Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/f75d16-4039-46ca-8b1e-adb300f7225a/1/wQohI_VJJk58u5-iHSxRN3IUhuQ.mft
File:                     wQohI_VJJk58u5-iHSxRN3IUhuQ.mft (raw, json)
Hash identifier:          M/ED9YK2Xma5YSqnsOlAwsUtwhP0Z/o1EE93TmjEesw=
Subject key identifier:   B4:EB:90:A1:73:8A:89:EB:6C:0B:FF:BA:9F:55:55:5A:48:31:C1:DD
Authority key identifier: C1:0A:21:23:F5:49:26:4E:7C:BB:9F:A2:1D:2C:51:37:72:14:86:E4
Certificate issuer:       /CN=c10a2123f549264e7cbb9fa21d2c5137721486e4
Certificate serial:       019A1FF6ADA49EDCCB30FD8B4D4028F26353
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wQohI_VJJk58u5-iHSxRN3IUhuQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/f75d16-4039-46ca-8b1e-adb300f7225a/1/wQohI_VJJk58u5-iHSxRN3IUhuQ.mft
Manifest number:          16F4
Signing time:             Sun 26 Oct 2025 10:00:51 +0000
Manifest this update:     Sun 26 Oct 2025 10:00:51 +0000
Manifest next update:     Mon 27 Oct 2025 10:00:51 +0000
Files and hashes:         1: XEsqeKOf3nUKp6N27Tk-w17zShA.roa (hash: k+ZjcSbWsbCQX+BZ6yWaMdK9CN57/SVKpUlCaIxWc4g=)
                          2: wQohI_VJJk58u5-iHSxRN3IUhuQ.crl (hash: sXnWPAZd+WCX03wQ44w9WQg4k3Ce56FCleY7aFSlJZQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/f75d16-4039-46ca-8b1e-adb300f7225a/1/wQohI_VJJk58u5-iHSxRN3IUhuQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/f75d16-4039-46ca-8b1e-adb300f7225a/1/wQohI_VJJk58u5-iHSxRN3IUhuQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wQohI_VJJk58u5-iHSxRN3IUhuQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Oct 2025 05:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:1f:f6:ad:a4:9e:dc:cb:30:fd:8b:4d:40:28:f2:63:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c10a2123f549264e7cbb9fa21d2c5137721486e4
        Validity
            Not Before: Oct 26 10:00:51 2025 GMT
            Not After : Oct 27 10:00:51 2025 GMT
        Subject: CN=b4eb90a1738a89eb6c0bffba9f55555a4831c1dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:30:5d:e4:57:64:d3:d8:2f:7f:db:a4:77:cf:
                    a9:a2:e1:7e:92:f4:fc:b1:75:cd:f0:b6:7a:bb:b1:
                    d8:96:73:8c:79:a5:50:bf:41:74:d4:2e:ea:ec:2f:
                    ac:fc:be:52:f8:8b:64:5f:ef:0b:28:f0:90:8a:74:
                    ff:69:82:82:c5:8e:e6:ff:26:00:8f:07:4a:fc:0b:
                    8f:1a:c8:ee:85:46:62:7c:53:e8:ea:c8:e1:6c:c9:
                    56:6e:a6:6e:cd:ba:d5:3a:f9:99:5f:34:b5:e9:9b:
                    73:77:c1:a1:ad:a4:4e:6e:6d:fe:e2:fc:1f:37:37:
                    51:42:22:19:ad:0d:37:d5:1d:67:fb:c7:72:1f:5b:
                    82:57:d5:4a:98:02:a2:8a:55:d3:d9:9a:55:48:cd:
                    99:5d:8d:9b:af:74:93:9e:6f:b3:a9:cf:c1:14:52:
                    60:18:4e:55:8e:07:4c:01:7d:28:24:09:85:2e:5f:
                    22:b1:d9:28:74:7e:e7:3c:07:43:f8:0c:d3:75:5a:
                    b7:98:80:61:5d:bf:70:d0:41:ed:fb:60:9d:62:07:
                    f2:10:e3:a7:10:d7:69:9d:14:35:34:a4:70:e2:5c:
                    10:2d:dd:cb:71:77:9b:67:f5:a4:37:9d:5d:4f:71:
                    f4:da:d5:12:e2:66:6c:4b:a8:40:61:ad:85:f7:e4:
                    15:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:EB:90:A1:73:8A:89:EB:6C:0B:FF:BA:9F:55:55:5A:48:31:C1:DD
            X509v3 Authority Key Identifier:
                keyid:C1:0A:21:23:F5:49:26:4E:7C:BB:9F:A2:1D:2C:51:37:72:14:86:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQohI_VJJk58u5-iHSxRN3IUhuQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f75d16-4039-46ca-8b1e-adb300f7225a/1/wQohI_VJJk58u5-iHSxRN3IUhuQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f75d16-4039-46ca-8b1e-adb300f7225a/1/wQohI_VJJk58u5-iHSxRN3IUhuQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:10:4d:31:d0:71:23:7d:10:62:4c:79:2e:6a:d8:89:9a:dd:
         26:bd:28:5c:bb:e7:b9:09:6f:e7:81:91:51:1b:de:7b:c5:22:
         f9:a9:c6:e7:44:12:a9:6f:6f:a9:ea:97:57:60:eb:d6:e9:6f:
         b9:b3:f8:77:fa:e0:e4:27:35:49:39:57:f3:2e:f7:7f:74:5a:
         48:5f:10:31:ae:97:0d:11:3e:b6:b1:94:e9:06:67:66:48:cb:
         cb:59:d8:b4:aa:b4:09:0d:e9:f3:d4:2e:f2:a5:11:bc:d5:dc:
         53:6b:c0:49:22:91:85:70:0d:16:9c:a7:f5:63:4e:0c:22:d1:
         e5:62:7e:80:ff:cf:41:d2:2f:ee:14:0d:eb:66:b9:77:5e:21:
         91:c0:27:ef:b2:cf:e6:33:39:e8:bc:3e:31:77:bf:27:67:c0:
         7d:4f:e6:35:25:bc:37:aa:38:87:85:62:2e:a0:fe:38:36:19:
         05:55:21:ca:de:32:f5:a2:f3:8e:cd:61:46:bf:20:e1:5a:9b:
         af:77:03:7c:bf:f0:2f:09:2f:03:d7:6e:45:d9:db:81:37:98:
         39:4b:ac:eb:ce:64:aa:b2:82:9f:89:9a:4a:23:8f:67:2a:c3:
         bd:61:4e:4d:9e:23:d8:4b:47:bc:4c:c0:b6:10:9e:03:bb:89:
         fa:11:b6:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 14:30:58 2025 by rpki-client