Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/703f00-7f39-4d95-8c58-4bbb838a2779/1/wxu0Tt4q_gv6nXi6KTJJVff8YJE.mft
File:                     wxu0Tt4q_gv6nXi6KTJJVff8YJE.mft (raw, json)
Hash identifier:          tKapS39z5PLDHb6GoPM3GuHqhP/apJkj75Jf6zKdwRE=
Subject key identifier:   4B:91:78:7A:66:7D:01:17:02:7C:08:3E:F7:7E:F6:0D:FE:26:93:DD
Authority key identifier: C3:1B:B4:4E:DE:2A:FE:0B:FA:9D:78:BA:29:32:49:55:F7:FC:60:91
Certificate issuer:       /CN=c31bb44ede2afe0bfa9d78ba29324955f7fc6091
Certificate serial:       0199FDD9FDF641708CD9F57002C0D45F5ED8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wxu0Tt4q_gv6nXi6KTJJVff8YJE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/703f00-7f39-4d95-8c58-4bbb838a2779/1/wxu0Tt4q_gv6nXi6KTJJVff8YJE.mft
Manifest number:          0DC5
Signing time:             Sun 19 Oct 2025 19:02:25 +0000
Manifest this update:     Sun 19 Oct 2025 19:02:25 +0000
Manifest next update:     Mon 20 Oct 2025 19:02:25 +0000
Files and hashes:         1: GzFkstv5wkhfRB-938uIDYh-Wxo.roa (hash: 4jcDDGU9h854aDRD3uRk10AMRg0wkYSddBT/bLLaKOg=)
                          2: wxu0Tt4q_gv6nXi6KTJJVff8YJE.crl (hash: BXGTg92se+zS2FvaVrUzXtV8NZCg2MW0fRoeR/Gm6VI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/703f00-7f39-4d95-8c58-4bbb838a2779/1/wxu0Tt4q_gv6nXi6KTJJVff8YJE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/703f00-7f39-4d95-8c58-4bbb838a2779/1/wxu0Tt4q_gv6nXi6KTJJVff8YJE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wxu0Tt4q_gv6nXi6KTJJVff8YJE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:d9:fd:f6:41:70:8c:d9:f5:70:02:c0:d4:5f:5e:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c31bb44ede2afe0bfa9d78ba29324955f7fc6091
        Validity
            Not Before: Oct 19 19:02:25 2025 GMT
            Not After : Oct 20 19:02:25 2025 GMT
        Subject: CN=4b91787a667d0117027c083ef77ef60dfe2693dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:c5:a0:23:7c:68:85:73:29:10:9b:9f:73:2c:
                    46:93:4d:2c:cf:b6:80:85:b6:a7:db:43:ff:78:b5:
                    fa:d9:ac:57:43:8a:67:03:30:16:16:11:ff:e5:46:
                    35:c6:df:14:87:eb:0c:88:85:95:b8:68:ab:f4:8b:
                    ce:a2:8e:2e:45:9d:e6:ce:03:c0:8e:25:5e:8f:05:
                    f0:b8:ac:29:c7:8b:79:7f:e6:97:5d:43:cf:da:30:
                    0c:3b:a8:ae:bc:3d:f4:d1:17:40:db:dd:a0:99:5e:
                    51:54:c6:74:c2:9b:e9:d3:c3:f2:69:10:13:b8:a6:
                    dc:5f:dc:13:a6:07:98:9b:c7:68:64:54:2f:3e:34:
                    ac:57:48:f0:23:88:0c:f9:42:19:50:44:16:2f:bc:
                    7c:be:77:bd:8c:d0:dd:60:22:21:2d:91:0f:85:d0:
                    3c:d2:e4:6e:d4:94:1d:9f:ac:43:fc:65:fe:f5:24:
                    15:b9:8a:2f:93:7e:43:1e:ab:ab:1f:17:6f:d7:60:
                    04:1d:df:c8:66:4e:d4:c9:00:45:43:dc:fe:74:d3:
                    4f:75:8b:98:a7:6f:3b:6e:84:e7:29:9f:c2:84:b4:
                    12:8b:16:5c:c4:d9:41:c0:27:b8:cf:b8:1a:1d:4e:
                    01:f9:5e:b6:74:05:b6:20:17:07:07:63:11:c6:4b:
                    b8:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:91:78:7A:66:7D:01:17:02:7C:08:3E:F7:7E:F6:0D:FE:26:93:DD
