Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/31b8c4-dee7-4eee-a0e0-984e82d4b806/1/wE9_yIPJ1eAjGlhbCuE554ZUO7Y.mft
File:                     wE9_yIPJ1eAjGlhbCuE554ZUO7Y.mft (raw, json)
Hash identifier:          o/ioaIpGrrks9lgggQ75dNBnOcJWVURvhX9KaAfCm9E=
Subject key identifier:   C8:36:07:EB:F5:93:AF:0B:F0:C7:94:88:84:CC:B8:C7:E7:34:A4:E9
Authority key identifier: C0:4F:7F:C8:83:C9:D5:E0:23:1A:58:5B:0A:E1:39:E7:86:54:3B:B6
Certificate issuer:       /CN=c04f7fc883c9d5e0231a585b0ae139e786543bb6
Certificate serial:       019A71B7ED5046011432212AEBA04D07E861
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wE9_yIPJ1eAjGlhbCuE554ZUO7Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/31b8c4-dee7-4eee-a0e0-984e82d4b806/1/wE9_yIPJ1eAjGlhbCuE554ZUO7Y.mft
Manifest number:          0944
Signing time:             Tue 11 Nov 2025 07:01:10 +0000
Manifest this update:     Tue 11 Nov 2025 07:01:10 +0000
Manifest next update:     Wed 12 Nov 2025 07:01:10 +0000
Files and hashes:         1: 0iMFk8Lfng7XvalPLjNNFDCKCXk.roa (hash: RGgyt63YX02pCUWXH4nSFvIeyVgvG587fQXMrvVwyd0=)
                          2: wE9_yIPJ1eAjGlhbCuE554ZUO7Y.crl (hash: EazjqepBq3BW4MmVdFZ5YyaEiY7Gdk8u8lQf7GZVhcY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/31b8c4-dee7-4eee-a0e0-984e82d4b806/1/wE9_yIPJ1eAjGlhbCuE554ZUO7Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/31b8c4-dee7-4eee-a0e0-984e82d4b806/1/wE9_yIPJ1eAjGlhbCuE554ZUO7Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wE9_yIPJ1eAjGlhbCuE554ZUO7Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 07:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:71:b7:ed:50:46:01:14:32:21:2a:eb:a0:4d:07:e8:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c04f7fc883c9d5e0231a585b0ae139e786543bb6
        Validity
            Not Before: Nov 11 07:01:10 2025 GMT
            Not After : Nov 12 07:01:10 2025 GMT
        Subject: CN=c83607ebf593af0bf0c7948884ccb8c7e734a4e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:68:10:2d:07:11:1c:38:47:4b:5e:12:e4:15:
                    30:d7:2f:a6:49:c8:f3:65:81:16:cc:7e:38:a2:e3:
                    28:2d:98:de:39:e3:e7:d9:2f:f0:82:36:d6:fe:05:
                    fd:13:1d:bb:6c:0f:c9:b2:db:25:9d:e6:02:d5:68:
                    bb:73:a8:87:e8:f3:f4:90:8b:e4:e4:0f:2b:40:6c:
                    8b:35:89:ba:74:8e:fe:21:63:74:81:8a:8d:bd:ea:
                    d6:6c:38:93:aa:f1:f8:1c:f8:16:3b:7d:fb:64:2f:
                    d5:52:a9:8c:78:ba:ea:45:a1:a1:44:92:50:48:e2:
                    76:e7:61:aa:85:b0:e4:f1:5c:6f:24:a8:79:e0:ac:
                    3f:c0:f6:ea:d7:26:5d:24:76:52:78:e7:f4:e4:09:
                    20:ad:21:42:5e:86:0c:b1:53:a9:45:9b:dd:33:a7:
                    90:df:b8:0c:26:5a:4f:4f:af:f7:e4:d7:a5:ab:b8:
                    ac:b5:85:0b:53:dd:93:80:68:0c:7d:42:1d:4b:ba:
                    c9:ae:99:d3:6c:18:93:18:24:4b:cd:00:20:07:10:
                    2b:9f:5c:2f:c2:2d:b0:53:03:37:9a:d7:1b:03:81:
                    8c:48:2a:b4:31:0e:7b:2a:29:38:d0:8a:ad:8b:01:
                    44:ea:2a:5b:04:74:60:da:cc:ef:c3:ee:1a:7b:24:
                    4e:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:36:07:EB:F5:93:AF:0B:F0:C7:94:88:84:CC:B8:C7:E7:34:A4:E9
            X509v3 Authority Key Identifier:
                keyid:C0:4F:7F:C8:83:C9:D5:E0:23:1A:58:5B:0A:E1:39:E7:86:54:3B:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wE9_yIPJ1eAjGlhbCuE554ZUO7Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/31b8c4-dee7-4eee-a0e0-984e82d4b806/1/wE9_yIPJ1eAjGlhbCuE554ZUO7Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/31b8c4-dee7-4eee-a0e0-984e82d4b806/1/wE9_yIPJ1eAjGlhbCuE554ZUO7Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:fa:d5:57:a7:7f:2f:78:3a:58:af:6c:61:27:cd:c7:55:b1:
         20:eb:07:67:dd:61:dc:8e:7b:94:bd:2c:86:54:fd:62:a3:ec:
         25:5d:3c:cf:8e:f2:1d:0b:ee:fd:d2:d5:e8:40:e0:a9:b1:6d:
         aa:76:df:43:12:51:34:33:ab:44:1f:c4:49:fa:f5:8f:40:99:
         c8:c9:a1:fa:03:0c:61:59:0a:c7:2c:bb:1e:70:c5:36:af:e1:
         4b:8b:57:a5:84:a4:3e:c3:bf:16:20:e5:0c:ce:ef:84:c4:61:
         2b:1c:31:bd:26:78:02:d1:44:fc:80:fd:12:29:8a:87:0f:87:
         26:9e:7d:60:ef:75:de:e7:9f:fa:a3:4b:84:5a:81:81:70:44:
         2b:3f:99:37:ac:c8:62:25:7a:f4:30:7d:bb:72:19:25:dc:94:
         ad:f2:13:5f:d9:c7:a9:e5:51:09:56:c2:57:7d:17:67:85:1d:
         a3:a2:75:d5:b9:4a:19:8e:9e:63:f2:e1:5b:31:c2:49:e8:51:
         e3:15:f4:a1:67:8e:e6:5e:d2:ba:cb:de:03:10:52:a2:e8:a4:
         9c:2c:40:74:4f:05:d1:b9:d2:70:a2:6c:6d:73:91:24:c7:44:
         90:6a:4c:5b:e6:15:63:14:ff:59:13:4a:0e:d5:eb:e4:b6:f1:
         b7:26:d2:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:17 2025 by rpki-client