Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/0749c0-dec3-4f01-9bd7-3448a889ce75/1/wPjbshSmFJ89TUKgxBMtVyWZJ1I.mft
File:                     wPjbshSmFJ89TUKgxBMtVyWZJ1I.mft (raw, json)
Hash identifier:          2pm8mSedbbR2oklkxVcv9nsaJRhQGoIJ+ViJ05iIJ0Y=
Subject key identifier:   84:C0:46:13:28:D5:B0:4C:3B:5F:3E:17:F3:A3:D3:15:B7:90:CF:F1
Authority key identifier: C0:F8:DB:B2:14:A6:14:9F:3D:4D:42:A0:C4:13:2D:57:25:99:27:52
Certificate issuer:       /CN=c0f8dbb214a6149f3d4d42a0c4132d5725992752
Certificate serial:       0199FC8F6850B28E53D0E74F12333574425D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wPjbshSmFJ89TUKgxBMtVyWZJ1I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/0749c0-dec3-4f01-9bd7-3448a889ce75/1/wPjbshSmFJ89TUKgxBMtVyWZJ1I.mft
Manifest number:          01C5
Signing time:             Sun 19 Oct 2025 13:01:20 +0000
Manifest this update:     Sun 19 Oct 2025 13:01:20 +0000
Manifest next update:     Mon 20 Oct 2025 13:01:20 +0000
Files and hashes:         1: 2qyhqFKpARK1F2ET6I7_YKaOPc0.roa (hash: qGM3ZFQucsF8/9E/V05Xc9DkgTgt/0zHmMZ5RCHxskE=)
                          2: wPjbshSmFJ89TUKgxBMtVyWZJ1I.crl (hash: QRQdxclsuM5hjs6PaO58cE8/zCG4V+0btKp9vOS7BLU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/0749c0-dec3-4f01-9bd7-3448a889ce75/1/wPjbshSmFJ89TUKgxBMtVyWZJ1I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/0749c0-dec3-4f01-9bd7-3448a889ce75/1/wPjbshSmFJ89TUKgxBMtVyWZJ1I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wPjbshSmFJ89TUKgxBMtVyWZJ1I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 13:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:8f:68:50:b2:8e:53:d0:e7:4f:12:33:35:74:42:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0f8dbb214a6149f3d4d42a0c4132d5725992752
        Validity
            Not Before: Oct 19 13:01:20 2025 GMT
            Not After : Oct 20 13:01:20 2025 GMT
        Subject: CN=84c0461328d5b04c3b5f3e17f3a3d315b790cff1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:0c:89:d9:51:3a:73:b8:a8:0e:07:a0:b2:a7:
                    7b:52:31:bc:b0:ab:2b:dc:d8:23:3c:92:94:09:ff:
                    78:99:e8:27:78:8e:15:27:5b:c4:39:18:97:92:2c:
                    06:be:ca:30:a8:99:14:65:1a:c8:3b:ea:44:ce:24:
                    a9:b3:26:d7:a8:ea:4e:0a:a2:96:61:ec:3c:3b:a7:
                    5c:f1:19:48:39:bc:99:db:a0:f2:da:be:90:6b:ed:
                    4b:37:07:ee:b6:ec:bd:c3:1d:a9:cd:8f:06:fc:5d:
                    f3:66:f9:b6:9b:ad:6e:b8:69:b1:b5:6a:ac:e6:03:
                    9c:98:1a:51:fa:30:13:f5:38:af:21:af:bd:06:2b:
                    c6:56:3e:d5:1c:65:bd:15:7c:6e:a0:cb:ff:12:e6:
                    24:fc:c6:6a:06:77:49:43:aa:7b:19:04:2b:82:84:
                    d9:21:47:e2:37:cd:7c:4c:63:43:37:8c:00:a2:1f:
                    59:5d:ee:4c:32:c2:79:12:a0:80:4d:e0:66:9a:87:
                    83:25:ee:73:f5:19:38:89:0d:92:24:f5:2e:ee:d1:
                    51:42:e5:f8:9e:b7:dd:16:46:1a:da:50:de:cf:70:
                    07:e4:ad:e8:47:90:81:fd:4b:95:bb:88:e9:9a:32:
                    d1:72:75:cf:c9:d5:f8:a4:f6:e2:ea:f9:fd:f2:96:
