Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/63db93-6077-4953-a6d1-3bfa583e77db/1/wwOJmXRU-gA-H_yM0ui35l2T9OI.mft
File:                     wwOJmXRU-gA-H_yM0ui35l2T9OI.mft (raw, json)
Hash identifier:          tKkPOGxcr2aVVDC0rYcbscfhYRmPIlsB7kcCalAXZCM=
Subject key identifier:   EB:A3:62:F0:78:F7:39:F9:DA:A6:F8:49:70:3B:1B:2B:B5:2C:2B:7B
Authority key identifier: C3:03:89:99:74:54:FA:00:3E:1F:FC:8C:D2:E8:B7:E6:5D:93:F4:E2
Certificate issuer:       /CN=c30389997454fa003e1ffc8cd2e8b7e65d93f4e2
Certificate serial:       019A718086C4D892A6959B8FECE7262C5E2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wwOJmXRU-gA-H_yM0ui35l2T9OI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/63db93-6077-4953-a6d1-3bfa583e77db/1/wwOJmXRU-gA-H_yM0ui35l2T9OI.mft
Manifest number:          0B2B
Signing time:             Tue 11 Nov 2025 06:00:39 +0000
Manifest this update:     Tue 11 Nov 2025 06:00:39 +0000
Manifest next update:     Wed 12 Nov 2025 06:00:39 +0000
Files and hashes:         1: wwOJmXRU-gA-H_yM0ui35l2T9OI.crl (hash: KiFBwcAClvSJlzQrormIPnTaILaMPCgkLS3YxJb/T10=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/63db93-6077-4953-a6d1-3bfa583e77db/1/wwOJmXRU-gA-H_yM0ui35l2T9OI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/63db93-6077-4953-a6d1-3bfa583e77db/1/wwOJmXRU-gA-H_yM0ui35l2T9OI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wwOJmXRU-gA-H_yM0ui35l2T9OI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 06:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:71:80:86:c4:d8:92:a6:95:9b:8f:ec:e7:26:2c:5e:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c30389997454fa003e1ffc8cd2e8b7e65d93f4e2
        Validity
            Not Before: Nov 11 06:00:39 2025 GMT
            Not After : Nov 12 06:00:39 2025 GMT
        Subject: CN=eba362f078f739f9daa6f849703b1b2bb52c2b7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:11:67:c8:7d:f8:3e:62:af:f3:e5:52:4e:64:
                    38:e8:0e:23:23:ab:bc:8e:a8:18:15:1e:6a:3a:38:
                    ed:d3:4c:54:fe:42:e0:63:b7:1a:85:13:8a:62:72:
                    36:b0:55:13:cb:5a:df:74:a9:03:28:2b:76:4b:25:
                    87:31:7d:51:f5:25:6e:eb:4e:98:49:5e:56:c8:c3:
                    01:86:d7:76:c5:32:38:44:4a:be:c6:fe:a9:a7:52:
                    8a:8b:47:87:63:7a:71:d4:2d:95:45:77:9b:77:a2:
                    b9:b2:d7:03:aa:c7:7b:f3:fc:8e:e6:05:c9:6b:d5:
                    0e:54:97:2b:87:b2:9c:93:a0:70:b5:ab:59:a5:0f:
                    cb:b6:8a:ac:7d:c6:59:60:ab:9e:b0:b1:d7:56:d0:
                    d7:b6:80:fc:b4:2e:d5:bf:52:80:aa:4e:b2:dd:42:
                    ee:8a:20:54:e8:32:52:7c:4d:14:14:b4:1c:82:80:
                    ef:df:34:d7:f8:36:fe:da:0b:63:0b:a0:ca:e3:03:
                    00:c7:9a:ab:6e:5f:f3:98:d3:d2:e6:0e:ed:24:50:
                    4b:b5:42:6d:08:ad:0e:c5:a4:48:27:9c:22:00:ac:
                    d1:8a:db:7e:e2:4d:c8:89:c1:4b:f9:db:38:3a:9d:
                    49:e2:d2:b9:f4:73:57:80:be:82:18:68:d1:c9:3f:
                    c3:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:A3:62:F0:78:F7:39:F9:DA:A6:F8:49:70:3B:1B:2B:B5:2C:2B:7B
            X509v3 Authority Key Identifier:
                keyid:C3:03:89:99:74:54:FA:00:3E:1F:FC:8C:D2:E8:B7:E6:5D:93:F4:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wwOJmXRU-gA-H_yM0ui35l2T9OI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/63db93-6077-4953-a6d1-3bfa583e77db/1/wwOJmXRU-gA-H_yM0ui35l2T9OI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/63db93-6077-4953-a6d1-3bfa583e77db/1/wwOJmXRU-gA-H_yM0ui35l2T9OI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:af:e7:30:22:44:c5:40:ca:d9:28:81:ab:83:1a:7e:22:08:
         b7:07:0a:a7:6e:39:78:a4:42:7d:f6:e3:b8:62:30:19:ae:16:
         5f:9f:d8:56:ef:08:26:7f:b8:7d:40:a5:ef:f7:17:85:e3:a4:
         10:26:b3:0a:f2:6d:43:17:7e:0c:8b:fa:47:e9:da:48:79:a1:
         68:a4:92:2d:c9:2a:f5:72:c6:69:2c:9b:c4:0f:ac:63:50:ba:
         ce:d6:36:91:89:c9:48:54:31:1f:46:c3:e2:05:5d:5a:44:44:
         cc:37:08:2f:35:84:8b:30:78:64:89:71:35:48:0d:7b:4f:72:
         4e:b6:3e:a9:18:9b:bf:3a:7c:f2:0b:74:ff:54:07:df:78:ba:
         67:52:38:c5:8d:bb:ac:45:a7:b3:c7:92:6b:a5:78:a3:84:13:
         fd:50:3e:6c:13:a5:ee:a5:2a:6f:8f:8a:ef:ae:bd:86:97:90:
         e9:6f:a3:3e:f6:ff:17:41:2f:af:5f:ae:0a:ae:82:fb:d9:8a:
         e1:2f:a4:3c:60:cd:4a:b4:df:3e:c9:2e:38:9e:23:c0:1e:b7:
         97:63:c9:dd:cb:55:04:dd:a5:bc:6f:80:fb:21:ed:e8:2d:e7:
         d0:74:a6:28:99:cf:34:5b:19:13:37:58:98:40:d8:0f:14:f9:
         72:07:54:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:23 2025 by rpki-client