Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/a2fd11-ff1d-4901-8b5a-cae35a871646/1/Wc_oEoYU0zJajOwYM9c7tqRpjA4.mft
File:                     Wc_oEoYU0zJajOwYM9c7tqRpjA4.mft (raw, json)
Hash identifier:          1m6pbtnz2YP3x8dU3gAe7cOQoOSIKU5oeB/QLw/Le7U=
Subject key identifier:   06:FB:5D:BB:07:86:F7:EC:82:D7:53:55:80:A9:EB:24:20:2E:A2:32
Authority key identifier: 59:CF:E8:12:86:14:D3:32:5A:8C:EC:18:33:D7:3B:B6:A4:69:8C:0E
Certificate issuer:       /CN=59cfe8128614d3325a8cec1833d73bb6a4698c0e
Certificate serial:       019A5187AD853C202F40893147FF2F082736
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wc_oEoYU0zJajOwYM9c7tqRpjA4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/a2fd11-ff1d-4901-8b5a-cae35a871646/1/Wc_oEoYU0zJajOwYM9c7tqRpjA4.mft
Manifest number:          0504
Signing time:             Wed 05 Nov 2025 01:00:37 +0000
Manifest this update:     Wed 05 Nov 2025 01:00:37 +0000
Manifest next update:     Thu 06 Nov 2025 01:00:37 +0000
Files and hashes:         1: JOSO1JmulK_3UGT4DHh2rfgYfwY.roa (hash: EgfSLon34sQaHSqw1cjg97JzDl/x10iZFo3pqDa2iBE=)
                          2: Wc_oEoYU0zJajOwYM9c7tqRpjA4.crl (hash: 2OSn9vb0g51ubuY1WeBAtA4I36IpJzuC2Q883ZzFm4g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/a2fd11-ff1d-4901-8b5a-cae35a871646/1/Wc_oEoYU0zJajOwYM9c7tqRpjA4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/a2fd11-ff1d-4901-8b5a-cae35a871646/1/Wc_oEoYU0zJajOwYM9c7tqRpjA4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Wc_oEoYU0zJajOwYM9c7tqRpjA4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 06 Nov 2025 01:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:51:87:ad:85:3c:20:2f:40:89:31:47:ff:2f:08:27:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59cfe8128614d3325a8cec1833d73bb6a4698c0e
        Validity
            Not Before: Nov  5 01:00:37 2025 GMT
            Not After : Nov  6 01:00:37 2025 GMT
        Subject: CN=06fb5dbb0786f7ec82d7535580a9eb24202ea232
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e1:ee:c8:9c:91:2d:ef:44:84:50:e1:33:c4:
                    62:ff:c2:fe:ae:f6:b6:13:d6:b8:4f:ed:28:41:4e:
                    50:e7:ea:d3:a4:40:e9:5f:2a:93:0f:8f:1a:88:e1:
                    7f:75:d0:de:4e:72:54:0e:eb:99:0a:59:78:81:c6:
                    63:c3:07:68:a9:44:7a:62:ef:0c:5e:80:cc:31:03:
                    d1:77:b8:a3:64:8a:ed:90:76:0e:5b:89:66:0d:8e:
                    85:45:ef:79:20:be:6f:7e:5a:1c:36:d1:04:3f:96:
                    ac:1a:3d:d7:ad:42:01:6f:d4:e5:2c:7b:44:2a:d7:
                    4d:99:c1:1f:61:0f:90:f4:bd:aa:50:cb:74:a5:51:
                    3b:e6:46:6f:e0:d9:cf:89:5f:12:1d:cc:98:6c:11:
                    6a:4d:41:2b:dc:a0:4f:50:a5:c0:0c:d6:b7:1f:6e:
                    76:33:a4:e2:68:92:5a:60:42:01:b7:15:5b:27:4a:
                    ec:38:5e:a9:e3:41:a4:20:ff:28:78:3b:ad:0f:b4:
                    27:0c:c7:40:9e:c8:06:3d:6f:76:d1:65:3c:1a:0f:
                    14:3b:81:1b:40:32:0b:8c:cc:7e:55:c2:6c:c4:b2:
                    1a:fe:6b:92:38:61:76:58:e4:59:50:41:fd:83:d2:
                    90:c2:84:93:0f:58:30:9f:93:9f:f6:25:9b:cf:21:
