Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/a43c6e-349c-4914-8da3-6c32a6ab1ef2/1/wesHbRZwLH2-qXLily71dqHyyHM.mft
File:                     wesHbRZwLH2-qXLily71dqHyyHM.mft (raw, json)
Hash identifier:          RvB4eenz0z/swtvgwDyGX7dxkl3fZdRZ3uUpRYjQBSA=
Subject key identifier:   63:6A:D3:31:8E:E9:1E:25:57:F3:61:EB:17:31:7A:21:2E:9F:19:5C
Authority key identifier: C1:EB:07:6D:16:70:2C:7D:BE:A9:72:E2:97:2E:F5:76:A1:F2:C8:73
Certificate issuer:       /CN=c1eb076d16702c7dbea972e2972ef576a1f2c873
Certificate serial:       019A72CA7C9C6E7FB0031644131807E112FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wesHbRZwLH2-qXLily71dqHyyHM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/a43c6e-349c-4914-8da3-6c32a6ab1ef2/1/wesHbRZwLH2-qXLily71dqHyyHM.mft
Manifest number:          1724
Signing time:             Tue 11 Nov 2025 12:01:04 +0000
Manifest this update:     Tue 11 Nov 2025 12:01:04 +0000
Manifest next update:     Wed 12 Nov 2025 12:01:04 +0000
Files and hashes:         1: 2UZkcfvHBD0nlLVShbBCdFbgaEM.roa (hash: HqtlmZWEJIZpNtC58lOjwfZX2SNzuDVgWAhhp7ppdfQ=)
                          2: R9E_qtj1VUjv3jJ8H84LoeWhd-Y.roa (hash: e3y1w4/pEQBqLE2b/SIgYWYr4YtTdvlqNQkpHYOPhyQ=)
                          3: frLrA0keoZHqLNQ6H6mr7HttS6s.roa (hash: Mfy5d8aC18pzCzwCyFVqYxGvs9LiQ6tdwOia7qFz85A=)
                          4: twmga9_E_KzkAm9sOwBfykbdGZk.roa (hash: BS47sv4rbsHbtLhVm7asDcUh2pqMrmQZsTAWkFmOWjE=)
                          5: wesHbRZwLH2-qXLily71dqHyyHM.crl (hash: rP7Won1MsniyJAphdzSwEDIUMPSHwowNUZG7IDjHVD8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/a43c6e-349c-4914-8da3-6c32a6ab1ef2/1/wesHbRZwLH2-qXLily71dqHyyHM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/a43c6e-349c-4914-8da3-6c32a6ab1ef2/1/wesHbRZwLH2-qXLily71dqHyyHM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wesHbRZwLH2-qXLily71dqHyyHM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 09:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:72:ca:7c:9c:6e:7f:b0:03:16:44:13:18:07:e1:12:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1eb076d16702c7dbea972e2972ef576a1f2c873
        Validity
            Not Before: Nov 11 12:01:04 2025 GMT
            Not After : Nov 12 12:01:04 2025 GMT
        Subject: CN=636ad3318ee91e2557f361eb17317a212e9f195c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:84:da:76:b5:9e:69:8f:4d:cc:6d:0e:d6:a6:
                    44:28:28:ac:17:f9:cc:11:cb:83:48:97:e3:81:b1:
                    f7:10:a2:ba:9c:f5:df:31:3f:1f:ba:89:a2:78:2a:
                    42:02:95:05:eb:c1:ed:f3:75:79:96:d4:d5:18:97:
                    47:a8:3d:2f:e8:6b:95:7f:36:ca:0e:f0:d1:eb:4a:
                    39:24:5c:68:f0:9f:c9:22:2f:8d:2f:79:6d:a6:32:
                    41:37:15:3d:b4:74:de:29:d1:f2:f6:d2:40:e8:00:
                    fe:6f:af:28:83:cc:aa:9a:b3:5f:45:aa:50:c1:26:
                    3a:71:8a:94:bf:3d:5b:24:31:90:a3:c9:76:bf:35:
                    73:67:3f:08:e1:0a:72:9e:59:40:8f:23:a8:d7:ff:
                    87:15:0a:b9:ce:90:b5:44:6a:61:88:ab:3a:73:10:
                    a7:11:81:27:a1:c8:9b:12:5b:e1:01:15:93:19:74:
                    1b:cb:5f:b1:1f:8d:f0:80:d6:27:f5:cc:6e:cf:b5:
                    b3:ff:57:e3:76:54:9f:ec:e1:f4:d8:ad:21:30:a4:
                    29:9b:9f:a6:53:45:53:3b:0b:0d:be:dd:29:e2:61:
                    75:f8:25:42:85:51:35:44:ab:f7:f6:29:f9:c8:13:
                    4c:6c:19:36:69:f4:c8:81:4c:f8:3b:19:12:15:6b:
                    2f:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:6A:D3:31:8E:E9:1E:25:57:F3:61:EB:17:31:7A:21:2E:9F:19:5C
            X509v3 Authority Key Identifier:
                keyid:C1:EB:07:6D:16:70:2C:7D:BE:A9:72:E2:97:2E:F5:76:A1:F2:C8:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wesHbRZwLH2-qXLily71dqHyyHM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a43c6e-349c-4914-8da3-6c32a6ab1ef2/1/wesHbRZwLH2-qXLily71dqHyyHM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a43c6e-349c-4914-8da3-6c32a6ab1ef2/1/wesHbRZwLH2-qXLily71dqHyyHM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:71:66:b7:f2:20:6a:cc:a4:07:77:b5:50:0d:63:78:47:26:
         a3:28:81:9d:62:75:88:69:68:dc:d3:91:c0:ff:36:ee:5c:9e:
         42:32:75:11:2d:56:65:70:7d:81:17:c4:6e:27:9a:7c:a5:ca:
         48:e0:d3:13:58:ca:b8:91:40:37:e3:d0:e2:ce:b1:9a:7f:6e:
         d5:5f:38:de:76:67:4b:9b:15:2f:c4:a1:4f:22:30:60:d6:1e:
         59:f5:7c:61:bf:22:f8:fb:b4:15:a3:ab:10:29:5b:75:e0:c1:
         67:f6:bc:e1:ff:64:0b:e6:a1:8f:b0:bd:08:28:b1:e9:7d:d6:
         cb:7e:b3:5e:fd:45:f9:68:a8:a5:2a:a0:c3:ee:06:db:02:66:
         26:81:30:82:da:28:96:44:90:9c:e2:24:69:4d:0c:f7:0c:23:
         37:8b:ec:cc:af:91:45:e1:81:ba:2b:c6:b4:f0:cd:52:94:8c:
         d0:3f:7a:a3:15:4b:d2:88:3a:6e:fc:30:ed:97:cd:7e:89:e9:
         35:36:37:ef:23:5c:d4:a6:82:40:e1:bc:41:31:23:4a:4c:47:
         b2:1b:fb:8a:80:3e:43:53:3f:bd:1b:15:b0:ea:20:22:6f:77:
         53:98:82:4e:f7:56:f5:d2:7b:a0:d2:73:01:66:49:4d:f3:bf:
         49:96:e9:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:45:53 2025 by rpki-client