Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/01ebc2-84d0-4ae3-a2c2-a3b6be4a9e9b/1/wPvVh2YT7cVuD13kaMzl6yiF_yk.mft
File:                     wPvVh2YT7cVuD13kaMzl6yiF_yk.mft (raw, json)
Hash identifier:          JxHxM/7sh8B1zQTPVgKC7pkFVPy0aZF0m5bBHZStV7w=
Subject key identifier:   50:EB:70:4F:6D:B5:02:75:FD:D0:02:53:87:A1:E8:08:63:02:F0:FC
Authority key identifier: C0:FB:D5:87:66:13:ED:C5:6E:0F:5D:E4:68:CC:E5:EB:28:85:FF:29
Certificate issuer:       /CN=c0fbd5876613edc56e0f5de468cce5eb2885ff29
Certificate serial:       019A4CCEC640014C0E258189F09B11C09015
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wPvVh2YT7cVuD13kaMzl6yiF_yk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/01ebc2-84d0-4ae3-a2c2-a3b6be4a9e9b/1/wPvVh2YT7cVuD13kaMzl6yiF_yk.mft
Manifest number:          1716
Signing time:             Tue 04 Nov 2025 03:00:10 +0000
Manifest this update:     Tue 04 Nov 2025 03:00:10 +0000
Manifest next update:     Wed 05 Nov 2025 03:00:10 +0000
Files and hashes:         1: EFxSU25sGdE7ReGZ4hQCxcL1EQo.roa (hash: uR14mG4VrYUKqqD3TGgmTlLEojfMxYMgFQs/N0rSPIw=)
                          2: J4eDOx5SJHSihuh2E2EdDHS1FZg.roa (hash: AX1DVLfXHqcPxw4MGiaVf7TNJa9XXou7rNBSUIsHkkI=)
                          3: djNdVQcmVTrF_ImkfBTW1TEQZN4.roa (hash: DtPfbxjdA+NH1bgRX93+QdhSVAdl+yD2XBVTnWNlO4A=)
                          4: mgkhzfFw4ufuprRiBTlmBaPgwFM.roa (hash: dz3CImHP1M7gcq3PLY9DQc36du2KECW9tVbHZAcIciw=)
                          5: wPvVh2YT7cVuD13kaMzl6yiF_yk.crl (hash: fH/pAcx+HSlzgyGX2ibEtRN1NQQ+kMIK/w2kZ18B43Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/01ebc2-84d0-4ae3-a2c2-a3b6be4a9e9b/1/wPvVh2YT7cVuD13kaMzl6yiF_yk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/01ebc2-84d0-4ae3-a2c2-a3b6be4a9e9b/1/wPvVh2YT7cVuD13kaMzl6yiF_yk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wPvVh2YT7cVuD13kaMzl6yiF_yk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4c:ce:c6:40:01:4c:0e:25:81:89:f0:9b:11:c0:90:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0fbd5876613edc56e0f5de468cce5eb2885ff29
        Validity
            Not Before: Nov  4 03:00:10 2025 GMT
            Not After : Nov  5 03:00:10 2025 GMT
        Subject: CN=50eb704f6db50275fdd0025387a1e8086302f0fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:0e:bf:9c:cf:26:e9:ce:3f:1c:85:5d:69:6e:
                    94:76:7b:e4:40:80:70:51:e1:16:14:d5:03:83:96:
                    d3:39:09:ea:a0:6c:b9:c8:a1:34:60:f7:ad:db:7c:
                    f4:fb:64:81:f3:0f:0f:b6:55:b3:14:c1:8b:72:fa:
                    99:18:74:57:16:e8:18:23:94:ed:b3:99:40:36:21:
                    d3:d1:e9:ec:cf:04:bf:8c:a3:f0:4d:f6:fe:a8:4c:
                    f9:20:81:6b:14:5e:21:e3:a1:94:35:8c:fd:4a:f1:
                    bf:77:d0:34:96:8b:a2:dd:d3:9c:23:0f:7b:7b:e7:
                    7d:cb:c5:bf:de:db:67:08:bc:02:f9:b1:a4:8f:b6:
                    93:ab:b8:b3:4d:15:02:99:57:9e:c3:84:56:e9:61:
                    22:04:2a:e0:4e:dc:45:01:57:15:59:cd:8f:1b:e4:
                    19:5d:54:1a:ca:8b:c5:86:62:c0:b4:44:de:39:71:
                    60:e9:79:95:44:b0:42:97:74:dd:32:9a:29:57:b3:
                    ec:c1:e9:c8:5c:60:1d:6f:76:18:63:79:b2:41:2e:
                    fd:3f:a6:91:88:21:66:89:ac:c8:2b:bb:d6:e9:78:
                    55:0a:b3:b3:7b:9f:56:95:63:4d:ce:e5:3f:d8:64:
                    c0:6e:e6:ce:be:8c:24:85:04:c6:dc:64:00:95:ab:
                    cb:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:EB:70:4F:6D:B5:02:75:FD:D0:02:53:87:A1:E8:08:63:02:F0:FC
            X509v3 Authority Key Identifier:
                keyid:C0:FB:D5:87:66:13:ED:C5:6E:0F:5D:E4:68:CC:E5:EB:28:85:FF:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wPvVh2YT7cVuD13kaMzl6yiF_yk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/01ebc2-84d0-4ae3-a2c2-a3b6be4a9e9b/1/wPvVh2YT7cVuD13kaMzl6yiF_yk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/01ebc2-84d0-4ae3-a2c2-a3b6be4a9e9b/1/wPvVh2YT7cVuD13kaMzl6yiF_yk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:3b:a5:26:ab:66:d0:44:aa:fc:0a:7a:2a:da:b7:06:8c:b9:
         3b:d0:cd:dc:c3:55:c3:ce:ff:8e:e1:13:c1:56:76:21:ae:2d:
         87:af:06:53:1b:f1:6b:72:1d:6c:cb:04:c2:ba:31:2e:9e:2a:
         c9:d4:70:b1:0a:38:d4:d1:bc:d4:cc:82:46:31:fa:22:de:fd:
         3a:56:93:b8:50:04:ee:a7:12:0b:96:43:fe:aa:08:6b:21:44:
         a6:7e:e3:8c:2a:43:20:1c:8a:a6:45:39:cd:09:7d:d2:a1:f4:
         71:7e:33:c7:73:6a:d3:ed:d3:51:b3:fa:b0:9d:e9:ad:13:ba:
         69:94:f4:a5:a8:10:2e:c6:18:a4:21:d1:40:4e:e5:0f:77:5c:
         75:e3:04:d3:a6:4e:eb:73:f0:13:33:0c:fd:97:eb:7d:41:12:
         d1:b0:9f:c9:d0:b9:5b:f1:d3:d6:f7:82:d0:20:e9:0c:bb:c5:
         cc:2c:da:1c:32:23:65:0a:04:7e:ad:89:78:0e:77:a9:bf:7b:
         fb:cf:d1:a5:27:c1:cb:82:4e:08:d3:b0:56:43:a0:11:05:d7:
         3f:ee:cd:00:ce:1b:8b:b4:a6:5b:89:6f:a1:97:f4:cf:6f:a0:
         55:b4:3f:5f:53:94:ec:fe:96:e5:a4:27:47:73:3b:98:7c:2b:
         74:98:9d:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:56:31 2025 by rpki-client