Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.mft
File:                     wE23YjJB1-Znj8JXUfpOC2ZlGGs.mft (raw, json)
Hash identifier:          Odn047Jwn6rxLOB9363TtLa8yY2IX+8gPOHynqj1jK8=
Subject key identifier:   16:44:DA:1D:77:31:03:E1:F2:A7:F1:3A:F4:F1:54:FE:38:E4:3B:8C
Authority key identifier: C0:4D:B7:62:32:41:D7:E6:67:8F:C2:57:51:FA:4E:0B:66:65:18:6B
Certificate issuer:       /CN=c04db7623241d7e6678fc25751fa4e0b6665186b
Certificate serial:       019A72264E25E97971CA854676E76F788D43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wE23YjJB1-Znj8JXUfpOC2ZlGGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.mft
Manifest number:          119B
Signing time:             Tue 11 Nov 2025 09:01:44 +0000
Manifest this update:     Tue 11 Nov 2025 09:01:44 +0000
Manifest next update:     Wed 12 Nov 2025 09:01:44 +0000
Files and hashes:         1: 0kvVQcd2e4SnQh3xLN4W9Ie4suY.roa (hash: dfbeFrG20UF3jAoNCZUQnOLXn1JG2r7gMGzts7DU6SI=)
                          2: Jsb0BR9UN-dcyjDsxkaO3-Yvltw.roa (hash: mF6vNbBQIU1GWKkIg2h8rHabqCIgbySUD4lzazj7BZI=)
                          3: L1zaQrOyYMyhb-vjYsccEQ0rOGs.roa (hash: h8hWAA3iPsZGpLorxG9VKCzAf/rtjUUbjPF4osJaSgE=)
                          4: oB9bZbRwGhzU8WuOdPBmky_nv2k.roa (hash: 1SnSLuXNNFwu9oud/OcFmIuzLgq0f2HlkrbZraM+p3Q=)
                          5: pU_eB5rSsUS6EVPfiP0TBGNtCcY.roa (hash: rx92LY3LSKSOciZBDpqfQO1j0HB6jcKddcqiSbdXBt8=)
                          6: sqhUxFl6CcGyU6cWBXsdx2sYfd4.roa (hash: z1bLM/XjYo3lfS/p4JsuBkvAngm8wCUro59bQLMM7mw=)
                          7: wE23YjJB1-Znj8JXUfpOC2ZlGGs.crl (hash: 5K+1PGPD6hTLfO63SKJgwCDHVfSG/lmvHtdv/83gt54=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wE23YjJB1-Znj8JXUfpOC2ZlGGs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 09:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:72:26:4e:25:e9:79:71:ca:85:46:76:e7:6f:78:8d:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c04db7623241d7e6678fc25751fa4e0b6665186b
        Validity
            Not Before: Nov 11 09:01:44 2025 GMT
            Not After : Nov 12 09:01:44 2025 GMT
        Subject: CN=1644da1d773103e1f2a7f13af4f154fe38e43b8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:df:57:0f:6e:91:6a:c6:ea:ed:00:9c:62:10:
                    84:cf:de:71:3c:15:67:80:7d:a1:9f:0b:a5:90:2b:
                    e6:6f:ed:c1:7c:a0:93:99:98:79:f6:3f:97:b0:c6:
                    c1:23:88:3d:ff:66:ae:cb:9d:6c:47:f7:5a:3d:02:
                    d2:21:d1:45:76:42:91:f4:46:4a:88:21:68:43:e9:
                    57:43:6b:c4:2e:51:ac:b9:38:01:ac:3f:7a:f2:d3:
                    a8:2a:fe:f4:bc:76:85:5c:b4:43:aa:0f:1c:67:2e:
                    f2:34:fd:f5:56:60:16:99:ea:4e:0d:c6:2e:48:4d:
                    db:07:e6:cc:7c:7d:c4:db:6e:6f:65:bf:b1:f0:15:
                    d2:49:1d:4e:cd:69:33:ba:49:31:86:f4:cd:77:e8:
                    70:1a:89:01:3d:2c:48:a3:db:d8:44:4a:bd:6c:87:
                    b6:27:d7:ec:62:b8:cd:27:7c:0a:f7:dc:cc:b6:b6:
                    6d:c6:de:32:3e:b1:dc:db:41:b5:3b:60:27:96:ef:
                    f3:2d:7e:fa:48:bd:24:62:97:8a:2e:79:80:ef:ba:
                    dd:8c:9e:0a:5f:5d:12:f9:a9:79:23:f2:b0:89:94:
                    48:31:07:7e:d7:86:5a:f8:3d:4a:e2:42:1a:58:8e:
                    24:8b:8c:9a:81:28:71:45:bf:38:5a:7e:16:0e:f1:
                    26:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:44:DA:1D:77:31:03:E1:F2:A7:F1:3A:F4:F1:54:FE:38:E4:3B:8C
            X509v3 Authority Key Identifier:
                keyid:C0:4D:B7:62:32:41:D7:E6:67:8F:C2:57:51:FA:4E:0B:66:65:18:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wE23YjJB1-Znj8JXUfpOC2ZlGGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/6e874e-73fe-4dbb-b74c-0423f263f2cb/1/wE23YjJB1-Znj8JXUfpOC2ZlGGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:e4:58:81:37:17:98:c3:62:e1:aa:bf:35:57:c8:04:9e:cc:
         c8:bd:6d:c0:6c:14:c8:08:8f:17:9e:77:84:f4:58:97:50:88:
         e8:a6:3e:1d:b2:a3:49:43:e3:20:dd:3a:57:89:68:14:d3:ad:
         74:e4:d0:4c:d1:ac:5a:87:32:b2:48:28:ab:02:61:c6:12:c5:
         ab:1a:db:0b:37:f6:49:45:8c:a2:31:09:ac:d0:3c:15:77:3d:
         9c:6f:7e:31:f7:a3:aa:38:7b:d0:a7:6b:15:e7:2b:98:98:41:
         5e:02:24:33:d7:23:08:5b:ed:aa:0e:4d:d0:ca:f8:3a:90:19:
         56:75:71:f2:7c:81:65:8f:ad:94:24:0b:80:8f:28:21:f1:22:
         bc:cf:ae:12:6e:a0:f2:0c:b2:88:ac:66:e4:31:69:1c:9b:8f:
         c7:84:ce:bc:03:50:1a:cc:54:c8:ab:01:92:05:ac:4f:b9:59:
         69:06:cd:47:3b:b7:da:58:2e:86:1f:b9:96:f7:af:cc:68:f7:
         eb:03:c7:18:c0:4c:be:65:8c:87:71:cf:22:79:ec:f3:6b:f6:
         38:7c:37:40:10:c5:55:86:c6:f6:6b:63:0d:9c:ce:7c:bf:88:
         ac:c4:bf:33:e1:ca:55:f4:c2:98:52:84:03:f8:21:02:57:4f:
         a7:a7:db:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:03:48 2025 by rpki-client