Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/8ccd6d-134c-4ebb-aefc-ec603926600b/1/MWs_M04mkRBpDp7Gp6WF3-T-hwQ.mft
File:                     MWs_M04mkRBpDp7Gp6WF3-T-hwQ.mft (raw, json)
Hash identifier:          n0sIahYxePe7q1aZyIJ0NEyA3RcL4ztWAAal4Ryj++E=
Subject key identifier:   BE:8E:59:C4:41:47:1A:CB:DB:F0:F4:BD:48:B6:59:C9:22:EA:09:59
Authority key identifier: 31:6B:3F:33:4E:26:91:10:69:0E:9E:C6:A7:A5:85:DF:E4:FE:87:04
Certificate issuer:       /CN=316b3f334e269110690e9ec6a7a585dfe4fe8704
Certificate serial:       019A725CA5ABF8FA32BF3E80117E44B80ADE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MWs_M04mkRBpDp7Gp6WF3-T-hwQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/8ccd6d-134c-4ebb-aefc-ec603926600b/1/MWs_M04mkRBpDp7Gp6WF3-T-hwQ.mft
Manifest number:          0FD1
Signing time:             Tue 11 Nov 2025 10:01:05 +0000
Manifest this update:     Tue 11 Nov 2025 10:01:05 +0000
Manifest next update:     Wed 12 Nov 2025 10:01:05 +0000
Files and hashes:         1: MWs_M04mkRBpDp7Gp6WF3-T-hwQ.crl (hash: nryGt3pk+MyoXzZrjGlR/Ar85oBQ4wdXCfTuPcPNyUM=)
                          2: jlPrG3yw9VWSwdIgD6U56n3FJO4.roa (hash: //BBruzTksW7mSOBdLHpnW4EtV41ZFbnLnxHoJuolZA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/8ccd6d-134c-4ebb-aefc-ec603926600b/1/MWs_M04mkRBpDp7Gp6WF3-T-hwQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/8ccd6d-134c-4ebb-aefc-ec603926600b/1/MWs_M04mkRBpDp7Gp6WF3-T-hwQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MWs_M04mkRBpDp7Gp6WF3-T-hwQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 09:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:72:5c:a5:ab:f8:fa:32:bf:3e:80:11:7e:44:b8:0a:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=316b3f334e269110690e9ec6a7a585dfe4fe8704
        Validity
            Not Before: Nov 11 10:01:05 2025 GMT
            Not After : Nov 12 10:01:05 2025 GMT
        Subject: CN=be8e59c441471acbdbf0f4bd48b659c922ea0959
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:3d:39:07:ef:c2:62:81:f7:b3:df:36:10:ad:
                    ea:42:5f:21:f4:9e:cb:eb:1c:51:91:fe:78:9f:f5:
                    2c:bd:fa:f6:bb:81:8a:79:f6:18:9a:00:ae:39:27:
                    b1:2f:07:a1:35:93:5a:4b:51:94:96:23:a6:11:e3:
                    55:d8:10:d8:7b:e1:11:45:ff:4d:cc:d8:8a:45:6a:
                    4c:3d:a5:fc:cf:9c:ed:86:52:38:62:ee:f1:87:0d:
                    0d:55:80:33:29:87:fa:ba:c0:6c:f3:14:3a:12:49:
                    a0:0d:da:49:f8:1e:6a:b6:a6:91:66:22:61:c4:7d:
                    d2:6e:a4:3c:ce:98:d5:5c:02:f7:90:b8:8c:e9:d9:
                    07:42:86:56:3f:eb:90:1a:de:1c:30:3f:32:d5:d4:
                    7f:8c:ce:e6:8a:5e:5f:7c:ea:c7:d5:ca:fc:b4:9c:
                    86:ce:9b:ab:c2:3d:3e:c7:f5:bd:52:d7:ee:ea:e3:
                    1c:52:b4:cb:d0:b3:32:fe:bf:96:50:2c:0d:41:b5:
                    79:ae:0e:3d:df:75:1d:68:8c:16:2f:ea:f0:16:96:
                    38:bf:6d:81:82:4b:fe:34:8a:1c:8f:77:34:d6:b0:
                    58:8c:e5:dd:a1:f7:68:c8:91:0d:61:a7:03:7a:f9:
                    01:59:d9:12:45:86:65:ba:2b:fc:02:99:01:ba:d9:
                    9b:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:8E:59:C4:41:47:1A:CB:DB:F0:F4:BD:48:B6:59:C9:22:EA:09:59
            X509v3 Authority Key Identifier:
                keyid:31:6B:3F:33:4E:26:91:10:69:0E:9E:C6:A7:A5:85:DF:E4:FE:87:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MWs_M04mkRBpDp7Gp6WF3-T-hwQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ccd6d-134c-4ebb-aefc-ec603926600b/1/MWs_M04mkRBpDp7Gp6WF3-T-hwQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8ccd6d-134c-4ebb-aefc-ec603926600b/1/MWs_M04mkRBpDp7Gp6WF3-T-hwQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:b6:0b:f4:7f:d6:96:12:89:30:0b:af:f9:ef:49:67:0a:3f:
         ed:f9:52:ff:2e:b6:36:38:2d:0c:c8:47:4a:60:c9:63:fe:2c:
         0a:74:1d:d6:82:bc:38:52:99:fa:9f:94:ce:40:9a:08:ed:8b:
         e8:ae:b2:84:ca:74:a4:84:3d:52:9b:a7:e5:04:09:05:62:30:
         5a:c1:5a:b3:f4:a1:c4:01:02:96:7a:f7:78:ee:28:56:fd:67:
         67:37:7d:9c:cd:2c:73:68:7b:6c:2e:c7:ee:c1:c1:dd:00:83:
         05:ed:12:b4:6a:94:66:5d:3d:d5:47:a2:76:20:41:4c:2d:be:
         8a:9e:84:cf:00:27:e4:4f:d3:b6:41:1a:b6:13:2d:35:89:95:
         ea:29:c2:fe:73:7f:8a:3f:c5:40:6a:6a:ca:ef:df:fe:23:06:
         e7:a3:fe:d3:d7:12:01:bc:53:36:e4:c5:5d:02:8e:6d:34:7d:
         eb:ae:a8:c7:c5:c3:13:f8:3d:90:c5:d1:ae:cb:0a:37:99:41:
         3a:92:11:38:f9:5d:3f:53:06:be:10:12:07:7e:44:95:91:7a:
         c3:73:c0:cd:f7:7e:8b:7b:92:eb:9e:8e:1e:a4:56:5f:55:bb:
         c0:85:f6:0d:ae:b9:a0:7f:f4:7f:3b:f4:35:8c:32:62:7c:b1:
         73:fd:65:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:34:56 2025 by rpki-client