Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/3a61cc-7286-4fb0-9508-c135a6edb861/1/wTuQ-qxe_PkxlWGdoW86R-_-mf4.mft
File:                     wTuQ-qxe_PkxlWGdoW86R-_-mf4.mft (raw, json)
Hash identifier:          4a/wv7Axi/qCatMtnr0GeoUY2LcU19kImyZzdc+309k=
Subject key identifier:   FD:8E:06:A9:CC:3F:9C:BE:FD:AE:C1:1D:F0:B6:48:00:2D:07:E6:CA
Authority key identifier: C1:3B:90:FA:AC:5E:FC:F9:31:95:61:9D:A1:6F:3A:47:EF:FE:99:FE
Certificate issuer:       /CN=c13b90faac5efcf93195619da16f3a47effe99fe
Certificate serial:       019A4D73B0ECE5C8E2E7019C8A0E583DF1CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wTuQ-qxe_PkxlWGdoW86R-_-mf4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/3a61cc-7286-4fb0-9508-c135a6edb861/1/wTuQ-qxe_PkxlWGdoW86R-_-mf4.mft
Manifest number:          170B
Signing time:             Tue 04 Nov 2025 06:00:18 +0000
Manifest this update:     Tue 04 Nov 2025 06:00:18 +0000
Manifest next update:     Wed 05 Nov 2025 06:00:18 +0000
Files and hashes:         1: iyuy2kmWqZNHXuAfcuh0lwdEN5U.roa (hash: 80r40j4f0TX0nXOpgOJuceIx9IUXe6MHRj3CO+H5lVg=)
                          2: wTuQ-qxe_PkxlWGdoW86R-_-mf4.crl (hash: PCi5bv41bOoZUVkfWa8ilalNWcNGlj+IjGA7HzX51Yw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/3a61cc-7286-4fb0-9508-c135a6edb861/1/wTuQ-qxe_PkxlWGdoW86R-_-mf4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/3a61cc-7286-4fb0-9508-c135a6edb861/1/wTuQ-qxe_PkxlWGdoW86R-_-mf4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wTuQ-qxe_PkxlWGdoW86R-_-mf4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 06:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4d:73:b0:ec:e5:c8:e2:e7:01:9c:8a:0e:58:3d:f1:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c13b90faac5efcf93195619da16f3a47effe99fe
        Validity
            Not Before: Nov  4 06:00:18 2025 GMT
            Not After : Nov  5 06:00:18 2025 GMT
        Subject: CN=fd8e06a9cc3f9cbefdaec11df0b648002d07e6ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e4:2b:52:7d:51:01:65:6a:72:79:f5:6f:8c:
                    a0:f3:a8:e2:a5:ea:c0:99:7b:08:70:45:6c:dc:1c:
                    b0:71:8e:88:dd:91:c5:35:dd:5f:06:dd:76:01:d1:
                    8b:b6:44:fe:20:ed:f5:46:4e:eb:3d:2a:d6:05:87:
                    6f:2b:fd:17:37:3f:ef:12:7a:44:bb:93:27:bf:8f:
                    df:83:dd:99:51:34:88:88:8a:27:73:cb:84:1f:92:
                    96:bd:5c:fa:34:e2:b9:2b:a7:d5:63:27:63:ef:54:
                    9f:1a:89:4d:f9:e5:19:17:d0:df:91:ec:41:f7:5b:
                    4c:17:ab:5d:5e:81:95:ba:a5:0f:82:d8:94:67:44:
                    45:0d:56:f7:45:b2:f9:53:16:09:78:a1:17:97:55:
                    43:41:4a:0d:cb:3f:32:cc:85:02:c5:d6:a9:26:67:
                    0c:aa:97:ba:39:69:47:de:b0:17:3e:75:de:f4:d4:
                    9c:81:fa:51:8d:1b:0f:ec:a9:7a:e6:0a:18:88:ec:
                    2e:41:27:8f:a5:52:1c:24:38:9a:fd:c7:b5:b4:75:
                    64:2c:b7:b8:75:56:fd:61:4f:02:fa:68:bb:b6:06:
                    89:6b:29:3e:e4:28:12:c7:bb:35:27:b2:6e:c5:6a:
                    63:c8:f2:b1:15:19:39:1e:8a:b2:78:82:69:94:2d:
                    70:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:8E:06:A9:CC:3F:9C:BE:FD:AE:C1:1D:F0:B6:48:00:2D:07:E6:CA
            X509v3 Authority Key Identifier:
                keyid:C1:3B:90:FA:AC:5E:FC:F9:31:95:61:9D:A1:6F:3A:47:EF:FE:99:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wTuQ-qxe_PkxlWGdoW86R-_-mf4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3a61cc-7286-4fb0-9508-c135a6edb861/1/wTuQ-qxe_PkxlWGdoW86R-_-mf4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3a61cc-7286-4fb0-9508-c135a6edb861/1/wTuQ-qxe_PkxlWGdoW86R-_-mf4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:bc:a1:a7:70:f2:c8:ab:b3:b3:62:d7:20:aa:d5:2b:98:59:
         bc:f1:20:c6:2d:02:21:76:ca:a4:af:3d:1d:e4:ac:bb:87:75:
         7b:24:2e:8e:60:2b:f0:62:30:f2:85:9e:63:b3:5b:99:65:56:
         f0:dd:18:de:9e:d3:8b:fe:2c:99:f7:c6:e5:6b:08:36:a8:dd:
         06:fa:af:6d:77:82:ac:3b:fd:86:f7:d7:c4:7a:bf:30:a2:30:
         75:7e:e2:e0:0f:d6:5a:b1:52:1b:61:7e:ef:08:a0:d0:89:3c:
         36:f7:90:54:f1:a1:57:f4:3c:01:8e:d7:db:0a:4e:b4:7f:03:
         67:8e:19:ab:e9:7c:54:76:45:ca:63:05:73:aa:a2:74:a4:70:
         a4:3e:c2:56:3d:7e:dd:e0:47:23:5a:41:c7:45:9f:ab:b3:e9:
         26:e7:cf:44:88:80:09:01:e6:97:d8:4e:6b:7a:0e:05:03:92:
         77:46:ba:21:69:c7:27:0a:98:7e:e1:29:1d:78:2b:a4:c6:59:
         6b:ac:dd:ef:41:2a:e7:b0:6c:5f:8b:ab:52:fe:12:da:56:ba:
         8e:5a:ea:94:d4:36:c3:7e:49:ae:d1:42:19:61:c6:0f:bb:ca:
         fa:64:97:16:57:14:cc:5a:e1:ba:f7:98:a4:ed:9d:e3:17:54:
         71:90:b8:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:18:57 2025 by rpki-client