Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/0ee2ab-07d9-4a81-abf0-e0e4be6696f9/1/WGMp8we5goW3HSLHGX7Bm3Ad7Wc.mft
File:                     WGMp8we5goW3HSLHGX7Bm3Ad7Wc.mft (raw, json)
Hash identifier:          yYrlgBAi9KzDykfHxyAGmCCQe7zt5YdMtvoX/cN4T/U=
Subject key identifier:   05:E3:3D:86:93:48:0E:88:77:9A:09:A7:3F:9B:47:8E:18:8F:E4:AF
Authority key identifier: 58:63:29:F3:07:B9:82:85:B7:1D:22:C7:19:7E:C1:9B:70:1D:ED:67
Certificate issuer:       /CN=586329f307b98285b71d22c7197ec19b701ded67
Certificate serial:       019A522C8149A6FF6BD9E9DC5EE6A890C7D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WGMp8we5goW3HSLHGX7Bm3Ad7Wc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/0ee2ab-07d9-4a81-abf0-e0e4be6696f9/1/WGMp8we5goW3HSLHGX7Bm3Ad7Wc.mft
Manifest number:          1713
Signing time:             Wed 05 Nov 2025 04:00:39 +0000
Manifest this update:     Wed 05 Nov 2025 04:00:39 +0000
Manifest next update:     Thu 06 Nov 2025 04:00:39 +0000
Files and hashes:         1: PiqBBXAA6we4MoLDl4MdjTFczpk.roa (hash: UmY/XV+HwWVcLuYg16r45R+AHciaE7tJGWzQzK3TX58=)
                          2: WGMp8we5goW3HSLHGX7Bm3Ad7Wc.crl (hash: i8qk1laqE0L4fkfxAm/2NWwddZtQo2kKui9PFWhVbGk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/0ee2ab-07d9-4a81-abf0-e0e4be6696f9/1/WGMp8we5goW3HSLHGX7Bm3Ad7Wc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/0ee2ab-07d9-4a81-abf0-e0e4be6696f9/1/WGMp8we5goW3HSLHGX7Bm3Ad7Wc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WGMp8we5goW3HSLHGX7Bm3Ad7Wc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 22:37:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:52:2c:81:49:a6:ff:6b:d9:e9:dc:5e:e6:a8:90:c7:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=586329f307b98285b71d22c7197ec19b701ded67
        Validity
            Not Before: Nov  5 04:00:39 2025 GMT
            Not After : Nov  6 04:00:39 2025 GMT
        Subject: CN=05e33d8693480e88779a09a73f9b478e188fe4af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c3:52:25:fe:68:1c:2c:88:cd:76:3b:69:90:
                    8a:6e:97:bd:63:40:aa:f0:be:32:0c:ca:10:b6:76:
                    85:49:a9:c8:a1:21:08:ba:05:e4:27:77:8a:1e:02:
                    0d:86:da:c6:69:a7:ba:11:24:e5:09:c3:d1:75:06:
                    ae:a6:26:18:d3:96:70:aa:92:05:29:8f:16:90:0b:
                    35:01:bb:d4:cb:ca:99:5b:8f:17:20:be:00:f8:0a:
                    51:d5:87:d4:7c:c1:aa:c8:14:8c:11:cc:3f:0f:f0:
                    b5:e8:2b:30:a5:2c:9a:9e:c6:89:0b:4b:ca:10:8c:
                    53:d1:84:dd:e4:e1:34:65:87:fd:b9:46:03:70:cf:
                    e9:ce:4b:34:61:ec:0f:54:31:d8:01:9d:eb:d3:60:
                    2c:93:54:b0:77:0f:a5:1b:10:a2:9d:eb:f2:c0:0e:
                    d0:6d:aa:9e:04:30:87:bb:ed:ce:2a:36:c8:76:23:
                    25:f5:78:4c:e2:11:c0:eb:57:d2:fe:ca:b5:b6:c7:
                    c8:87:8f:2a:e5:fc:5b:f2:cf:94:5d:3d:94:f1:0e:
                    3f:cc:67:5d:f0:c3:99:f2:37:20:e3:9f:3f:a0:0f:
                    24:dd:56:03:bc:8c:d0:d0:b5:7e:fc:ca:07:3b:aa:
                    3a:1e:0d:57:f9:0e:5e:e1:ff:f2:11:37:51:aa:ef:
                    92:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:E3:3D:86:93:48:0E:88:77:9A:09:A7:3F:9B:47:8E:18:8F:E4:AF
            X509v3 Authority Key Identifier:
                keyid:58:63:29:F3:07:B9:82:85:B7:1D:22:C7:19:7E:C1:9B:70:1D:ED:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WGMp8we5goW3HSLHGX7Bm3Ad7Wc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0ee2ab-07d9-4a81-abf0-e0e4be6696f9/1/WGMp8we5goW3HSLHGX7Bm3Ad7Wc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0ee2ab-07d9-4a81-abf0-e0e4be6696f9/1/WGMp8we5goW3HSLHGX7Bm3Ad7Wc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:08:b4:ac:d9:40:7d:03:88:26:02:22:0f:23:bd:f7:18:84:
         93:bc:85:56:40:75:ff:f4:f1:fb:29:6d:bd:3c:4f:23:57:1a:
         15:98:e7:11:57:d0:24:11:07:59:78:74:f5:57:ab:b4:7e:ea:
         dd:c0:8d:c6:57:64:0a:9b:09:89:09:a4:ec:98:f6:76:02:3f:
         f1:b2:d7:0b:d3:93:e6:71:09:b4:75:4e:10:ef:00:ed:77:a9:
         5d:9b:2a:d3:47:72:03:48:f9:b9:60:92:7e:de:ad:57:54:ca:
         23:70:e4:ff:f5:88:13:e2:b0:fc:53:61:73:2e:5c:37:d2:0b:
         35:34:82:24:5a:c9:11:c9:56:52:76:c8:b6:cf:2a:89:d1:c6:
         53:48:1f:4e:73:bf:11:e6:60:b8:d9:6e:6f:65:22:4a:bf:37:
         94:ac:f8:ae:30:65:96:86:6b:81:b1:53:f6:2e:1d:4e:67:05:
         62:03:85:02:6f:06:ef:5c:11:7e:e7:70:46:00:f3:77:b4:9d:
         8b:07:de:2a:ad:a3:00:ec:b7:8d:36:4f:b6:fa:53:34:48:49:
         54:67:7f:2d:33:f5:47:6b:9c:f6:fd:c7:03:80:f7:5f:b0:9f:
         8d:39:97:63:0b:e0:77:f6:95:c1:4d:f6:ba:b6:9f:1f:62:55:
         1f:8e:99:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:42:53 2025 by rpki-client