Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/95e78a-57e7-4a58-9316-288bd6b9e092/1/WmEQLtTWbc2VLeATBOCv4ThNAL8.mft
File:                     WmEQLtTWbc2VLeATBOCv4ThNAL8.mft (raw, json)
Hash identifier:          hZS2hOfRwSatgeccdBPmQKbJs02WJE1VWdGHiu/W5WA=
Subject key identifier:   78:A2:E7:2B:F7:3C:9B:EF:1F:44:13:5E:6A:47:EF:E8:09:22:F0:E5
Authority key identifier: 5A:61:10:2E:D4:D6:6D:CD:95:2D:E0:13:04:E0:AF:E1:38:4D:00:BF
Certificate issuer:       /CN=5a61102ed4d66dcd952de01304e0afe1384d00bf
Certificate serial:       0199FC8FBC78F06D6DFB0BBD5FCFF89F383F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WmEQLtTWbc2VLeATBOCv4ThNAL8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/95e78a-57e7-4a58-9316-288bd6b9e092/1/WmEQLtTWbc2VLeATBOCv4ThNAL8.mft
Manifest number:          11DA
Signing time:             Sun 19 Oct 2025 13:01:42 +0000
Manifest this update:     Sun 19 Oct 2025 13:01:42 +0000
Manifest next update:     Mon 20 Oct 2025 13:01:42 +0000
Files and hashes:         1: WmEQLtTWbc2VLeATBOCv4ThNAL8.crl (hash: Jriv/UGUKspS/CsS72dout3tM1TAEPfB4SJd3Ez77nU=)
                          2: aq4ogcfzZpEnM-qzTShzrKkmLVI.roa (hash: lrZqdOLgogubh9kYu+yXTtvdVJVSGrLVk+ZXNc+U3Lk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/95e78a-57e7-4a58-9316-288bd6b9e092/1/WmEQLtTWbc2VLeATBOCv4ThNAL8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/95e78a-57e7-4a58-9316-288bd6b9e092/1/WmEQLtTWbc2VLeATBOCv4ThNAL8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WmEQLtTWbc2VLeATBOCv4ThNAL8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:8f:bc:78:f0:6d:6d:fb:0b:bd:5f:cf:f8:9f:38:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a61102ed4d66dcd952de01304e0afe1384d00bf
        Validity
            Not Before: Oct 19 13:01:42 2025 GMT
            Not After : Oct 20 13:01:42 2025 GMT
        Subject: CN=78a2e72bf73c9bef1f44135e6a47efe80922f0e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d9:63:0a:bd:52:a0:fd:d7:8a:50:1f:88:a9:
                    e3:56:df:12:65:4e:36:fc:91:33:39:87:11:5d:a3:
                    23:93:25:47:2e:d9:84:f8:49:5c:05:df:85:f2:d6:
                    a4:7c:29:9a:ec:3c:d3:e1:e9:ee:97:58:93:35:77:
                    87:80:1c:87:2d:7a:34:5b:a8:a7:c4:17:a5:9a:08:
                    06:bd:4f:9c:7b:23:91:e8:93:cc:f2:81:44:b6:10:
                    53:13:ba:b2:d4:30:fe:39:49:e8:33:78:7d:d7:d5:
                    7e:1e:51:70:98:ad:4d:27:7d:6b:29:8d:e4:63:2f:
                    f4:3c:a2:55:70:ae:fd:90:48:4c:83:51:e0:b4:26:
                    67:5b:26:aa:04:00:e9:9d:37:f0:41:77:9f:07:d9:
                    bf:df:6b:ae:8a:ef:2d:5c:5c:9a:46:c1:1c:b9:a1:
                    b5:ec:51:6d:ce:40:df:c1:d7:04:46:c7:d4:15:a7:
                    bf:6a:49:9c:89:5b:62:88:b4:fc:55:08:d0:5f:e6:
                    94:90:24:f9:86:f0:31:6a:4d:07:8e:1e:68:a7:4d:
                    72:aa:c9:55:63:d3:82:aa:96:a6:4e:a8:96:20:9c:
                    c8:ce:24:08:db:9b:3b:cb:cd:bb:f8:eb:d4:2a:16:
                    da:10:d4:7e:08:b5:8a:f1:4c:47:af:94:24:43:f9:
                    e2:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:A2:E7:2B:F7:3C:9B:EF:1F:44:13:5E:6A:47:EF:E8:09:22:F0:E5
            X509v3 Authority Key Identifier:
                keyid:5A:61:10:2E:D4:D6:6D:CD:95:2D:E0:13:04:E0:AF:E1:38:4D:00:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WmEQLtTWbc2VLeATBOCv4ThNAL8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/95e78a-57e7-4a58-9316-288bd6b9e092/1/WmEQLtTWbc2VLeATBOCv4ThNAL8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/95e78a-57e7-4a58-9316-288bd6b9e092/1/WmEQLtTWbc2VLeATBOCv4ThNAL8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:d2:8c:c1:2f:f0:d8:88:7f:63:8a:46:fe:44:f5:96:79:3b:
         c0:73:3a:37:b5:a9:26:0a:32:62:d3:86:c9:8e:43:9d:1e:ba:
         7e:82:57:29:4d:0c:a0:99:2a:f3:06:94:ba:f4:3b:a2:a1:79:
         e5:da:9f:a0:e7:89:2e:1d:1e:f0:f6:dc:8b:26:55:a4:4d:cd:
         ac:a6:7a:c3:4b:21:28:d7:4d:73:65:a3:9e:7d:c7:9d:06:60:
         18:67:3e:ae:52:15:6f:56:1a:81:26:d3:ac:f5:c0:8d:b0:ac:
         1f:48:38:9a:e4:6b:49:e4:5e:88:5f:9f:84:ba:58:a1:94:4d:
         3f:85:ea:58:12:ad:1e:ca:3d:32:c1:e8:a2:56:60:a5:1e:ae:
         21:50:0d:11:ce:d0:8f:fd:25:22:8c:b0:f8:59:e9:1c:96:6a:
         31:d4:2b:33:b5:6b:83:02:75:ee:fe:b5:9b:d8:e9:fe:9f:8e:
         fc:ff:66:e2:dc:ab:db:3d:c3:66:10:75:60:78:92:fa:37:aa:
         62:a7:78:c3:b1:69:c8:87:a9:40:49:43:61:63:55:dd:9b:00:
         7e:cf:ae:b5:cb:55:7a:7f:48:30:fc:5d:31:a0:b4:bf:d6:62:
         38:d1:e7:9a:04:f0:f6:ac:e2:71:88:f8:0b:c0:18:5b:2f:71:
         39:47:e2:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:19:18 2025 by rpki-client