
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8fcbe9-9b9b-4987-95be-25904ba9a355/1/wPadL0dEdNu1f2vsjC1l1eDClmE.mft
File:                     wPadL0dEdNu1f2vsjC1l1eDClmE.mft (raw, json)
Hash identifier:          gutUjrC5Lyl8hDEYmRIrJdQSBfUgILYCkcNYMmizNxc=
Subject key identifier:   22:7B:59:65:F6:F0:80:10:93:D2:49:50:5F:1A:7C:3E:75:92:3D:80
Authority key identifier: C0:F6:9D:2F:47:44:74:DB:B5:7F:6B:EC:8C:2D:65:D5:E0:C2:96:61
Certificate issuer:       /CN=c0f69d2f474474dbb57f6bec8c2d65d5e0c29661
Certificate serial:       019A4D7406018F3AABF651DE6227F04370C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wPadL0dEdNu1f2vsjC1l1eDClmE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/8fcbe9-9b9b-4987-95be-25904ba9a355/1/wPadL0dEdNu1f2vsjC1l1eDClmE.mft
Manifest number:          115B
Signing time:             Tue 04 Nov 2025 06:00:40 +0000
Manifest this update:     Tue 04 Nov 2025 06:00:40 +0000
Manifest next update:     Wed 05 Nov 2025 06:00:40 +0000
Files and hashes:         1: 1-f9PBVCsqBgm5V29oKXRRYWkevY.roa (hash: 7Ql3JH1RgsBJ7ZK4VNDw9mOs8UhnRqnrPre6nqQT+h0=)
                          2: wPadL0dEdNu1f2vsjC1l1eDClmE.crl (hash: cyP5bpepuvXb+vhrNRurxGNf8DP//1sQVJTaXmu4ZBk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/8fcbe9-9b9b-4987-95be-25904ba9a355/1/wPadL0dEdNu1f2vsjC1l1eDClmE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/8fcbe9-9b9b-4987-95be-25904ba9a355/1/wPadL0dEdNu1f2vsjC1l1eDClmE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wPadL0dEdNu1f2vsjC1l1eDClmE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 06:00:40 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4d:74:06:01:8f:3a:ab:f6:51:de:62:27:f0:43:70:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0f69d2f474474dbb57f6bec8c2d65d5e0c29661
        Validity
            Not Before: Nov  4 06:00:40 2025 GMT
            Not After : Nov  5 06:00:40 2025 GMT
        Subject: CN=227b5965f6f0801093d249505f1a7c3e75923d80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:5d:6a:bc:80:75:91:be:cb:de:59:d7:46:f6:
                    75:98:8a:72:48:c0:46:32:3b:7f:af:94:e6:ed:43:
                    35:54:c1:a5:9f:bd:52:01:b6:61:e1:a2:d7:52:54:
                    c7:1a:45:8b:fd:df:e9:08:5f:c4:c4:ce:25:0d:2c:
                    3e:bb:4f:7b:c6:8e:f1:22:6f:03:c5:cc:2c:23:5a:
                    0d:49:98:e2:ab:ef:4b:f2:bb:00:2b:f2:d6:f0:7d:
                    fa:b3:3c:db:f3:7e:f5:69:7b:a2:de:63:b6:7f:75:
                    ca:45:b3:3e:34:a2:2d:7c:a7:27:46:54:d7:87:df:
                    62:ac:1d:0d:b3:c3:08:23:62:a5:ab:40:d7:c3:4b:
                    fe:fd:c6:62:8f:c8:d6:6b:56:3c:01:76:cf:bb:17:
                    b0:50:71:05:f2:6c:fc:71:75:c8:65:b1:d3:ca:a6:
                    33:1c:6b:40:8c:23:4d:bc:fa:42:10:c8:4c:af:e7:
                    21:cd:9a:fb:8a:dd:8f:10:92:99:51:a7:83:21:74:
                    01:bd:16:19:5f:4c:1f:d5:bc:be:d2:a9:57:e9:51:
                    c7:8f:ea:e2:3d:da:39:20:b9:16:6a:0c:83:bf:96:
                    8f:98:d2:1a:2c:5d:df:e0:e1:f2:6d:fe:d5:ad:00:
                    66:25:c0:62:3b:33:12:6a:4b:c4:e3:23:fb:f3:02:
                    c4:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:7B:59:65:F6:F0:80:10:93:D2:49:50:5F:1A:7C:3E:75:92:3D:80
            X509v3 Authority Key Identifier:
                keyid:C0:F6:9D:2F:47:44:74:DB:B5:7F:6B:EC:8C:2D:65:D5:E0:C2:96:61
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wPadL0dEdNu1f2vsjC1l1eDClmE.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8fcbe9-9b9b-4987-95be-25904ba9a355/1/wPadL0dEdNu1f2vsjC1l1eDClmE.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8fcbe9-9b9b-4987-95be-25904ba9a355/1/wPadL0dEdNu1f2vsjC1l1eDClmE.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         65:25:37:82:0d:94:22:5e:a9:b5:84:19:25:8c:b9:37:0d:c1:
         99:1e:99:8c:d7:1c:e7:22:f7:3e:76:1e:30:72:9a:af:28:3a:
         af:24:8e:7e:0b:11:dd:56:6d:27:04:59:0a:ee:fb:43:ad:66:
         f9:23:e2:87:a6:6b:23:75:24:57:72:44:e6:f5:ed:aa:e0:e4:
         74:e1:6b:41:02:8b:e2:7c:33:fe:c2:07:48:51:70:80:34:e0:
         cb:75:20:b8:28:c4:8a:75:05:12:03:eb:8e:e7:41:61:bc:59:
         ff:cc:ca:e8:80:6f:b1:3f:0b:38:a6:9b:f7:23:42:4b:00:eb:
         3e:f5:01:b9:79:76:e5:66:c9:4e:d7:80:1f:bd:c2:4e:fc:54:
         5a:48:08:2a:93:9b:df:9a:d7:ff:d9:ca:39:f3:aa:5b:2b:56:
         70:de:40:00:71:40:14:f5:43:55:30:aa:00:bf:f5:05:bc:5a:
         94:9f:4f:94:7f:50:0c:de:5b:4b:9c:4e:e2:7c:0f:0a:06:8b:
         fe:bc:46:cc:47:0e:b6:ae:10:84:95:d0:10:80:cf:9a:1e:6b:
         d8:72:16:a3:dc:44:be:e7:4f:d3:aa:cc:e0:cc:8d:f7:ae:1b:
         cf:fb:98:3c:ea:29:c5:52:67:2e:f1:e1:bb:b8:6c:e4:21:2c:
         48:47:7c:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 11:00:36 2025 by rpki-client