Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/b95ca0-853f-48ab-9b41-e0aee1bbf9e3/1/Wu3LM00555eBfi60dwPAGLTcSdU.mft
File:                     Wu3LM00555eBfi60dwPAGLTcSdU.mft (raw, json)
Hash identifier:          bx2Nu+iydi9psbl5Sx+8ps3wLmSmd+QngdmeXmMkdFw=
Subject key identifier:   8F:C7:FE:54:FE:7D:CE:5A:C5:97:B9:CD:1A:27:75:2E:43:82:52:B2
Authority key identifier: 5A:ED:CB:33:4D:39:E7:97:81:7E:2E:B4:77:03:C0:18:B4:DC:49:D5
Certificate issuer:       /CN=5aedcb334d39e797817e2eb47703c018b4dc49d5
Certificate serial:       0199FC8F168067119B23272B0616948C3443
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wu3LM00555eBfi60dwPAGLTcSdU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/b95ca0-853f-48ab-9b41-e0aee1bbf9e3/1/Wu3LM00555eBfi60dwPAGLTcSdU.mft
Manifest number:          0CD2
Signing time:             Sun 19 Oct 2025 13:00:59 +0000
Manifest this update:     Sun 19 Oct 2025 13:00:59 +0000
Manifest next update:     Mon 20 Oct 2025 13:00:59 +0000
Files and hashes:         1: Wu3LM00555eBfi60dwPAGLTcSdU.crl (hash: uXSkcw4RsCgjMOotiwiESreo5vds05qS9eM39QTBzXs=)
                          2: Wyb52zGEnneuzfD2tuztnuglkZM.roa (hash: pRaWUV+rJLCM+NItD33S9b/zkSegxof0Tte2Clq6a78=)
                          3: dcyYzxG1C_w_nBNFlVJtruOvAh0.roa (hash: plCR5uHg69g6tAPVlizUtVtwRqfn4K3Hux+I6ZCYSag=)
                          4: vxDWfcBErbw3QM5tYdBzh-7Akm8.roa (hash: qv/OhT65F1U2TWpmssPcn9SlD/6ghmK29vjWP8rBXfE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/b95ca0-853f-48ab-9b41-e0aee1bbf9e3/1/Wu3LM00555eBfi60dwPAGLTcSdU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/b95ca0-853f-48ab-9b41-e0aee1bbf9e3/1/Wu3LM00555eBfi60dwPAGLTcSdU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Wu3LM00555eBfi60dwPAGLTcSdU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:8f:16:80:67:11:9b:23:27:2b:06:16:94:8c:34:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5aedcb334d39e797817e2eb47703c018b4dc49d5
        Validity
            Not Before: Oct 19 13:00:59 2025 GMT
            Not After : Oct 20 13:00:59 2025 GMT
        Subject: CN=8fc7fe54fe7dce5ac597b9cd1a27752e438252b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:1d:4f:3f:a0:02:11:5c:e0:85:2e:1a:34:32:
                    9c:8d:d0:93:ea:12:51:0b:1c:94:a3:bf:e9:22:19:
                    50:9a:17:44:6c:7a:12:17:0c:83:d2:02:8b:7c:27:
                    cf:9d:be:94:38:49:f7:0c:d3:14:af:1f:45:46:12:
                    b5:2a:da:39:54:fb:6a:10:92:d5:ff:69:26:7f:b7:
                    4d:d4:5d:a5:95:24:f1:f7:13:4a:f3:2e:2d:11:5b:
                    59:6f:7c:97:9c:75:50:b5:1d:11:a8:56:20:3a:9c:
                    6c:94:f7:58:d2:6a:ce:9c:fc:e1:4d:8f:50:15:a2:
                    5a:b9:03:fd:7f:fb:18:3b:b6:a1:95:d7:de:27:e2:
                    50:e6:c6:9a:27:36:a6:74:4f:62:39:52:12:44:5d:
                    a3:14:8c:39:b7:e8:f3:66:52:8a:88:1e:60:3f:48:
                    e0:0f:70:48:85:26:63:90:3b:9f:a0:7f:f0:71:98:
                    d1:25:ad:d0:52:51:11:3b:8d:92:3b:e5:32:b7:3f:
                    b9:b8:35:45:22:f1:a8:1e:24:54:33:5c:e4:ee:23:
                    72:6b:0c:42:bb:92:de:d4:68:14:2c:60:2f:5c:57:
                    9f:73:95:b4:32:96:95:6e:28:3e:73:7e:92:41:f1:
                    9f:1d:4b:19:3d:e8:fc:a4:20:14:4d:7c:e7:c1:db:
                    12:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:C7:FE:54:FE:7D:CE:5A:C5:97:B9:CD:1A:27:75:2E:43:82:52:B2
            X509v3 Authority Key Identifier:
                keyid:5A:ED:CB:33:4D:39:E7:97:81:7E:2E:B4:77:03:C0:18:B4:DC:49:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wu3LM00555eBfi60dwPAGLTcSdU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b95ca0-853f-48ab-9b41-e0aee1bbf9e3/1/Wu3LM00555eBfi60dwPAGLTcSdU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b95ca0-853f-48ab-9b41-e0aee1bbf9e3/1/Wu3LM00555eBfi60dwPAGLTcSdU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:0d:5d:59:b5:d8:9f:f8:e3:8e:0b:e4:cf:1a:97:b2:2d:6d:
         11:18:d0:f3:4f:f4:90:a0:79:50:6e:07:6c:8a:3a:fa:97:21:
         44:be:f3:7e:71:8f:d5:79:a7:16:dc:87:d2:23:f3:9b:ba:9d:
         7b:a7:73:e3:eb:e4:32:a6:84:3f:c7:d5:66:98:b6:65:22:43:
         0e:3a:5d:07:2c:0b:7a:a1:8e:1a:a2:68:3c:72:ae:52:23:10:
         38:1e:38:34:8a:df:5f:65:26:ba:11:a6:ab:10:1d:83:21:ef:
         90:d9:50:77:f1:61:c4:68:4d:4d:46:89:d3:2d:ca:3a:da:d2:
         e3:0b:5f:ce:ab:92:e4:c4:ba:b7:59:d7:57:4b:dc:e8:bf:6a:
         59:fb:7b:54:99:51:9f:e2:10:c1:b1:a0:fc:8d:1c:b7:20:2b:
         10:00:b0:42:26:ac:39:c5:eb:d8:b0:4c:39:ee:88:05:9c:d2:
         03:67:53:e6:75:f2:6b:dd:b0:55:5a:d8:7b:5d:45:09:4a:2e:
         e0:44:e0:2f:15:c3:4c:2a:48:ef:db:55:82:3f:71:19:8f:e1:
         b4:0a:6d:c7:72:ce:9e:b9:d8:19:38:ba:d2:16:ff:26:bb:7b:
         7d:15:40:42:35:ba:7c:10:89:9a:a1:ae:cb:63:02:de:5d:27:
         f3:78:a0:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:14:06 2025 by rpki-client