Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/8ab26c-ba17-4288-8749-8fc930d8702a/1/wpwQB3RpgfzECIOZZbFnHAN9Ehs.mft
File:                     wpwQB3RpgfzECIOZZbFnHAN9Ehs.mft (raw, json)
Hash identifier:          6H419rfWJUUBP/RbT6IVNdH2xUYy2LUKEF9fOhmDxTU=
Subject key identifier:   19:89:C2:7A:57:B5:EC:99:99:70:4C:C1:A0:FC:BD:6B:62:8C:93:59
Authority key identifier: C2:9C:10:07:74:69:81:FC:C4:08:83:99:65:B1:67:1C:03:7D:12:1B
Certificate issuer:       /CN=c29c1007746981fcc408839965b1671c037d121b
Certificate serial:       019A2B8C843BA622965F4D7F88F6AECBA566
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wpwQB3RpgfzECIOZZbFnHAN9Ehs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/8ab26c-ba17-4288-8749-8fc930d8702a/1/wpwQB3RpgfzECIOZZbFnHAN9Ehs.mft
Manifest number:          0B65
Signing time:             Tue 28 Oct 2025 16:00:20 +0000
Manifest this update:     Tue 28 Oct 2025 16:00:20 +0000
Manifest next update:     Wed 29 Oct 2025 16:00:20 +0000
Files and hashes:         1: _vDgQuqvDJFp6MMZOZL5IEmORHs.roa (hash: 7Xz5OI/32CttzkIydxRg2GdNWdK569D5srRiLf2kPkg=)
                          2: wpwQB3RpgfzECIOZZbFnHAN9Ehs.crl (hash: tmAFlNeynvDCvpHgOXJ5yP2UuPRKp0rIaiSJiS2UULU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/8ab26c-ba17-4288-8749-8fc930d8702a/1/wpwQB3RpgfzECIOZZbFnHAN9Ehs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/8ab26c-ba17-4288-8749-8fc930d8702a/1/wpwQB3RpgfzECIOZZbFnHAN9Ehs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wpwQB3RpgfzECIOZZbFnHAN9Ehs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Oct 2025 14:12:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:2b:8c:84:3b:a6:22:96:5f:4d:7f:88:f6:ae:cb:a5:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c29c1007746981fcc408839965b1671c037d121b
        Validity
            Not Before: Oct 28 16:00:20 2025 GMT
            Not After : Oct 29 16:00:20 2025 GMT
        Subject: CN=1989c27a57b5ec9999704cc1a0fcbd6b628c9359
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:8c:49:03:c6:9a:64:f3:4d:f4:3b:f8:11:1d:
                    6f:56:be:98:16:f3:1a:0b:d7:0b:84:85:89:4a:f9:
                    b3:73:54:dc:d0:9a:ec:3a:db:24:e5:5c:5a:78:c2:
                    9e:da:2b:a7:90:86:70:5a:66:c9:a2:a0:5a:91:c6:
                    f6:cd:73:36:a4:bf:07:30:9f:25:b0:5d:62:7c:07:
                    28:e1:46:d7:f4:3e:be:1f:68:7d:cf:58:21:8f:dd:
                    6c:f8:06:b9:73:30:df:97:f9:77:de:c5:48:6d:d8:
                    50:7c:5f:f8:17:02:86:e5:ff:18:ef:18:e5:0e:7c:
                    70:3f:58:de:49:24:22:af:84:6e:e5:1e:25:79:36:
                    a3:94:c0:02:15:0e:1d:1e:74:d5:19:c4:0c:28:58:
                    cc:8c:eb:9e:0b:fc:1e:bd:92:d9:91:74:0d:2f:c7:
                    97:39:d7:0b:41:c7:50:6b:b5:15:4b:09:d8:73:5d:
                    8a:b1:43:5a:43:28:a0:f3:18:df:8e:6e:ad:fb:2d:
                    b7:d4:ba:9c:3f:8c:63:df:93:12:8b:91:9e:e3:f1:
                    e1:ba:f6:da:54:b3:ee:89:09:7f:0c:a8:3b:78:e8:
                    ce:2a:28:fd:77:4f:d4:93:87:05:37:c6:cc:d6:a3:
                    1e:34:c9:7e:f8:01:59:32:aa:a0:3b:cb:fe:b4:18:
                    0c:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:89:C2:7A:57:B5:EC:99:99:70:4C:C1:A0:FC:BD:6B:62:8C:93:59
            X509v3 Authority Key Identifier:
                keyid:C2:9C:10:07:74:69:81:FC:C4:08:83:99:65:B1:67:1C:03:7D:12:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wpwQB3RpgfzECIOZZbFnHAN9Ehs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/8ab26c-ba17-4288-8749-8fc930d8702a/1/wpwQB3RpgfzECIOZZbFnHAN9Ehs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/8ab26c-ba17-4288-8749-8fc930d8702a/1/wpwQB3RpgfzECIOZZbFnHAN9Ehs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:89:97:28:0c:a7:79:cf:00:79:9f:3b:49:52:d1:30:4c:47:
         09:10:60:1b:fd:25:80:eb:2c:47:50:d0:12:73:4a:c6:0e:92:
         e2:dc:8a:3f:2f:52:94:0a:3a:6a:ec:8d:02:8b:c0:fc:10:96:
         a7:d9:51:51:34:c3:a6:ef:1e:6d:9f:be:f3:1b:13:ef:93:6b:
         c3:83:39:95:4e:46:d0:68:78:3a:d7:dd:8e:1e:2d:60:3e:e1:
         d1:5c:41:2e:74:10:91:10:9f:dd:4a:b1:db:b1:5e:54:24:44:
         fd:82:20:2e:01:76:3e:76:25:25:29:de:85:49:0d:35:f2:33:
         7f:2a:b2:74:0b:03:af:af:9b:48:5e:12:21:8d:16:ae:70:5b:
         ff:e7:2a:5d:53:11:6c:78:d9:6e:4a:8a:82:51:03:da:e6:57:
         bd:1b:ba:b9:31:36:69:22:ab:b7:d2:c9:96:0c:58:0f:ff:dd:
         18:6a:28:cd:e1:98:61:e9:6a:0a:d4:5f:00:42:b9:d0:c1:12:
         86:ff:45:d7:97:d5:d7:5c:b1:3c:2e:67:24:69:bb:87:4f:13:
         17:01:54:19:31:a0:d9:dc:6e:43:0d:1d:c4:9a:25:77:1c:76:
         97:f8:9a:1b:a9:58:29:2e:39:19:58:70:18:79:6c:c3:7c:eb:
         1e:1f:c1:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 20:19:37 2025 by rpki-client