Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/499c41-945e-4da3-a498-9209f7b7ef81/1/w5vDCnSJYLInob8mIWBn7dBcGn0.mft
File:                     w5vDCnSJYLInob8mIWBn7dBcGn0.mft (raw, json)
Hash identifier:          pwn4t405Ghr6CQ5P7W/e4MQfsiFtF2GxKE+SUjzk+vs=
Subject key identifier:   CB:58:F4:45:9F:00:4C:D3:D5:94:29:A6:83:43:41:24:66:E8:51:E1
Authority key identifier: C3:9B:C3:0A:74:89:60:B2:27:A1:BF:26:21:60:67:ED:D0:5C:1A:7D
Certificate issuer:       /CN=c39bc30a748960b227a1bf26216067edd05c1a7d
Certificate serial:       019A71808F2AF5805E5AC800DBCB07E372D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w5vDCnSJYLInob8mIWBn7dBcGn0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/499c41-945e-4da3-a498-9209f7b7ef81/1/w5vDCnSJYLInob8mIWBn7dBcGn0.mft
Manifest number:          07E6
Signing time:             Tue 11 Nov 2025 06:00:41 +0000
Manifest this update:     Tue 11 Nov 2025 06:00:41 +0000
Manifest next update:     Wed 12 Nov 2025 06:00:41 +0000
Files and hashes:         1: 6_xNKvKsiyZMdKMukhQ7G0PNeao.roa (hash: 9ruVW6EaPvHe/h/BSSLEev3gfYXJbsL78/n89CguJ0c=)
                          2: w5vDCnSJYLInob8mIWBn7dBcGn0.crl (hash: h0kpCtl1lynFjycHZqfWzUenpNSrIfBy8TJt4D9rdpQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/499c41-945e-4da3-a498-9209f7b7ef81/1/w5vDCnSJYLInob8mIWBn7dBcGn0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/499c41-945e-4da3-a498-9209f7b7ef81/1/w5vDCnSJYLInob8mIWBn7dBcGn0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w5vDCnSJYLInob8mIWBn7dBcGn0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 06:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:71:80:8f:2a:f5:80:5e:5a:c8:00:db:cb:07:e3:72:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c39bc30a748960b227a1bf26216067edd05c1a7d
        Validity
            Not Before: Nov 11 06:00:41 2025 GMT
            Not After : Nov 12 06:00:41 2025 GMT
        Subject: CN=cb58f4459f004cd3d59429a68343412466e851e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:34:9f:d0:be:24:3d:3a:d4:ea:00:17:7e:0d:
                    b8:06:9d:10:37:00:e6:51:97:66:92:eb:06:74:3c:
                    cc:d1:d9:0d:39:a9:c1:25:78:1f:71:0e:8a:25:17:
                    2a:7a:f9:54:83:7b:3b:b8:79:59:e9:fc:0c:6b:cb:
                    10:52:0b:9c:f1:5e:c5:25:53:fc:a0:f3:d2:c0:2b:
                    61:15:68:e8:2f:0f:50:b6:cc:53:d4:75:5c:a0:7a:
                    5f:da:ab:d7:27:a6:15:43:b3:9b:de:d7:0b:05:bb:
                    b7:fe:6f:79:97:1c:99:0e:42:d2:cc:ff:c9:53:12:
                    36:bc:c7:cd:35:05:a6:e2:f8:8b:39:96:3e:00:bf:
                    d4:aa:33:8c:4e:81:fc:b0:ba:2b:cf:d8:e2:86:8d:
                    39:98:ab:94:22:2a:19:0e:45:f3:aa:d5:f5:60:23:
                    a5:15:1a:51:6a:78:3b:71:f4:b4:2f:5e:2b:7c:0f:
                    7c:e1:c2:08:02:98:ac:4b:3b:c2:c1:ce:42:6b:06:
                    5e:a1:a1:e3:b8:11:e3:3c:57:5e:51:f4:08:6d:d1:
                    e4:8c:09:e8:da:eb:1e:0d:61:c9:fa:4c:06:4e:fd:
                    95:69:d7:70:99:db:c4:ca:92:55:55:b3:c8:8b:0a:
                    2a:82:96:00:2b:17:28:c9:65:03:92:ab:65:55:99:
