Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/396890-e96c-4d1f-936c-8fee7ec7c3cd/1/wBV0y54ONb-XVO-RdQFLx0YAjw4.mft
File:                     wBV0y54ONb-XVO-RdQFLx0YAjw4.mft (raw, json)
Hash identifier:          cHAG7tBStm8KGZrs+GgiUGVzBpupBnSZqcIlDNQFp9I=
Subject key identifier:   97:2E:89:25:82:41:02:E1:BB:CE:F0:1F:39:2E:EC:F4:22:3E:A3:7E
Authority key identifier: C0:15:74:CB:9E:0E:35:BF:97:54:EF:91:75:01:4B:C7:46:00:8F:0E
Certificate issuer:       /CN=c01574cb9e0e35bf9754ef9175014bc746008f0e
Certificate serial:       019A4F2B1DD782973B8706FE37406C241B1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wBV0y54ONb-XVO-RdQFLx0YAjw4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/396890-e96c-4d1f-936c-8fee7ec7c3cd/1/wBV0y54ONb-XVO-RdQFLx0YAjw4.mft
Manifest number:          03CF
Signing time:             Tue 04 Nov 2025 14:00:16 +0000
Manifest this update:     Tue 04 Nov 2025 14:00:16 +0000
Manifest next update:     Wed 05 Nov 2025 14:00:16 +0000
Files and hashes:         1: nEKK32oFQy3X2Yzvdv8fEhGcazg.roa (hash: LMYqTrguswdi0QtX9F4iCp/SyY8hGayYOolliB1rgCg=)
                          2: wBV0y54ONb-XVO-RdQFLx0YAjw4.crl (hash: i8e0gudrifhAmD6RJYuUR/zDfY/mLrgXmgXUkSb1oYw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/396890-e96c-4d1f-936c-8fee7ec7c3cd/1/wBV0y54ONb-XVO-RdQFLx0YAjw4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/396890-e96c-4d1f-936c-8fee7ec7c3cd/1/wBV0y54ONb-XVO-RdQFLx0YAjw4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wBV0y54ONb-XVO-RdQFLx0YAjw4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4f:2b:1d:d7:82:97:3b:87:06:fe:37:40:6c:24:1b:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c01574cb9e0e35bf9754ef9175014bc746008f0e
        Validity
            Not Before: Nov  4 14:00:16 2025 GMT
            Not After : Nov  5 14:00:16 2025 GMT
        Subject: CN=972e8925824102e1bbcef01f392eecf4223ea37e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:b2:8c:2b:7b:2b:20:fb:49:43:73:d2:59:f0:
                    8f:dc:91:30:79:5a:21:0b:d1:f8:61:81:a4:44:6f:
                    cb:cc:04:ec:37:b1:c4:26:79:1c:6f:c4:17:1c:01:
                    ee:32:98:69:12:e4:3c:ef:20:ae:33:6a:48:11:6d:
                    00:37:c9:f0:f8:d3:96:57:8f:55:51:d3:fc:0b:90:
                    e0:8f:1a:10:91:b4:0e:b8:0b:8e:e5:74:90:31:d1:
                    d9:c0:76:f4:a4:95:13:a1:08:28:69:d8:af:15:d1:
                    b0:78:34:66:5f:32:3a:36:60:c5:3f:8c:d8:60:87:
                    68:9c:e8:03:09:6f:36:fc:1f:28:f9:ef:fd:34:a1:
                    e3:ae:bc:c7:1f:06:05:61:15:97:b7:f4:38:9d:a9:
                    84:58:bf:18:d0:ee:1e:a1:43:78:75:db:0b:ee:65:
                    9b:31:f0:50:39:6c:ef:30:72:2b:49:c5:8b:2a:5a:
                    28:c0:d6:d4:94:7a:d0:a8:c5:64:76:b0:23:44:b6:
                    ae:a4:ab:0f:d3:3e:aa:bd:86:94:29:7e:7f:3c:69:
                    dd:80:59:f6:f9:ea:50:ca:e2:b4:5f:a2:84:ba:a8:
                    0f:c9:12:17:d5:c8:85:f4:34:58:78:44:d5:5b:7a:
                    35:fa:3f:4f:f5:b1:5b:94:be:19:17:ef:9c:2e:d6:
                    25:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:2E:89:25:82:41:02:E1:BB:CE:F0:1F:39:2E:EC:F4:22:3E:A3:7E
            X509v3 Authority Key Identifier:
                keyid:C0:15:74:CB:9E:0E:35:BF:97:54:EF:91:75:01:4B:C7:46:00:8F:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBV0y54ONb-XVO-RdQFLx0YAjw4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/396890-e96c-4d1f-936c-8fee7ec7c3cd/1/wBV0y54ONb-XVO-RdQFLx0YAjw4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/396890-e96c-4d1f-936c-8fee7ec7c3cd/1/wBV0y54ONb-XVO-RdQFLx0YAjw4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:d9:b0:41:d6:94:d5:10:45:3e:e0:f8:36:93:6b:43:85:9f:
         1c:2c:ff:c7:82:de:39:fc:ac:dd:bf:a1:b4:75:d8:f5:4b:5f:
         ff:c7:fa:f1:95:d5:47:5c:0c:d6:87:86:a2:62:06:14:3c:65:
         3e:6a:e5:4e:cf:93:13:69:fa:6b:b7:7c:cc:c2:a0:92:9f:f1:
         a4:50:39:70:8d:35:12:ef:65:82:60:14:26:63:49:a9:54:db:
         62:73:59:28:b7:c7:94:64:81:2b:fb:e0:ac:c3:67:44:9e:54:
         b1:7b:d2:09:2f:59:7d:43:35:5f:71:99:48:24:06:20:bb:4a:
         a2:87:10:10:b2:3b:57:f1:7f:e4:67:ad:e3:ce:9e:88:66:94:
         9f:f1:70:73:27:aa:23:d1:b3:63:33:e6:d9:8f:31:fb:f5:7c:
         3b:2f:40:95:84:1b:79:29:20:86:7a:2d:82:1a:d7:3d:62:29:
         3a:12:e1:5a:82:04:2b:86:f4:00:2e:ab:e5:88:68:72:e2:72:
         99:a2:d9:14:81:0d:84:77:3f:e2:47:26:a5:08:a2:54:88:1d:
         f9:43:b3:c3:4a:e0:1e:4a:2a:4f:d6:cc:98:1d:bd:7b:02:52:
         d2:42:02:5c:48:9a:8d:f1:59:c3:86:f6:b9:d4:24:4a:03:f9:
         a3:de:a3:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:17:48 2025 by rpki-client