Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/8247a6-2b12-483f-b1ac-6ac1d15554ab/1/w0vf-I6OiYmHHhNAgRGtFDOzDGM.mft
File:                     w0vf-I6OiYmHHhNAgRGtFDOzDGM.mft (raw, json)
Hash identifier:          vSPuPvKE9MG8eJLjoN8irAOdRHMlaNFn4ag7Gm8l1VA=
Subject key identifier:   21:71:9D:77:7E:1A:DC:17:2B:4A:ED:00:81:D1:8F:0E:81:96:04:6A
Authority key identifier: C3:4B:DF:F8:8E:8E:89:89:87:1E:13:40:81:11:AD:14:33:B3:0C:63
Certificate issuer:       /CN=c34bdff88e8e8989871e13408111ad1433b30c63
Certificate serial:       019A4F6302429109B7E428A85A7411A59554
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w0vf-I6OiYmHHhNAgRGtFDOzDGM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/8247a6-2b12-483f-b1ac-6ac1d15554ab/1/w0vf-I6OiYmHHhNAgRGtFDOzDGM.mft
Manifest number:          0B77
Signing time:             Tue 04 Nov 2025 15:01:19 +0000
Manifest this update:     Tue 04 Nov 2025 15:01:19 +0000
Manifest next update:     Wed 05 Nov 2025 15:01:19 +0000
Files and hashes:         1: ugMcDv1gcgsXhUTa2vBxQzpCLaI.roa (hash: rt0w1lyTwHj5nTBBa43BIhts6ikl3ovgbdGlD8LZ7VQ=)
                          2: w0vf-I6OiYmHHhNAgRGtFDOzDGM.crl (hash: v0lQbFO/70+7crlAYIkRKlLbzlcsAMZt4Yme1bX10RI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/8247a6-2b12-483f-b1ac-6ac1d15554ab/1/w0vf-I6OiYmHHhNAgRGtFDOzDGM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/8247a6-2b12-483f-b1ac-6ac1d15554ab/1/w0vf-I6OiYmHHhNAgRGtFDOzDGM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w0vf-I6OiYmHHhNAgRGtFDOzDGM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4f:63:02:42:91:09:b7:e4:28:a8:5a:74:11:a5:95:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c34bdff88e8e8989871e13408111ad1433b30c63
        Validity
            Not Before: Nov  4 15:01:19 2025 GMT
            Not After : Nov  5 15:01:19 2025 GMT
        Subject: CN=21719d777e1adc172b4aed0081d18f0e8196046a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:4d:79:e2:ee:61:3f:58:80:7f:57:c6:0e:ad:
                    5d:d7:10:2c:4e:2c:43:eb:72:a2:6c:df:fb:f2:3a:
                    79:95:c7:c4:8d:31:0f:90:cd:6b:74:6f:16:f7:43:
                    cf:43:fc:26:c8:d4:25:e2:5b:0a:3e:b7:c0:42:db:
                    20:6c:ab:d8:b1:65:f9:43:d2:f2:0b:8e:b0:e0:58:
                    08:4e:5b:e0:2a:fa:37:fc:d2:fe:0b:a8:d9:39:9e:
                    ff:f6:4b:15:45:ae:11:8d:25:27:58:e4:94:4a:a6:
                    14:c9:c6:ba:56:17:f1:3a:2e:8d:d8:bd:63:ca:7d:
                    9c:51:7f:ec:bd:98:83:8b:d8:ee:1c:3f:22:a8:69:
                    8a:da:48:34:a7:78:1a:96:19:f0:9e:b8:39:74:59:
                    f7:09:d4:9d:31:ce:82:61:4a:43:11:f9:54:5b:e9:
                    b7:dd:62:cb:02:3c:2f:a2:b3:14:cf:94:3c:e2:7c:
                    b5:5e:41:18:ad:27:b0:ef:5f:68:0d:fb:d8:d1:99:
                    26:03:dc:c5:b1:6f:d7:64:6c:5f:4e:50:54:e9:67:
                    4b:f6:be:0e:c3:4b:a4:e1:b6:29:2d:62:06:09:de:
                    7c:57:1b:02:a7:e8:ed:59:39:19:f8:2f:d7:6c:04:
                    58:54:27:7e:64:5b:2f:89:fb:b2:ac:23:e0:06:1b:
                    62:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:71:9D:77:7E:1A:DC:17:2B:4A:ED:00:81:D1:8F:0E:81:96:04:6A
            X509v3 Authority Key Identifier:
                keyid:C3:4B:DF:F8:8E:8E:89:89:87:1E:13:40:81:11:AD:14:33:B3:0C:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w0vf-I6OiYmHHhNAgRGtFDOzDGM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8247a6-2b12-483f-b1ac-6ac1d15554ab/1/w0vf-I6OiYmHHhNAgRGtFDOzDGM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8247a6-2b12-483f-b1ac-6ac1d15554ab/1/w0vf-I6OiYmHHhNAgRGtFDOzDGM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:aa:2a:33:1f:ac:da:79:7d:7b:bc:35:3c:10:25:a8:eb:02:
         f4:df:25:d1:86:f9:5e:04:c1:19:75:68:1c:37:6a:72:fa:e0:
         fc:bd:f3:58:1e:7f:91:c0:db:9c:fb:05:70:4d:43:89:55:c3:
         26:cc:12:82:1d:d1:09:1c:fb:68:08:27:7a:6d:89:a6:db:11:
         6e:26:71:6a:15:e9:aa:7c:51:9e:4b:fc:2e:c8:d5:ad:48:aa:
         6c:d5:50:59:e0:47:87:0d:c1:84:dc:12:0e:48:5e:92:8e:b8:
         ed:8f:9f:80:d4:bf:74:03:38:50:6d:7a:6f:40:09:d5:76:13:
         7c:f0:95:e5:dc:68:05:a6:3d:28:1e:df:91:23:f2:e0:c2:8c:
         d1:74:b2:5e:02:f3:f7:2e:14:ce:c4:da:b5:02:d3:25:84:22:
         27:16:bf:30:57:5f:d9:58:73:98:8f:6b:40:b8:7b:34:4c:34:
         0b:f3:57:d0:47:10:e0:8a:dd:d2:4e:32:75:c2:ea:ec:ff:2e:
         fd:7f:fd:4f:71:ca:94:0e:5f:c4:59:65:11:a8:84:e3:b0:7b:
         44:59:ad:b9:3f:25:ec:d9:71:76:30:b0:2c:a2:60:51:08:0a:
         76:9e:fb:c3:b7:3f:b1:db:c7:42:12:0f:fa:1b:71:73:de:d7:
         09:60:c4:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:15:42 2025 by rpki-client