Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.mft
File:                     wIlCOvG-AwJxltH4HfIpkpeM2m4.mft (raw, json)
Hash identifier:          QeX9WTQv8YSQ/shuHc2kBKYjU0yqZKLtUYpAy+AF9lA=
Subject key identifier:   9D:03:08:8A:6E:CA:14:89:33:71:24:1E:CD:EA:1E:DE:4E:38:5C:88
Authority key identifier: C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E
Certificate issuer:       /CN=c089423af1be03027196d1f81df22992978cda6e
Certificate serial:       019A00A376EFB591B836D3E83D89544A6E66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.mft
Manifest number:          1707
Signing time:             Mon 20 Oct 2025 08:01:43 +0000
Manifest this update:     Mon 20 Oct 2025 08:01:43 +0000
Manifest next update:     Tue 21 Oct 2025 08:01:43 +0000
Files and hashes:         1: 7S7ARH6OeOMmEIzUWrymG1HMgUg.roa (hash: 4by5oqUTQ7giLqJYKeU0H0kpc5OHsvVhuQQi+oZ4Ey4=)
                          2: CTPnkSwaGYtL6imrEx676VqeZC4.roa (hash: D1Nv8O7aG0N8He1Qo3asb3aVDNKj9swYpH0SQDNKYk8=)
                          3: _EXnENeiZDru6Rg5eptQB0B0h-Q.roa (hash: R9ZxoaDJ13dNCFiLuLrziErqKQo2in5XnYm6NVb3JRs=)
                          4: cxLUtvRc1PE7p_j4spKLO77ND2g.roa (hash: 62Na0cXlNHEPB5HNROm00kPAIvHRuW520fWysT/wQWE=)
                          5: leNx016N_dkYChafjBIEq47VD6U.roa (hash: 71MUZoRwZSAtTYDE2sZfcbqmgD/V7iHl+V3oCDVt/es=)
                          6: mIPjHyHgx7EJeioOE4Q4P4Mqbt8.roa (hash: xSfoMU51fVLShF8gxOk3DAFmiELwAMru8mqI9rYFDks=)
                          7: pK-akxxW38kMPF3tOSehLJv18so.roa (hash: 8z7zWmQVHk3yetyyEcN2QnaYdcDrAOln5Kbg821DOsE=)
                          8: v2_OrqVCWea_JKzk_uWX1QKv4ow.roa (hash: rg1iH+wIMvW6P+H3H16YTC46vO9pXuraY8V/Do1pZt4=)
                          9: wIlCOvG-AwJxltH4HfIpkpeM2m4.crl (hash: OQmRrUosEShmG68NmIDgQ9S9diA8HBpDlo895ylI0ig=)
                          10: zVdyTzKpDbl0OAfYCejOiPP6RQs.roa (hash: wp8HYAuHuZQdxEStR+YkNo073hELbbV4MwFVMqI82ug=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 08:01:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:00:a3:76:ef:b5:91:b8:36:d3:e8:3d:89:54:4a:6e:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c089423af1be03027196d1f81df22992978cda6e
        Validity
            Not Before: Oct 20 08:01:43 2025 GMT
            Not After : Oct 21 08:01:43 2025 GMT
        Subject: CN=9d03088a6eca14893371241ecdea1ede4e385c88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d5:1b:da:7f:f3:05:c4:25:2e:2b:34:0f:b2:
                    9d:57:6e:88:3d:15:89:cc:bf:09:a6:42:9b:38:c1:
                    ef:f7:62:5a:93:09:2f:e6:f7:7a:10:77:ce:02:91:
                    80:75:42:92:85:c0:f2:3f:22:82:ee:32:9e:e5:d6:
                    e5:ac:ad:94:36:39:4b:5a:ed:c9:ae:ba:8e:1b:dc:
                    6e:d6:b9:44:8b:73:1b:e7:d8:fa:1a:17:48:19:82:
                    7d:9a:2d:8c:f0:2a:c4:3f:be:e4:c9:9c:78:0e:5b:
                    a2:a8:41:c1:ac:e2:7d:c6:57:f0:02:f6:0b:65:3b:
                    2c:47:e0:c4:c9:12:c1:b1:ae:77:aa:d3:17:5d:9d:
                    b5:5e:d3:a8:1c:f3:48:a3:59:10:20:bb:b6:13:93:
                    aa:10:70:2a:6d:4e:67:66:88:04:8e:0f:64:e4:3a:
                    f4:0b:89:c6:57:11:07:12:73:40:3e:78:b1:45:85:
                    8f:67:31:88:b9:85:ff:09:d0:0b:35:99:bd:7a:83:
                    1e:15:3d:0e:b3:e9:ae:b4:d5:62:5a:14:52:10:bb:
                    20:f9:83:d5:70:d8:0b:71:72:12:d2:d9:de:b4:22:
                    68:57:ed:76:04:c5:26:42:97:29:ba:14:76:d2:a0:
                    8f:27:c7:09:57:9c:bf:ac:bf:78:72:3b:e0:c2:ae:
                    1e:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:03:08:8A:6E:CA:14:89:33:71:24:1E:CD:EA:1E:DE:4E:38:5C:88
            X509v3 Authority Key Identifier:
                keyid:C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:6c:98:08:71:72:7a:0f:5a:29:ef:b9:34:fe:23:14:0c:64:
         17:ec:6e:76:e4:09:03:26:05:7a:60:6b:32:e7:80:a4:90:bf:
         8b:64:de:e3:af:3d:f3:c1:2d:76:99:c3:7a:a8:c8:37:18:71:
         af:38:df:3b:7b:36:9a:aa:a9:e7:d4:d7:9d:26:d0:c8:34:3f:
         b5:05:0c:eb:d4:21:31:0a:51:40:10:df:ba:fc:46:65:20:24:
         ea:e6:0d:12:94:3b:bd:0e:09:97:ff:6c:d9:6e:af:8e:b9:75:
         1d:26:6a:5a:ac:65:40:ff:e5:f7:4b:72:44:a9:83:dc:cd:06:
         00:5e:32:33:90:de:e6:8e:5c:82:b0:c6:1c:a5:b5:54:6d:32:
         2a:4c:e9:d6:b0:47:1a:91:47:b5:a1:ec:5c:97:e2:6b:a9:c2:
         6c:41:7a:9c:13:45:19:29:f7:00:dd:ce:d3:6b:8f:c6:62:ce:
         5d:8a:e0:ea:d9:71:e8:be:a8:92:a1:da:5c:c8:20:5e:5d:28:
         c2:d2:0a:ff:62:dc:c5:9a:fc:d4:e5:65:d7:56:89:0f:33:23:
         9b:50:de:ad:fd:eb:84:85:4f:82:9f:82:0d:60:7c:cd:f1:5d:
         60:7f:05:bd:0b:4d:f3:1a:4d:d7:71:b7:88:12:c3:65:9d:30:
         11:b3:e3:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:52:20 2025 by rpki-client