Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/3c2676-9245-4b3c-bb7f-8a29120750bf/1/WueVPpRZ3AlIbw3cWfKkBbVmklA.mft
File:                     WueVPpRZ3AlIbw3cWfKkBbVmklA.mft (raw, json)
Hash identifier:          CjNVde5V5RX9FX0/BtpGAJ9tGDEwvjYJxjo0n90oLmw=
Subject key identifier:   92:5B:7B:4A:F2:8E:AD:56:1A:2C:7B:2C:20:CD:4E:DA:7C:65:23:EE
Authority key identifier: 5A:E7:95:3E:94:59:DC:09:48:6F:0D:DC:59:F2:A4:05:B5:66:92:50
Certificate issuer:       /CN=5ae7953e9459dc09486f0ddc59f2a405b5669250
Certificate serial:       0199FC5876E22BDB964E96AAA99C0ACAF53A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WueVPpRZ3AlIbw3cWfKkBbVmklA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/3c2676-9245-4b3c-bb7f-8a29120750bf/1/WueVPpRZ3AlIbw3cWfKkBbVmklA.mft
Manifest number:          1649
Signing time:             Sun 19 Oct 2025 12:01:19 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:19 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:19 +0000
Files and hashes:         1: DBk26ni3rWAWrcHCnCAPZ2xkK4Q.roa (hash: Qk/2nxHHAgzzRwHK2tRfQQjLdz8MwTUa/j75IBrERBE=)
                          2: WueVPpRZ3AlIbw3cWfKkBbVmklA.crl (hash: VGZilWKrgu2GnzlfQHirRGAEJGzdnaLEmMI4TuawHnw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/3c2676-9245-4b3c-bb7f-8a29120750bf/1/WueVPpRZ3AlIbw3cWfKkBbVmklA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/3c2676-9245-4b3c-bb7f-8a29120750bf/1/WueVPpRZ3AlIbw3cWfKkBbVmklA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WueVPpRZ3AlIbw3cWfKkBbVmklA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:58:76:e2:2b:db:96:4e:96:aa:a9:9c:0a:ca:f5:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ae7953e9459dc09486f0ddc59f2a405b5669250
        Validity
            Not Before: Oct 19 12:01:19 2025 GMT
            Not After : Oct 20 12:01:19 2025 GMT
        Subject: CN=925b7b4af28ead561a2c7b2c20cd4eda7c6523ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:11:cb:e4:9b:8d:89:d0:21:d7:56:f5:2d:43:
                    cb:fa:3d:11:87:22:6c:81:ef:16:0a:76:fe:0e:ca:
                    78:d8:e0:28:26:27:d8:2e:ca:72:08:3a:dc:b9:4b:
                    71:6d:45:c6:13:c4:fc:cb:ea:bc:be:15:41:27:db:
                    55:1b:41:4a:5e:d7:95:49:5a:68:d5:d4:74:ff:d4:
                    c7:62:c7:59:3c:22:84:8b:e7:96:2d:8b:da:4c:76:
                    c2:84:c1:fa:3c:4f:9a:3d:fc:a4:98:f5:ed:b6:2a:
                    b9:d6:9b:18:cb:c8:da:ba:fc:88:c0:cf:03:3b:c0:
                    7a:f4:63:bc:d1:d5:25:25:71:3d:d9:38:ad:69:e6:
                    68:b3:fc:de:1e:78:fc:ae:2a:5b:86:39:3c:dc:fb:
                    b7:4c:0b:c7:8b:8f:ba:fb:01:0a:7f:e2:b0:6d:f1:
                    ea:73:a8:e4:4a:7d:54:f6:f7:b2:2e:89:d0:f1:49:
                    fd:d1:5e:b8:a4:f2:88:1d:aa:bb:36:e2:a2:af:4f:
                    1d:56:f6:66:da:e4:b6:09:59:20:00:a4:b5:e6:18:
                    a2:45:60:2e:dc:fb:de:b8:1a:f5:18:14:ee:0d:4a:
                    53:29:c9:c3:f1:72:fa:2c:74:46:dd:3c:23:54:90:
                    28:37:a0:a3:e1:d1:a6:3e:87:c5:7c:c2:03:48:c3:
                    ac:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:5B:7B:4A:F2:8E:AD:56:1A:2C:7B:2C:20:CD:4E:DA:7C:65:23:EE