                    50:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:C0:46:13:28:D5:B0:4C:3B:5F:3E:17:F3:A3:D3:15:B7:90:CF:F1
            X509v3 Authority Key Identifier:
                keyid:C0:F8:DB:B2:14:A6:14:9F:3D:4D:42:A0:C4:13:2D:57:25:99:27:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wPjbshSmFJ89TUKgxBMtVyWZJ1I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/0749c0-dec3-4f01-9bd7-3448a889ce75/1/wPjbshSmFJ89TUKgxBMtVyWZJ1I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/0749c0-dec3-4f01-9bd7-3448a889ce75/1/wPjbshSmFJ89TUKgxBMtVyWZJ1I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:84:51:dc:fd:ad:49:3a:8b:13:73:b2:b1:1a:e9:61:9a:05:
         b0:c2:9e:50:7b:ec:75:c8:e9:14:06:6e:8e:ce:2c:7a:97:f6:
         45:07:da:da:5c:3d:cb:ef:92:89:64:a1:d5:c8:be:c1:b8:52:
         29:e8:2a:f9:68:04:11:dc:eb:aa:33:5d:e0:df:0d:97:a5:b6:
         c0:10:27:73:aa:8b:56:e8:68:fd:85:e6:29:c2:41:6b:ab:8c:
         bf:ec:9a:9f:03:e4:a6:2e:4d:af:1e:44:32:6c:39:86:99:c3:
         dd:e3:9b:56:3a:bd:52:47:a6:94:77:a2:76:73:a9:dc:04:86:
         65:a5:9f:58:fb:2d:5b:cb:12:e2:bf:f8:55:fd:0a:5d:63:8b:
         1e:b3:f8:24:d3:cd:c5:7c:72:25:fa:de:0a:e2:7b:0b:ea:b1:
         f0:41:07:74:40:ab:c5:8c:dd:4a:61:0a:10:0d:7c:33:93:c5:
         1c:f8:4d:79:82:88:58:21:a0:1e:1e:7f:95:a7:0a:76:9d:22:
         02:5d:cf:3b:12:40:23:20:84:bc:75:b7:f8:5b:52:ea:4b:89:
         87:20:55:8b:09:7e:9a:8b:4a:94:7f:ce:c6:36:77:6e:e4:76:
         36:96:4e:04:6b:eb:88:9f:71:80:7c:11:fa:88:b4:cd:df:6c:
         a9:76:b5:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8j2hQso5T0OdPEjM1dEJdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwZjhkYmIyMTRhNjE0OWYzZDRkNDJhMGM0MTMyZDU3MjU5
OTI3NTIwHhcNMjUxMDE5MTMwMTIwWhcNMjUxMDIwMTMwMTIwWjAzMTEwLwYDVQQD
Eyg4NGMwNDYxMzI4ZDViMDRjM2I1ZjNlMTdmM2EzZDMxNWI3OTBjZmYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3AyJ2VE6c7ioDgegsqd7UjG8sKsr
3NgjPJKUCf94megneI4VJ1vEORiXkiwGvsowqJkUZRrIO+pEziSpsybXqOpOCqKW
Yew8O6dc8RlIObyZ26Dy2r6Qa+1LNwfutuy9wx2pzY8G/F3zZvm2m61uuGmxtWqs
5gOcmBpR+jAT9TivIa+9BivGVj7VHGW9FXxuoMv/EuYk/MZqBndJQ6p7GQQrgoTZ
IUfiN818TGNDN4wAoh9ZXe5MMsJ5EqCATeBmmoeDJe5z9Rk4iQ2SJPUu7tFRQuX4
nrfdFkYa2lDez3AH5K3oR5CB/UuVu4jpmjLRcnXPydX4pPbi6vn98pZQYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFITARhMo1bBMO18+F/Oj0xW3kM/xMB8GA1UdIwQY
MBaAFMD427IUphSfPU1CoMQTLVclmSdSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1BqYnNoU21GSjg5VFVLZ3hCTXRWeVdaSjFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi8wNzQ5YzAtZGVjMy00ZjAxLTliZDct
MzQ0OGE4ODljZTc1LzEvd1BqYnNoU21GSjg5VFVLZ3hCTXRWeVdaSjFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi8wNzQ5YzAtZGVjMy00ZjAxLTliZDctMzQ0OGE4ODljZTc1
LzEvd1BqYnNoU21GSjg5VFVLZ3hCTXRWeVdaSjFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq4RR3P2t
STqLE3OysRrpYZoFsMKeUHvsdcjpFAZujs4sepf2RQfa2lw9y++SiWSh1ci+wbhS
Kegq+WgEEdzrqjNd4N8Nl6W2wBAnc6qLVuho/YXmKcJBa6uMv+yanwPkpi5Nrx5E
Mmw5hpnD3eObVjq9UkemlHeidnOp3ASGZaWfWPstW8sS4r/4Vf0KXWOLHrP4JNPN
xXxyJfreCuJ7C+qx8EEHdECrxYzdSmEKEA18M5PFHPhNeYKIWCGgHh5/lacKdp0i
Al3POxJAIyCEvHW3+FtS6kuJhyBViwl+motKlH/OxjZ3buR2NpZOBGvriJ9xgHwR
+oi0zd9sqXa1Xg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:36:12 2025 by rpki-client