Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/31eeed-388d-40c0-b17d-f553ddd9ed1a/1/wb6oOT9qHTeZGYndh1_FMeQIQDE.mft
File:                     wb6oOT9qHTeZGYndh1_FMeQIQDE.mft (raw, json)
Hash identifier:          qV+qq5WEvwiF6iEICyyv3lFm1mU1wBEpYt/mUy3vTKc=
Subject key identifier:   21:6B:DB:D4:20:4E:EC:32:99:CE:46:0F:44:A9:94:78:10:77:A8:CC
Authority key identifier: C1:BE:A8:39:3F:6A:1D:37:99:19:89:DD:87:5F:C5:31:E4:08:40:31
Certificate issuer:       /CN=c1bea8393f6a1d37991989dd875fc531e4084031
Certificate serial:       019A4B85A4352668F4DA81C23930383E523B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wb6oOT9qHTeZGYndh1_FMeQIQDE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/31eeed-388d-40c0-b17d-f553ddd9ed1a/1/wb6oOT9qHTeZGYndh1_FMeQIQDE.mft
Manifest number:          134F
Signing time:             Mon 03 Nov 2025 21:00:40 +0000
Manifest this update:     Mon 03 Nov 2025 21:00:40 +0000
Manifest next update:     Tue 04 Nov 2025 21:00:40 +0000
Files and hashes:         1: nbmVOIuVbGlA2xpA2whbaoSkl60.roa (hash: 70PvMKGXMQMI5jikM85xlBPooLtb7IA/Vc36Qg7U1Uo=)
                          2: wb6oOT9qHTeZGYndh1_FMeQIQDE.crl (hash: +SFfxOW+//G1Tla0/0yFVjax5TfnfkI9mleW0/Ibmj0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/31eeed-388d-40c0-b17d-f553ddd9ed1a/1/wb6oOT9qHTeZGYndh1_FMeQIQDE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/31eeed-388d-40c0-b17d-f553ddd9ed1a/1/wb6oOT9qHTeZGYndh1_FMeQIQDE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wb6oOT9qHTeZGYndh1_FMeQIQDE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 04 Nov 2025 20:30:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4b:85:a4:35:26:68:f4:da:81:c2:39:30:38:3e:52:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1bea8393f6a1d37991989dd875fc531e4084031
        Validity
            Not Before: Nov  3 21:00:40 2025 GMT
            Not After : Nov  4 21:00:40 2025 GMT
        Subject: CN=216bdbd4204eec3299ce460f44a994781077a8cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:5d:99:da:15:ce:c8:fd:8e:41:f9:9d:df:74:
                    3c:d1:14:93:e1:59:a4:11:13:83:5f:99:d2:78:d2:
                    74:2b:4a:29:b9:33:f4:26:8a:c7:85:47:ce:b3:f6:
                    e6:41:2b:ba:6b:95:7a:a0:08:9a:44:13:6c:07:c3:
                    59:70:f7:ac:59:c5:f1:7e:1d:ef:7f:26:4e:0a:dd:
                    a6:d7:b1:ce:26:d7:f6:60:10:d0:4f:5d:f1:af:71:
                    6f:a2:af:cb:0f:30:b2:15:8a:f1:b9:1f:4e:cd:78:
                    32:24:91:56:72:d8:aa:d0:33:ae:ee:ed:fd:7c:87:
                    66:9e:8f:53:48:14:92:7c:74:17:2d:0f:f4:96:8c:
                    c0:85:e7:3a:18:ce:d6:3f:58:d8:40:ff:3b:45:2d:
                    3f:33:44:da:bc:83:63:4b:e1:2f:b6:3f:bb:d8:1f:
                    90:00:e5:7f:97:85:e4:e0:8d:3c:2a:20:8c:53:12:
                    4b:94:79:8f:67:16:54:a6:92:53:70:db:ee:34:fe:
                    5a:85:8a:77:c8:c3:39:44:bf:95:02:96:d3:d6:8b:
                    1f:30:0f:b2:f1:6f:1e:ac:d3:88:bd:92:7d:30:cd:
                    5a:7a:3f:4f:c4:eb:b7:0d:da:2c:cc:12:9f:c4:76:
                    ae:75:bc:1a:20:50:42:63:6a:f4:32:d9:f6:58:32:
                    2c:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:6B:DB:D4:20:4E:EC:32:99:CE:46:0F:44:A9:94:78:10:77:A8:CC
            X509v3 Authority Key Identifier:
                keyid:C1:BE:A8:39:3F:6A:1D:37:99:19:89:DD:87:5F:C5:31:E4:08:40:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wb6oOT9qHTeZGYndh1_FMeQIQDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/31eeed-388d-40c0-b17d-f553ddd9ed1a/1/wb6oOT9qHTeZGYndh1_FMeQIQDE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/31eeed-388d-40c0-b17d-f553ddd9ed1a/1/wb6oOT9qHTeZGYndh1_FMeQIQDE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:e0:9a:f8:fb:d8:4b:cc:8b:8f:6a:7a:47:2e:43:ca:51:d4:
         f2:05:f1:22:48:79:82:47:f3:53:a6:f3:77:ab:d7:9f:2e:9e:
         54:25:3d:1a:ba:ac:4a:85:9d:70:d8:1b:a2:49:56:70:bb:dc:
         f6:72:4f:13:77:d2:fc:5e:b8:8c:5d:be:68:c5:67:aa:7c:e1:
         f0:3a:63:76:93:62:a1:2c:a9:c2:8b:f5:57:f7:cf:d3:34:df:
         34:6b:57:40:5d:d8:dc:6b:69:fb:3c:13:29:68:3c:c5:35:a2:
         61:52:c8:f4:d0:c7:8a:1c:47:07:c2:07:42:b0:8c:a7:3b:43:
         d1:70:bb:af:a6:17:ad:7a:0a:7d:65:09:fc:10:bf:18:3f:fb:
         08:9a:6c:33:aa:00:1d:29:cb:26:ef:e1:94:7d:21:3f:ac:3a:
         dc:ff:65:6a:9b:43:e7:82:cf:d3:e7:9c:51:93:54:d0:8c:e9:
         1f:f1:1f:e7:a4:a2:b8:6c:76:bc:77:47:a3:c4:d6:37:16:c1:
         47:76:60:8b:6b:bc:95:04:6f:f3:a4:96:ac:17:59:06:4a:1c:
         9c:3a:61:c2:3b:2e:39:c0:47:81:ce:4f:11:9c:5c:4a:84:19:
         b8:ea:29:0b:07:00:f1:3f:38:d7:a5:63:47:bc:49:c3:0a:c8:
         9d:46:6c:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 05:29:18 2025 by rpki-client