Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.mft
File:                     WD12BRAX0K-pFfz7eQoA9GZ7Cog.mft (raw, json)
Hash identifier:          rgijGdFGoxLSqYtSHmQ7PsC/rtw/wlsp/3TzimndfPE=
Subject key identifier:   3E:09:35:A2:FE:54:7C:69:19:D5:CA:A6:8B:73:D5:5E:ED:65:92:7D
Authority key identifier: 58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
Certificate issuer:       /CN=583d76051017d0afa915fcfb790a00f4667b0a88
Certificate serial:       019A202D796C29F1773296B8696FF5E7276F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.mft
Manifest number:          1715
Signing time:             Sun 26 Oct 2025 11:00:42 +0000
Manifest this update:     Sun 26 Oct 2025 11:00:42 +0000
Manifest next update:     Mon 27 Oct 2025 11:00:42 +0000
Files and hashes:         1: 0yv-YpT7EAlDFfaPmF8_vcpGZrw.roa (hash: FCFF4a6p1Kz9hIASitWn3Cuesp3ppA1vaf6u6HK9VUE=)
                          2: 2aZUesyn49QKctastVKzOPCfQ4w.roa (hash: HfxVkx+IdJ9mebTCZylb1qWvTCSUSDeW5EtiRH5D4Q8=)
                          3: 2rKgFCA24RfmvmYnfyf-htKhPU4.roa (hash: tCm3fFMU2QGfYRwln/nF50skwuboIoBvE1SaHlNbkLE=)
                          4: 4hbMBM1nzDwcq0Z5poawjitTY60.roa (hash: XP1CU+CY23GAE6mFffgmeePRICbliFurLSIMPRQ5f40=)
                          5: 6u5_sP4IhyoWqEDQ2t9dx963QRY.roa (hash: Pbx79AK3bEc8t4PUDhO4smxz6yCZ8d6bcYa/ZleseH4=)
                          6: 7WcUp7VboIfJPuJw_2eN0YJowc0.roa (hash: hMptUTx/SKmaFCbNu4ZMxGpB4nXnLhPIpWMOPwFNEdE=)
                          7: 83DWjPDI0qHPOk7NLbQWjtD2D1c.roa (hash: AxnYuoBRuJSqvAH9Bx3fTRR+QoVXwEkv5G6gCkg2Bao=)
                          8: 9IywKX9fS2qo6y4BwiBKFOJ_RRo.roa (hash: Ac1uBlsnhCZRDyKHF7yrUh45o1zwGsvgTvH8xD0tKfw=)
                          9: D1fRR18dq9Gv4qp3l9TcLZyyEDI.roa (hash: +8YA8GsmgHc3axYa2P7GfhxaqtQ7FE/tjUAeHRPwr9g=)
                          10: GKke9u-g19ORaszjeZzhH6pAcUM.roa (hash: xdtY9xo6gnGlpB3ETcBJ3YBkjHIlQqwLDRHWq8GtahI=)
                          11: Ig1WTTEJWSAB8ImVaoKPLwHQgbc.roa (hash: UMRsVJllHBv632Y31OJYoImld0QNRvOFUdYe6AzQydE=)
                          12: N5rVf1hY_OzEZp1xY8pg3j4it1A.roa (hash: Ue3CSgwWVTQ+G81bsGOQJFm164xkm8Ru6ylUCKhvmpA=)
                          13: NKkYiFJn1s2WgleQ4AP23RspTLQ.roa (hash: ZWB9OaLcmJzVZyAY2vxQN6pq/rnTZE2SqRawNV1XHtQ=)
                          14: NzEriaZTpDkqwVRNF_I3q26fJac.roa (hash: 5HBSEtVrkCJbGySatpCNL7zvqvX7ECzhRNaOA0/PR/E=)
                          15: SOIu77MViH9HrW2wOhBa4ctl-s4.roa (hash: EeJItN2QFTFRmLAW0Mvz7rV5W+XgeuLcsUy4tvkAsoI=)
                          16: TDV0BLKDE1p7Ns450Mfu7Kq6ad8.roa (hash: lTO5embQ4JVR03qf/66D4vxj/cbH77aYRTX0QvQ4wLY=)
                          17: TaAWX6RunIkoavVYyto4LyLZbsg.roa (hash: LLRLNHFstGywhUJHWDeOxplmy9vdy8UuI67N0/rWKkI=)
                          18: UQnmCoONwiJ5kPJipbbPRWpehRQ.roa (hash: R7SJq+v1gPef9CcZYgNLA5yueggHvGhRS4pnX+i+42s=)
                          19: WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl (hash: mN5ebWJZh5DHZ4f8AbKuGEwWd+H3+oTI37KrLtE7mRA=)
                          20: WJFDvIJS5VxJPhXMRZ7xWWjaaEY.roa (hash: OpV4tgEanecwJP3L/2htD3wFwFErrWLFYPu5S83daZo=)
                          21: Wj9UBZ8lyGpizZyCVs5Soop7w2k.roa (hash: nghObD8IVMMvgf7Cs34GYm/ZtGFtMr/E9cOGO8F0TDk=)
                          22: hZEvfmZNH48o6ZxWGpbpksMa5nk.roa (hash: HHzEpVFljtqXAUOR29p6mAYzd1SFI9T67Olu5rbtf4Y=)
                          23: iystaYSJXuGKhhCiyAWE4u7UEyk.roa (hash: XXypNZES5+tt8lWlXBej3/0Gq3tgIRPeDyU4cGhm/qQ=)
