Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/c4fe04-063b-47b7-bebb-b2c0a4e7afc3/1/wXPRwALuqv2ht1iN1WIcTm_Jn64.mft
File:                     wXPRwALuqv2ht1iN1WIcTm_Jn64.mft (raw, json)
Hash identifier:          GvGzL5DxZvvooGzjmcA0GHJRJq8/zySQuDtP4WAw0j4=
Subject key identifier:   80:16:08:53:A5:93:88:3B:9E:31:EE:DC:88:BE:51:43:A4:2A:9E:1E
Authority key identifier: C1:73:D1:C0:02:EE:AA:FD:A1:B7:58:8D:D5:62:1C:4E:6F:C9:9F:AE
Certificate issuer:       /CN=c173d1c002eeaafda1b7588dd5621c4e6fc99fae
Certificate serial:       019A4EF42C723FF625850111418A18096101
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wXPRwALuqv2ht1iN1WIcTm_Jn64.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/c4fe04-063b-47b7-bebb-b2c0a4e7afc3/1/wXPRwALuqv2ht1iN1WIcTm_Jn64.mft
Manifest number:          05D1
Signing time:             Tue 04 Nov 2025 13:00:16 +0000
Manifest this update:     Tue 04 Nov 2025 13:00:16 +0000
Manifest next update:     Wed 05 Nov 2025 13:00:16 +0000
Files and hashes:         1: JVqwz5mxYEMKGOHUiJ_GpSZnGN0.roa (hash: h8BGg/oG3iccU6NMytqMgx4YDS4KmCfVV7fVMEeYu2Y=)
                          2: wXPRwALuqv2ht1iN1WIcTm_Jn64.crl (hash: aVJHSDyyRzQdCnG2Tjl8oAnItakN5v1lZqYsEDm+fwE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/c4fe04-063b-47b7-bebb-b2c0a4e7afc3/1/wXPRwALuqv2ht1iN1WIcTm_Jn64.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/c4fe04-063b-47b7-bebb-b2c0a4e7afc3/1/wXPRwALuqv2ht1iN1WIcTm_Jn64.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wXPRwALuqv2ht1iN1WIcTm_Jn64.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 13:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:f4:2c:72:3f:f6:25:85:01:11:41:8a:18:09:61:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c173d1c002eeaafda1b7588dd5621c4e6fc99fae
        Validity
            Not Before: Nov  4 13:00:16 2025 GMT
            Not After : Nov  5 13:00:16 2025 GMT
        Subject: CN=80160853a593883b9e31eedc88be5143a42a9e1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:8b:3b:ee:fe:89:e7:b1:29:30:c8:4a:a8:02:
                    ec:61:14:f2:5f:12:85:cd:f3:48:f8:81:94:cc:32:
                    b0:1e:4d:44:fd:c3:b4:2e:c4:7c:ce:29:ce:79:db:
                    96:20:91:62:5f:d5:96:70:05:d7:aa:a6:41:d0:9c:
                    20:c6:cf:ba:23:5b:0a:af:f7:9b:96:92:5f:34:5a:
                    51:68:dd:63:a3:14:03:91:fe:7e:0c:aa:b0:fe:dd:
                    a6:13:e7:01:d3:8b:d6:cd:29:b1:4e:bd:bb:5c:76:
                    ea:72:2d:9d:93:0c:54:79:f4:22:14:b8:a0:9d:a7:
                    83:78:c4:35:b0:d9:ae:f5:82:3c:f1:c1:b2:f3:3a:
                    99:25:2e:6c:d2:a8:ac:36:51:ee:81:52:21:e1:0a:
                    6d:1c:cc:eb:45:e5:aa:94:d1:ee:f9:18:bc:09:cf:
                    70:b8:c4:c2:d3:b3:9d:d8:bb:ba:a0:26:85:27:5a:
                    52:1e:d4:a5:7c:d8:2e:75:92:ab:6e:2b:25:ec:4b:
                    5d:a7:22:f1:1b:2b:06:62:96:a0:99:3e:85:a5:d5:
                    de:bf:52:4e:81:82:8e:ff:b6:0e:63:f9:38:de:1d:
                    01:8e:bd:c3:a0:b0:fb:8d:ee:3d:a9:9e:c9:30:50:
                    24:1a:12:e1:85:ba:ec:c7:28:74:41:13:31:3b:94:
                    57:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:16:08:53:A5:93:88:3B:9E:31:EE:DC:88:BE:51:43:A4:2A:9E:1E
            X509v3 Authority Key Identifier:
                keyid:C1:73:D1:C0:02:EE:AA:FD:A1:B7:58:8D:D5:62:1C:4E:6F:C9:9F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wXPRwALuqv2ht1iN1WIcTm_Jn64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c4fe04-063b-47b7-bebb-b2c0a4e7afc3/1/wXPRwALuqv2ht1iN1WIcTm_Jn64.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c4fe04-063b-47b7-bebb-b2c0a4e7afc3/1/wXPRwALuqv2ht1iN1WIcTm_Jn64.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:f4:65:8b:45:ff:4b:4a:b7:4c:09:96:92:1c:c0:fd:6a:51:
         57:e7:e2:b4:bf:ea:f3:94:eb:6f:86:61:eb:b8:1f:97:a8:0f:
         3c:4c:32:32:56:c1:9d:c8:1c:e6:82:60:d3:19:c7:d8:1e:bd:
         ee:99:b8:e9:d0:ce:78:97:82:0a:57:66:73:bc:df:5f:0e:af:
         7a:55:38:35:36:67:69:82:d9:ab:b4:bf:c9:b6:a2:0f:56:65:
         f9:d1:f4:3e:15:14:a1:7f:5a:b2:25:f2:e9:9c:2f:f5:0f:db:
         a5:20:49:be:f0:24:c8:30:28:3c:94:18:46:f0:67:77:26:ec:
         bc:7b:2e:8e:6e:c1:5f:55:dd:f2:6f:89:3b:54:3f:55:89:01:
         9c:ca:d4:9a:3d:98:82:9d:8f:a8:d2:aa:4b:d4:79:64:ba:45:
         3a:2b:d7:f7:ed:e2:99:cd:c5:cf:e0:ec:c7:d8:ba:ee:13:1f:
         63:81:c1:93:ad:57:ff:e5:87:70:01:9b:d9:49:c0:7a:f7:f3:
         f7:3e:c8:69:7c:2c:f9:71:f2:39:77:3c:0c:82:93:b6:64:8b:
         bd:74:ad:17:10:9f:be:38:58:54:48:d0:27:8d:fe:8a:73:d9:
         ec:4f:e7:31:d0:88:32:f0:27:74:81:a2:32:b9:86:1a:39:fe:
         83:e2:18:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:39:13 2025 by rpki-client