Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/95ff8f-66bc-4b11-98f0-0ab21b2f2754/1/WXtExKeTHGam_56S27MspyPUzPc.mft
File:                     WXtExKeTHGam_56S27MspyPUzPc.mft (raw, json)
Hash identifier:          zPZxHguhI5AZeRjzw1CMWcVSiJGroWxwXrWAag0gcJA=
Subject key identifier:   4F:3C:ED:16:7C:46:B1:E7:9A:86:DA:3A:7B:86:F7:F8:36:48:8D:85
Authority key identifier: 59:7B:44:C4:A7:93:1C:66:A6:FF:9E:92:DB:B3:2C:A7:23:D4:CC:F7
Certificate issuer:       /CN=597b44c4a7931c66a6ff9e92dbb32ca723d4ccf7
Certificate serial:       0199FC8F8C85D81E67E4C88A329790CF1EC7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WXtExKeTHGam_56S27MspyPUzPc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/95ff8f-66bc-4b11-98f0-0ab21b2f2754/1/WXtExKeTHGam_56S27MspyPUzPc.mft
Manifest number:          16E6
Signing time:             Sun 19 Oct 2025 13:01:30 +0000
Manifest this update:     Sun 19 Oct 2025 13:01:30 +0000
Manifest next update:     Mon 20 Oct 2025 13:01:30 +0000
Files and hashes:         1: 27thg2xR1ns9dxvQknh6OQz2HQE.roa (hash: 8utEVwtgJM/87D9G8Lvp0Zap9PR/R1pmHN8nnbsDNS0=)
                          2: 7EOkJISYh1lPEvtjEsSd_uB091A.roa (hash: iyJBe6KDY2jgmtE4ar31VWghuSb4Z0TN62CuRa0HGDo=)
                          3: IsbNRUwtF97TzTNIl7-2xG06qDM.roa (hash: ZJvUiTXJS17zRJXm+MWYGG6p9Wcs9KOAFeVCvx+kP0Q=)
                          4: WXtExKeTHGam_56S27MspyPUzPc.crl (hash: T2HAaR3c3IzUtflI5H6tY3ZKTLzxZKXYgX91eLDPUgA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/95ff8f-66bc-4b11-98f0-0ab21b2f2754/1/WXtExKeTHGam_56S27MspyPUzPc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/95ff8f-66bc-4b11-98f0-0ab21b2f2754/1/WXtExKeTHGam_56S27MspyPUzPc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WXtExKeTHGam_56S27MspyPUzPc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:8f:8c:85:d8:1e:67:e4:c8:8a:32:97:90:cf:1e:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=597b44c4a7931c66a6ff9e92dbb32ca723d4ccf7
        Validity
            Not Before: Oct 19 13:01:30 2025 GMT
            Not After : Oct 20 13:01:30 2025 GMT
        Subject: CN=4f3ced167c46b1e79a86da3a7b86f7f836488d85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:7a:9c:2d:55:c0:2c:fe:54:ad:74:6e:7c:ac:
                    91:ec:be:55:b1:ae:20:de:d2:66:b5:3b:d6:bc:be:
                    f8:c4:c9:74:e2:f5:1c:56:63:91:8c:f0:42:5e:0c:
                    ad:05:a6:9e:bf:e8:ad:88:9d:ea:a4:fa:ba:d9:ee:
                    71:1c:5c:76:c4:3c:05:59:43:d5:a8:c1:a5:33:b1:
                    7f:74:69:2e:92:d2:d9:8f:bd:38:d3:33:7b:4b:38:
                    e4:7c:b5:a7:26:7e:67:57:22:59:79:10:d8:2b:38:
                    2d:12:1b:6c:69:fe:59:88:68:24:4a:fb:38:e3:6d:
                    ff:82:27:88:b2:4e:49:d3:10:51:c4:51:6e:23:99:
                    9e:b1:f5:82:16:6a:18:c0:d1:00:b3:93:d3:5c:11:
                    0b:a8:1a:f9:37:b5:db:a9:e8:ab:d7:fa:90:ae:d1:
                    00:17:b0:cd:2b:7c:ca:d3:75:12:6c:9b:ec:e7:66:
                    1c:4a:ba:f5:1d:80:19:6d:70:f0:c1:c8:76:f7:9a:
                    03:87:ca:c9:56:da:99:e5:4d:d3:f3:bb:96:b3:7a:
                    dc:f7:51:3e:28:8e:6c:68:a7:3f:ca:27:ca:3d:2d:
                    bd:af:2a:13:a9:88:2d:cc:6f:ed:a8:b8:6e:d4:17:
                    3c:ab:ad:09:3f:14:01:79:0a:5e:21:02:00:1f:4d:
                    1d:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:3C:ED:16:7C:46:B1:E7:9A:86:DA:3A:7B:86:F7:F8:36:48:8D:85
            X509v3 Authority Key Identifier:
                keyid:59:7B:44:C4:A7:93:1C:66:A6:FF:9E:92:DB:B3:2C:A7:23:D4:CC:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXtExKeTHGam_56S27MspyPUzPc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/95ff8f-66bc-4b11-98f0-0ab21b2f2754/1/WXtExKeTHGam_56S27MspyPUzPc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/95ff8f-66bc-4b11-98f0-0ab21b2f2754/1/WXtExKeTHGam_56S27MspyPUzPc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:3c:31:88:a2:e5:62:c1:ff:10:cc:91:4e:18:44:f1:36:91:
         5b:9f:95:bf:ba:c2:b7:8d:e8:1f:71:c2:cc:70:ac:b2:2e:2d:
         37:0d:7e:43:c8:21:d4:c9:f0:45:3d:f5:fb:e8:10:ea:f3:d9:
         fa:2f:2a:56:96:e4:3b:02:fb:26:03:36:51:68:38:68:5c:1c:
         fc:d4:19:08:f6:ec:af:ff:cc:7d:47:68:f5:8e:14:26:59:1f:
         ed:a0:10:e3:64:9e:72:53:3f:c0:7d:8e:d6:74:23:48:a1:e2:
         3c:54:78:8c:64:fb:54:89:64:c7:06:0d:7d:75:ee:7d:99:f7:
         95:56:0e:4f:9b:50:80:c7:9d:ce:0b:79:ca:46:fa:df:6e:34:
         b9:b8:ac:88:80:26:3b:32:cc:94:8b:d0:25:f5:6d:5b:85:7c:
         59:1b:68:3f:dd:aa:ba:f3:b5:54:f3:6a:d6:4f:98:38:5d:c7:
         04:e0:f0:11:33:bc:11:91:71:5b:70:cb:45:fd:2f:59:a5:e6:
         c8:a5:7a:a9:b9:df:6f:f3:f2:94:7d:a4:e4:5a:f3:e4:6f:53:
         7a:86:b1:ed:2c:78:32:8c:ec:8c:fa:29:2d:0b:bc:e2:76:83:
         5b:37:f0:d3:95:a3:7b:c4:24:9f:d0:9b:2a:e5:29:12:14:ce:
         bb:6c:99:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:12:15 2025 by rpki-client