Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/90f62b-7ae2-49d6-a42c-899f1e1b7360/1/WcTPvYccQt1VpXvQ_1ZxNPMisj4.mft
File:                     WcTPvYccQt1VpXvQ_1ZxNPMisj4.mft (raw, json)
Hash identifier:          1nsSw7WewEnnHsk3MExFQWUg0xdaKpDvTBM9XYixUZc=
Subject key identifier:   3C:23:46:90:53:28:E7:01:79:2C:0C:E5:4E:53:B4:EB:82:09:66:6E
Authority key identifier: 59:C4:CF:BD:87:1C:42:DD:55:A5:7B:D0:FF:56:71:34:F3:22:B2:3E
Certificate issuer:       /CN=59c4cfbd871c42dd55a57bd0ff567134f322b23e
Certificate serial:       019A70DC03D8DC262A59149E8872FD2B5B87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WcTPvYccQt1VpXvQ_1ZxNPMisj4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/90f62b-7ae2-49d6-a42c-899f1e1b7360/1/WcTPvYccQt1VpXvQ_1ZxNPMisj4.mft
Manifest number:          100C
Signing time:             Tue 11 Nov 2025 03:00:58 +0000
Manifest this update:     Tue 11 Nov 2025 03:00:58 +0000
Manifest next update:     Wed 12 Nov 2025 03:00:58 +0000
Files and hashes:         1: WcTPvYccQt1VpXvQ_1ZxNPMisj4.crl (hash: 0uUL/cyv7ASzk4PJpDS86JvMQ8sTTzfwbzA85BM//a0=)
                          2: WukoJKvYevk5DCDC_j-VNd6UEsY.roa (hash: oH9XlTl7oEKCB+DPnY3H0aSfeO00Y6Ze9ixEhvL+Fj8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/90f62b-7ae2-49d6-a42c-899f1e1b7360/1/WcTPvYccQt1VpXvQ_1ZxNPMisj4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/90f62b-7ae2-49d6-a42c-899f1e1b7360/1/WcTPvYccQt1VpXvQ_1ZxNPMisj4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WcTPvYccQt1VpXvQ_1ZxNPMisj4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 03:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:70:dc:03:d8:dc:26:2a:59:14:9e:88:72:fd:2b:5b:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59c4cfbd871c42dd55a57bd0ff567134f322b23e
        Validity
            Not Before: Nov 11 03:00:58 2025 GMT
            Not After : Nov 12 03:00:58 2025 GMT
        Subject: CN=3c2346905328e701792c0ce54e53b4eb8209666e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:47:45:04:71:8e:36:c2:85:d7:02:ff:e5:19:
                    9a:95:01:cf:af:76:3c:c4:e6:c6:3c:25:ef:f9:3d:
                    77:9c:4a:90:b2:c2:74:09:bc:98:31:a5:77:e9:09:
                    14:8b:fd:3f:a9:e7:74:75:bd:4c:df:a5:d3:ef:2e:
                    d0:d1:30:e0:4e:68:bb:2d:43:26:d0:12:8c:18:53:
                    6e:3d:aa:e7:68:58:6f:ef:15:45:a0:20:2a:67:d9:
                    64:7d:62:40:51:60:f9:55:86:2d:ad:4c:e1:c1:f4:
                    3b:07:d1:80:ea:cc:1e:c7:c9:98:dc:f7:44:32:9e:
                    fa:50:2a:56:89:82:b9:2f:c1:a0:30:dd:cc:06:e6:
                    cb:54:ab:a7:a9:39:7b:eb:56:19:e9:cc:88:c1:3e:
                    46:31:4c:1c:74:32:81:32:ba:8f:f0:15:43:d9:f7:
                    84:88:e4:7d:44:b1:32:b4:1d:09:8f:9b:94:38:55:
                    f3:75:df:3d:78:56:ef:d0:bc:05:a8:7a:17:72:f5:
                    d0:31:9e:d7:e1:b3:80:1d:53:89:83:ea:0a:5a:12:
                    98:05:86:9b:99:86:4f:94:f3:b6:84:ae:2e:5d:ed:
                    1a:8a:c0:b0:63:a8:08:f1:06:55:7e:ba:5f:eb:dd:
                    15:d0:11:f2:40:a9:20:01:d9:ea:cd:8d:66:98:19:
                    d3:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:23:46:90:53:28:E7:01:79:2C:0C:E5:4E:53:B4:EB:82:09:66:6E
            X509v3 Authority Key Identifier:
                keyid:59:C4:CF:BD:87:1C:42:DD:55:A5:7B:D0:FF:56:71:34:F3:22:B2:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WcTPvYccQt1VpXvQ_1ZxNPMisj4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/90f62b-7ae2-49d6-a42c-899f1e1b7360/1/WcTPvYccQt1VpXvQ_1ZxNPMisj4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/90f62b-7ae2-49d6-a42c-899f1e1b7360/1/WcTPvYccQt1VpXvQ_1ZxNPMisj4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:ad:24:77:31:a6:16:8c:3d:e4:d9:2a:df:1c:44:bd:5d:00:
         ac:ef:b4:03:de:9b:90:c3:d1:28:13:40:6c:48:19:3f:59:b7:
         f4:42:d6:c0:b6:fa:10:36:18:d1:9e:79:a8:01:4a:d3:51:ce:
         7b:c7:91:dd:15:a5:48:ac:4a:fb:4a:22:08:e5:d6:eb:87:8c:
         37:da:7f:3b:9f:cc:b1:66:27:0f:04:1c:c0:eb:19:99:ff:37:
         11:52:17:99:26:c3:12:56:c2:76:91:3f:7b:03:69:5a:17:10:
         d3:60:a4:b7:1c:75:3a:80:da:c8:8b:37:4e:df:44:01:0a:41:
         30:39:d3:98:6b:35:ed:e1:57:b5:c9:7f:6d:a4:38:53:a3:6c:
         4b:ff:49:f1:3c:51:09:d6:96:76:96:f1:0d:e4:43:91:93:8a:
         0a:fe:a2:02:7a:62:62:0b:69:c2:29:5e:5f:a1:76:d3:1e:e3:
         ea:dd:d1:cd:2b:63:91:f5:e6:88:41:f1:6e:33:99:1f:0c:07:
         18:f6:6e:f8:88:27:8f:90:b9:eb:2b:78:cb:30:00:c0:80:a9:
         3d:32:86:e3:6b:76:7c:94:56:f6:6f:84:0f:0d:02:3b:2c:98:
         82:3e:d1:8e:d7:17:84:a2:22:5e:88:cb:92:7e:6e:69:7f:f1:
         e9:1d:96:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:41:48 2025 by rpki-client