa40-2fb0944b5194/1/wdsEGvq_2MEfCxC1I3mbZc_eOQg.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         73:1a:45:7d:c6:55:2b:9b:e8:0b:ae:d5:69:f4:f7:d3:82:ab:
         0f:59:d7:58:d8:56:4e:d6:2e:ce:a4:57:bd:fa:01:e1:4e:56:
         d6:41:48:d1:b7:44:cb:21:d2:39:f9:b6:c6:ea:a1:d8:99:37:
         04:a1:29:ac:30:96:40:61:76:db:a6:0a:c7:88:2d:0e:7c:33:
         57:14:f3:e5:47:04:ed:ef:17:16:38:49:ad:b2:f5:7e:eb:45:
         16:5a:4a:d6:b3:b1:1a:4c:aa:67:10:9c:6f:70:52:7d:1d:36:
         f7:77:a0:ac:d8:95:32:73:19:b9:85:bc:4a:eb:a8:56:8b:17:
         19:f2:bf:cf:e7:ab:73:e8:2d:47:50:be:ad:67:33:b6:94:93:
         c3:da:43:e3:63:b6:8c:e6:87:5f:0c:d3:a6:1f:22:7c:86:f2:
         5f:4b:a6:cd:a9:13:78:f0:98:75:b9:f1:27:42:b3:d4:ab:76:
         ba:94:00:42:57:8e:e8:69:0a:5e:45:b1:d1:be:99:64:d4:c3:
         3c:aa:65:d4:c3:45:bf:f7:d8:ba:ce:35:d3:90:5c:6e:1a:87:
         ce:bf:93:7b:0a:2d:78:c9:1b:0c:61:a3:06:99:76:14:39:90:
         9b:b4:ed:fd:be:a7:81:a5:ae:d0:ad:69:5b:c4:07:c6:7c:65:
         5a:f4:40:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 14:41:52 2025 by rpki-client