Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/075d2f-46bd-4bde-9835-95ff5c5dbb50/1/_WWGk-wyfq1P6DpXuCYBzCVSqr0.mft
File:                     _WWGk-wyfq1P6DpXuCYBzCVSqr0.mft (raw, json)
Hash identifier:          CnZgZBypmgNhG9C/zhIQYxAe9FylRRNrBCkoMNQaomc=
Subject key identifier:   0D:4A:D3:4F:6C:A8:B4:99:3F:A9:58:3C:AA:00:E2:3F:A9:EE:33:11
Authority key identifier: FD:65:86:93:EC:32:7E:AD:4F:E8:3A:57:B8:26:01:CC:25:52:AA:BD
Certificate issuer:       /CN=fd658693ec327ead4fe83a57b82601cc2552aabd
Certificate serial:       019A71B7ABDDB7FACB745F82A47EC64C6AF0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_WWGk-wyfq1P6DpXuCYBzCVSqr0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/075d2f-46bd-4bde-9835-95ff5c5dbb50/1/_WWGk-wyfq1P6DpXuCYBzCVSqr0.mft
Manifest number:          06EC
Signing time:             Tue 11 Nov 2025 07:00:53 +0000
Manifest this update:     Tue 11 Nov 2025 07:00:53 +0000
Manifest next update:     Wed 12 Nov 2025 07:00:53 +0000
Files and hashes:         1: _WWGk-wyfq1P6DpXuCYBzCVSqr0.crl (hash: HY8M98LKA3jAwVsEdFoKD0hKruvaSx3kB/uDZEJLHvw=)
                          2: erwtukyREIOI_fgB30OM6s45ao4.roa (hash: BYxgKedtTpgRdTLRbJ4ACUBjch0Jxu5pVEtIA6gWnlc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/075d2f-46bd-4bde-9835-95ff5c5dbb50/1/_WWGk-wyfq1P6DpXuCYBzCVSqr0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/075d2f-46bd-4bde-9835-95ff5c5dbb50/1/_WWGk-wyfq1P6DpXuCYBzCVSqr0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_WWGk-wyfq1P6DpXuCYBzCVSqr0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 07:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:71:b7:ab:dd:b7:fa:cb:74:5f:82:a4:7e:c6:4c:6a:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd658693ec327ead4fe83a57b82601cc2552aabd
        Validity
            Not Before: Nov 11 07:00:53 2025 GMT
            Not After : Nov 12 07:00:53 2025 GMT
        Subject: CN=0d4ad34f6ca8b4993fa9583caa00e23fa9ee3311
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:c7:09:30:21:97:8b:42:31:42:be:0a:16:6e:
                    c0:9b:15:5a:28:df:63:7a:53:d9:34:11:f3:f1:5f:
                    af:f0:73:c1:64:9c:c1:88:c3:a5:9b:2f:8f:85:99:
                    61:f8:a5:0c:e2:46:e3:94:1a:a0:8c:9f:f8:9d:d1:
                    f4:9e:18:4e:c8:0e:f2:c7:e5:02:6e:60:71:89:f6:
                    a5:70:a3:2a:1c:d6:35:c0:47:7e:f8:89:a3:4a:23:
                    db:46:7f:bf:23:86:36:e7:f1:58:d1:78:2d:74:a0:
                    a0:92:77:4e:90:06:ce:eb:9c:e0:35:43:63:f6:52:
                    0e:ed:7b:61:14:9a:a9:cd:50:dd:c7:c6:1b:00:64:
                    30:5f:48:bf:2c:8a:10:8e:af:10:29:cf:55:37:57:
                    2b:23:fa:e2:3a:96:c4:18:66:f3:98:00:f9:f9:d1:
                    a3:f2:b9:9d:20:56:2e:9e:a4:b1:d9:ab:96:47:0b:
                    45:07:6b:63:60:8a:4c:68:d4:16:d9:e0:48:61:7f:
                    f9:87:f8:75:ad:27:6c:57:93:15:34:46:d4:3e:a9:
                    11:81:97:22:a8:f8:cf:6c:90:95:c2:73:a9:1f:c2:
                    8d:fb:06:e0:bd:c4:17:50:b4:74:50:bb:49:71:96:
                    7b:0f:92:24:d3:d4:93:a5:2a:ed:81:4b:d2:a4:08:
                    9c:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:4A:D3:4F:6C:A8:B4:99:3F:A9:58:3C:AA:00:E2:3F:A9:EE:33:11
            X509v3 Authority Key Identifier:
                keyid:FD:65:86:93:EC:32:7E:AD:4F:E8:3A:57:B8:26:01:CC:25:52:AA:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_WWGk-wyfq1P6DpXuCYBzCVSqr0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/075d2f-46bd-4bde-9835-95ff5c5dbb50/1/_WWGk-wyfq1P6DpXuCYBzCVSqr0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/075d2f-46bd-4bde-9835-95ff5c5dbb50/1/_WWGk-wyfq1P6DpXuCYBzCVSqr0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:4d:f4:9f:c1:a0:72:a4:12:ea:cb:91:40:0a:22:45:66:de:
         68:a5:bd:59:f7:65:97:47:e4:34:55:d9:4f:99:28:d0:c0:ea:
         2d:7d:ed:03:44:72:6a:96:75:1f:f3:b8:c8:c5:e2:d4:59:e3:
         4a:a7:ff:46:f6:88:f3:0f:27:a7:6e:48:e3:c9:da:a3:88:fe:
         e3:b2:22:f0:28:b2:61:ae:17:6e:11:e5:92:c2:12:89:8f:e2:
         ef:62:4d:0c:d0:74:49:6c:c8:fd:8b:95:30:8d:71:20:3a:02:
         0f:e2:9b:40:ed:4f:9b:fd:cc:a1:96:d2:4e:ac:9b:fa:b9:67:
         d9:b9:79:a4:83:6c:c4:f3:6b:74:20:48:7d:ee:6a:b0:a8:e1:
         70:fb:54:4f:a7:43:15:9f:75:f9:47:7a:d9:81:f3:96:22:b2:
         d8:3f:4c:b2:99:eb:6c:f6:ab:f0:d5:b2:1e:82:93:96:35:b8:
         a0:24:46:3f:6b:a1:61:11:2d:2d:b3:29:f1:c7:7f:4f:8c:b6:
         aa:08:e7:0c:89:06:79:f9:c1:e8:ae:ef:06:4a:ca:e4:26:ac:
         b2:f4:4c:15:95:dc:4f:5d:0e:cb:9d:74:7e:e2:7b:6a:1e:dd:
         91:78:86:cd:5c:d9:0a:76:b7:e1:7f:64:72:b9:1d:fd:d6:21:
         6b:81:cd:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:47:55 2025 by rpki-client