
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/a8de56-edcc-40b1-b87f-4a07f97e98a9/1/WzSxhIYRAAcf5Ns92oSoLMG7zGI.mft
File:                     WzSxhIYRAAcf5Ns92oSoLMG7zGI.mft (raw, json)
Hash identifier:          TRzS7KXT42cKVgGOn9rzcULKaIYAeq8i7z7MbSVL6qk=
Subject key identifier:   15:AB:A4:73:8B:B3:80:43:4C:7B:41:F7:12:2A:4F:52:A6:87:E8:5F
Authority key identifier: 5B:34:B1:84:86:11:00:07:1F:E4:DB:3D:DA:84:A8:2C:C1:BB:CC:62
Certificate issuer:       /CN=5b34b184861100071fe4db3dda84a82cc1bbcc62
Certificate serial:       019A4DAB067369C131943B498C090B359617
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WzSxhIYRAAcf5Ns92oSoLMG7zGI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/a8de56-edcc-40b1-b87f-4a07f97e98a9/1/WzSxhIYRAAcf5Ns92oSoLMG7zGI.mft
Manifest number:          0B84
Signing time:             Tue 04 Nov 2025 07:00:45 +0000
Manifest this update:     Tue 04 Nov 2025 07:00:45 +0000
Manifest next update:     Wed 05 Nov 2025 07:00:45 +0000
Files and hashes:         1: WzSxhIYRAAcf5Ns92oSoLMG7zGI.crl (hash: DpqLvmYpTcP31LXpgM84N8TWV6NoxRM2chvtdoPh4fg=)
                          2: euH012EDGUcPvCsGZK3_XSPmReQ.roa (hash: 4a2YJ6UV9i6dy+y4QlBQdoAoRR/Frnfv0MzkbXJqY/U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/a8de56-edcc-40b1-b87f-4a07f97e98a9/1/WzSxhIYRAAcf5Ns92oSoLMG7zGI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/a8de56-edcc-40b1-b87f-4a07f97e98a9/1/WzSxhIYRAAcf5Ns92oSoLMG7zGI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WzSxhIYRAAcf5Ns92oSoLMG7zGI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 07:00:45 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4d:ab:06:73:69:c1:31:94:3b:49:8c:09:0b:35:96:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b34b184861100071fe4db3dda84a82cc1bbcc62
        Validity
            Not Before: Nov  4 07:00:45 2025 GMT
            Not After : Nov  5 07:00:45 2025 GMT
        Subject: CN=15aba4738bb380434c7b41f7122a4f52a687e85f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:34:d0:a7:6b:b7:77:cf:64:e4:47:ef:cf:3f:
                    b1:2d:5a:46:3a:1d:20:ce:c6:23:8a:9a:26:80:74:
                    c6:91:7c:08:53:0f:88:2f:1e:46:aa:7b:70:b2:ff:
                    92:3f:74:5d:0c:9b:16:c2:3c:03:f6:24:56:b7:0a:
                    e7:c5:de:c4:fc:ee:07:33:13:b7:91:17:d7:d6:fa:
                    a5:49:af:19:3a:35:af:37:31:6f:6f:8d:a0:81:a6:
                    d0:5e:46:c6:53:cc:cc:10:40:db:19:ee:c2:5d:c8:
                    76:06:47:41:d2:af:87:fe:05:8e:a4:f5:c4:e1:f8:
                    c4:dc:8c:39:84:5a:9a:43:fd:e8:ee:a6:23:d7:cd:
                    8b:c3:9a:c3:2b:16:d1:bd:e4:84:ac:ac:bf:ae:07:
                    d2:20:53:63:05:fa:1b:fd:a5:59:b6:6c:37:73:1f:
                    55:6a:59:72:86:54:d4:ae:fa:29:d3:f9:01:f4:b4:
                    88:03:ca:91:36:3b:cd:0d:bd:b4:06:a4:58:b1:d9:
                    7e:88:fa:84:38:ec:58:3e:b9:f1:9e:44:21:c1:0c:
                    b3:39:b4:99:99:77:77:2c:be:03:b6:1f:82:5b:32:
                    a2:45:ea:09:29:1f:d6:e3:e9:df:87:5d:af:e3:e4:
                    42:2f:3f:1e:9f:9f:95:e0:69:87:5f:35:95:98:a2:
                    32:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:AB:A4:73:8B:B3:80:43:4C:7B:41:F7:12:2A:4F:52:A6:87:E8:5F
            X509v3 Authority Key Identifier:
                keyid:5B:34:B1:84:86:11:00:07:1F:E4:DB:3D:DA:84:A8:2C:C1:BB:CC:62
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WzSxhIYRAAcf5Ns92oSoLMG7zGI.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a8de56-edcc-40b1-b87f-4a07f97e98a9/1/WzSxhIYRAAcf5Ns92oSoLMG7zGI.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a8de56-edcc-40b1-b87f-4a07f97e98a9/1/WzSxhIYRAAcf5Ns92oSoLMG7zGI.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         45:7e:79:81:f8:a0:b5:c0:f4:3f:64:5c:2c:32:67:86:d8:c3:
         40:c4:3e:ec:5c:8e:eb:d0:0c:50:57:b8:87:b1:db:60:0e:e1:
         4d:51:ad:57:04:8c:8a:39:70:d6:8b:ef:c2:04:d7:a7:75:d1:
         47:fd:2b:28:30:c2:2b:7f:bf:25:44:a3:17:c8:7c:b1:5f:45:
         e6:42:74:81:f6:28:73:e5:54:d8:0a:fe:0f:b7:73:5b:a3:4e:
         0b:b4:44:e8:98:77:b1:51:88:8d:b7:af:64:81:7b:d2:39:f2:
         4e:71:18:21:15:3a:11:2e:ef:04:27:af:7d:ec:94:bd:44:92:
         32:6a:bc:5b:af:55:66:a5:d3:60:fa:e5:88:62:de:24:ad:f6:
         23:6a:7d:95:65:7c:0b:5a:03:3a:7c:43:f8:16:b3:a0:28:33:
         04:a1:66:d4:20:64:67:d0:b5:f8:d9:b3:69:18:63:ca:6f:97:
         02:c3:89:a2:7b:84:8a:e1:90:e8:cf:08:ce:10:d1:2f:6b:9c:
         bf:b2:32:c5:dd:58:05:55:d2:17:fe:f4:2c:d2:e9:27:2c:49:
         e4:d3:3c:5f:96:f7:78:8c:50:14:ae:58:4e:c6:40:7c:1a:4b:
         6a:75:23:94:5d:2b:c7:7c:94:0f:7b:87:10:0c:85:6d:ca:2d:
         af:5c:d8:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 14:53:45 2025 by rpki-client