Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/198396-f48e-4a2c-ba5a-6d210fd42d77/1/wBPQUF0HqhDZEXrC_VYmbUiQUY8.mft
File:                     wBPQUF0HqhDZEXrC_VYmbUiQUY8.mft (raw, json)
Hash identifier:          Nop1nH/tGd59p8zaDtdYwDpOsitflND/vlwhgRt2Otk=
Subject key identifier:   1A:6B:FE:05:4B:F7:DC:7E:EC:F6:05:8B:A1:B4:AF:01:B1:22:B4:3E
Authority key identifier: C0:13:D0:50:5D:07:AA:10:D9:11:7A:C2:FD:56:26:6D:48:90:51:8F
Certificate issuer:       /CN=c013d0505d07aa10d9117ac2fd56266d4890518f
Certificate serial:       019A73012B286D165DEA18448C3E20B40017
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wBPQUF0HqhDZEXrC_VYmbUiQUY8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/198396-f48e-4a2c-ba5a-6d210fd42d77/1/wBPQUF0HqhDZEXrC_VYmbUiQUY8.mft
Manifest number:          0C29
Signing time:             Tue 11 Nov 2025 13:00:47 +0000
Manifest this update:     Tue 11 Nov 2025 13:00:47 +0000
Manifest next update:     Wed 12 Nov 2025 13:00:47 +0000
Files and hashes:         1: X7sxw7uNpouw4ILJQaZasQ1FOVw.roa (hash: 7K5qnvzu1jh/3cj6mY1PwjKcxXcNjjVrkTNjEwE3NGw=)
                          2: wBPQUF0HqhDZEXrC_VYmbUiQUY8.crl (hash: +jn21As6nA0PT5S1YFywFRwNFWcguhip83xRp+Sifzw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/198396-f48e-4a2c-ba5a-6d210fd42d77/1/wBPQUF0HqhDZEXrC_VYmbUiQUY8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/198396-f48e-4a2c-ba5a-6d210fd42d77/1/wBPQUF0HqhDZEXrC_VYmbUiQUY8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wBPQUF0HqhDZEXrC_VYmbUiQUY8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 09:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:73:01:2b:28:6d:16:5d:ea:18:44:8c:3e:20:b4:00:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c013d0505d07aa10d9117ac2fd56266d4890518f
        Validity
            Not Before: Nov 11 13:00:47 2025 GMT
            Not After : Nov 12 13:00:47 2025 GMT
        Subject: CN=1a6bfe054bf7dc7eecf6058ba1b4af01b122b43e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:06:ad:7e:a7:48:37:f7:fd:8e:85:c6:a9:0d:
                    a6:cb:03:6b:57:68:86:b7:b6:75:e0:d6:e5:f6:17:
                    04:ae:89:a8:4f:85:e1:95:ca:cf:13:ef:36:64:68:
                    a3:82:14:34:17:4b:28:4c:58:9d:b5:43:44:e5:13:
                    c1:9d:74:cd:65:fb:8d:e7:c0:68:e8:b5:2e:52:eb:
                    ca:4b:d0:61:d9:c7:a7:ff:08:40:2a:8b:e3:1c:bb:
                    eb:c5:36:15:b1:b4:b5:2b:9e:c5:30:f6:0b:5a:93:
                    7a:05:45:41:49:69:ac:76:fd:c6:46:97:cc:85:31:
                    bb:f1:00:69:bf:90:41:a8:7d:9e:18:29:ad:b4:b5:
                    83:01:f9:59:e3:04:82:90:e5:ca:55:0d:00:43:41:
                    10:57:3e:00:fb:0a:fc:bc:49:ce:a6:08:b4:9d:1b:
                    38:43:a5:67:40:b4:c1:aa:59:8d:74:69:8c:3e:1c:
                    db:63:49:51:21:ac:ab:01:db:f0:78:5f:c1:09:14:
                    67:50:c1:80:3c:97:13:d7:77:c0:b6:b3:ca:4a:9d:
                    6e:17:95:44:ce:75:88:1d:c2:c4:de:d7:ce:98:1e:
                    8b:d6:b7:b2:8c:d2:27:a2:2a:6d:23:c8:41:86:5e:
                    97:19:37:b2:66:6b:64:90:ca:0f:88:96:dd:50:32:
                    6d:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:6B:FE:05:4B:F7:DC:7E:EC:F6:05:8B:A1:B4:AF:01:B1:22:B4:3E
            X509v3 Authority Key Identifier:
                keyid:C0:13:D0:50:5D:07:AA:10:D9:11:7A:C2:FD:56:26:6D:48:90:51:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBPQUF0HqhDZEXrC_VYmbUiQUY8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/198396-f48e-4a2c-ba5a-6d210fd42d77/1/wBPQUF0HqhDZEXrC_VYmbUiQUY8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/198396-f48e-4a2c-ba5a-6d210fd42d77/1/wBPQUF0HqhDZEXrC_VYmbUiQUY8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:bf:e5:c3:c3:9f:ef:31:9c:c6:c1:e6:b3:f6:81:17:47:66:
         68:5e:14:ee:db:e8:84:ee:8a:52:27:c6:5c:b7:f1:3f:73:50:
         e3:80:92:90:e5:9d:d7:75:1d:60:c7:c0:3c:0f:8f:1f:24:23:
         71:5e:05:c6:5c:34:d1:05:39:c7:25:fe:8c:e4:84:45:e9:0b:
         8b:13:05:ac:73:c4:26:d4:75:a6:d8:b6:db:4f:d4:85:d2:01:
         60:c8:36:74:e4:fa:65:62:0b:92:1d:35:3d:0e:c5:2d:9e:1b:
         84:b1:81:36:ed:7d:ba:60:97:b8:76:ec:8a:35:60:1a:9a:c3:
         fb:3c:0c:b2:7e:5e:8e:45:74:a9:72:ca:1f:d0:41:c1:78:93:
         67:3c:91:e0:60:8d:f8:14:be:07:f3:57:93:d6:17:6d:34:97:
         75:41:84:89:95:35:61:29:1d:82:e4:ab:0b:03:63:61:0c:01:
         81:81:ca:04:d9:7b:bb:30:20:36:a0:2d:c3:cd:5c:65:91:91:
         a4:21:c8:d6:7d:ad:31:a8:b8:08:52:54:a9:f0:10:64:50:fb:
         07:bd:69:2a:af:18:cf:4a:24:07:27:c1:48:9a:fa:5e:03:d1:
         66:fe:61:85:d5:55:aa:a4:ae:82:f3:7e:f1:bd:73:42:04:a8:
         b4:79:fb:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:50:25 2025 by rpki-client