
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/422a4c-8394-46b4-aa18-d1fbe5a91d70/1/wLpQ_KM7GA1oQ25-8Mv2kEuvRdQ.mft
File:                     wLpQ_KM7GA1oQ25-8Mv2kEuvRdQ.mft (raw, json)
Hash identifier:          JI3CUU3XIz4Dm/j5Gtky9LtwgRKXuBmqgtIswWppS+g=
Subject key identifier:   3A:A1:CD:CA:6D:DC:61:7B:94:1B:6D:63:D0:8A:06:48:DE:30:88:1E
Authority key identifier: C0:BA:50:FC:A3:3B:18:0D:68:43:6E:7E:F0:CB:F6:90:4B:AF:45:D4
Certificate issuer:       /CN=c0ba50fca33b180d68436e7ef0cbf6904baf45d4
Certificate serial:       019A4D73DEFDF530B5D65C8D09ED23F2A184
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wLpQ_KM7GA1oQ25-8Mv2kEuvRdQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/422a4c-8394-46b4-aa18-d1fbe5a91d70/1/wLpQ_KM7GA1oQ25-8Mv2kEuvRdQ.mft
Manifest number:          06D1
Signing time:             Tue 04 Nov 2025 06:00:30 +0000
Manifest this update:     Tue 04 Nov 2025 06:00:30 +0000
Manifest next update:     Wed 05 Nov 2025 06:00:30 +0000
Files and hashes:         1: RpRW6TZvmlJBGznF3-hnJMYz2K4.roa (hash: xykvfoJNE09ErVanuSOIuIu5xVg3V0n12SrhzPJXXrg=)
                          2: wLpQ_KM7GA1oQ25-8Mv2kEuvRdQ.crl (hash: 9qLW2Nwss27ITu7CWoyhG0MeqgZpz/CaT7TS65gfX7U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/422a4c-8394-46b4-aa18-d1fbe5a91d70/1/wLpQ_KM7GA1oQ25-8Mv2kEuvRdQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/422a4c-8394-46b4-aa18-d1fbe5a91d70/1/wLpQ_KM7GA1oQ25-8Mv2kEuvRdQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wLpQ_KM7GA1oQ25-8Mv2kEuvRdQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 06:00:30 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4d:73:de:fd:f5:30:b5:d6:5c:8d:09:ed:23:f2:a1:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0ba50fca33b180d68436e7ef0cbf6904baf45d4
        Validity
            Not Before: Nov  4 06:00:30 2025 GMT
            Not After : Nov  5 06:00:30 2025 GMT
        Subject: CN=3aa1cdca6ddc617b941b6d63d08a0648de30881e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:97:41:db:87:d0:ff:c0:59:ce:00:74:4c:c1:
                    95:35:e0:b2:85:dc:0e:21:ee:93:bd:d1:32:03:a1:
                    72:20:e4:e4:bf:35:17:d7:6c:4d:6c:fb:02:09:47:
                    7f:9d:41:76:52:53:52:86:43:aa:f3:1d:fe:e1:1c:
                    48:99:d0:ec:30:a7:ab:ff:fa:7e:d3:40:1e:0a:67:
                    ea:43:95:ac:40:34:65:33:bf:0c:e2:59:a7:11:12:
                    f0:b7:5a:02:76:5a:c1:35:45:21:0a:3f:e6:d8:04:
                    03:6d:b8:3d:9d:e6:b0:f6:45:a9:1f:fa:94:ae:de:
                    79:77:f9:80:55:1e:c2:23:ef:a0:b9:9e:3c:9f:69:
                    7a:29:49:da:98:01:c8:4b:b8:60:44:a3:7b:f7:75:
                    c8:22:cd:b6:bd:e6:78:a9:fa:3e:a9:39:98:79:4d:
                    23:a0:81:2e:b9:9f:cb:c0:08:f1:1f:0f:5b:a0:8f:
                    ad:63:50:7c:be:40:61:b4:f8:28:84:08:f5:65:9c:
                    ac:fc:c9:28:69:8c:0f:3d:68:65:ed:6c:7d:0f:e7:
                    1f:68:4f:24:f1:da:e3:d1:ef:44:99:94:1d:0a:d5:
                    8a:7e:cc:1d:96:1f:f1:53:2d:60:7b:2e:f6:d8:69:
                    64:33:66:86:dc:87:69:0c:c8:35:a4:ac:0a:3e:d8:
                    c9:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:A1:CD:CA:6D:DC:61:7B:94:1B:6D:63:D0:8A:06:48:DE:30:88:1E
            X509v3 Authority Key Identifier:
                keyid:C0:BA:50:FC:A3:3B:18:0D:68:43:6E:7E:F0:CB:F6:90:4B:AF:45:D4
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wLpQ_KM7GA1oQ25-8Mv2kEuvRdQ.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/422a4c-8394-46b4-aa18-d1fbe5a91d70/1/wLpQ_KM7GA1oQ25-8Mv2kEuvRdQ.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/422a4c-8394-46b4-aa18-d1fbe5a91d70/1/wLpQ_KM7GA1oQ25-8Mv2kEuvRdQ.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         41:0e:26:77:62:58:1b:14:d5:c7:6e:99:bc:f0:44:29:74:c2:
         af:5d:4a:29:bb:96:8d:ce:c0:90:d2:d4:e2:a1:88:89:6b:35:
         33:6f:6a:e9:10:ad:15:29:91:fe:3c:98:a9:ad:39:c9:9a:1a:
         47:c5:1b:95:25:d0:eb:36:28:6a:ad:bd:ae:31:72:db:6b:8b:
         92:2a:29:86:4e:5c:41:28:c5:8b:29:9e:02:87:1a:73:36:d6:
         a7:c5:d1:39:ad:99:bd:8b:a6:76:bb:d6:75:5e:4c:15:3a:ff:
         a4:1e:33:71:7a:a5:14:01:83:49:9b:54:20:8e:ca:57:eb:ad:
         3f:50:6b:dd:5b:da:e4:55:d1:5b:11:2d:57:86:35:6b:9e:23:
         76:07:94:fd:db:4a:9c:da:dd:77:85:2c:51:37:18:c5:57:56:
         81:6f:41:33:71:33:7e:a3:4d:c6:91:60:13:33:34:3f:28:46:
         4f:bc:de:fc:aa:e6:52:19:6b:e2:18:e2:ca:55:da:1c:7a:cc:
         32:02:47:6f:89:c5:6b:be:a2:aa:36:80:4a:91:7a:99:3c:9a:
         d8:35:e7:0d:30:35:86:28:3c:35:75:ec:2b:c7:d2:4d:64:da:
         14:1b:29:7a:87:05:9c:78:62:cf:54:83:3e:17:26:e2:7f:ab:
         67:c0:d8:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 11:01:58 2025 by rpki-client