                          24: j8S8_OZUpxB9k7LHRFPXRAKfkWU.roa (hash: k8mQUf/NuQPokL0zcpiZfvFdtMY/J1/bRRQuRB+KB/M=)
                          25: qMr-LBReCBqYRhVBoJttXFZAERs.roa (hash: +wcj7meQsd/DFjEen1Pm4EtbrLhEFNBjzasK/qwIzFY=)
                          26: skag_VnN9GBJjb3tko75iVexHSM.roa (hash: C1SS1bYL61kZQdi8QWgGkq7ptTOfGOQLi9q7iiXlFU0=)
                          27: vWXWhkktZWC2_i0zKz5vdi-IvuE.roa (hash: D7lRMIA1f5sBgefITMxbK3yGHotRr10qyY6m4yVQx28=)
                          28: vtkF5xB1D7H9fdDA64y1mC_-PnI.roa (hash: OGKHwlKleDXCssmiFinFxLB6pzcbwPx2Ei0tajdkieQ=)
                          29: w_nsALBEni9bN7oziLT6x-v5vMw.roa (hash: bV1O6/pTWkVcLgUfCwZY2geOQH931QXPvOJiCvTyGdc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Oct 2025 11:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:20:2d:79:6c:29:f1:77:32:96:b8:69:6f:f5:e7:27:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=583d76051017d0afa915fcfb790a00f4667b0a88
        Validity
            Not Before: Oct 26 11:00:42 2025 GMT
            Not After : Oct 27 11:00:42 2025 GMT
        Subject: CN=3e0935a2fe547c6919d5caa68b73d55eed65927d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:75:27:46:4c:f9:40:a6:27:84:46:27:79:7e:
                    66:71:01:3f:f5:1c:b1:20:41:de:0e:0f:7e:79:e7:
                    25:27:2b:63:c3:cd:5a:8b:91:f4:cb:98:54:23:83:
                    77:b9:ad:6d:8e:d3:a8:a4:e5:a0:14:59:45:a3:0f:
                    f5:fc:9c:37:67:6c:93:40:08:a4:9a:12:ae:f4:02:
                    f5:bf:e7:af:3c:b5:9e:f5:8f:16:67:60:62:9b:9e:
                    c4:04:17:e9:36:68:da:d4:e3:82:ea:86:58:15:a1:
                    35:71:c5:8f:fa:79:63:86:df:06:2e:67:6e:ad:25:
                    6f:43:90:92:db:bd:9d:0a:5e:a0:03:da:ce:03:7b:
                    2c:ba:05:23:c6:df:4c:87:d5:14:f3:a1:72:86:2d:
                    5c:2b:de:45:7d:98:06:8a:f9:d6:39:3c:43:ed:69:
                    6c:01:fe:84:1b:18:ff:2e:f3:1b:06:6e:bf:54:97:
                    58:82:7f:cb:fa:1a:bc:60:4e:e5:4d:36:20:74:a6:
                    c9:9a:32:41:f9:5e:4b:fb:2a:2e:c5:23:aa:52:a6:
                    25:4d:e7:d6:17:05:20:83:cb:d3:78:0d:47:be:a8:
                    fd:57:09:26:c6:a4:d7:d7:f9:9d:0d:d0:1b:73:c8:
                    6e:09:87:94:e5:1b:31:24:37:76:ce:1d:25:10:c9:
                    ea:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:09:35:A2:FE:54:7C:69:19:D5:CA:A6:8B:73:D5:5E:ED:65:92:7D
            X509v3 Authority Key Identifier:
                keyid:58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:1e:59:96:c7:6c:09:47:39:8c:dd:b7:6a:3b:58:84:ad:66:
         b0:16:e9:35:49:a0:ce:1e:ca:6d:0d:f2:e6:f2:50:cb:ff:80:
         50:cf:9f:fb:b8:6d:f4:4e:97:f1:da:86:f8:2f:bc:e4:ee:1f:
         32:55:1f:7c:91:b5:ee:7c:c2:8f:ac:c9:be:36:b9:47:de:c1:
         c1:ca:c6:a6:78:c3:70:51:96:87:1e:ff:9d:2b:84:bd:a2:eb:
         6c:0f:bf:4c:e3:d4:84:ad:d3:ad:9d:7c:f0:e1:56:e3:94:78:
         a1:81:4c:af:76:40:ce:7f:24:84:0b:7d:14:ad:24:bb:92:8d:
         4a:7f:34:dd:6b:84:e6:55:46:ff:04:9d:8e:76:1c:d8:6e:88:
         57:18:4a:31:f0:e6:21:b3:50:49:0e:9e:fd:a6:b1:1a:75:34:
         41:b1:b2:9f:98:da:28:89:1f:a8:21:28:f9:61:70:68:c0:e9:
         87:ea:41:99:b9:dd:c3:78:62:f6:5f:90:48:63:31:78:91:d0:
         16:6e:9e:f4:0f:1b:2a:2f:09:bc:63:48:1f:18:13:e0:2a:c5:
         62:0a:a5:d7:b4:ce:21:9d:b9:fd:07:49:a2:da:96:2f:c7:73:
         68:0f:e5:8a:fa:29:f9:c2:8e:41:2b:77:69:16:26:d8:c4:8e:
         12:d4:87:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 17:20:42 2025 by rpki-client