Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/wHDujcg3gIaWAYLjMJImcX6D5Ac.mft
File:                     wHDujcg3gIaWAYLjMJImcX6D5Ac.mft (raw, json)
Hash identifier:          iCrwdwmKn2QFWoX24iZGVAtVul+/eTfL2G6Keh4oFsY=
Subject key identifier:   5B:2A:7D:F0:09:04:4F:33:CC:6A:44:91:F1:56:C8:48:4F:E0:C7:26
Authority key identifier: C0:70:EE:8D:C8:37:80:86:96:01:82:E3:30:92:26:71:7E:83:E4:07
Certificate issuer:       /CN=c070ee8dc8378086960182e3309226717e83e407
Certificate serial:       0199FD33F4D3D4E252F719663CBBFEF00F9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wHDujcg3gIaWAYLjMJImcX6D5Ac.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/wHDujcg3gIaWAYLjMJImcX6D5Ac.mft
Manifest number:          09FE
Signing time:             Sun 19 Oct 2025 16:01:04 +0000
Manifest this update:     Sun 19 Oct 2025 16:01:04 +0000
Manifest next update:     Mon 20 Oct 2025 16:01:04 +0000
Files and hashes:         1: lMUiy0iCZc25BIvrjbAT5rY_gaE.roa (hash: os2q3M1axX4RL5z3SNixB1SYiEywK/95oeCFkIddddI=)
                          2: wHDujcg3gIaWAYLjMJImcX6D5Ac.crl (hash: y6Vl8VAMIorvLmVRWcW0pSykkU433dGgNE2d2dDwAqM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/wHDujcg3gIaWAYLjMJImcX6D5Ac.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/wHDujcg3gIaWAYLjMJImcX6D5Ac.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wHDujcg3gIaWAYLjMJImcX6D5Ac.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:33:f4:d3:d4:e2:52:f7:19:66:3c:bb:fe:f0:0f:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c070ee8dc8378086960182e3309226717e83e407
        Validity
            Not Before: Oct 19 16:01:04 2025 GMT
            Not After : Oct 20 16:01:04 2025 GMT
        Subject: CN=5b2a7df009044f33cc6a4491f156c8484fe0c726
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:1d:65:da:3c:0b:35:55:c1:84:cf:24:fa:34:
                    14:14:1e:27:8f:22:65:ad:d2:b2:3a:4f:ba:5e:22:
                    4f:eb:a2:78:02:2a:64:f0:5e:f2:d3:8e:4f:b1:d5:
                    cb:93:7f:8f:9a:85:d3:92:c3:3c:87:f3:a1:94:22:
                    cf:38:b8:0c:3c:7a:b6:d6:1a:9a:39:e6:29:e1:88:
                    f1:73:a6:cd:29:49:b3:8a:48:87:be:77:04:af:ba:
                    ed:d0:70:b9:03:79:76:d7:b7:b9:da:30:3f:26:4b:
                    2c:28:ec:2e:ab:f4:f7:92:44:df:18:57:26:90:c7:
                    2e:81:5e:9b:a9:58:40:80:70:d5:44:bf:a4:e8:87:
                    6c:da:8f:c7:1a:36:a8:f5:2c:a8:ad:62:6a:55:76:
                    6c:c0:ac:2d:54:be:be:d5:57:26:d0:3c:a3:76:b3:
                    b9:a9:1f:56:a9:ff:7f:eb:0b:d5:97:69:33:65:bc:
                    09:a3:0f:02:bd:e6:c6:2c:c6:66:6c:58:9a:4c:db:
                    10:cb:16:a5:a7:44:2b:c8:a1:8d:04:20:94:59:60:
                    74:fd:a6:a9:b8:aa:f8:49:c9:f2:49:48:90:b5:7f:
                    67:21:72:4c:14:78:a5:02:5d:c3:58:46:59:13:fc:
                    e8:f8:12:e6:32:30:aa:44:c6:47:68:7d:0c:0d:e6:
                    3f:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:2A:7D:F0:09:04:4F:33:CC:6A:44:91:F1:56:C8:48:4F:E0:C7:26
            X509v3 Authority Key Identifier:
                keyid:C0:70:EE:8D:C8:37:80:86:96:01:82:E3:30:92:26:71:7E:83:E4:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wHDujcg3gIaWAYLjMJImcX6D5Ac.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/wHDujcg3gIaWAYLjMJImcX6D5Ac.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/wHDujcg3gIaWAYLjMJImcX6D5Ac.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:18:3a:3c:b4:cc:38:f2:9f:47:e3:31:f8:52:3e:d5:d1:1b:
         9b:96:c7:96:78:65:3e:15:7e:f4:a5:ea:7d:cf:a0:97:9e:fa:
         42:3f:cf:69:ec:01:0e:86:61:9f:ac:d6:81:b2:29:76:b7:50:
         4a:fa:10:cb:b4:7f:1a:32:78:1e:d0:09:cd:c4:05:67:cd:79:
         17:4c:50:5f:a0:ad:97:04:78:56:b8:aa:64:b3:ce:a5:6b:cf:
         e1:eb:5b:54:4b:fc:aa:44:38:e9:52:66:db:06:e7:6e:37:8a:
         cb:34:32:96:72:cb:ab:87:77:93:a9:90:31:27:27:91:59:17:
         01:e0:a7:fb:90:23:99:75:20:96:8b:2d:74:57:97:2a:ce:37:
         c7:3b:1c:cb:f1:6f:d7:9d:18:1a:e4:dc:e3:c5:5b:f8:fb:10:
         25:8f:3a:dc:e3:18:e7:4d:f7:a9:eb:a5:2b:93:2f:0f:f0:a7:
         ec:5b:53:bd:e9:61:8b:4c:a6:67:0b:87:d6:c5:da:15:ea:df:
         26:63:09:4e:e3:77:94:fc:e8:ab:94:ff:bf:32:5b:ff:14:48:
         ce:a4:23:80:50:cb:5c:6e:b6:3b:47:a1:e3:b4:b4:cc:c5:1f:
         96:ae:20:20:98:52:24:45:27:3d:9b:e9:1f:2f:d2:d2:47:71:
         f1:c6:af:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:18:04 2025 by rpki-client