Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/ce12ca-ab7e-4854-bc67-8c600eae7d80/1/W-XxlT4DHSeYZPPDvv8LxnWgDuQ.mft
File:                     W-XxlT4DHSeYZPPDvv8LxnWgDuQ.mft (raw, json)
Hash identifier:          ZK7O+FSWO9neGk3xp3+4nH+eLM/0MDo2EBtEIo5PWyc=
Subject key identifier:   D6:21:BA:B4:D6:D3:11:99:07:B4:7B:9F:27:11:DE:91:BD:0B:53:FF
Authority key identifier: 5B:E5:F1:95:3E:03:1D:27:98:64:F3:C3:BE:FF:0B:C6:75:A0:0E:E4
Certificate issuer:       /CN=5be5f1953e031d279864f3c3beff0bc675a00ee4
Certificate serial:       019A7226698F8FE190F2DB395DFB61DF19C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W-XxlT4DHSeYZPPDvv8LxnWgDuQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/ce12ca-ab7e-4854-bc67-8c600eae7d80/1/W-XxlT4DHSeYZPPDvv8LxnWgDuQ.mft
Manifest number:          14B8
Signing time:             Tue 11 Nov 2025 09:01:51 +0000
Manifest this update:     Tue 11 Nov 2025 09:01:51 +0000
Manifest next update:     Wed 12 Nov 2025 09:01:51 +0000
Files and hashes:         1: W-XxlT4DHSeYZPPDvv8LxnWgDuQ.crl (hash: 7IEx/ceE99oCr+eNXSsqh+PVChTWVtZoey1xmbNQSl0=)
                          2: yA5B5VXhOCm628j2BmlmI-fci1Y.roa (hash: QTSh8buWKlIWj0giqvjbzYLkHrxbOtA9phJCik8JbFI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/ce12ca-ab7e-4854-bc67-8c600eae7d80/1/W-XxlT4DHSeYZPPDvv8LxnWgDuQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/ce12ca-ab7e-4854-bc67-8c600eae7d80/1/W-XxlT4DHSeYZPPDvv8LxnWgDuQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W-XxlT4DHSeYZPPDvv8LxnWgDuQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 09:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:72:26:69:8f:8f:e1:90:f2:db:39:5d:fb:61:df:19:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5be5f1953e031d279864f3c3beff0bc675a00ee4
        Validity
            Not Before: Nov 11 09:01:51 2025 GMT
            Not After : Nov 12 09:01:51 2025 GMT
        Subject: CN=d621bab4d6d3119907b47b9f2711de91bd0b53ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:11:61:e8:39:a3:fb:f5:99:0f:f2:e2:91:76:
                    6b:9f:f6:28:12:f0:71:48:5c:e7:74:93:bc:ea:4b:
                    04:84:8d:5d:6e:1c:55:59:08:bd:f2:6e:92:b2:3a:
                    9f:ba:87:a5:3f:1b:09:13:5f:15:f1:01:03:23:91:
                    bc:00:f2:bc:c4:b9:9d:c3:3c:84:a9:4c:a0:5c:1b:
                    54:11:f1:02:cc:24:8a:7e:d4:49:9a:7b:2c:2a:b2:
                    e5:9e:96:eb:0f:19:54:0c:0d:7b:b2:3e:2c:5d:84:
                    2a:97:17:b5:6b:5c:75:80:04:d7:9d:e1:8c:f2:8d:
                    ca:3b:79:9a:b5:a7:de:3e:41:58:16:e4:f8:5a:b5:
                    ba:32:c8:e1:56:ce:04:bf:f5:c7:98:07:f4:a0:05:
                    ec:7d:1a:80:82:9d:77:e8:4e:6f:f9:3b:2e:69:37:
                    48:08:16:fb:3f:a6:c7:f0:ee:b5:bb:73:d6:64:e0:
                    5b:df:3f:ae:2a:e2:40:e7:e3:e9:7e:20:e3:e3:f1:
                    27:9f:4c:ce:5a:b8:85:94:5e:7a:31:e4:a0:18:69:
                    4a:3b:80:fe:cd:99:94:a6:f7:0e:74:ab:4e:b3:1a:
                    40:a0:e8:cf:a2:e3:1b:23:cc:c5:93:22:55:52:73:
                    0d:03:b6:f9:72:15:9b:28:c0:d5:f6:17:08:d7:d2:
                    1c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:21:BA:B4:D6:D3:11:99:07:B4:7B:9F:27:11:DE:91:BD:0B:53:FF
            X509v3 Authority Key Identifier:
                keyid:5B:E5:F1:95:3E:03:1D:27:98:64:F3:C3:BE:FF:0B:C6:75:A0:0E:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-XxlT4DHSeYZPPDvv8LxnWgDuQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ce12ca-ab7e-4854-bc67-8c600eae7d80/1/W-XxlT4DHSeYZPPDvv8LxnWgDuQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ce12ca-ab7e-4854-bc67-8c600eae7d80/1/W-XxlT4DHSeYZPPDvv8LxnWgDuQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:91:6d:70:4d:28:aa:99:16:eb:8a:0b:cd:b5:f6:0b:7d:b9:
         8c:bb:71:2c:42:d8:6f:e2:4a:0a:67:03:8f:0d:c4:bf:82:10:
         e1:6f:4a:ec:8a:c8:d9:12:7f:b6:88:b9:83:f7:e6:ec:54:75:
         d8:b8:b0:e6:d0:82:8f:e6:70:96:50:d5:9f:ef:1d:b2:80:c4:
         ec:c2:0f:41:5a:ea:d3:44:fe:29:f8:0b:b3:91:a6:6b:7e:20:
         f1:1a:c4:ae:32:a0:9d:75:b8:07:6d:0f:72:79:bf:be:9d:32:
         0a:c8:c8:e8:8d:68:4f:de:0d:9b:af:fa:c6:53:28:8a:45:32:
         ba:ab:fc:8a:b8:c1:06:d9:32:01:78:e3:a3:92:10:bf:e3:b5:
         ed:5c:26:7f:d6:3c:04:67:ab:30:d3:b6:17:ac:e8:0f:33:55:
         37:33:86:23:cd:0b:14:8c:a0:59:18:15:b5:b5:f2:00:0e:44:
         91:54:b6:3a:84:43:c5:3d:4c:74:8c:e4:1c:60:f6:4a:50:7d:
         02:17:c2:a8:85:da:27:4b:c5:af:14:63:d4:4c:1e:fb:03:6c:
         d0:e5:c2:33:d9:b8:07:de:21:62:5c:ff:d1:8d:64:f7:32:35:
         ed:44:d7:6d:4d:56:f0:62:39:c2:ec:ea:2b:34:17:0a:7d:c8:
         90:9d:eb:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:16:26 2025 by rpki-client