
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/w8BZHi60nQVZ5vzn7iqoHw9Zum8.mft
File:                     w8BZHi60nQVZ5vzn7iqoHw9Zum8.mft (raw, json)
Hash identifier:          0OU57fKeDJ4NFl5t560ZDEE1EcZJ4CNcwdHcQQjSS7g=
Subject key identifier:   8B:31:2E:DA:CE:E7:CB:25:4B:4F:B5:02:7E:67:DC:05:E9:E6:DC:D7
Authority key identifier: C3:C0:59:1E:2E:B4:9D:05:59:E6:FC:E7:EE:2A:A8:1F:0F:59:BA:6F
Certificate issuer:       /CN=c3c0591e2eb49d0559e6fce7ee2aa81f0f59ba6f
Certificate serial:       019A4D06A3B0668C74E59A2D08B034BC80F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w8BZHi60nQVZ5vzn7iqoHw9Zum8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/w8BZHi60nQVZ5vzn7iqoHw9Zum8.mft
Manifest number:          1719
Signing time:             Tue 04 Nov 2025 04:01:11 +0000
Manifest this update:     Tue 04 Nov 2025 04:01:11 +0000
Manifest next update:     Wed 05 Nov 2025 04:01:11 +0000
Files and hashes:         1: 2BUGtHga-91WOayxMZ7EN3sAoUE.roa (hash: 40eNzoOdvf9iy0CU470Iq6VAmpCnU36Mg3hoCFP9r9Q=)
                          2: 9h--mIIpqce_CC5V9tWD8k8f1RI.roa (hash: qCusOVVsPkg4BA+rVTxVKDF7yoAjbJzwib4jIN4EdoY=)
                          3: Ka5Exl1GeddcELNpCklBpS5TlPs.roa (hash: kRYcEd/x8/mlJ+CtYhq56IHy4jqYQVlovD2KG8xYqY4=)
                          4: i5mGJT0yJZDnIoQ1wNKAWKtKyaQ.roa (hash: RYHnkpcFD3LGUlEQEfMbI20B/0yaDUu4RMrbiJV8nWc=)
                          5: w8BZHi60nQVZ5vzn7iqoHw9Zum8.crl (hash: MYU1Klauq66jr1d4a1KH8VPjsRKZUmp3kozo5yR8dqk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/w8BZHi60nQVZ5vzn7iqoHw9Zum8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/w8BZHi60nQVZ5vzn7iqoHw9Zum8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w8BZHi60nQVZ5vzn7iqoHw9Zum8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 04:01:11 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4d:06:a3:b0:66:8c:74:e5:9a:2d:08:b0:34:bc:80:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3c0591e2eb49d0559e6fce7ee2aa81f0f59ba6f
        Validity
            Not Before: Nov  4 04:01:11 2025 GMT
            Not After : Nov  5 04:01:11 2025 GMT
        Subject: CN=8b312edacee7cb254b4fb5027e67dc05e9e6dcd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:19:1f:14:50:1d:6e:76:bd:63:8a:34:5b:dd:
                    8c:76:2e:6d:01:67:04:08:9a:fa:6b:90:fa:89:09:
                    0b:42:c1:dc:a9:6a:76:97:5a:2c:1c:aa:a2:f6:89:
                    fb:fd:cb:25:32:6d:e9:b8:57:4b:31:f1:ef:af:01:
                    ba:ec:88:b1:a3:c3:36:20:cc:a5:a4:3f:67:48:9a:
                    82:9e:e2:bd:49:b5:af:8a:88:f9:ec:78:86:d8:23:
                    f8:25:32:89:85:bc:e2:4c:8b:81:4e:2b:68:b4:b4:
                    1f:9b:1e:04:39:47:a7:cf:05:dc:b6:69:1b:8b:37:
                    c7:fd:9f:e0:56:64:fb:23:21:05:f1:20:75:1a:6f:
                    9e:09:bc:b8:f7:73:24:fc:29:8c:a5:2b:a2:b2:f6:
                    61:ae:8e:f1:46:b2:dc:4c:04:91:0b:0f:51:b1:54:
                    3e:52:4b:45:b0:75:b1:4f:23:ca:19:38:5a:8d:c4:
                    9e:e8:a6:9c:cd:16:80:e9:3b:41:bf:7e:c0:c7:6e:
                    88:58:31:23:72:83:c9:e5:db:bc:cc:38:ef:5a:ac:
                    40:e3:4b:db:9e:a0:17:3d:f8:67:b4:b8:bc:a5:86:
                    b6:c6:6e:ae:c4:57:7b:29:1f:74:8f:8c:f4:e4:bd:
                    a9:11:ca:5b:e5:f9:9c:97:3e:a5:2c:84:92:fd:e1:
                    1e:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:31:2E:DA:CE:E7:CB:25:4B:4F:B5:02:7E:67:DC:05:E9:E6:DC:D7
            X509v3 Authority Key Identifier:
                keyid:C3:C0:59:1E:2E:B4:9D:05:59:E6:FC:E7:EE:2A:A8:1F:0F:59:BA:6F
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8BZHi60nQVZ5vzn7iqoHw9Zum8.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/w8BZHi60nQVZ5vzn7iqoHw9Zum8.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/w8BZHi60nQVZ5vzn7iqoHw9Zum8.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         1d:44:f1:14:96:3a:56:2c:ef:4e:81:50:f9:f3:66:ac:a9:2d:
         37:ad:58:10:8f:74:91:ed:9c:77:e9:89:d4:80:bf:8c:d7:ac:
         97:d6:e8:b2:e0:9c:c4:6c:8c:8b:09:2f:f3:38:6d:ab:de:7c:
         53:8d:5d:f3:e7:34:8a:b4:1a:02:b8:32:96:f4:69:cc:7f:33:
         ad:e3:9b:a9:4b:6b:c1:9f:17:4b:1d:be:9a:dc:59:ae:d3:3f:
         3c:5e:6c:4d:b4:fa:db:0f:de:64:2f:d6:3e:25:c5:52:98:a3:
         33:41:6a:b4:7a:52:31:01:0b:70:f0:a7:fa:e8:fa:29:40:39:
         9a:ce:4f:df:68:9b:5b:d2:d0:cb:d2:3e:28:ae:32:97:20:f5:
         b4:eb:a0:6c:be:56:52:79:7f:62:2d:68:17:7a:93:43:de:5c:
         2b:f8:10:d9:76:a8:fa:2a:c8:0c:29:ad:5a:22:79:bd:84:2b:
         4d:01:63:43:9f:fa:bd:1f:7a:70:cd:1f:15:9d:94:ba:a9:85:
         d3:14:b9:29:c1:07:85:2e:1d:7b:36:cc:28:87:03:33:f4:e3:
         9a:b3:2c:b3:7f:b3:0e:41:47:42:ef:ca:14:6f:74:84:82:9a:
         14:6a:d6:cd:8b:c2:30:ac:c9:f1:50:8b:2f:8c:9c:a4:6a:3a:
         e8:b5:21:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 11:20:45 2025 by rpki-client