Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/w0CU4yNtzRyDURN5Gjgk2ilz35s.mft
File:                     w0CU4yNtzRyDURN5Gjgk2ilz35s.mft (raw, json)
Hash identifier:          1hsJH3dR28zWKYXxG6daQnYTya4TK4g8+We4esJlRU8=
Subject key identifier:   63:31:13:3F:2C:46:E2:EF:B6:91:36:EE:64:C3:8B:C2:F6:C8:35:1F
Authority key identifier: C3:40:94:E3:23:6D:CD:1C:83:51:13:79:1A:38:24:DA:29:73:DF:9B
Certificate issuer:       /CN=c34094e3236dcd1c835113791a3824da2973df9b
Certificate serial:       0199FAA14B555AC7B7865FD2E815B8B88626
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w0CU4yNtzRyDURN5Gjgk2ilz35s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/w0CU4yNtzRyDURN5Gjgk2ilz35s.mft
Manifest number:          7A
Signing time:             Sun 19 Oct 2025 04:01:38 +0000
Manifest this update:     Sun 19 Oct 2025 04:01:38 +0000
Manifest next update:     Mon 20 Oct 2025 04:01:38 +0000
Files and hashes:         1: 4RPSqbfmeC-IC3WR5JrPY-ti6aQ.roa (hash: egyP6+hpVOsfhjTSw14Ho98ZzzCiujpdZ4z2/ZYR+NI=)
                          2: Fv609m8-lDTbR-Hd4Dlyyq1B5j0.roa (hash: aTWcmSu+kMHg+WawtIUSuvVce4o42kTuIFyTb0P+FXw=)
                          3: V7FxeBgowMJ9uzRZi_USZCw6XMI.roa (hash: tBwxfUXaS851zDbs0JMu4PFLXBxOjlI4hBYncc4yuPg=)
                          4: w0CU4yNtzRyDURN5Gjgk2ilz35s.crl (hash: HTWQF637w6Vr2Juoz7klmQqyw5JMFs4lA4SyCY0IatQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/w0CU4yNtzRyDURN5Gjgk2ilz35s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/w0CU4yNtzRyDURN5Gjgk2ilz35s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w0CU4yNtzRyDURN5Gjgk2ilz35s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 04:01:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:a1:4b:55:5a:c7:b7:86:5f:d2:e8:15:b8:b8:86:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c34094e3236dcd1c835113791a3824da2973df9b
        Validity
            Not Before: Oct 19 04:01:38 2025 GMT
            Not After : Oct 20 04:01:38 2025 GMT
        Subject: CN=6331133f2c46e2efb69136ee64c38bc2f6c8351f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:89:6a:f0:b2:cd:ad:8b:be:b2:aa:c6:f0:5f:
                    b2:42:f7:90:8c:39:c0:06:22:47:be:2b:78:db:db:
                    f0:ef:c4:00:45:53:5a:43:5f:90:e9:fd:1b:e1:8d:
                    cc:09:5a:cf:6c:30:2a:ac:39:8a:73:ed:28:cf:a3:
                    8a:50:c5:2a:fa:6a:86:98:7a:3c:38:36:dc:c4:3a:
                    f3:8a:62:19:39:16:72:28:1f:3a:b9:06:31:90:7c:
                    bb:74:ba:56:73:1d:0b:ac:2b:20:35:97:36:ed:d0:
                    52:53:49:57:94:d2:fa:33:b5:0e:4f:82:e4:77:7e:
                    d1:06:1f:66:70:ad:e9:16:89:70:4d:5f:e8:56:78:
                    81:36:ca:96:41:03:0a:25:c4:02:b0:94:ce:b0:a3:
                    d3:e2:4b:17:37:d4:bf:26:e7:7a:8e:41:fb:d2:99:
                    f4:d9:8d:9a:0b:30:a6:ae:a5:ff:f2:f7:af:69:d4:
                    ef:59:02:23:3b:1a:1b:46:6e:aa:c5:86:df:2b:b9:
                    07:94:65:1f:02:92:f7:0e:92:46:ff:07:0c:88:2d:
                    d0:47:5b:7f:0a:91:d4:19:0b:11:05:1e:44:06:9c:
                    af:97:64:d0:86:28:28:c9:e8:28:ba:36:59:44:0a:
                    e3:fb:05:af:3f:b6:1d:93:51:20:b8:fc:4d:16:60:
                    bb:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:31:13:3F:2C:46:E2:EF:B6:91:36:EE:64:C3:8B:C2:F6:C8:35:1F
            X509v3 Authority Key Identifier:
                keyid:C3:40:94:E3:23:6D:CD:1C:83:51:13:79:1A:38:24:DA:29:73:DF:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w0CU4yNtzRyDURN5Gjgk2ilz35s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/w0CU4yNtzRyDURN5Gjgk2ilz35s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/cfb251-923f-40c1-9832-e8a39dd60864/1/w0CU4yNtzRyDURN5Gjgk2ilz35s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:ce:5d:a3:ac:7b:44:83:10:40:ac:aa:ed:ea:ec:4b:cb:50:
         e7:d8:db:bb:d9:28:e9:ef:60:6a:6d:72:62:53:91:09:60:51:
         34:2d:6b:ab:90:a1:36:78:83:44:53:22:a0:89:67:eb:65:8b:
         57:84:e4:ce:7d:8a:25:f0:f1:53:b7:6c:f9:01:49:0b:e5:3b:
         f5:ac:62:3a:c3:8d:c2:48:c3:9a:60:e7:6a:4a:d0:b8:b4:23:
         70:a4:6b:a6:29:35:89:29:5c:11:6f:4a:0f:3a:c7:fd:80:d2:
         98:b0:3c:d3:e9:9c:63:a8:49:1a:a0:01:f4:1f:19:3f:3e:8e:
         83:da:61:fd:86:32:ce:34:7d:fa:f5:7e:43:10:83:9d:a5:60:
         5b:ff:ea:4d:4c:81:d5:63:c4:a7:fd:71:2d:83:e3:d2:e4:09:
         0a:33:c1:cf:05:41:f2:0e:d6:6b:b0:28:89:01:87:63:1b:12:
         14:a9:8b:54:ab:cb:0a:ed:2b:a2:43:95:71:c3:12:42:55:7b:
         e1:e3:44:0a:10:9c:89:0f:7a:01:6a:21:ad:64:44:1a:7b:60:
         77:d8:9f:7c:c2:01:5f:20:c9:97:03:63:30:45:64:80:75:81:
         b2:9a:2c:46:a9:db:27:19:87:08:0a:72:95:57:b7:06:cb:45:
         0c:28:a2:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:31 2025 by rpki-client