Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/a4bdf7-2579-4bd0-8a93-224fd78ef827/1/wRWzJ-hHYWhQIvRzKNb0y9bTBB4.mft
File:                     wRWzJ-hHYWhQIvRzKNb0y9bTBB4.mft (raw, json)
Hash identifier:          vCXXf5KP71tk7jURAO0HL9aaMuGzEKfxHrWTae3Zn6M=
Subject key identifier:   E9:CB:EF:90:F2:62:7D:99:49:76:9F:D6:B1:73:45:C0:58:F4:AD:5D
Authority key identifier: C1:15:B3:27:E8:47:61:68:50:22:F4:73:28:D6:F4:CB:D6:D3:04:1E
Certificate issuer:       /CN=c115b327e84761685022f47328d6f4cbd6d3041e
Certificate serial:       019A1D9A7DAE3081EF57AC7DE53E16E268B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wRWzJ-hHYWhQIvRzKNb0y9bTBB4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/a4bdf7-2579-4bd0-8a93-224fd78ef827/1/wRWzJ-hHYWhQIvRzKNb0y9bTBB4.mft
Manifest number:          14AF
Signing time:             Sat 25 Oct 2025 23:00:55 +0000
Manifest this update:     Sat 25 Oct 2025 23:00:55 +0000
Manifest next update:     Sun 26 Oct 2025 23:00:55 +0000
Files and hashes:         1: IIaW89ZzFdGKWt-qkretRuZFhUw.roa (hash: +wV4CyXS7FosexYu6VMQZY2Kh9jsLDP8nTTtEBowsxI=)
                          2: hKI1gIRkFSpeDRxr6Gy5U-0E8bg.roa (hash: wtwNxYOC1NaLQTBIVmgD52Go7NqEorx1g4IWXnECaeA=)
                          3: wRWzJ-hHYWhQIvRzKNb0y9bTBB4.crl (hash: 3arzWw/ZChg6z5Wbb7egEwnBYZwwnXBiLWMzlbDXt4E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/a4bdf7-2579-4bd0-8a93-224fd78ef827/1/wRWzJ-hHYWhQIvRzKNb0y9bTBB4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/a4bdf7-2579-4bd0-8a93-224fd78ef827/1/wRWzJ-hHYWhQIvRzKNb0y9bTBB4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wRWzJ-hHYWhQIvRzKNb0y9bTBB4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 26 Oct 2025 19:59:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:1d:9a:7d:ae:30:81:ef:57:ac:7d:e5:3e:16:e2:68:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c115b327e84761685022f47328d6f4cbd6d3041e
        Validity
            Not Before: Oct 25 23:00:55 2025 GMT
            Not After : Oct 26 23:00:55 2025 GMT
        Subject: CN=e9cbef90f2627d9949769fd6b17345c058f4ad5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:4c:04:e2:ed:32:25:70:d6:45:66:93:6a:b4:
                    81:ea:70:37:85:c6:08:60:7b:13:7e:2e:23:64:39:
                    94:97:64:0a:53:a8:c8:1c:77:2b:bf:dc:d3:fe:ae:
                    2f:5e:c4:50:cf:34:b0:ad:9b:6b:a1:7e:20:e0:a2:
                    49:53:d0:10:1b:74:98:0b:29:73:fd:d3:26:c3:3d:
                    19:e4:39:88:5a:76:35:dc:f4:d4:3a:f9:72:0e:3a:
                    5e:1e:5b:24:38:b9:15:41:11:10:4f:a7:7e:c2:9c:
                    c6:e7:01:72:a8:c6:1b:7b:fa:ba:d2:68:28:6a:6d:
                    a6:76:97:5b:10:a2:72:f8:46:8c:37:44:35:60:82:
                    c6:ad:9e:34:1c:c3:a8:92:eb:5f:b6:62:16:fe:c3:
                    75:d3:4a:42:b4:84:c1:7b:ff:a8:41:d1:e1:b7:05:
                    4c:dd:58:bf:c9:84:b1:be:e3:1d:e3:92:9f:ab:2e:
                    50:ef:f4:4b:d2:6e:61:4d:f8:39:7b:10:93:be:dd:
                    fa:59:83:ed:28:92:78:c8:7f:2f:0b:47:91:11:8e:
                    39:ee:a5:10:33:2a:cb:bc:57:bd:91:12:78:d9:2f:
                    8d:b0:30:0e:11:56:28:0b:25:66:ab:67:ad:68:62:
                    fd:a3:1f:a9:1f:22:d8:db:18:38:e5:8d:27:55:04:
                    57:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:CB:EF:90:F2:62:7D:99:49:76:9F:D6:B1:73:45:C0:58:F4:AD:5D
            X509v3 Authority Key Identifier:
                keyid:C1:15:B3:27:E8:47:61:68:50:22:F4:73:28:D6:F4:CB:D6:D3:04:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wRWzJ-hHYWhQIvRzKNb0y9bTBB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a4bdf7-2579-4bd0-8a93-224fd78ef827/1/wRWzJ-hHYWhQIvRzKNb0y9bTBB4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a4bdf7-2579-4bd0-8a93-224fd78ef827/1/wRWzJ-hHYWhQIvRzKNb0y9bTBB4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:80:c5:75:09:e8:3c:20:f5:56:f3:e5:eb:19:8a:b6:81:69:
         55:ac:0e:33:ea:58:92:1d:67:1e:10:39:cd:68:80:b2:7b:a8:
         2a:f4:75:df:ed:fa:80:6f:c9:10:98:d4:23:3b:19:3f:2f:e2:
         71:d0:dd:f1:c8:f3:f6:af:d9:99:71:f6:1c:48:e2:b6:d3:3c:
         4b:c8:ae:a5:74:5a:5d:ba:f3:6c:b0:89:b3:c3:62:8b:91:b7:
         e8:b4:65:47:44:1e:e4:7b:2c:d9:d7:e3:f7:8f:64:8d:eb:86:
         78:9b:90:fd:05:13:2d:64:14:ae:2e:68:bd:19:3f:7f:c7:bf:
         98:63:b0:58:43:d7:f2:a6:61:08:d1:78:40:f6:18:7f:3c:4d:
         38:6c:9c:c4:dc:a5:04:0b:e0:bb:92:7b:16:e8:bc:1c:09:8f:
         de:9c:84:89:0a:d1:8c:30:11:80:f7:97:e1:c3:bd:bf:77:5b:
         dc:bc:4d:ee:9f:cb:e9:5f:7c:22:09:77:d5:82:33:fe:31:05:
         a5:96:4e:eb:65:29:ae:e4:60:c0:86:dd:39:1c:3c:78:22:54:
         9c:78:48:28:01:3b:86:60:ab:f6:01:f6:59:65:74:eb:34:e8:
         2f:32:5c:71:6a:32:40:74:91:07:b1:c0:c9:d0:99:d1:1e:03:
         a0:96:fc:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 02:58:18 2025 by rpki-client