Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/4f43fc-4187-4bb9-905a-f0c6258b9a04/1/W1v_nUH3GfYmAMMtNBDduZ7Msww.mft
File:                     W1v_nUH3GfYmAMMtNBDduZ7Msww.mft (raw, json)
Hash identifier:          0fB3wFCF7KG5nTgFPDRbC07aRK7UmbhVdHTfgePkYm0=
Subject key identifier:   C5:B5:90:62:1D:8F:10:76:68:65:03:04:00:48:97:0F:0E:3E:D9:CF
Authority key identifier: 5B:5B:FF:9D:41:F7:19:F6:26:00:C3:2D:34:10:DD:B9:9E:CC:B3:0C
Certificate issuer:       /CN=5b5bff9d41f719f62600c32d3410ddb99eccb30c
Certificate serial:       01995CE9D39D802C4F02A79575B2FB8C560B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W1v_nUH3GfYmAMMtNBDduZ7Msww.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/4f43fc-4187-4bb9-905a-f0c6258b9a04/1/W1v_nUH3GfYmAMMtNBDduZ7Msww.mft
Manifest number:          10B6
Signing time:             Thu 18 Sep 2025 13:00:51 +0000
Manifest this update:     Thu 18 Sep 2025 13:00:51 +0000
Manifest next update:     Fri 19 Sep 2025 13:00:51 +0000
Files and hashes:         1: BYEpO3dKB_ok3YL5Nvkz1BqvKfY.roa (hash: tzMMybSfOyrsE8fXw9tkAmX7iTeiSe2VTc77bmai8Ps=)
                          2: FvfQzenY4vuGvPjzUDTw1tjiG2s.roa (hash: zkGEFuUXYUubPgf+SgQqduDAgySAdGnP1m7nGCOsPPE=)
                          3: W1v_nUH3GfYmAMMtNBDduZ7Msww.crl (hash: V5y44VRpH8hRBTwbDwVoe9GEbDfS8zf1pzCjh7ZYP9w=)
                          4: YHhKqKllORo1YpLh6r99OV2fKdU.roa (hash: mexx1monVzWkvXW1/Ufj3sXVxDrM1B0b6uh/TwyrzYI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/4f43fc-4187-4bb9-905a-f0c6258b9a04/1/W1v_nUH3GfYmAMMtNBDduZ7Msww.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/4f43fc-4187-4bb9-905a-f0c6258b9a04/1/W1v_nUH3GfYmAMMtNBDduZ7Msww.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W1v_nUH3GfYmAMMtNBDduZ7Msww.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Sep 2025 13:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:5c:e9:d3:9d:80:2c:4f:02:a7:95:75:b2:fb:8c:56:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b5bff9d41f719f62600c32d3410ddb99eccb30c
        Validity
            Not Before: Sep 18 13:00:51 2025 GMT
            Not After : Sep 19 13:00:51 2025 GMT
        Subject: CN=c5b590621d8f1076686503040048970f0e3ed9cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b3:25:4e:cf:91:9b:ee:42:c4:78:ad:01:f8:
                    90:8a:a3:69:ac:90:29:91:45:b9:4f:01:6f:93:57:
                    25:d4:76:bc:a9:22:25:7a:62:58:da:70:08:ca:f8:
                    59:8b:39:ca:24:24:f3:c5:ab:2d:5f:78:72:bd:57:
                    7f:76:20:32:93:30:29:54:c1:5a:fa:61:3e:c8:c2:
                    7a:e2:e8:9a:98:9b:8c:8f:a2:2e:49:c2:66:3c:67:
                    9a:49:9a:26:ec:31:7f:19:9a:98:14:98:a8:5f:5e:
                    35:48:6e:81:30:0d:f7:38:02:5c:2d:d4:02:db:ed:
                    f5:2c:ff:fa:4b:07:38:75:b2:a2:59:78:9e:95:2f:
                    57:b3:1c:93:f6:89:e2:7c:26:f9:29:a3:af:53:31:
                    40:c5:d4:69:39:e1:fa:ba:35:a9:83:6b:51:5d:72:
                    57:da:db:34:20:03:f8:6f:4a:6f:81:05:6e:c4:3c:
                    f6:4a:12:2c:22:81:31:f2:9f:d4:57:bd:42:19:7b:
                    5b:84:45:f9:fc:d5:18:3d:41:27:0a:28:19:bb:f1:
                    a1:16:35:1e:19:3e:0e:2f:5a:76:24:ab:bf:38:8d:
                    b1:c3:9a:76:25:05:01:d1:11:6b:2f:60:f1:2f:03:
