Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/2a829b-32b3-496a-80ce-a02467f6425f/1/wQdbeoGvSd7_tsg1xWCO4LiEMso.mft
File:                     wQdbeoGvSd7_tsg1xWCO4LiEMso.mft (raw, json)
Hash identifier:          wMRD2NXbHS2zYmqxqY8o7ZMmeAHbeR3YeO3DvFbytb4=
Subject key identifier:   AC:10:8E:64:8E:FE:21:7F:4F:69:69:EA:82:DD:14:96:22:FF:33:5B
Authority key identifier: C1:07:5B:7A:81:AF:49:DE:FF:B6:C8:35:C5:60:8E:E0:B8:84:32:CA
Certificate issuer:       /CN=c1075b7a81af49deffb6c835c5608ee0b88432ca
Certificate serial:       019A0111585082AAFC41D10F7888E1B7CB1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wQdbeoGvSd7_tsg1xWCO4LiEMso.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/2a829b-32b3-496a-80ce-a02467f6425f/1/wQdbeoGvSd7_tsg1xWCO4LiEMso.mft
Manifest number:          0215
Signing time:             Mon 20 Oct 2025 10:01:45 +0000
Manifest this update:     Mon 20 Oct 2025 10:01:45 +0000
Manifest next update:     Tue 21 Oct 2025 10:01:45 +0000
Files and hashes:         1: YfJtBuAEzwrAwSN_J7xGNSKCjCE.roa (hash: XmpRYRo5Vs4yfW8P8k8ClzDTbvhLktOQ+0fCN4Fj/SI=)
                          2: wQdbeoGvSd7_tsg1xWCO4LiEMso.crl (hash: iaDKwli4f803ndO3Fy6FoXADNqPqOEcO55PZhtxMC/k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/2a829b-32b3-496a-80ce-a02467f6425f/1/wQdbeoGvSd7_tsg1xWCO4LiEMso.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/2a829b-32b3-496a-80ce-a02467f6425f/1/wQdbeoGvSd7_tsg1xWCO4LiEMso.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wQdbeoGvSd7_tsg1xWCO4LiEMso.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 10:01:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:01:11:58:50:82:aa:fc:41:d1:0f:78:88:e1:b7:cb:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1075b7a81af49deffb6c835c5608ee0b88432ca
        Validity
            Not Before: Oct 20 10:01:45 2025 GMT
            Not After : Oct 21 10:01:45 2025 GMT
        Subject: CN=ac108e648efe217f4f6969ea82dd149622ff335b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:6b:e4:2c:cd:c8:f5:5e:8c:28:26:2f:06:88:
                    2d:6e:a7:2a:5b:96:cc:f1:39:3c:c9:08:e3:5b:78:
                    98:04:a2:ee:38:6a:7a:60:38:39:4a:86:c4:88:85:
                    f8:27:0d:30:42:21:29:9c:62:4b:7b:02:dd:75:3f:
                    e9:5e:9c:37:a7:ba:3e:c2:eb:f4:89:d5:50:50:66:
                    ea:45:55:6b:a0:04:27:2a:b7:b4:1a:04:1c:b2:38:
                    ec:e1:63:0e:6d:ea:78:82:20:55:d6:44:a8:b2:83:
                    58:69:c4:7f:a8:2d:5e:87:95:0e:30:08:f3:94:b2:
                    8f:38:f8:68:db:66:ed:b4:d1:01:4b:82:ee:cb:f9:
                    71:f7:ad:c3:f6:6c:2e:8b:12:0a:88:93:85:04:a0:
                    b7:71:82:59:52:e6:2d:6a:d2:bd:25:6c:9a:a9:d8:
                    83:7a:93:d0:f4:29:76:9e:5d:35:1f:4c:60:f6:11:
                    69:df:ca:5e:d8:7f:39:e1:18:62:04:03:f2:04:cd:
                    d2:3a:aa:e4:cb:23:54:65:14:38:c5:23:6f:76:32:
                    66:7a:a2:f4:06:bb:d3:26:5e:23:60:8d:a8:a6:14:
                    26:9c:f5:35:52:c7:36:ae:80:95:56:46:41:77:d3:
                    52:b1:87:f4:07:73:23:e6:4b:a5:62:9a:1a:36:29:
                    ab:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:10:8E:64:8E:FE:21:7F:4F:69:69:EA:82:DD:14:96:22:FF:33:5B
            X509v3 Authority Key Identifier:
                keyid:C1:07:5B:7A:81:AF:49:DE:FF:B6:C8:35:C5:60:8E:E0:B8:84:32:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQdbeoGvSd7_tsg1xWCO4LiEMso.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/2a829b-32b3-496a-80ce-a02467f6425f/1/wQdbeoGvSd7_tsg1xWCO4LiEMso.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/2a829b-32b3-496a-80ce-a02467f6425f/1/wQdbeoGvSd7_tsg1xWCO4LiEMso.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:83:30:e6:cf:ab:8c:01:f0:07:04:ce:4c:67:c0:b3:7e:34:
         d8:e0:49:f8:33:ed:ef:45:54:4a:47:8f:b7:f0:31:0d:16:80:
         17:44:91:94:ac:1f:f3:90:be:5f:2c:90:f2:0e:df:7c:8c:bb:
         e3:65:3c:ab:19:91:85:eb:8b:05:ee:a1:62:f4:c2:3f:70:42:
         b7:6b:95:06:e8:90:4e:1e:55:70:f1:13:31:6f:00:f5:b2:f5:
         98:91:02:6e:ad:c1:58:61:e8:ed:9b:49:d6:a6:76:d7:0b:45:
         36:c6:a1:71:9c:8d:cc:64:1b:d8:21:f1:63:09:0e:c5:75:63:
         2e:d9:7d:af:02:ca:e1:b3:38:e7:61:77:8d:a8:68:b9:8c:31:
         bd:5d:d5:7f:dd:d5:35:e7:35:43:8e:e2:05:33:1b:ca:0e:03:
         f8:4f:c6:6c:0a:5a:1d:3d:83:66:d0:b3:da:88:cf:2b:82:99:
         dc:36:5c:b0:bc:a3:7d:b4:62:25:3a:be:c4:36:ed:bd:2f:2c:
         de:da:a7:9e:24:97:02:50:9a:a4:c6:a1:e9:d0:f5:ea:d2:ad:
         cf:34:66:64:ee:a8:92:6b:0f:d2:4e:68:fc:4e:c3:a3:17:18:
         58:90:0b:11:fe:50:f2:ba:78:df:73:6a:91:d0:46:30:c3:bd:
         55:74:e0:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:43:32 2025 by rpki-client