Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.mft
File:                     wE23YjJB1-Znj8JXUfpOC2ZlGGs.mft (raw, json)
Hash identifier:          Q1XOUzElmfo+h1d37y6Q0rk3+2RWj8+JFPb49NrX80k=
Subject key identifier:   AA:C5:40:DF:51:B6:36:DE:C5:46:9D:92:42:65:9F:79:C3:C2:B0:9D
Authority key identifier: C0:4D:B7:62:32:41:D7:E6:67:8F:C2:57:51:FA:4E:0B:66:65:18:6B
Certificate issuer:       /CN=c04db7623241d7e6678fc25751fa4e0b6665186b
Certificate serial:       019A515145180F44CD2E5A520AC42394725B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wE23YjJB1-Znj8JXUfpOC2ZlGGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.mft
Manifest number:          118A
Signing time:             Wed 05 Nov 2025 00:01:11 +0000
Manifest this update:     Wed 05 Nov 2025 00:01:11 +0000
Manifest next update:     Thu 06 Nov 2025 00:01:11 +0000
Files and hashes:         1: 0kvVQcd2e4SnQh3xLN4W9Ie4suY.roa (hash: dfbeFrG20UF3jAoNCZUQnOLXn1JG2r7gMGzts7DU6SI=)
                          2: Jsb0BR9UN-dcyjDsxkaO3-Yvltw.roa (hash: mF6vNbBQIU1GWKkIg2h8rHabqCIgbySUD4lzazj7BZI=)
                          3: L1zaQrOyYMyhb-vjYsccEQ0rOGs.roa (hash: h8hWAA3iPsZGpLorxG9VKCzAf/rtjUUbjPF4osJaSgE=)
                          4: oB9bZbRwGhzU8WuOdPBmky_nv2k.roa (hash: 1SnSLuXNNFwu9oud/OcFmIuzLgq0f2HlkrbZraM+p3Q=)
                          5: pU_eB5rSsUS6EVPfiP0TBGNtCcY.roa (hash: rx92LY3LSKSOciZBDpqfQO1j0HB6jcKddcqiSbdXBt8=)
                          6: sqhUxFl6CcGyU6cWBXsdx2sYfd4.roa (hash: z1bLM/XjYo3lfS/p4JsuBkvAngm8wCUro59bQLMM7mw=)
                          7: wE23YjJB1-Znj8JXUfpOC2ZlGGs.crl (hash: 9DJXzuleGvqjyizgX/zUMcporoXY0NhFLQv3lRrTtKs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wE23YjJB1-Znj8JXUfpOC2ZlGGs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 22:37:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:51:51:45:18:0f:44:cd:2e:5a:52:0a:c4:23:94:72:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c04db7623241d7e6678fc25751fa4e0b6665186b
        Validity
            Not Before: Nov  5 00:01:11 2025 GMT
            Not After : Nov  6 00:01:11 2025 GMT
        Subject: CN=aac540df51b636dec5469d9242659f79c3c2b09d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b0:bf:dc:0c:08:d2:24:04:6c:78:b8:63:4c:
                    5f:f3:60:0b:c6:5a:a9:c4:5a:ef:79:ad:0c:25:9d:
                    a3:9c:e9:7c:fe:34:d2:07:09:23:59:3b:50:f8:d0:
                    75:1e:ac:5e:97:82:39:4b:37:ab:bc:be:2e:75:c0:
                    56:1e:8c:32:57:54:fe:f4:c0:ef:97:bc:64:3b:bc:
                    47:f5:26:2d:d9:7f:ce:c8:b4:e7:fd:7e:9d:ce:29:
                    21:03:69:ac:0b:34:a0:9c:d6:74:55:09:42:a9:ac:
                    56:58:35:94:c9:ee:29:21:5b:f7:9b:07:d2:05:b7:
                    a6:60:ee:6d:ac:34:ec:a3:23:22:a9:57:25:a4:8c:
                    b6:03:ba:ca:39:bd:35:4d:df:4b:e5:2e:9b:81:61:
                    ed:01:b9:f8:0a:18:a8:14:ec:04:1a:ec:f1:ce:b6:
                    46:72:6c:a7:24:f0:74:98:7f:c8:cc:9a:1e:e0:03:
                    91:f5:bf:c6:30:f0:86:a1:5e:17:ba:2e:2c:88:6a:
                    ec:85:53:a8:d3:6c:61:0d:8f:0d:58:19:71:54:22:
                    d8:56:87:43:ff:f7:d7:65:80:42:ed:6f:bb:17:a9:
                    ab:99:9a:66:25:ec:c5:19:b2:d4:5e:18:2a:16:f8:
                    a4:50:13:37:8f:61:7f:4f:a3:55:a6:85:49:9b:b3:
                    c5:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:C5:40:DF:51:B6:36:DE:C5:46:9D:92:42:65:9F:79:C3:C2:B0:9D
            X509v3 Authority Key Identifier:
                keyid:C0:4D:B7:62:32:41:D7:E6:67:8F:C2:57:51:FA:4E:0B:66:65:18:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wE23YjJB1-Znj8JXUfpOC2ZlGGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:26:d7:15:a1:48:a5:67:c6:4a:f8:c9:0a:dc:31:ec:60:1f:
         ba:ee:e0:c9:06:be:5f:17:95:20:dc:4b:af:3a:d3:41:3a:b0:
         2c:4b:57:92:c8:75:1d:1f:73:79:ee:80:1d:9b:e6:7d:b3:19:
         82:87:51:45:13:08:8b:5c:e7:96:ba:35:c5:cf:ca:d6:47:61:
         eb:7b:0f:c3:0c:df:e0:2c:80:9d:d6:86:b7:3a:c9:76:60:6b:
         46:b7:93:71:2e:3c:2f:3e:7b:21:e5:38:5c:4e:82:27:68:21:
         33:c8:d0:7a:22:99:e5:24:8f:91:65:b0:7c:57:b4:48:67:7a:
         91:d2:e8:fa:c4:22:c9:93:08:24:90:cd:f8:0c:d2:db:7e:21:
         8a:92:eb:d7:99:9e:00:cf:50:eb:b7:b4:d0:01:a4:77:ce:f2:
         4a:ce:60:db:95:8e:0c:05:d1:c6:86:de:0f:b8:a3:e9:67:d8:
         71:20:cd:90:cf:f7:a6:b3:67:ec:f6:83:3c:9e:4f:cd:63:9d:
         d6:8c:35:66:d6:ff:99:26:90:e1:d3:f2:88:a9:82:b3:bd:d6:
         14:f1:59:b6:7e:af:2d:10:06:4c:f3:8d:7f:11:98:f7:51:eb:
         73:5b:e2:b2:98:3c:36:33:5a:0e:e2:5c:15:d6:10:c6:25:27:
         ff:dc:a2:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:18:48 2025 by rpki-client