Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/81ed41-e36b-45f7-90e7-b2fd9bf097f8/1/WC4hcKe8vsMQFU8rzpmDP-woAfs.mft
File:                     WC4hcKe8vsMQFU8rzpmDP-woAfs.mft (raw, json)
Hash identifier:          7FwEBqOGqe2+x58CIxDYMibp/vZ2DPtb28F70tU12vk=
Subject key identifier:   AC:6D:41:DB:61:4B:C5:E6:F7:4E:3D:49:55:70:BB:57:5B:E8:C4:2D
Authority key identifier: 58:2E:21:70:A7:BC:BE:C3:10:15:4F:2B:CE:99:83:3F:EC:28:01:FB
Certificate issuer:       /CN=582e2170a7bcbec310154f2bce99833fec2801fb
Certificate serial:       0199C4577481DED118E48A7B0B5BC5BA47A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WC4hcKe8vsMQFU8rzpmDP-woAfs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/81ed41-e36b-45f7-90e7-b2fd9bf097f8/1/WC4hcKe8vsMQFU8rzpmDP-woAfs.mft
Manifest number:          08B9
Signing time:             Wed 08 Oct 2025 15:01:29 +0000
Manifest this update:     Wed 08 Oct 2025 15:01:29 +0000
Manifest next update:     Thu 09 Oct 2025 15:01:29 +0000
Files and hashes:         1: FKqsClUSc-HScmueq_QOqvdFJPo.roa (hash: QDB9/wNvtMenWcDG/OOKIL2kdnSagKU38zWW9V2bprA=)
                          2: WC4hcKe8vsMQFU8rzpmDP-woAfs.crl (hash: +u24Nbz5ofHu3YQfbmjFN1Np7SHxR2wA4Ff/JuGyGc8=)
                          3: ZxskbRgCMa6Yc-LklxQC1BBLGOk.roa (hash: CTUmOgotKmf+GqF4YkFaNe8ee4nBAUGdVxI+TEhO/Sw=)
                          4: o98Wg7KpgmJ871dQGpUlt4TCmbo.roa (hash: mzU2BBa9J5BX5hmBuscvoDSNFgApfZanUcB3Ps+gIWM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/81ed41-e36b-45f7-90e7-b2fd9bf097f8/1/WC4hcKe8vsMQFU8rzpmDP-woAfs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/81ed41-e36b-45f7-90e7-b2fd9bf097f8/1/WC4hcKe8vsMQFU8rzpmDP-woAfs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WC4hcKe8vsMQFU8rzpmDP-woAfs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 09 Oct 2025 13:21:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:c4:57:74:81:de:d1:18:e4:8a:7b:0b:5b:c5:ba:47:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=582e2170a7bcbec310154f2bce99833fec2801fb
        Validity
            Not Before: Oct  8 15:01:29 2025 GMT
            Not After : Oct  9 15:01:29 2025 GMT
        Subject: CN=ac6d41db614bc5e6f74e3d495570bb575be8c42d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:30:bc:eb:15:4e:e5:3e:a9:41:f4:80:d6:e9:
                    e3:21:05:31:c5:3e:32:90:2a:73:34:67:66:64:62:
                    fd:b2:c1:8a:e2:85:9e:02:d1:bb:7b:f1:a3:1c:81:
                    42:fb:50:85:03:ee:71:e0:27:c7:13:45:61:bd:a7:
                    5a:34:f6:66:ac:30:1b:9d:24:1f:3c:9d:a4:67:ab:
                    e1:b1:1d:63:4d:fc:d7:2a:c8:ed:28:82:23:59:bc:
                    df:09:ce:c6:0e:4c:13:df:68:bb:1b:75:8b:7d:a3:
                    66:5b:06:23:e5:90:88:7c:5f:e7:46:ec:bb:8a:52:
                    51:3f:38:36:5e:eb:eb:6c:4f:17:dc:32:9f:31:d3:
                    e7:89:39:c3:fc:28:5b:9a:49:bb:5c:da:07:cd:9d:
                    aa:d9:06:7f:9b:50:f9:35:50:74:52:de:37:45:20:
                    18:ee:03:7a:86:de:de:f8:0f:1b:69:8d:9c:ef:46:
                    02:8d:e9:a5:3b:fd:4f:3d:96:b5:0e:be:4f:d9:60:
                    6d:20:b8:b4:53:24:a2:9b:40:93:e1:f7:8e:cc:4d:
                    65:73:f0:71:6e:b7:0b:a7:54:73:4c:67:7b:d7:c8:
                    6d:37:f5:02:3c:83:c7:a5:51:fd:af:25:d6:11:8e:
