Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/f8b1bb-c747-4158-8792-8641415ebc82/1/wPCr5oh1RRC8lsfxsVlJJGn9pqc.mft
File:                     wPCr5oh1RRC8lsfxsVlJJGn9pqc.mft (raw, json)
Hash identifier:          O8np3+x60mBr7X3zFnATNUxRDy4/Yxs35Oh0QYfuPyw=
Subject key identifier:   94:E9:3C:05:E8:C0:37:D8:54:2F:5F:89:57:3C:9C:ED:F3:A3:01:B5
Authority key identifier: C0:F0:AB:E6:88:75:45:10:BC:96:C7:F1:B1:59:49:24:69:FD:A6:A7
Certificate issuer:       /CN=c0f0abe688754510bc96c7f1b159492469fda6a7
Certificate serial:       019A4C982148D22A1BC7CF30DC9F0A1FD8E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wPCr5oh1RRC8lsfxsVlJJGn9pqc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/f8b1bb-c747-4158-8792-8641415ebc82/1/wPCr5oh1RRC8lsfxsVlJJGn9pqc.mft
Manifest number:          0681
Signing time:             Tue 04 Nov 2025 02:00:29 +0000
Manifest this update:     Tue 04 Nov 2025 02:00:29 +0000
Manifest next update:     Wed 05 Nov 2025 02:00:29 +0000
Files and hashes:         1: MNSRA94GnwCWIcU0ZUPSgfJJzYA.roa (hash: vFvm6d7yLwrA+IkFyq24dAxJUZKY/00AaFr5EwDXEoE=)
                          2: wPCr5oh1RRC8lsfxsVlJJGn9pqc.crl (hash: oDohs0U3P8xPWWi+I3ZCG/HAwhslGxeQ/ME4giQTH4M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/f8b1bb-c747-4158-8792-8641415ebc82/1/wPCr5oh1RRC8lsfxsVlJJGn9pqc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/f8b1bb-c747-4158-8792-8641415ebc82/1/wPCr5oh1RRC8lsfxsVlJJGn9pqc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wPCr5oh1RRC8lsfxsVlJJGn9pqc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4c:98:21:48:d2:2a:1b:c7:cf:30:dc:9f:0a:1f:d8:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0f0abe688754510bc96c7f1b159492469fda6a7
        Validity
            Not Before: Nov  4 02:00:29 2025 GMT
            Not After : Nov  5 02:00:29 2025 GMT
        Subject: CN=94e93c05e8c037d8542f5f89573c9cedf3a301b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:1f:c0:41:79:f4:d1:2d:35:f1:23:e0:32:4f:
                    d8:d0:43:31:da:c5:be:70:23:31:0d:42:91:45:c8:
                    01:4f:0c:69:1b:c1:37:fc:6b:ef:f2:5f:f1:8c:3e:
                    e2:4a:d6:e0:76:fa:54:5e:1f:90:e5:43:f9:15:a0:
                    d3:79:96:23:d8:cf:ff:96:ed:54:4e:62:7d:67:f1:
                    6c:fa:04:b8:82:f4:ec:86:67:ec:f5:5e:d1:0b:30:
                    74:2e:13:9b:be:e2:d6:70:d1:47:60:b3:6d:2a:77:
                    a0:a4:b8:3c:0d:2f:61:3e:c5:68:84:56:32:e1:a7:
                    90:92:90:68:9b:30:3d:a5:a9:cc:27:0a:06:0c:3e:
                    82:68:ff:6c:b7:c2:1b:65:c8:d2:ea:f5:bc:36:d2:
                    43:95:a4:6c:d6:ca:22:c5:39:f8:08:c3:a2:5e:82:
                    ca:00:75:95:4d:89:4f:39:aa:b5:1a:84:9b:b8:13:
                    2e:4f:72:7f:32:47:72:d1:40:58:28:59:b5:26:95:
                    98:82:3e:72:dd:e4:0e:3d:d9:22:87:78:a4:61:9a:
                    98:fd:e7:4a:89:78:9f:7f:77:d2:cd:de:8f:b6:97:
                    f3:e2:f7:39:31:d9:09:a8:d9:4e:7b:ed:1c:ff:5a:
                    8f:9d:5e:c7:75:10:92:2a:60:69:9b:b1:c3:43:80:
                    af:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:E9:3C:05:E8:C0:37:D8:54:2F:5F:89:57:3C:9C:ED:F3:A3:01:B5
            X509v3 Authority Key Identifier:
                keyid:C0:F0:AB:E6:88:75:45:10:BC:96:C7:F1:B1:59:49:24:69:FD:A6:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wPCr5oh1RRC8lsfxsVlJJGn9pqc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f8b1bb-c747-4158-8792-8641415ebc82/1/wPCr5oh1RRC8lsfxsVlJJGn9pqc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/f8b1bb-c747-4158-8792-8641415ebc82/1/wPCr5oh1RRC8lsfxsVlJJGn9pqc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:2f:56:16:00:49:7e:70:2b:c5:0e:dc:70:b6:50:66:ec:d8:
         84:d0:39:bb:2c:22:f7:80:32:2c:c2:d4:28:f2:4b:da:35:85:
         4c:5c:cd:44:57:4d:17:43:7c:6e:12:d4:46:15:c9:05:50:87:
         59:71:43:a6:03:1a:7c:5a:3a:02:8f:60:f7:ab:00:8e:47:31:
         e0:aa:d7:6b:a5:a5:ee:60:5d:f0:6d:bf:6f:39:3d:dd:1a:d3:
         09:e0:f7:05:82:42:30:00:39:5e:ba:74:41:3c:7a:9f:95:bf:
         b0:45:1d:e1:b5:e6:62:c2:ff:60:98:7a:3a:1a:7c:b4:c1:23:
         e6:78:af:c0:7a:03:1c:2c:a2:40:cf:fa:af:e4:d2:cf:7b:81:
         3b:15:be:0a:04:8f:67:47:03:7d:4a:e0:00:cd:fd:40:0c:4a:
         8b:fb:7b:08:a9:9d:f5:e2:99:fe:de:5c:0f:b7:0f:c4:13:0b:
         21:72:f4:00:a6:76:08:16:3c:0f:06:e6:9c:f4:6e:d8:2e:6f:
         8f:9d:7c:49:14:02:73:00:10:3b:bb:73:cc:08:b0:b4:ec:5c:
         df:a3:9b:f9:69:af:a1:62:9c:d1:4a:2a:21:74:a6:78:1c:d5:
         08:79:40:db:06:56:de:88:a1:37:fe:b3:a7:99:17:8e:f2:86:
         8c:86:56:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:07:17 2025 by rpki-client