Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/f562a4-2f04-46dd-b1c1-356cdebeb84f/1/iWaGG-V9NtX22dn46_YoF2FqIfU.mft
File:                     iWaGG-V9NtX22dn46_YoF2FqIfU.mft (raw, json)
Hash identifier:          5zxjGQusPyge/8ekT2Fa2coY9WuwiDJDbXHw4YsyHK0=
Subject key identifier:   2F:23:F0:FA:B2:74:5B:2F:9F:12:AC:B3:0A:C1:7E:8C:F0:69:3C:70
Authority key identifier: 89:66:86:1B:E5:7D:36:D5:F6:D9:D9:F8:EB:F6:28:17:61:6A:21:F5
Certificate issuer:       /CN=8966861be57d36d5f6d9d9f8ebf62817616a21f5
Certificate serial:       019A70DC77773E96B1D5405C3444DB0AAA72
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iWaGG-V9NtX22dn46_YoF2FqIfU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/f562a4-2f04-46dd-b1c1-356cdebeb84f/1/iWaGG-V9NtX22dn46_YoF2FqIfU.mft
Manifest number:          0B2D
Signing time:             Tue 11 Nov 2025 03:01:27 +0000
Manifest this update:     Tue 11 Nov 2025 03:01:27 +0000
Manifest next update:     Wed 12 Nov 2025 03:01:27 +0000
Files and hashes:         1: HVZZgTt0qImB-OIxZYe0LV_oR4c.roa (hash: CxMOuogiyPkbYMbQPW67m4ttU2r00+UG5PTmwlkEZ0c=)
                          2: iWaGG-V9NtX22dn46_YoF2FqIfU.crl (hash: UXnZUXlG5+cJtJakj/ge7KkUsxzmm5nzk64HOd4oRJU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/f562a4-2f04-46dd-b1c1-356cdebeb84f/1/iWaGG-V9NtX22dn46_YoF2FqIfU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/f562a4-2f04-46dd-b1c1-356cdebeb84f/1/iWaGG-V9NtX22dn46_YoF2FqIfU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iWaGG-V9NtX22dn46_YoF2FqIfU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 03:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:70:dc:77:77:3e:96:b1:d5:40:5c:34:44:db:0a:aa:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8966861be57d36d5f6d9d9f8ebf62817616a21f5
        Validity
            Not Before: Nov 11 03:01:27 2025 GMT
            Not After : Nov 12 03:01:27 2025 GMT
        Subject: CN=2f23f0fab2745b2f9f12acb30ac17e8cf0693c70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:97:e4:99:10:e4:7b:6f:5a:5a:d4:90:f0:97:
                    fe:2f:f0:ee:0a:17:12:c1:f3:e3:cf:15:de:3b:5f:
                    a5:46:65:86:6f:af:6f:3f:52:a1:3a:13:82:4c:44:
                    45:f3:41:65:cf:15:e3:28:a2:b4:3e:d9:f0:6c:b3:
                    b6:38:2f:dd:31:93:ae:ec:cb:2d:3c:f6:f4:4f:88:
                    89:4a:bb:66:64:8d:f2:c4:78:cb:cd:f5:94:1e:50:
                    28:70:22:7f:cd:a9:b5:1c:52:81:0a:5d:e8:1a:47:
                    27:2b:7b:63:ac:56:73:11:92:76:9e:9b:4c:fd:b2:
                    74:f3:17:ee:92:38:71:a8:92:f8:ca:0d:a1:a4:59:
                    cc:b9:5d:23:6a:af:7a:0b:9a:f6:3f:11:b3:07:bb:
                    e4:38:12:3a:fe:ae:84:b8:8e:59:f5:1e:89:20:b0:
                    00:cc:02:9f:6a:92:80:10:78:5c:2b:91:f6:0e:2f:
                    5f:55:c4:25:c2:7a:3b:8b:e4:6e:4b:b9:d3:dc:4c:
                    6f:9c:42:31:47:af:d5:7d:e4:cf:c8:9b:81:6e:8e:
                    3e:de:05:48:74:ae:bf:1e:de:e0:d7:36:e6:94:2d:
                    54:9a:21:ab:aa:8e:31:f1:ec:83:c1:4a:ce:d4:d0:
                    f3:68:36:55:96:a9:95:1a:90:01:ca:02:5d:a9:b8:
                    16:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:23:F0:FA:B2:74:5B:2F:9F:12:AC:B3:0A:C1:7E:8C:F0:69:3C:70
            X509v3 Authority Key Identifier:
                keyid:89:66:86:1B:E5:7D:36:D5:F6:D9:D9:F8:EB:F6:28:17:61:6A:21:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iWaGG-V9NtX22dn46_YoF2FqIfU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/f562a4-2f04-46dd-b1c1-356cdebeb84f/1/iWaGG-V9NtX22dn46_YoF2FqIfU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/f562a4-2f04-46dd-b1c1-356cdebeb84f/1/iWaGG-V9NtX22dn46_YoF2FqIfU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:2e:69:ad:bf:a2:c7:03:fe:a9:5d:21:8f:36:8b:f0:38:de:
         08:15:52:d1:bc:75:28:10:74:d2:5f:0b:2c:dc:4d:fa:74:a1:
         31:a5:51:40:1c:4a:19:1a:e5:b1:09:fd:ef:40:cf:7e:b5:35:
         93:3b:49:1e:7a:36:f1:5a:15:ea:6d:ab:e3:64:a6:de:b0:93:
         99:c8:1b:33:98:87:86:93:e5:34:43:09:7c:5b:92:1d:07:06:
         54:17:9e:3e:19:19:79:89:89:53:5c:b2:44:8d:ff:e8:cc:a3:
         13:02:03:8a:ce:f4:21:8c:fc:3f:1f:6d:4b:c8:f5:f3:7d:69:
         7b:4d:3a:e6:51:8e:ab:14:07:c1:14:51:3f:3b:e2:60:35:1f:
         53:f9:31:72:90:d6:3d:83:c7:7b:46:3b:b2:eb:96:22:a2:fc:
         0c:0c:94:c4:ca:94:1d:a1:9a:c3:13:dc:4f:9f:12:3c:d2:20:
         7d:66:f5:46:6f:28:ca:9c:98:48:46:b1:e4:01:96:05:45:75:
         4a:90:be:47:0c:1d:4b:01:89:50:9b:72:ee:ab:8d:2c:5f:45:
         eb:76:71:12:8f:d3:dc:82:45:c1:0e:6c:1f:36:5e:8b:a9:9e:
         0d:f9:97:a9:51:1e:62:04:2e:f3:6a:e2:dd:27:9a:1a:04:3d:
         bd:df:d9:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:11 2025 by rpki-client