Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/8247a6-2b12-483f-b1ac-6ac1d15554ab/1/w0vf-I6OiYmHHhNAgRGtFDOzDGM.mft
File:                     w0vf-I6OiYmHHhNAgRGtFDOzDGM.mft (raw, json)
Hash identifier:          6apJ83qTQlkcv4drBKzVrwO4ROQIeFZYdCERnYv+MSs=
Subject key identifier:   F3:4A:E3:B3:17:2F:2D:17:C7:DE:0B:27:2C:1F:0B:F1:75:41:5E:E5
Authority key identifier: C3:4B:DF:F8:8E:8E:89:89:87:1E:13:40:81:11:AD:14:33:B3:0C:63
Certificate issuer:       /CN=c34bdff88e8e8989871e13408111ad1433b30c63
Certificate serial:       0199FE46F6F9E20F97044C5D2057C6779621
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w0vf-I6OiYmHHhNAgRGtFDOzDGM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/8247a6-2b12-483f-b1ac-6ac1d15554ab/1/w0vf-I6OiYmHHhNAgRGtFDOzDGM.mft
Manifest number:          0B4D
Signing time:             Sun 19 Oct 2025 21:01:27 +0000
Manifest this update:     Sun 19 Oct 2025 21:01:27 +0000
Manifest next update:     Mon 20 Oct 2025 21:01:27 +0000
Files and hashes:         1: ugMcDv1gcgsXhUTa2vBxQzpCLaI.roa (hash: rt0w1lyTwHj5nTBBa43BIhts6ikl3ovgbdGlD8LZ7VQ=)
                          2: w0vf-I6OiYmHHhNAgRGtFDOzDGM.crl (hash: xxXqQEt3Y2FIAJICDm5zLpAZ/FhBZ//4YJ/xuysMxck=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/8247a6-2b12-483f-b1ac-6ac1d15554ab/1/w0vf-I6OiYmHHhNAgRGtFDOzDGM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/8247a6-2b12-483f-b1ac-6ac1d15554ab/1/w0vf-I6OiYmHHhNAgRGtFDOzDGM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w0vf-I6OiYmHHhNAgRGtFDOzDGM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:46:f6:f9:e2:0f:97:04:4c:5d:20:57:c6:77:96:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c34bdff88e8e8989871e13408111ad1433b30c63
        Validity
            Not Before: Oct 19 21:01:27 2025 GMT
            Not After : Oct 20 21:01:27 2025 GMT
        Subject: CN=f34ae3b3172f2d17c7de0b272c1f0bf175415ee5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:f4:db:48:15:57:5c:0e:46:03:9d:9c:2e:7d:
                    0f:a0:ad:6b:7b:dd:0f:76:ae:b3:d4:e8:f0:8a:b5:
                    ec:16:b8:9d:c5:f0:f2:10:8e:d5:bc:ab:d7:3a:9e:
                    68:4e:8f:68:ef:96:7b:69:c9:bf:f1:16:5e:47:2e:
                    ae:ba:78:d1:a8:a1:98:23:cf:46:13:c6:8f:4e:e9:
                    b9:a5:14:bb:4d:cb:c9:fd:cb:58:15:33:0a:d4:25:
                    29:a5:48:57:b3:99:41:21:20:57:a7:d8:87:30:82:
                    13:af:aa:51:57:f5:60:48:c7:e8:bf:b8:c6:af:b4:
                    95:7a:18:52:d3:86:05:d2:cf:e3:25:dc:2d:81:0a:
                    24:87:24:dc:db:1c:1c:8e:f2:d7:97:4d:35:dc:f0:
                    9b:63:2f:a2:fb:5d:59:67:db:76:9b:df:60:c9:bf:
                    bf:f5:c1:93:91:15:e8:ec:26:69:3f:02:48:63:93:
                    08:28:94:28:63:31:f8:7b:44:9f:c9:25:04:47:09:
                    4d:ac:d1:30:15:10:6e:8f:dd:2c:e1:ad:31:61:eb:
                    f2:c3:a2:5d:c5:a3:16:fb:99:9d:70:97:94:cf:2a:
                    d8:7a:96:de:9a:2f:72:ec:ee:14:ed:7c:9f:da:f7:
                    7e:c6:b1:41:ec:b9:f7:ed:00:df:23:fd:8b:5e:ee:
                    4a:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:4A:E3:B3:17:2F:2D:17:C7:DE:0B:27:2C:1F:0B:F1:75:41:5E:E5
            X509v3 Authority Key Identifier:
                keyid:C3:4B:DF:F8:8E:8E:89:89:87:1E:13:40:81:11:AD:14:33:B3:0C:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w0vf-I6OiYmHHhNAgRGtFDOzDGM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8247a6-2b12-483f-b1ac-6ac1d15554ab/1/w0vf-I6OiYmHHhNAgRGtFDOzDGM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8247a6-2b12-483f-b1ac-6ac1d15554ab/1/w0vf-I6OiYmHHhNAgRGtFDOzDGM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:2d:cb:c0:ab:47:95:f5:77:54:a0:8b:d2:ab:bc:a3:fb:c4:
         b4:74:ac:5a:4f:27:7e:72:7e:8e:2e:5c:ee:ec:01:51:43:fe:
         13:a3:6d:3f:50:30:a7:b8:19:e2:17:ac:81:c1:f7:4b:15:13:
         db:56:d8:20:45:77:46:56:30:8c:e8:a4:59:0a:7b:ac:ff:14:
         69:01:7c:a1:61:9a:d8:5e:27:4a:65:40:89:f5:d2:f9:46:b7:
         75:4c:a3:5b:69:91:07:b0:1b:1e:ed:29:ac:40:7f:0a:36:be:
         c3:2e:99:86:41:7e:e7:03:5e:1d:9e:d1:4f:d1:8b:c1:89:46:
         87:7e:33:87:0d:5d:50:b9:c5:8c:52:08:b4:f8:58:37:41:21:
         e1:a0:48:23:5d:28:20:64:7e:e8:18:c7:87:10:7e:ea:e8:65:
         42:a7:fc:47:0e:d4:3d:76:3e:d6:7d:c1:af:30:aa:c4:4f:3b:
         71:ae:dc:41:24:a1:68:53:59:0e:c3:db:85:5d:77:37:74:a2:
         40:2e:0b:ae:d9:10:69:6b:ed:ca:64:83:2b:39:70:e3:3d:16:
         05:37:98:69:3e:c2:13:79:e0:e4:aa:6c:0c:dd:11:8e:05:94:
         fb:8c:52:dd:eb:b7:71:6e:ea:ce:f7:60:85:2f:51:dd:30:a7:
         96:69:d2:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:23:51 2025 by rpki-client