                    d4:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:FB:5D:BB:07:86:F7:EC:82:D7:53:55:80:A9:EB:24:20:2E:A2:32
            X509v3 Authority Key Identifier:
                keyid:59:CF:E8:12:86:14:D3:32:5A:8C:EC:18:33:D7:3B:B6:A4:69:8C:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wc_oEoYU0zJajOwYM9c7tqRpjA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a2fd11-ff1d-4901-8b5a-cae35a871646/1/Wc_oEoYU0zJajOwYM9c7tqRpjA4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a2fd11-ff1d-4901-8b5a-cae35a871646/1/Wc_oEoYU0zJajOwYM9c7tqRpjA4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:40:bd:4d:7d:f0:d4:58:a6:87:5f:ab:dd:5a:e1:fb:51:dc:
         9b:ba:b7:0d:93:8b:8b:d3:c7:a3:bc:48:b7:d7:30:fc:dc:96:
         83:fd:b5:ea:7c:06:c4:fd:13:a6:1e:d4:93:fb:2c:d9:01:cc:
         07:20:ee:22:3a:19:bd:e7:75:75:6a:68:07:b7:aa:6c:a8:64:
         9a:a0:91:37:6f:69:21:22:1d:1e:66:d8:06:d5:06:aa:00:cb:
         4a:da:1f:6a:5b:80:7e:e3:11:90:96:5f:d7:6f:e6:db:33:7f:
         5b:80:58:75:df:74:aa:e1:4e:1a:6f:f3:5e:af:c5:39:60:b5:
         51:a4:9c:bc:a5:53:2c:84:c5:99:7e:3f:7a:04:0b:9f:93:0b:
         40:15:3d:74:d5:10:24:b4:07:02:eb:97:52:6c:7c:74:b4:5f:
         df:2d:ab:3d:b0:96:50:93:10:51:da:c9:ac:6d:78:3f:ba:d6:
         82:d9:91:e5:36:3a:90:73:f5:f4:59:53:0e:b9:95:b3:b2:13:
         bd:35:27:ec:3c:3e:05:89:5a:e1:55:df:98:91:f0:c8:02:0c:
         c9:8d:ed:72:90:28:fd:85:53:9a:26:1d:df:1c:d0:b0:96:9a:
         1a:88:08:a6:ed:96:3a:c0:83:aa:ff:80:75:5e:15:d0:7a:87:
         9e:a8:0a:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpRh62FPCAvQIkxR/8vCCc2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5Y2ZlODEyODYxNGQzMzI1YThjZWMxODMzZDczYmI2YTQ2
OThjMGUwHhcNMjUxMTA1MDEwMDM3WhcNMjUxMTA2MDEwMDM3WjAzMTEwLwYDVQQD
EygwNmZiNWRiYjA3ODZmN2VjODJkNzUzNTU4MGE5ZWIyNDIwMmVhMjMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAouHuyJyRLe9EhFDhM8Ri/8L+rva2
E9a4T+0oQU5Q5+rTpEDpXyqTD48aiOF/ddDeTnJUDuuZCll4gcZjwwdoqUR6Yu8M
XoDMMQPRd7ijZIrtkHYOW4lmDY6FRe95IL5vflocNtEEP5asGj3XrUIBb9TlLHtE
KtdNmcEfYQ+Q9L2qUMt0pVE75kZv4NnPiV8SHcyYbBFqTUEr3KBPUKXADNa3H252
M6TiaJJaYEIBtxVbJ0rsOF6p40GkIP8oeDutD7QnDMdAnsgGPW920WU8Gg8UO4Eb
QDILjMx+VcJsxLIa/muSOGF2WORZUEH9g9KQwoSTD1gwn5Of9iWbzyHUHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAb7XbsHhvfsgtdTVYCp6yQgLqIyMB8GA1UdIwQY
MBaAFFnP6BKGFNMyWozsGDPXO7akaYwOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2Nfb0VvWVUwekphak93WU05Yzd0cVJwakE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9hMmZkMTEtZmYxZC00OTAxLThiNWEt
Y2FlMzVhODcxNjQ2LzEvV2Nfb0VvWVUwekphak93WU05Yzd0cVJwakE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi9hMmZkMTEtZmYxZC00OTAxLThiNWEtY2FlMzVhODcxNjQ2
LzEvV2Nfb0VvWVUwekphak93WU05Yzd0cVJwakE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeEC9TX3w
1Fimh1+r3Vrh+1Hcm7q3DZOLi9PHo7xIt9cw/NyWg/216nwGxP0Tph7Uk/ss2QHM
ByDuIjoZved1dWpoB7eqbKhkmqCRN29pISIdHmbYBtUGqgDLStofaluAfuMRkJZf
12/m2zN/W4BYdd90quFOGm/zXq/FOWC1UaScvKVTLITFmX4/egQLn5MLQBU9dNUQ
JLQHAuuXUmx8dLRf3y2rPbCWUJMQUdrJrG14P7rWgtmR5TY6kHP19FlTDrmVs7IT
vTUn7Dw+BYla4VXfmJHwyAIMyY3tcpAo/YVTmiYd3xzQsJaaGogIpu2WOsCDqv+A
dV4V0HqHnqgKbQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 11:10:43 2025 by rpki-client