Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/01ebc2-84d0-4ae3-a2c2-a3b6be4a9e9b/1/wPvVh2YT7cVuD13kaMzl6yiF_yk.mft
File:                     wPvVh2YT7cVuD13kaMzl6yiF_yk.mft (raw, json)
Hash identifier:          qYzrC2HODaIDHpjrlGlJZwYma/1PSXlPCwxCYe6j5Gs=
Subject key identifier:   83:94:44:8D:B2:02:D0:C7:9D:94:9B:33:8E:5A:76:31:88:41:8A:A2
Authority key identifier: C0:FB:D5:87:66:13:ED:C5:6E:0F:5D:E4:68:CC:E5:EB:28:85:FF:29
Certificate issuer:       /CN=c0fbd5876613edc56e0f5de468cce5eb2885ff29
Certificate serial:       0199C78EBC9D0265FAEE1C4677DC06CF9C08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wPvVh2YT7cVuD13kaMzl6yiF_yk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/01ebc2-84d0-4ae3-a2c2-a3b6be4a9e9b/1/wPvVh2YT7cVuD13kaMzl6yiF_yk.mft
Manifest number:          16D1
Signing time:             Thu 09 Oct 2025 06:00:44 +0000
Manifest this update:     Thu 09 Oct 2025 06:00:44 +0000
Manifest next update:     Fri 10 Oct 2025 06:00:44 +0000
Files and hashes:         1: EFxSU25sGdE7ReGZ4hQCxcL1EQo.roa (hash: uR14mG4VrYUKqqD3TGgmTlLEojfMxYMgFQs/N0rSPIw=)
                          2: J4eDOx5SJHSihuh2E2EdDHS1FZg.roa (hash: AX1DVLfXHqcPxw4MGiaVf7TNJa9XXou7rNBSUIsHkkI=)
                          3: djNdVQcmVTrF_ImkfBTW1TEQZN4.roa (hash: DtPfbxjdA+NH1bgRX93+QdhSVAdl+yD2XBVTnWNlO4A=)
                          4: mgkhzfFw4ufuprRiBTlmBaPgwFM.roa (hash: dz3CImHP1M7gcq3PLY9DQc36du2KECW9tVbHZAcIciw=)
                          5: wPvVh2YT7cVuD13kaMzl6yiF_yk.crl (hash: KeiE8BnyVXLvVUD8MYQ5iU3UtrzRdSoSu7x0YZnfrVw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/01ebc2-84d0-4ae3-a2c2-a3b6be4a9e9b/1/wPvVh2YT7cVuD13kaMzl6yiF_yk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/01ebc2-84d0-4ae3-a2c2-a3b6be4a9e9b/1/wPvVh2YT7cVuD13kaMzl6yiF_yk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wPvVh2YT7cVuD13kaMzl6yiF_yk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 10 Oct 2025 06:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:c7:8e:bc:9d:02:65:fa:ee:1c:46:77:dc:06:cf:9c:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0fbd5876613edc56e0f5de468cce5eb2885ff29
        Validity
            Not Before: Oct  9 06:00:44 2025 GMT
            Not After : Oct 10 06:00:44 2025 GMT
        Subject: CN=8394448db202d0c79d949b338e5a763188418aa2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:55:d5:11:e7:e5:78:50:07:1f:ec:c8:d8:fd:
                    21:1a:e7:e4:6d:95:84:ac:e1:95:98:15:bf:db:60:
                    e1:02:03:dc:bc:a8:f2:d9:ca:89:cb:f0:fb:bc:c4:
                    30:ee:50:5f:fe:f1:a4:ec:ac:1e:74:62:ef:6f:bb:
                    85:c4:f5:f3:7d:91:4f:34:f0:31:18:7b:fd:5d:7f:
                    66:e9:78:f1:23:2f:56:b4:6c:ca:c6:48:55:5e:fd:
                    6d:23:a1:af:13:1a:53:c2:d3:14:65:af:87:69:d5:
                    37:5e:a0:00:53:c9:66:8a:9b:81:47:87:84:9c:22:
                    61:df:e7:51:b5:7d:9a:b5:b0:94:56:28:9d:55:27:
                    55:2d:4c:ac:2d:c2:11:9c:1e:00:51:ad:ad:44:7a:
                    db:ea:83:79:29:60:a1:a9:dc:11:b6:0b:2b:09:83:
                    4d:93:05:44:54:95:8c:b1:d2:0d:78:09:74:a6:5d:
                    f1:c4:a1:58:eb:75:bd:bd:56:bb:69:0a:69:46:8d:
                    a8:0e:fc:78:12:8d:3c:d6:29:bf:89:3b:e4:6f:ad:
                    b1:fb:67:5e:85:ba:f6:e5:76:a6:d8:35:10:f9:5e:
                    d8:47:2b:9f:21:73:81:69:03:28:f2:fc:c6:d0:7f:
                    fa:dc:ad:47:ba:9e:23:8b:40:58:be:50:f8:27:34:
                    9f:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:94:44:8D:B2:02:D0:C7:9D:94:9B:33:8E:5A:76:31:88:41:8A:A2
            X509v3 Authority Key Identifier:
                keyid:C0:FB:D5:87:66:13:ED:C5:6E:0F:5D:E4:68:CC:E5:EB:28:85:FF:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wPvVh2YT7cVuD13kaMzl6yiF_yk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/01ebc2-84d0-4ae3-a2c2-a3b6be4a9e9b/1/wPvVh2YT7cVuD13kaMzl6yiF_yk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/01ebc2-84d0-4ae3-a2c2-a3b6be4a9e9b/1/wPvVh2YT7cVuD13kaMzl6yiF_yk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:a4:19:fa:c7:18:39:01:2d:86:2b:20:92:ee:29:cc:d2:e6:
         7d:f9:f3:a6:90:0a:05:63:50:21:91:86:eb:b2:ac:82:f8:8d:
         13:6e:30:7a:ac:eb:7c:69:bd:2f:06:61:87:e3:0e:07:c3:bb:
         01:c8:be:46:74:76:64:01:7c:13:ee:85:a3:c6:24:2a:ee:fd:
         ea:3e:ed:d8:c1:9f:dd:66:4e:c5:79:ac:2b:46:41:f6:78:d9:
         cd:f3:99:9b:f4:09:a5:dd:fd:79:12:f8:b0:b7:13:52:9c:a7:
         fd:fb:1c:2d:c0:76:a8:87:07:89:c8:94:af:ca:8d:53:65:70:
         97:a9:1a:7c:ca:40:da:ea:99:dc:04:a6:dd:8b:78:49:22:e8:
         1e:62:63:9f:c7:cf:85:5c:22:91:49:68:6c:8f:50:b8:f4:55:
         bc:6b:f5:73:5d:72:b0:d4:6f:02:23:61:7c:29:b1:d5:6f:d6:
         af:40:a2:cb:a9:18:bd:2d:e5:4b:68:c2:f6:94:ae:41:81:bb:
         76:86:3c:3b:7f:a4:d6:40:d2:ad:1d:99:e5:41:b0:76:0e:08:
         c8:3f:a5:2e:00:0a:9a:36:2e:dc:4a:f4:27:c8:f4:30:d1:5a:
         60:ba:14:4e:39:8f:73:88:b9:ca:30:70:de:d1:61:da:04:79:
         f1:bb:24:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 08:39:22 2025 by rpki-client