                    cb:7b:2b:9c:32:8d:0e:6c:e3:21:f7:da:b5:d3:04:
                    21:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:6D:41:DB:61:4B:C5:E6:F7:4E:3D:49:55:70:BB:57:5B:E8:C4:2D
            X509v3 Authority Key Identifier:
                keyid:58:2E:21:70:A7:BC:BE:C3:10:15:4F:2B:CE:99:83:3F:EC:28:01:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WC4hcKe8vsMQFU8rzpmDP-woAfs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/81ed41-e36b-45f7-90e7-b2fd9bf097f8/1/WC4hcKe8vsMQFU8rzpmDP-woAfs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/81ed41-e36b-45f7-90e7-b2fd9bf097f8/1/WC4hcKe8vsMQFU8rzpmDP-woAfs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:5b:cd:7a:7e:0b:e6:a9:15:56:83:13:d7:53:fe:52:56:fb:
         b8:78:71:9b:89:ea:64:14:bc:8a:b7:f9:1e:a0:8f:87:11:2a:
         d5:ad:03:10:a9:08:a6:1a:56:86:7b:56:23:09:46:12:3f:3c:
         03:c1:3e:00:23:d4:26:ff:a8:49:ef:cc:ca:cf:04:43:73:1d:
         1f:dc:0d:92:dc:71:d1:00:af:5f:4f:57:a3:93:64:77:db:e8:
         f1:65:12:6e:a8:3d:2a:0c:7d:83:1f:a5:80:e6:8d:8d:12:cf:
         12:db:2f:97:c0:71:31:2e:4f:cc:74:4e:d9:18:fb:e9:cc:64:
         10:86:59:42:71:22:64:07:4e:da:25:49:0d:cc:0a:7c:50:57:
         e3:c3:f8:7e:47:5b:c5:fc:6e:4d:01:38:69:0c:ca:1d:31:96:
         94:27:af:3f:63:bd:d7:5a:28:c1:fa:79:f3:e6:fd:ba:9e:ba:
         bb:1d:2e:70:4a:75:fb:26:48:81:84:80:11:f4:80:30:e6:62:
         26:34:c7:35:59:82:1a:95:40:94:6f:6a:c6:fb:10:c3:af:9d:
         f5:34:5e:2f:30:3d:b0:3e:a2:47:3d:d0:59:69:db:14:c0:2a:
         c6:64:fa:a4:1e:cc:9e:80:b1:68:c4:0f:68:aa:95:07:94:3a:
         42:0c:45:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZnEV3SB3tEY5Ip7C1vFukelMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4MmUyMTcwYTdiY2JlYzMxMDE1NGYyYmNlOTk4MzNmZWMy
ODAxZmIwHhcNMjUxMDA4MTUwMTI5WhcNMjUxMDA5MTUwMTI5WjAzMTEwLwYDVQQD
EyhhYzZkNDFkYjYxNGJjNWU2Zjc0ZTNkNDk1NTcwYmI1NzViZThjNDJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTC86xVO5T6pQfSA1unjIQUxxT4y
kCpzNGdmZGL9ssGK4oWeAtG7e/GjHIFC+1CFA+5x4CfHE0VhvadaNPZmrDAbnSQf
PJ2kZ6vhsR1jTfzXKsjtKIIjWbzfCc7GDkwT32i7G3WLfaNmWwYj5ZCIfF/nRuy7
ilJRPzg2XuvrbE8X3DKfMdPniTnD/Chbmkm7XNoHzZ2q2QZ/m1D5NVB0Ut43RSAY
7gN6ht7e+A8baY2c70YCjemlO/1PPZa1Dr5P2WBtILi0UySim0CT4feOzE1lc/Bx
brcLp1RzTGd718htN/UCPIPHpVH9ryXWEY7LeyucMo0ObOMh99q10wQhLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKxtQdthS8Xm9049SVVwu1db6MQtMB8GA1UdIwQY
MBaAFFguIXCnvL7DEBVPK86Zgz/sKAH7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0M0aGNLZTh2c01RRlU4cnpwbURQLXdvQWZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi84MWVkNDEtZTM2Yi00NWY3LTkwZTct
YjJmZDliZjA5N2Y4LzEvV0M0aGNLZTh2c01RRlU4cnpwbURQLXdvQWZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi84MWVkNDEtZTM2Yi00NWY3LTkwZTctYjJmZDliZjA5N2Y4
LzEvV0M0aGNLZTh2c01RRlU4cnpwbURQLXdvQWZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAclvNen4L
5qkVVoMT11P+Ulb7uHhxm4nqZBS8irf5HqCPhxEq1a0DEKkIphpWhntWIwlGEj88
A8E+ACPUJv+oSe/Mys8EQ3MdH9wNktxx0QCvX09Xo5Nkd9vo8WUSbqg9Kgx9gx+l
gOaNjRLPEtsvl8BxMS5PzHRO2Rj76cxkEIZZQnEiZAdO2iVJDcwKfFBX48P4fkdb
xfxuTQE4aQzKHTGWlCevP2O911oowfp58+b9up66ux0ucEp1+yZIgYSAEfSAMOZi
JjTHNVmCGpVAlG9qxvsQw6+d9TReLzA9sD6iRz3QWWnbFMAqxmT6pB7MnoCxaMQP
aKqVB5Q6QgxF/Q==
-----END CERTIFICATE-----
Generated at Wed Oct 8 22:56:41 2025 by rpki-client