Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/4f76b4-7d56-47a0-ac5b-653f239fe9a0/1/Wl5msnWeULtpuwpECe6zukjEbFY.mft
File:                     Wl5msnWeULtpuwpECe6zukjEbFY.mft (raw, json)
Hash identifier:          GNdZYUSVlMKF2fXuw89iOiag2NwirO2s2p2NZHhX3DI=
Subject key identifier:   1D:EE:5B:5B:06:D4:77:11:F1:39:A2:05:2C:92:D4:CA:0A:A8:DF:96
Authority key identifier: 5A:5E:66:B2:75:9E:50:BB:69:BB:0A:44:09:EE:B3:BA:48:C4:6C:56
Certificate issuer:       /CN=5a5e66b2759e50bb69bb0a4409eeb3ba48c46c56
Certificate serial:       019A1EACD09CF510FCFA8E5D959AA27E8755
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wl5msnWeULtpuwpECe6zukjEbFY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/4f76b4-7d56-47a0-ac5b-653f239fe9a0/1/Wl5msnWeULtpuwpECe6zukjEbFY.mft
Manifest number:          0AEC
Signing time:             Sun 26 Oct 2025 04:00:33 +0000
Manifest this update:     Sun 26 Oct 2025 04:00:33 +0000
Manifest next update:     Mon 27 Oct 2025 04:00:33 +0000
Files and hashes:         1: JMcsUGuUaLZsEGBNH_a8JRQk3a4.roa (hash: Rd4/PCtPXSBKXGV3ZlmAFHOuRuHln3ehOWxO5fz7X8c=)
                          2: Wl5msnWeULtpuwpECe6zukjEbFY.crl (hash: cQL3Vl8G1W/MflqU9owWwgk9VnOf9+L/Lxf+ajWBdJY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/4f76b4-7d56-47a0-ac5b-653f239fe9a0/1/Wl5msnWeULtpuwpECe6zukjEbFY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/4f76b4-7d56-47a0-ac5b-653f239fe9a0/1/Wl5msnWeULtpuwpECe6zukjEbFY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Wl5msnWeULtpuwpECe6zukjEbFY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Oct 2025 03:42:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:1e:ac:d0:9c:f5:10:fc:fa:8e:5d:95:9a:a2:7e:87:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a5e66b2759e50bb69bb0a4409eeb3ba48c46c56
        Validity
            Not Before: Oct 26 04:00:33 2025 GMT
            Not After : Oct 27 04:00:33 2025 GMT
        Subject: CN=1dee5b5b06d47711f139a2052c92d4ca0aa8df96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:66:d5:34:ce:fe:d2:08:62:a1:fd:ec:42:16:
                    64:39:3a:c7:8b:d7:3e:a1:a0:08:94:67:f7:a1:88:
                    37:56:45:1c:86:1d:c2:7a:6e:34:e5:c6:df:ff:f0:
                    16:13:ad:a8:05:f4:f1:83:c4:fb:2b:6f:19:0f:c9:
                    bb:b5:a1:2c:7a:c1:58:77:d9:9f:00:63:0c:41:29:
                    a0:7b:b9:16:73:62:3a:c7:91:08:56:da:f9:ba:4d:
                    43:9a:ac:dc:b1:d1:28:f3:5d:f7:6f:92:b5:46:33:
                    8b:b4:4c:6d:98:0b:ea:ca:0b:93:08:cf:bb:00:72:
                    08:27:c9:59:ee:36:0f:82:47:5f:1d:7d:95:72:15:
                    08:44:fe:13:60:82:c9:5f:e1:bf:93:94:d3:3a:03:
                    6e:ff:83:ec:d4:7c:85:69:08:93:23:88:b8:f4:62:
                    e7:80:7a:14:89:58:48:d4:76:84:86:61:19:aa:79:
                    d7:35:40:ef:76:ad:e7:90:2b:4d:8a:f0:c0:d7:43:
                    af:4a:8e:02:72:75:7d:00:dd:34:a4:2d:74:ea:73:
                    a1:36:59:03:86:92:5c:4e:20:91:3c:7a:3c:b0:40:
                    f6:ab:28:56:ba:6b:60:8c:22:14:97:71:02:b6:9b:
                    da:24:cd:ba:44:86:1e:96:c8:6a:14:28:87:99:50:
                    57:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:EE:5B:5B:06:D4:77:11:F1:39:A2:05:2C:92:D4:CA:0A:A8:DF:96
            X509v3 Authority Key Identifier:
                keyid:5A:5E:66:B2:75:9E:50:BB:69:BB:0A:44:09:EE:B3:BA:48:C4:6C:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wl5msnWeULtpuwpECe6zukjEbFY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/4f76b4-7d56-47a0-ac5b-653f239fe9a0/1/Wl5msnWeULtpuwpECe6zukjEbFY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/4f76b4-7d56-47a0-ac5b-653f239fe9a0/1/Wl5msnWeULtpuwpECe6zukjEbFY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:c1:07:42:1d:5f:59:95:38:8c:af:ff:56:3a:34:d0:d8:a7:
         7e:34:b5:59:f4:87:e5:3d:61:21:bb:f8:2f:54:72:20:56:6d:
         3a:e9:40:6d:26:16:fc:4c:c0:de:d5:f5:fc:27:38:4c:bd:29:
         1e:f7:14:2e:8a:dd:e7:c3:95:d9:53:58:2d:5b:75:8a:99:3b:
         f4:e5:62:ea:c9:79:35:1f:26:a8:22:10:47:01:5c:61:73:b8:
         db:66:6b:23:ba:bc:04:c3:56:08:be:15:3f:d9:74:f2:9c:9d:
         26:28:ef:8d:b2:c7:d4:c0:d0:7c:a1:0a:d2:9a:42:b8:88:e2:
         55:07:8d:b3:43:ae:cb:ba:75:f9:46:2c:11:22:5c:89:85:4c:
         a8:8f:96:be:55:bf:b7:7a:7a:80:32:58:6b:a0:d3:dc:b6:f6:
         d8:55:dc:2e:6e:83:b7:0d:f8:25:71:f4:1b:ab:e7:33:8b:a1:
         06:01:77:c0:d0:e6:1d:5a:f8:8d:05:8c:c8:ae:4b:38:47:a4:
         36:92:22:47:a8:82:16:6d:f5:34:27:90:dc:7d:6a:b3:d4:d5:
         f2:a3:cd:42:d0:42:8d:4f:f0:fc:73:af:03:51:20:7c:2b:30:
         7e:3a:93:6e:95:c8:4c:03:83:b9:e5:c1:fd:3a:60:3a:46:db:
         c6:ab:3a:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 11:13:50 2025 by rpki-client