Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/9acaa0-05e1-4721-89eb-a671915ee99a/1/wy_JMz20PiSz8jvGSjrhP0D7Cqc.mft
File:                     wy_JMz20PiSz8jvGSjrhP0D7Cqc.mft (raw, json)
Hash identifier:          l0V6k1LTM1ut6xe6SCGyaKMC9joo6ofgClxO+ibH7I8=
Subject key identifier:   E7:2C:BE:90:B3:B9:75:FA:66:7F:76:55:50:CD:3B:7C:07:33:BD:D0
Authority key identifier: C3:2F:C9:33:3D:B4:3E:24:B3:F2:3B:C6:4A:3A:E1:3F:40:FB:0A:A7
Certificate issuer:       /CN=c32fc9333db43e24b3f23bc64a3ae13f40fb0aa7
Certificate serial:       019A21ADC6D881F79DF52D7D84776B042094
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wy_JMz20PiSz8jvGSjrhP0D7Cqc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/9acaa0-05e1-4721-89eb-a671915ee99a/1/wy_JMz20PiSz8jvGSjrhP0D7Cqc.mft
Manifest number:          16F7
Signing time:             Sun 26 Oct 2025 18:00:28 +0000
Manifest this update:     Sun 26 Oct 2025 18:00:28 +0000
Manifest next update:     Mon 27 Oct 2025 18:00:28 +0000
Files and hashes:         1: JPfPPVmim_oMGeKjFN51mz2DXZs.roa (hash: huLyNUibR3FOKspRTI8zL5oJYiyI6ApwBCQ1/RFqhSE=)
                          2: wy_JMz20PiSz8jvGSjrhP0D7Cqc.crl (hash: H7xZFQC5ypbB3NW5HWg5xAGfzoJXIFR7Was+Qb935RY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/9acaa0-05e1-4721-89eb-a671915ee99a/1/wy_JMz20PiSz8jvGSjrhP0D7Cqc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/9acaa0-05e1-4721-89eb-a671915ee99a/1/wy_JMz20PiSz8jvGSjrhP0D7Cqc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wy_JMz20PiSz8jvGSjrhP0D7Cqc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Oct 2025 18:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:21:ad:c6:d8:81:f7:9d:f5:2d:7d:84:77:6b:04:20:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c32fc9333db43e24b3f23bc64a3ae13f40fb0aa7
        Validity
            Not Before: Oct 26 18:00:28 2025 GMT
            Not After : Oct 27 18:00:28 2025 GMT
        Subject: CN=e72cbe90b3b975fa667f765550cd3b7c0733bdd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:54:50:1e:07:39:78:3b:5c:28:0a:a7:fe:d4:
                    d5:77:90:27:15:19:7b:6c:4d:fd:98:2e:58:70:5f:
                    94:08:c8:e5:27:ea:79:20:47:a6:8a:60:74:fe:54:
                    e0:a1:0f:33:4a:36:bc:a3:74:35:75:6f:39:e4:b4:
                    2a:33:b2:26:9b:b4:e3:df:53:70:26:96:57:b1:06:
                    e4:78:9b:3c:ca:bc:ba:2c:b7:43:b1:3a:11:8b:57:
                    f3:69:b4:8e:67:ee:b4:05:96:93:95:67:27:96:27:
                    24:85:db:49:ff:9f:72:4d:45:54:0e:ff:12:c7:33:
                    b6:f5:50:83:bc:5c:d9:5f:9f:b1:d5:c4:bb:8f:d0:
                    11:f1:92:84:68:73:f0:e0:59:f0:69:eb:19:59:f8:
                    1d:a1:98:16:2b:3c:63:50:6d:b6:06:7b:4d:3a:c0:
                    e6:f3:90:cb:32:da:a9:a0:f2:47:7d:f0:01:2f:c7:
                    97:7c:c4:84:ce:ef:b0:b8:0a:8c:c2:bc:bc:9f:b2:
                    75:e2:6b:e0:61:18:16:97:e6:77:90:a8:5a:7d:6d:
                    59:8f:a8:a0:f9:f8:58:8c:3d:94:b4:d3:00:62:95:
                    cc:1a:15:f0:19:8a:a1:62:d0:13:58:e6:df:28:42:
                    64:d7:d9:91:ca:03:68:5e:ea:b1:11:fd:a6:f6:a9:
                    79:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:2C:BE:90:B3:B9:75:FA:66:7F:76:55:50:CD:3B:7C:07:33:BD:D0
            X509v3 Authority Key Identifier:
                keyid:C3:2F:C9:33:3D:B4:3E:24:B3:F2:3B:C6:4A:3A:E1:3F:40:FB:0A:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wy_JMz20PiSz8jvGSjrhP0D7Cqc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9acaa0-05e1-4721-89eb-a671915ee99a/1/wy_JMz20PiSz8jvGSjrhP0D7Cqc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9acaa0-05e1-4721-89eb-a671915ee99a/1/wy_JMz20PiSz8jvGSjrhP0D7Cqc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:db:c9:7b:bb:a9:a5:7b:50:eb:2b:9e:d8:1b:9e:b4:9d:6a:
         76:7b:1e:ca:b6:66:e8:a5:36:22:a8:6b:63:88:68:22:db:42:
         ad:c8:85:5f:02:01:7a:7b:52:7a:5f:91:13:26:63:52:eb:ae:
         c8:97:57:c0:6c:1b:56:6d:01:cb:71:17:d5:f7:99:bb:7a:c3:
         9e:92:d8:b2:6a:ac:42:88:a9:bd:6a:9b:6b:21:51:df:0a:19:
         32:d5:02:3f:cb:8b:3c:c8:8f:6c:c9:b6:12:45:91:9b:d0:02:
         e0:62:60:dc:92:87:ca:69:6d:ea:c2:20:0e:83:8e:e3:33:80:
         cb:1c:ba:a4:7d:d2:60:ef:83:25:5f:d0:e7:0f:85:90:18:eb:
         20:f3:27:2e:5c:dc:c4:67:b8:ba:42:72:a8:1a:5d:c6:cd:cb:
         58:31:4d:dd:22:4d:de:39:78:53:f6:cf:de:9a:c2:50:d1:cd:
         83:07:78:fc:5e:cd:74:b7:59:2b:cf:23:ba:59:66:d8:12:b2:
         d2:f2:ef:dc:2e:d5:1c:d7:52:98:32:a8:a7:9d:70:72:8f:30:
         7f:03:6f:39:47:85:5f:72:cf:05:90:d2:7f:f2:3d:64:a5:67:
         61:19:ec:05:15:a9:00:72:09:c5:03:26:f8:ce:b7:8e:f5:95:
         b8:51:85:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 02:08:54 2025 by rpki-client