            X509v3 Authority Key Identifier:
                keyid:5A:E7:95:3E:94:59:DC:09:48:6F:0D:DC:59:F2:A4:05:B5:66:92:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WueVPpRZ3AlIbw3cWfKkBbVmklA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/3c2676-9245-4b3c-bb7f-8a29120750bf/1/WueVPpRZ3AlIbw3cWfKkBbVmklA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/3c2676-9245-4b3c-bb7f-8a29120750bf/1/WueVPpRZ3AlIbw3cWfKkBbVmklA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:d5:12:b7:72:82:80:93:3e:ef:36:a5:66:06:b0:39:fe:18:
         be:b8:c8:84:15:c9:31:ee:ab:1b:5b:c3:31:e9:7e:80:a7:3e:
         65:42:3e:1f:f8:b9:4a:e5:87:22:3b:6d:ab:ab:b2:f8:63:ca:
         83:3c:b4:d4:23:c2:2a:2b:11:d8:69:ae:ce:9b:83:34:d2:49:
         bf:fc:5a:8a:2d:43:2c:e3:c5:87:0b:51:94:73:99:e1:56:b7:
         65:ea:1a:8b:70:e2:e9:60:a3:45:7f:1c:bf:ae:df:5e:69:4e:
         23:c4:eb:a6:5f:af:85:fd:4a:34:51:94:26:bf:4b:bf:f6:c0:
         3c:c4:9b:8b:0d:62:01:fb:7a:ab:b7:85:12:ab:52:31:3b:67:
         48:04:85:1e:40:af:da:39:81:b5:75:53:00:d1:a9:65:cf:ec:
         ce:cd:a1:da:b6:e9:44:e0:ef:85:f5:8f:dd:02:f8:3c:ae:9c:
         0c:0d:39:68:8b:7a:4e:e4:09:48:ea:5b:15:7a:af:51:27:5d:
         e0:ea:3c:5a:30:55:e6:99:9b:de:c4:fe:84:57:31:02:6a:90:
         02:c7:f4:24:e2:0f:09:55:1a:a9:6d:d7:cc:21:59:58:e4:1d:
         b5:f0:d6:f5:55:a5:ca:c6:bf:60:63:ac:bb:5b:31:43:8a:33:
         b1:ff:0c:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WHbiK9uWTpaqqZwKyvU6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhZTc5NTNlOTQ1OWRjMDk0ODZmMGRkYzU5ZjJhNDA1YjU2
NjkyNTAwHhcNMjUxMDE5MTIwMTE5WhcNMjUxMDIwMTIwMTE5WjAzMTEwLwYDVQQD
Eyg5MjViN2I0YWYyOGVhZDU2MWEyYzdiMmMyMGNkNGVkYTdjNjUyM2VlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBHL5JuNidAh11b1LUPL+j0RhyJs
ge8WCnb+Dsp42OAoJifYLspyCDrcuUtxbUXGE8T8y+q8vhVBJ9tVG0FKXteVSVpo
1dR0/9THYsdZPCKEi+eWLYvaTHbChMH6PE+aPfykmPXttiq51psYy8jauvyIwM8D
O8B69GO80dUlJXE92TitaeZos/zeHnj8ripbhjk83Pu3TAvHi4+6+wEKf+KwbfHq
c6jkSn1U9veyLonQ8Un90V64pPKIHaq7NuKir08dVvZm2uS2CVkgAKS15hiiRWAu
3PveuBr1GBTuDUpTKcnD8XL6LHRG3TwjVJAoN6Cj4dGmPofFfMIDSMOs8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJJbe0ryjq1WGix7LCDNTtp8ZSPuMB8GA1UdIwQY
MBaAFFrnlT6UWdwJSG8N3FnypAW1ZpJQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3VlVlBwUlozQWxJYnczY1dmS2tCYlZta2xBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8zYzI2NzYtOTI0NS00YjNjLWJiN2Yt
OGEyOTEyMDc1MGJmLzEvV3VlVlBwUlozQWxJYnczY1dmS2tCYlZta2xBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS8zYzI2NzYtOTI0NS00YjNjLWJiN2YtOGEyOTEyMDc1MGJm
LzEvV3VlVlBwUlozQWxJYnczY1dmS2tCYlZta2xBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgtUSt3KC
gJM+7zalZgawOf4YvrjIhBXJMe6rG1vDMel+gKc+ZUI+H/i5SuWHIjttq6uy+GPK
gzy01CPCKisR2GmuzpuDNNJJv/xaii1DLOPFhwtRlHOZ4Va3Zeoai3Di6WCjRX8c
v67fXmlOI8Trpl+vhf1KNFGUJr9Lv/bAPMSbiw1iAft6q7eFEqtSMTtnSASFHkCv
2jmBtXVTANGpZc/szs2h2rbpRODvhfWP3QL4PK6cDA05aIt6TuQJSOpbFXqvUSdd
4Oo8WjBV5pmb3sT+hFcxAmqQAsf0JOIPCVUaqW3XzCFZWOQdtfDW9VWlysa/YGOs
u1sxQ4ozsf8M5w==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:18:30 2025 by rpki-client