Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/590e6a-c4fb-4e4d-9ff4-717cf7d73587/1/wV8GCCl-n5Q3GnLZOtexH3nB-D8.mft
File:                     wV8GCCl-n5Q3GnLZOtexH3nB-D8.mft (raw, json)
Hash identifier:          P0SchK/z30RTRriqKxN2K93xBisOen77R9/4rihhuuk=
Subject key identifier:   94:6F:2A:62:0B:35:53:10:60:07:5A:2F:1E:0F:18:5F:3A:3B:6C:26
Authority key identifier: C1:5F:06:08:29:7E:9F:94:37:1A:72:D9:3A:D7:B1:1F:79:C1:F8:3F
Certificate issuer:       /CN=c15f0608297e9f94371a72d93ad7b11f79c1f83f
Certificate serial:       0199FAA0CD3BF95404F1D8E319D321BE6061
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wV8GCCl-n5Q3GnLZOtexH3nB-D8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/590e6a-c4fb-4e4d-9ff4-717cf7d73587/1/wV8GCCl-n5Q3GnLZOtexH3nB-D8.mft
Manifest number:          91
Signing time:             Sun 19 Oct 2025 04:01:06 +0000
Manifest this update:     Sun 19 Oct 2025 04:01:06 +0000
Manifest next update:     Mon 20 Oct 2025 04:01:06 +0000
Files and hashes:         1: Kw5HSHb5y8lWLrdxXRDZQa9-doM.roa (hash: KGg4/gqPV/ne3wg0zULCF4s1xrAWKujVJHk6MhaPZgo=)
                          2: wV8GCCl-n5Q3GnLZOtexH3nB-D8.crl (hash: Xqb6xNH/gPNig73bPDkZzJ/ifLpb7hU0ryZciWuMRmo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/590e6a-c4fb-4e4d-9ff4-717cf7d73587/1/wV8GCCl-n5Q3GnLZOtexH3nB-D8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/590e6a-c4fb-4e4d-9ff4-717cf7d73587/1/wV8GCCl-n5Q3GnLZOtexH3nB-D8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wV8GCCl-n5Q3GnLZOtexH3nB-D8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 04:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:a0:cd:3b:f9:54:04:f1:d8:e3:19:d3:21:be:60:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c15f0608297e9f94371a72d93ad7b11f79c1f83f
        Validity
            Not Before: Oct 19 04:01:06 2025 GMT
            Not After : Oct 20 04:01:06 2025 GMT
        Subject: CN=946f2a620b35531060075a2f1e0f185f3a3b6c26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:88:0c:7d:43:0a:e9:8b:50:73:08:f4:10:88:
                    75:71:8b:bf:8b:0b:a4:a3:a6:34:b0:73:48:8e:2b:
                    1d:bf:1b:72:5b:7f:35:cc:47:aa:ed:03:71:51:73:
                    d7:76:96:8c:22:fb:fe:72:14:4b:1a:87:77:2d:79:
                    17:4f:1e:e3:08:bc:4e:35:f6:2e:73:0a:46:22:ea:
                    18:9b:b1:17:96:54:95:80:3f:e6:88:05:89:f3:30:
                    1d:68:66:13:0a:19:29:9e:fa:85:e8:ec:aa:9c:7b:
                    71:1a:3e:41:e8:d3:d7:58:64:01:28:8a:01:8c:8f:
                    f2:e0:bf:91:71:42:fe:6b:4d:98:bf:0b:66:cc:ff:
                    60:4a:79:8f:25:2a:05:21:5d:8e:45:52:bf:03:77:
                    c2:77:3b:5b:e9:6c:1d:17:33:02:3b:90:0c:81:09:
                    e1:a7:eb:7e:f2:ae:a1:b9:60:8c:56:1d:a2:9c:78:
                    ae:7f:ba:9f:51:09:60:ea:1c:3e:00:7f:66:a3:5d:
                    4a:f0:3f:61:1e:4c:81:0c:de:3c:30:82:0d:b7:b5:
                    08:db:38:9c:53:68:f9:17:6d:6b:74:1e:92:9e:38:
                    2e:74:49:d0:1f:f6:6e:d5:3d:5e:2c:77:34:83:22:
                    a5:9b:aa:f1:76:1f:b1:49:02:64:86:7d:cf:4f:d6:
                    7f:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:6F:2A:62:0B:35:53:10:60:07:5A:2F:1E:0F:18:5F:3A:3B:6C:26
            X509v3 Authority Key Identifier:
                keyid:C1:5F:06:08:29:7E:9F:94:37:1A:72:D9:3A:D7:B1:1F:79:C1:F8:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wV8GCCl-n5Q3GnLZOtexH3nB-D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/590e6a-c4fb-4e4d-9ff4-717cf7d73587/1/wV8GCCl-n5Q3GnLZOtexH3nB-D8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/590e6a-c4fb-4e4d-9ff4-717cf7d73587/1/wV8GCCl-n5Q3GnLZOtexH3nB-D8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:b6:e1:51:0a:94:16:63:97:10:b9:e2:90:b0:26:de:07:b7:
         63:72:77:01:cb:d4:ff:07:53:45:da:36:a5:26:24:89:c5:14:
         d7:42:1e:df:ba:80:f7:90:0d:c3:71:9f:28:5e:6c:04:3b:e7:
         cf:a4:9f:82:2a:d4:9d:2f:60:7b:90:8b:39:57:04:12:4a:b0:
         8c:c2:92:34:d0:5a:6d:fe:0c:48:5e:44:a7:3b:c3:be:7c:cf:
         72:5b:e6:85:6e:d8:de:9b:27:dd:03:52:b7:6e:32:14:19:c5:
         2c:ea:7e:2d:d2:66:52:4a:51:2c:af:2c:c7:3b:33:36:dd:08:
         1d:d6:71:fd:5e:0e:d6:cf:cf:d7:1f:8e:57:8b:de:d5:81:68:
         72:e2:93:d8:ea:87:52:2a:11:5b:ed:61:e3:ed:82:7b:63:8f:
         72:a9:08:30:4b:17:2a:3d:1e:8e:16:26:2c:75:0e:de:85:03:
         4e:3f:c9:d4:4e:27:d8:39:31:b8:46:cf:0c:99:52:bb:8e:ca:
         6c:f1:8f:e1:db:db:f6:6c:c3:9f:05:65:56:60:7a:58:33:19:
         2b:18:2e:5d:4d:3f:92:79:35:96:fc:fd:0c:b2:1e:68:98:77:
         6b:63:38:ab:db:94:1b:6c:2c:2d:fa:2a:36:d1:6a:05:c6:f8:
         cf:5f:f3:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:05:16 2025 by rpki-client