
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e95e79-2702-40e0-9b8a-e7717b287066/1/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.mft
File:                     ws4IFBZ-qoGJ_YTTkCcOrfKUgss.mft (raw, json)
Hash identifier:          HKR2TX5KaxgtgBqTLXvSnsAhh6JxX0VLtg4rvvXX5qQ=
Subject key identifier:   6F:EF:C8:B4:0A:70:7A:C0:D7:F2:EE:73:9D:DC:15:8D:73:41:37:F4
Authority key identifier: C2:CE:08:14:16:7E:AA:81:89:FD:84:D3:90:27:0E:AD:F2:94:82:CB
Certificate issuer:       /CN=c2ce0814167eaa8189fd84d390270eadf29482cb
Certificate serial:       019A4C981D581B23EDDD964640318E2E2205
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/e95e79-2702-40e0-9b8a-e7717b287066/1/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.mft
Manifest number:          0B8C
Signing time:             Tue 04 Nov 2025 02:00:28 +0000
Manifest this update:     Tue 04 Nov 2025 02:00:28 +0000
Manifest next update:     Wed 05 Nov 2025 02:00:28 +0000
Files and hashes:         1: R1gidcfPTDL9l_CbPS671EyX5iY.roa (hash: c4a4L7/lsOBY0SjW+Je19dj12ru5NWUKEP164tb+S4Q=)
                          2: Re7xjUICEpcefdPF_f0YtM8qXn4.roa (hash: ekIH5kxgf0bGVz6q5zIjK4NfDPuAaNIY8i0OtjeIH9w=)
                          3: f7Zg_MmXx6IJnLloz3q786pe2i4.roa (hash: mDHnzXpmbP7OAduSpZ+5VZ3yHq/l9M3cROQgCCtCtyw=)
                          4: ws4IFBZ-qoGJ_YTTkCcOrfKUgss.crl (hash: iNum7rICfxH1DLs/pcq5pGYjqVRrwj3Ksc/U6Rhxr6o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/e95e79-2702-40e0-9b8a-e7717b287066/1/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/e95e79-2702-40e0-9b8a-e7717b287066/1/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 02:00:28 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4c:98:1d:58:1b:23:ed:dd:96:46:40:31:8e:2e:22:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2ce0814167eaa8189fd84d390270eadf29482cb
        Validity
            Not Before: Nov  4 02:00:28 2025 GMT
            Not After : Nov  5 02:00:28 2025 GMT
        Subject: CN=6fefc8b40a707ac0d7f2ee739ddc158d734137f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:9d:34:2f:6e:43:b3:56:79:14:65:ef:96:99:
                    7a:22:9b:8c:c3:49:f8:f3:a2:c1:25:59:2e:2d:69:
                    e7:af:b2:fa:c3:01:d0:21:fe:89:19:7a:22:db:6c:
                    55:17:b6:ee:7b:a4:9d:52:fc:22:d5:c1:33:58:8b:
                    cb:ba:4a:5b:ae:d1:62:52:cb:6e:a2:57:d8:99:91:
                    8d:79:35:05:ec:63:bd:d3:e3:9e:bb:11:da:2a:dd:
                    41:db:fe:f7:88:6a:a4:81:1f:4e:81:1e:9a:26:2b:
                    2a:cf:79:e2:63:09:ed:58:f5:9f:6f:d3:3e:7e:de:
                    e8:38:61:ae:b5:bd:da:5c:bd:90:64:0f:56:2b:75:
                    49:90:08:23:be:7a:bb:46:16:7e:44:53:2f:ca:04:
                    a1:3c:43:47:02:c4:8a:7b:0a:2c:02:9b:8d:41:77:
                    68:48:43:57:d3:f0:58:c8:6d:9e:d6:2e:77:5c:34:
                    30:53:ac:1d:93:04:03:dc:f8:56:e8:14:10:ab:7b:
                    09:cc:56:51:bd:e5:cf:73:59:db:f8:78:59:fd:3a:
                    c9:31:27:8f:dc:8a:39:1d:d3:8c:88:b1:cb:60:af:
                    25:9d:27:0a:5a:4e:d6:87:00:42:bf:bd:e1:71:7a:
                    8c:29:7c:ba:f7:02:72:aa:5f:40:ec:59:53:71:a6:
                    20:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:EF:C8:B4:0A:70:7A:C0:D7:F2:EE:73:9D:DC:15:8D:73:41:37:F4
            X509v3 Authority Key Identifier:
                keyid:C2:CE:08:14:16:7E:AA:81:89:FD:84:D3:90:27:0E:AD:F2:94:82:CB
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e95e79-2702-40e0-9b8a-e7717b287066/1/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e95e79-2702-40e0-9b8a-e7717b287066/1/ws4IFBZ-qoGJ_YTTkCcOrfKUgss.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         8d:1e:ca:fb:4f:ab:88:bc:0f:1d:c5:8f:31:e6:32:b3:3d:c1:
         19:58:71:c7:b5:d1:74:a1:ee:4b:29:ca:45:f3:b8:17:5d:2c:
         50:7c:48:01:42:a2:ad:0e:b1:ff:57:54:f4:47:0b:b5:0d:4c:
         f9:40:94:52:97:c6:23:88:5a:6f:1d:b7:63:c6:ca:09:1d:71:
         4e:bb:90:c9:34:03:98:f8:36:4e:13:fa:12:db:99:eb:22:99:
         bb:6c:68:25:4c:ee:57:1f:03:ea:8d:20:8e:6c:ee:25:bf:e4:
         0e:f8:2c:a6:2c:8d:60:65:b0:ad:76:2e:f5:48:c2:7d:90:86:
         71:1a:b0:52:44:f4:7a:80:7f:a1:33:22:76:6e:f3:0a:56:83:
         dc:c3:75:02:19:2c:96:ac:42:ee:d2:85:00:78:4a:55:8b:2c:
         4f:9d:98:a6:b3:d3:a6:03:98:a7:cb:72:ff:6f:ca:d9:fc:fc:
         27:9f:3a:e2:5c:1b:95:a1:e9:f3:a3:7d:01:74:24:6f:87:47:
         48:e7:c7:07:9f:6c:49:e6:f0:10:ee:55:dc:27:57:5f:2e:ce:
         7d:8e:65:83:a1:e9:40:a8:b8:09:df:fb:f7:09:0a:18:43:2a:
         36:28:59:0f:56:e5:84:a7:fe:27:f3:bd:3b:89:12:e3:f2:7a:
         a3:42:ba:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 10:44:22 2025 by rpki-client