            X509v3 Authority Key Identifier:
                keyid:C3:1B:B4:4E:DE:2A:FE:0B:FA:9D:78:BA:29:32:49:55:F7:FC:60:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wxu0Tt4q_gv6nXi6KTJJVff8YJE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/703f00-7f39-4d95-8c58-4bbb838a2779/1/wxu0Tt4q_gv6nXi6KTJJVff8YJE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/703f00-7f39-4d95-8c58-4bbb838a2779/1/wxu0Tt4q_gv6nXi6KTJJVff8YJE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:04:bd:52:40:27:9b:45:13:9e:32:c6:ad:ed:82:be:ff:1f:
         ca:d2:03:33:cb:b2:de:a3:45:69:a0:b7:e8:6e:81:be:da:1c:
         22:f2:f2:5b:55:83:9d:e1:8a:a0:1d:67:11:99:14:4a:29:7f:
         58:92:00:8d:52:db:2e:93:c5:46:02:46:e5:c7:c2:f1:3a:9e:
         d9:5e:76:92:e8:f3:28:05:75:aa:23:57:a8:77:48:15:79:b3:
         47:39:07:82:01:a4:82:7b:be:80:1d:48:6d:a4:36:99:ad:fa:
         c2:62:16:fe:34:79:d0:ca:3b:7d:93:c9:ba:5c:cb:0c:53:31:
         0e:a6:ef:3d:27:95:82:bf:aa:ae:9c:22:b0:b6:b3:f2:87:dc:
         97:be:59:a2:ed:74:2a:ef:33:85:9a:e0:50:b8:08:ad:b7:6e:
         58:b8:f6:cc:da:3f:48:4c:07:3e:62:0d:bf:b6:f8:82:7e:72:
         ea:6f:2b:bf:91:24:2d:e6:6e:38:8e:57:e4:67:1f:18:05:e4:
         02:30:43:b7:4f:fc:3c:4b:ca:93:bf:40:23:ed:22:11:45:8c:
         80:8d:49:05:96:67:02:80:fd:cd:1e:ef:6c:2c:c0:0c:f7:7e:
         33:3f:50:41:00:ff:35:6d:4d:c6:f0:76:ad:83:7d:6e:9f:06:
         62:82:0c:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92f32QXCM2fVwAsDUX17YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzMWJiNDRlZGUyYWZlMGJmYTlkNzhiYTI5MzI0OTU1Zjdm
YzYwOTEwHhcNMjUxMDE5MTkwMjI1WhcNMjUxMDIwMTkwMjI1WjAzMTEwLwYDVQQD
Eyg0YjkxNzg3YTY2N2QwMTE3MDI3YzA4M2VmNzdlZjYwZGZlMjY5M2RkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA48WgI3xohXMpEJufcyxGk00sz7aA
hban20P/eLX62axXQ4pnAzAWFhH/5UY1xt8Uh+sMiIWVuGir9IvOoo4uRZ3mzgPA
jiVejwXwuKwpx4t5f+aXXUPP2jAMO6iuvD300RdA292gmV5RVMZ0wpvp08PyaRAT
uKbcX9wTpgeYm8doZFQvPjSsV0jwI4gM+UIZUEQWL7x8vne9jNDdYCIhLZEPhdA8
0uRu1JQdn6xD/GX+9SQVuYovk35DHqurHxdv12AEHd/IZk7UyQBFQ9z+dNNPdYuY
p287boTnKZ/ChLQSixZcxNlBwCe4z7gaHU4B+V62dAW2IBcHB2MRxku4jQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEuReHpmfQEXAnwIPvd+9g3+JpPdMB8GA1UdIwQY
MBaAFMMbtE7eKv4L+p14uikySVX3/GCRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3h1MFR0NHFfZ3Y2blhpNktUSkpWZmY4WUpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS83MDNmMDAtN2YzOS00ZDk1LThjNTgt
NGJiYjgzOGEyNzc5LzEvd3h1MFR0NHFfZ3Y2blhpNktUSkpWZmY4WUpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS83MDNmMDAtN2YzOS00ZDk1LThjNTgtNGJiYjgzOGEyNzc5
LzEvd3h1MFR0NHFfZ3Y2blhpNktUSkpWZmY4WUpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAgS9UkAn
m0UTnjLGre2Cvv8fytIDM8uy3qNFaaC36G6BvtocIvLyW1WDneGKoB1nEZkUSil/
WJIAjVLbLpPFRgJG5cfC8Tqe2V52kujzKAV1qiNXqHdIFXmzRzkHggGkgnu+gB1I
baQ2ma36wmIW/jR50Mo7fZPJulzLDFMxDqbvPSeVgr+qrpwisLaz8ofcl75Zou10
Ku8zhZrgULgIrbduWLj2zNo/SEwHPmINv7b4gn5y6m8rv5EkLeZuOI5X5GcfGAXk
AjBDt0/8PEvKk79AI+0iEUWMgI1JBZZnAoD9zR7vbCzADPd+Mz9QQQD/NW1NxvB2
rYN9bp8GYoIM9g==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:59:32 2025 by rpki-client