Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/2f9a33-cd8c-41e4-9c48-eb8612457715/1/WOBoeiTWo-QU15jZsvtsUlkcuyM.mft
File:                     WOBoeiTWo-QU15jZsvtsUlkcuyM.mft (raw, json)
Hash identifier:          oViIpG5sa2DH6WBQYjPeN7lW99mLF8/NQ8izO0yeoiQ=
Subject key identifier:   27:7A:9A:C7:1A:AF:44:45:5C:9D:09:24:21:1F:30:32:3B:D5:E6:05
Authority key identifier: 58:E0:68:7A:24:D6:A3:E4:14:D7:98:D9:B2:FB:6C:52:59:1C:BB:23
Certificate issuer:       /CN=58e0687a24d6a3e414d798d9b2fb6c52591cbb23
Certificate serial:       019A21E508B9CB151B86E23E24C934AE63DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WOBoeiTWo-QU15jZsvtsUlkcuyM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/2f9a33-cd8c-41e4-9c48-eb8612457715/1/WOBoeiTWo-QU15jZsvtsUlkcuyM.mft
Manifest number:          1643
Signing time:             Sun 26 Oct 2025 19:00:49 +0000
Manifest this update:     Sun 26 Oct 2025 19:00:49 +0000
Manifest next update:     Mon 27 Oct 2025 19:00:49 +0000
Files and hashes:         1: 0fPXJz4ZkFhSnDl_qC3Oqnd5MPk.roa (hash: 9f23J/XrfHwop7pkXvCqZEzg16V5jFPr7gFFFr197JQ=)
                          2: WOBoeiTWo-QU15jZsvtsUlkcuyM.crl (hash: BXTN4B7Dcd8WiDmUzO3dTqvkdUWI9GBCR6aSfqGi1xA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/2f9a33-cd8c-41e4-9c48-eb8612457715/1/WOBoeiTWo-QU15jZsvtsUlkcuyM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/2f9a33-cd8c-41e4-9c48-eb8612457715/1/WOBoeiTWo-QU15jZsvtsUlkcuyM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WOBoeiTWo-QU15jZsvtsUlkcuyM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Oct 2025 19:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:21:e5:08:b9:cb:15:1b:86:e2:3e:24:c9:34:ae:63:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58e0687a24d6a3e414d798d9b2fb6c52591cbb23
        Validity
            Not Before: Oct 26 19:00:49 2025 GMT
            Not After : Oct 27 19:00:49 2025 GMT
        Subject: CN=277a9ac71aaf44455c9d0924211f30323bd5e605
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b2:e6:d2:85:ca:87:f3:b9:ab:68:50:5a:88:
                    d1:b8:58:fe:9d:08:e0:b7:f3:f7:ea:0c:f3:e8:5e:
                    5c:bd:04:ba:74:19:db:dc:e4:ce:76:4b:44:eb:60:
                    35:7c:25:44:45:93:63:18:cf:e5:5d:5c:bc:5d:e8:
                    50:1c:d4:18:4a:1c:1d:5e:c4:fc:f9:7a:32:fe:33:
                    5b:0c:17:d4:9f:e8:14:ee:b7:9c:3e:14:13:7c:37:
                    98:36:0d:08:9f:f1:50:2a:a2:92:f6:44:24:8e:66:
                    97:b9:0c:11:2c:8c:ac:1f:dd:45:03:f7:a7:c5:93:
                    b3:0f:ac:1c:2d:a6:c3:bb:1e:da:a9:3c:cd:57:55:
                    6e:92:ca:74:51:e6:1c:ff:a7:b0:ef:91:43:2d:de:
                    43:16:af:20:9d:99:98:72:61:4d:70:25:b5:d1:d3:
                    7f:62:fc:b5:13:4b:11:d1:e0:0d:e4:82:46:f0:b0:
                    af:8d:29:de:f0:12:9f:fd:93:00:13:89:58:51:77:
                    d4:d9:4d:71:51:1d:b7:53:84:60:4a:ff:b1:fe:e6:
                    fa:7e:90:7b:24:57:7b:36:30:ab:09:27:4e:98:a8:
                    2e:98:1d:e9:92:ed:60:f8:d0:8d:51:c8:b2:f2:5b:
                    b3:b1:35:4a:7f:0e:a2:e1:8d:72:97:7e:da:a5:83:
                    d7:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:7A:9A:C7:1A:AF:44:45:5C:9D:09:24:21:1F:30:32:3B:D5:E6:05
            X509v3 Authority Key Identifier:
                keyid:58:E0:68:7A:24:D6:A3:E4:14:D7:98:D9:B2:FB:6C:52:59:1C:BB:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WOBoeiTWo-QU15jZsvtsUlkcuyM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2f9a33-cd8c-41e4-9c48-eb8612457715/1/WOBoeiTWo-QU15jZsvtsUlkcuyM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2f9a33-cd8c-41e4-9c48-eb8612457715/1/WOBoeiTWo-QU15jZsvtsUlkcuyM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:b6:f7:12:6b:d1:63:31:68:52:3d:53:72:99:46:d4:af:f2:
         db:23:49:4f:b6:8f:0e:b7:80:04:45:e5:76:58:e9:37:b4:48:
         6f:c1:01:e6:41:0f:88:97:9b:f8:13:47:2c:60:b7:2c:ca:60:
         1a:f0:3a:21:34:07:a1:3c:c1:b7:e3:7b:24:24:12:ca:4e:ef:
         60:ff:9e:38:e6:0c:6d:94:cf:8f:bb:0d:95:b1:72:8c:c1:4b:
         35:e5:e0:b5:b8:eb:0f:cb:d4:48:a6:5b:32:e7:38:31:84:c6:
         c1:30:1c:08:cc:ff:fe:2a:b6:55:0f:d5:8e:69:81:b7:82:53:
         21:4b:0d:52:dd:c8:01:65:e7:71:6c:57:b2:12:19:2b:25:61:
         60:42:9d:27:5e:09:ac:b7:e9:4b:b3:e9:11:b9:20:65:11:61:
         cd:4b:51:f8:80:ad:39:bb:03:20:a5:76:8e:a1:27:00:69:9e:
         38:6e:af:17:b5:65:1e:ec:e6:d1:d4:ca:78:e7:24:57:3d:31:
         7e:0d:f4:72:c3:d1:95:10:68:1b:8b:2c:dd:9e:d9:54:3f:2d:
         c4:04:68:6a:c5:7f:8b:3a:91:12:6a:07:b8:76:38:f9:2b:bc:
         fc:ad:c8:6c:8d:1c:48:45:50:a2:90:2a:90:70:23:ec:92:71:
         3e:b1:33:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 01:16:08 2025 by rpki-client