                    97:42:33:50:32:c8:bb:4e:ef:06:43:6c:e5:bd:f2:
                    90:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:B5:90:62:1D:8F:10:76:68:65:03:04:00:48:97:0F:0E:3E:D9:CF
            X509v3 Authority Key Identifier:
                keyid:5B:5B:FF:9D:41:F7:19:F6:26:00:C3:2D:34:10:DD:B9:9E:CC:B3:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W1v_nUH3GfYmAMMtNBDduZ7Msww.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/4f43fc-4187-4bb9-905a-f0c6258b9a04/1/W1v_nUH3GfYmAMMtNBDduZ7Msww.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/4f43fc-4187-4bb9-905a-f0c6258b9a04/1/W1v_nUH3GfYmAMMtNBDduZ7Msww.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:4b:9c:e7:09:a2:5f:d9:13:97:3b:d7:f1:4e:2a:2b:27:45:
         6e:ed:0b:d7:8d:3e:4e:06:8e:90:e1:d2:73:03:8a:a0:eb:ea:
         72:ac:37:22:03:c9:59:12:c8:44:55:51:7e:15:95:ee:75:a8:
         fe:b3:5e:8f:f8:62:fe:71:0b:2b:1a:3b:f5:4f:3c:bd:59:fb:
         16:ae:f3:41:49:fb:be:c5:7d:c2:2c:fc:1d:e0:f4:60:65:0b:
         2c:da:60:0d:2b:ed:d1:4b:66:c4:dc:75:40:97:b2:cf:f1:39:
         dd:83:7b:b5:cf:89:e2:b2:86:5c:b5:3f:64:4a:50:d0:d8:5c:
         24:3d:58:23:0d:1d:55:a5:45:eb:b5:a3:0c:55:01:3f:87:1d:
         75:de:80:6b:1c:03:95:17:78:29:49:1a:e4:04:bb:c1:76:97:
         5d:e5:91:4c:ba:fb:3e:0d:79:a5:96:4f:58:89:14:9f:1b:96:
         da:24:62:32:5f:4a:c2:26:b8:7a:42:7f:09:0f:6e:fd:13:e5:
         cc:03:be:03:3a:24:f0:5a:9a:43:73:d1:9c:19:92:ed:52:fa:
         5b:db:be:ee:a0:b3:1e:ce:8a:97:35:1d:c2:10:01:e0:e0:59:
         95:04:bc:79:52:f3:50:87:3c:bd:da:2b:ce:98:6c:06:48:67:
         38:3f:89:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZlc6dOdgCxPAqeVdbL7jFYLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViNWJmZjlkNDFmNzE5ZjYyNjAwYzMyZDM0MTBkZGI5OWVj
Y2IzMGMwHhcNMjUwOTE4MTMwMDUxWhcNMjUwOTE5MTMwMDUxWjAzMTEwLwYDVQQD
EyhjNWI1OTA2MjFkOGYxMDc2Njg2NTAzMDQwMDQ4OTcwZjBlM2VkOWNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLMlTs+Rm+5CxHitAfiQiqNprJAp
kUW5TwFvk1cl1Ha8qSIlemJY2nAIyvhZiznKJCTzxastX3hyvVd/diAykzApVMFa
+mE+yMJ64uiamJuMj6IuScJmPGeaSZom7DF/GZqYFJioX141SG6BMA33OAJcLdQC
2+31LP/6Swc4dbKiWXielS9XsxyT9onifCb5KaOvUzFAxdRpOeH6ujWpg2tRXXJX
2ts0IAP4b0pvgQVuxDz2ShIsIoEx8p/UV71CGXtbhEX5/NUYPUEnCigZu/GhFjUe
GT4OL1p2JKu/OI2xw5p2JQUB0RFrL2DxLwOXQjNQMsi7Tu8GQ2zlvfKQKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMW1kGIdjxB2aGUDBABIlw8OPtnPMB8GA1UdIwQY
MBaAFFtb/51B9xn2JgDDLTQQ3bmezLMMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzF2X25VSDNHZlltQU1NdE5CRGR1WjdNc3d3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi80ZjQzZmMtNDE4Ny00YmI5LTkwNWEt
ZjBjNjI1OGI5YTA0LzEvVzF2X25VSDNHZlltQU1NdE5CRGR1WjdNc3d3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi80ZjQzZmMtNDE4Ny00YmI5LTkwNWEtZjBjNjI1OGI5YTA0
LzEvVzF2X25VSDNHZlltQU1NdE5CRGR1WjdNc3d3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADEuc5wmi
X9kTlzvX8U4qKydFbu0L140+TgaOkOHScwOKoOvqcqw3IgPJWRLIRFVRfhWV7nWo
/rNej/hi/nELKxo79U88vVn7Fq7zQUn7vsV9wiz8HeD0YGULLNpgDSvt0UtmxNx1
QJeyz/E53YN7tc+J4rKGXLU/ZEpQ0NhcJD1YIw0dVaVF67WjDFUBP4cddd6AaxwD
lRd4KUka5AS7wXaXXeWRTLr7Pg15pZZPWIkUnxuW2iRiMl9Kwia4ekJ/CQ9u/RPl
zAO+Azok8FqaQ3PRnBmS7VL6W9u+7qCzHs6KlzUdwhAB4OBZlQS8eVLzUIc8vdor
zphsBkhnOD+J9Q==
-----END CERTIFICATE-----
Generated at Thu Sep 18 22:57:53 2025 by rpki-client