                    5c:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:58:F4:45:9F:00:4C:D3:D5:94:29:A6:83:43:41:24:66:E8:51:E1
            X509v3 Authority Key Identifier:
                keyid:C3:9B:C3:0A:74:89:60:B2:27:A1:BF:26:21:60:67:ED:D0:5C:1A:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w5vDCnSJYLInob8mIWBn7dBcGn0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/499c41-945e-4da3-a498-9209f7b7ef81/1/w5vDCnSJYLInob8mIWBn7dBcGn0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/499c41-945e-4da3-a498-9209f7b7ef81/1/w5vDCnSJYLInob8mIWBn7dBcGn0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:ca:b3:1b:4f:a1:51:54:6a:38:94:a9:ab:8e:e9:79:5d:34:
         db:c5:17:6e:0e:ed:f4:56:2d:be:a5:ee:a6:b4:90:05:d1:a2:
         b7:86:be:8f:3d:4d:46:e7:52:30:27:5e:c9:34:9e:6f:ff:f1:
         bb:31:fd:56:80:0f:70:72:e1:81:cb:19:c1:5b:92:bc:3a:be:
         13:62:44:da:d3:6c:b9:b7:f7:4f:7b:28:3f:0b:e0:c2:50:8c:
         17:c0:d3:6f:6b:fc:2b:8c:94:18:91:f0:3f:1d:ed:23:c4:6a:
         0a:6d:1a:fe:17:37:15:44:be:91:5e:f3:36:d4:dd:24:8a:ee:
         20:af:62:4c:17:07:73:6f:11:20:55:90:98:70:cd:bf:6d:b4:
         bc:d7:d0:f6:31:c5:18:b4:e5:01:05:60:9f:b7:15:f4:1f:ca:
         a3:bf:1d:1c:9f:0b:d4:ac:aa:24:98:bf:a5:59:ed:f4:7b:82:
         72:17:e2:c4:47:52:e6:be:28:70:83:4f:00:e0:0c:94:f9:27:
         9c:90:6b:b1:bc:41:2b:7c:77:b4:61:99:68:d5:3b:18:ae:ec:
         a0:a4:7e:e7:42:14:de:02:54:26:64:0f:60:21:5b:98:ee:b9:
         f6:ea:be:47:92:1b:72:3a:27:dc:07:18:0a:e7:63:3e:c3:64:
         2c:e4:46:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxgI8q9YBeWsgA28sH43LQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzOWJjMzBhNzQ4OTYwYjIyN2ExYmYyNjIxNjA2N2VkZDA1
YzFhN2QwHhcNMjUxMTExMDYwMDQxWhcNMjUxMTEyMDYwMDQxWjAzMTEwLwYDVQQD
EyhjYjU4ZjQ0NTlmMDA0Y2QzZDU5NDI5YTY4MzQzNDEyNDY2ZTg1MWUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTSf0L4kPTrU6gAXfg24Bp0QNwDm
UZdmkusGdDzM0dkNOanBJXgfcQ6KJRcqevlUg3s7uHlZ6fwMa8sQUguc8V7FJVP8
oPPSwCthFWjoLw9QtsxT1HVcoHpf2qvXJ6YVQ7Ob3tcLBbu3/m95lxyZDkLSzP/J
UxI2vMfNNQWm4viLOZY+AL/UqjOMToH8sLorz9jiho05mKuUIioZDkXzqtX1YCOl
FRpRang7cfS0L14rfA984cIIApisSzvCwc5CawZeoaHjuBHjPFdeUfQIbdHkjAno
2useDWHJ+kwGTv2VaddwmdvEypJVVbPIiwoqgpYAKxcoyWUDkqtlVZlcowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMtY9EWfAEzT1ZQppoNDQSRm6FHhMB8GA1UdIwQY
MBaAFMObwwp0iWCyJ6G/JiFgZ+3QXBp9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzV2RENuU0pZTElub2I4bUlXQm43ZEJjR24wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC80OTljNDEtOTQ1ZS00ZGEzLWE0OTgt
OTIwOWY3YjdlZjgxLzEvdzV2RENuU0pZTElub2I4bUlXQm43ZEJjR24wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC80OTljNDEtOTQ1ZS00ZGEzLWE0OTgtOTIwOWY3YjdlZjgx
LzEvdzV2RENuU0pZTElub2I4bUlXQm43ZEJjR24wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARsqzG0+h
UVRqOJSpq47peV0028UXbg7t9FYtvqXuprSQBdGit4a+jz1NRudSMCdeyTSeb//x
uzH9VoAPcHLhgcsZwVuSvDq+E2JE2tNsubf3T3soPwvgwlCMF8DTb2v8K4yUGJHw
Px3tI8RqCm0a/hc3FUS+kV7zNtTdJIruIK9iTBcHc28RIFWQmHDNv220vNfQ9jHF
GLTlAQVgn7cV9B/Ko78dHJ8L1KyqJJi/pVnt9HuCchfixEdS5r4ocINPAOAMlPkn
nJBrsbxBK3x3tGGZaNU7GK7soKR+50IU3gJUJmQPYCFbmO659uq+R5Ibcjon3AcY
CudjPsNkLORGag==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:53:31 2025 by rpki-client