Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/329d41-f4ad-413c-bc07-38953f9ad057/1/ww0D5kZ25yCk_1UXnhlv7GWRiGs.mft
File:                     ww0D5kZ25yCk_1UXnhlv7GWRiGs.mft (raw, json)
Hash identifier:          L4kanc9roTYTjKUf8A94oovpS+VwiucEJQ3ilas3/YE=
Subject key identifier:   63:DA:4C:26:73:A0:70:CA:8E:08:94:C3:2A:1D:1B:03:6B:E7:0D:CA
Authority key identifier: C3:0D:03:E6:46:76:E7:20:A4:FF:55:17:9E:19:6F:EC:65:91:88:6B
Certificate issuer:       /CN=c30d03e64676e720a4ff55179e196fec6591886b
Certificate serial:       0199FB457EE460C733A18504678258F4A828
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ww0D5kZ25yCk_1UXnhlv7GWRiGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/329d41-f4ad-413c-bc07-38953f9ad057/1/ww0D5kZ25yCk_1UXnhlv7GWRiGs.mft
Manifest number:          054A
Signing time:             Sun 19 Oct 2025 07:00:59 +0000
Manifest this update:     Sun 19 Oct 2025 07:00:59 +0000
Manifest next update:     Mon 20 Oct 2025 07:00:59 +0000
Files and hashes:         1: O_SKclTWbwMrHuJ-wu_A_gUlj98.roa (hash: wqqIe428dBMOphAjwqG0MbbSQPuyl8AVjDeCz3ynOtk=)
                          2: ww0D5kZ25yCk_1UXnhlv7GWRiGs.crl (hash: g0UXBOPSJ3a1Be/taMJUuNjU9+W1/K2p5SaOEpxImFg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/329d41-f4ad-413c-bc07-38953f9ad057/1/ww0D5kZ25yCk_1UXnhlv7GWRiGs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/329d41-f4ad-413c-bc07-38953f9ad057/1/ww0D5kZ25yCk_1UXnhlv7GWRiGs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ww0D5kZ25yCk_1UXnhlv7GWRiGs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:45:7e:e4:60:c7:33:a1:85:04:67:82:58:f4:a8:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c30d03e64676e720a4ff55179e196fec6591886b
        Validity
            Not Before: Oct 19 07:00:59 2025 GMT
            Not After : Oct 20 07:00:59 2025 GMT
        Subject: CN=63da4c2673a070ca8e0894c32a1d1b036be70dca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:9b:19:93:52:97:f1:8a:e0:46:ea:97:eb:4a:
                    2f:f0:f9:49:86:78:c1:18:b7:d4:ab:3a:ff:9f:a0:
                    68:a0:74:28:ca:d7:43:a8:37:e8:f2:48:a4:bd:0e:
                    7f:c7:8f:15:3d:8a:e2:22:a9:cb:45:2d:e0:98:d3:
                    3f:55:1c:e9:15:dd:59:27:2a:bf:3c:58:10:07:f3:
                    9a:d0:16:fb:d7:85:15:94:8f:47:bf:e9:fd:9f:d5:
                    e4:fd:a9:1c:f4:a4:d6:6e:f7:2b:c7:fd:94:e5:3e:
                    8f:0d:8e:a4:24:55:eb:2c:70:8d:78:a1:68:36:60:
                    f3:08:1b:26:66:15:24:6a:1b:55:4a:6a:af:57:6f:
                    ac:1a:84:83:68:68:58:e3:25:e2:f5:8b:0a:b3:f7:
                    03:5d:a4:4b:3f:b3:2d:8d:53:f2:4e:d5:9c:48:6a:
                    48:1c:bf:da:5a:35:3a:4c:b3:a5:51:6e:3d:3c:e9:
                    c6:2e:4d:90:52:49:f3:24:64:55:8a:23:68:3a:30:
                    49:b9:fe:d5:35:b8:17:27:f3:2c:b2:6d:87:30:d1:
                    14:2b:82:82:03:0e:e0:0d:30:7e:74:d8:0a:07:84:
                    77:45:3d:47:b2:59:ca:a1:28:93:3f:34:88:68:31:
                    26:98:3c:a5:68:07:25:29:72:57:0f:d8:75:12:cc:
                    e2:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:DA:4C:26:73:A0:70:CA:8E:08:94:C3:2A:1D:1B:03:6B:E7:0D:CA
            X509v3 Authority Key Identifier:
                keyid:C3:0D:03:E6:46:76:E7:20:A4:FF:55:17:9E:19:6F:EC:65:91:88:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ww0D5kZ25yCk_1UXnhlv7GWRiGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/329d41-f4ad-413c-bc07-38953f9ad057/1/ww0D5kZ25yCk_1UXnhlv7GWRiGs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/329d41-f4ad-413c-bc07-38953f9ad057/1/ww0D5kZ25yCk_1UXnhlv7GWRiGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:a5:23:71:ec:5c:4a:05:68:c8:a2:66:bd:0e:b3:83:38:f3:
         a2:a9:de:c9:0a:33:c2:26:ed:ed:db:f1:41:85:30:66:8a:a4:
         51:24:0a:06:94:22:42:c0:27:2a:d4:ce:e2:c5:28:39:df:bd:
         b9:5c:9b:76:10:4d:42:94:31:d4:15:65:63:ec:18:9f:07:ee:
         09:7a:06:a8:47:03:9d:b8:8c:71:ba:41:0f:c2:63:a6:b5:ce:
         e0:7c:2a:9f:f6:96:89:fe:5d:46:0f:1d:f2:9a:12:41:06:b3:
         93:6e:9e:fa:6a:a5:73:0b:c9:f8:b8:0c:49:ee:1f:35:0e:d7:
         e7:ce:a4:bd:de:db:c2:9b:9d:77:bf:18:9d:d5:0f:9d:18:ac:
         45:2d:7f:53:e4:61:e3:e0:d1:68:be:d8:3d:e9:32:b2:3b:12:
         17:3d:e6:50:8b:2a:24:cb:ca:3c:a0:55:5f:91:a6:45:1f:22:
         ec:89:f0:29:96:4d:32:5c:45:6d:16:6f:70:19:3d:42:1e:87:
         92:62:58:0f:25:73:74:55:1d:3d:1b:2f:4a:bf:43:5c:c7:ed:
         af:fd:e2:1f:91:a5:fb:2d:d9:65:1d:39:54:a5:9f:de:67:b9:
         70:d1:86:c7:ff:5f:15:4b:b3:40:8d:f3:54:13:ba:6e:4a:67:
         87:d4:7f:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:14:32 2025 by rpki-client