Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/e28ba6-aaaf-4d33-b8dc-0aee360b0ba4/1/WmjWmdGpRXx4rPvsAE-YZ3qkzBY.mft
File:                     WmjWmdGpRXx4rPvsAE-YZ3qkzBY.mft (raw, json)
Hash identifier:          dXSD7ZGS3oAujUB1dEKnPHLnR/XR3dHBx/nexCTGHhY=
Subject key identifier:   34:59:83:08:FF:F2:EF:58:D0:ED:1E:B7:2A:FE:6F:64:6A:4A:C2:65
Authority key identifier: 5A:68:D6:99:D1:A9:45:7C:78:AC:FB:EC:00:4F:98:67:7A:A4:CC:16
Certificate issuer:       /CN=5a68d699d1a9457c78acfbec004f98677aa4cc16
Certificate serial:       019A21AD864F356E96C45EB8BCABBE57C69C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WmjWmdGpRXx4rPvsAE-YZ3qkzBY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/e28ba6-aaaf-4d33-b8dc-0aee360b0ba4/1/WmjWmdGpRXx4rPvsAE-YZ3qkzBY.mft
Manifest number:          16FC
Signing time:             Sun 26 Oct 2025 18:00:11 +0000
Manifest this update:     Sun 26 Oct 2025 18:00:11 +0000
Manifest next update:     Mon 27 Oct 2025 18:00:11 +0000
Files and hashes:         1: KOtOprlo9eWM-S3ee18Bkra0s7U.roa (hash: YzsVJr77Droy7DJXTIqItUpDk3Xa+3GyD3WsTRtaj84=)
                          2: PnDAeBphB2kiD9o4b1TlFW_oiEw.roa (hash: 80HIEeMh1J7mTJAl8xWdqZV3GTcdBhba2s3G/UCvDhk=)
                          3: VJASrMOyLg85AblR9YiVSWxHxZs.roa (hash: REvGVujT8OfpbkY6GeJPSg8UwmOkMcFqkev3bGvsPwQ=)
                          4: WmjWmdGpRXx4rPvsAE-YZ3qkzBY.crl (hash: h/v/o2aoBgsdGtkbb1sCKjEngh26D6GgiNjJVMS7Dmw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/e28ba6-aaaf-4d33-b8dc-0aee360b0ba4/1/WmjWmdGpRXx4rPvsAE-YZ3qkzBY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/e28ba6-aaaf-4d33-b8dc-0aee360b0ba4/1/WmjWmdGpRXx4rPvsAE-YZ3qkzBY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WmjWmdGpRXx4rPvsAE-YZ3qkzBY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Oct 2025 12:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:21:ad:86:4f:35:6e:96:c4:5e:b8:bc:ab:be:57:c6:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a68d699d1a9457c78acfbec004f98677aa4cc16
        Validity
            Not Before: Oct 26 18:00:11 2025 GMT
            Not After : Oct 27 18:00:11 2025 GMT
        Subject: CN=34598308fff2ef58d0ed1eb72afe6f646a4ac265
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:28:3d:8e:8d:c2:91:3e:90:44:c6:c5:9d:3a:
                    45:63:64:5f:f6:8e:70:6a:46:4f:df:ba:71:51:eb:
                    1d:63:e7:48:02:f7:c7:dc:9a:7f:a3:4d:ed:ee:fd:
                    16:44:99:ee:2e:41:6a:af:e9:8b:39:52:fd:ad:84:
                    f6:68:c7:28:d1:a4:00:0f:36:90:d6:3d:95:5d:09:
                    3d:a8:6b:2a:9a:57:a8:13:40:12:f4:53:c6:6a:9a:
                    20:09:03:9e:56:5b:28:d4:1d:ef:da:7b:3a:6a:1b:
                    00:0f:b0:39:97:bb:23:fa:1c:f9:76:db:9e:56:cd:
                    27:58:dd:25:bc:f5:ad:c7:85:6d:cb:11:98:ec:16:
                    ac:84:ae:55:dd:41:7f:22:97:a5:fa:84:e2:ff:29:
                    72:61:ef:a3:cd:50:28:3c:04:71:c3:09:7a:9b:cf:
                    c8:87:d8:63:5e:63:3d:60:94:0e:6f:c0:35:a3:31:
                    c1:4d:20:e1:a9:4f:de:11:e4:72:0e:78:2c:81:ca:
                    41:93:ae:4a:f6:2f:98:36:89:93:5a:38:38:d5:14:
                    2a:b9:54:14:1d:27:b0:76:d0:c2:6d:65:04:49:b8:
                    73:b7:cc:a7:08:a7:e2:18:c7:6a:d7:5c:1d:6a:cf:
                    cf:a2:c0:9b:40:b5:f1:13:8f:8e:b1:ba:de:cd:a7:
                    7e:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:59:83:08:FF:F2:EF:58:D0:ED:1E:B7:2A:FE:6F:64:6A:4A:C2:65
            X509v3 Authority Key Identifier:
                keyid:5A:68:D6:99:D1:A9:45:7C:78:AC:FB:EC:00:4F:98:67:7A:A4:CC:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WmjWmdGpRXx4rPvsAE-YZ3qkzBY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e28ba6-aaaf-4d33-b8dc-0aee360b0ba4/1/WmjWmdGpRXx4rPvsAE-YZ3qkzBY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e28ba6-aaaf-4d33-b8dc-0aee360b0ba4/1/WmjWmdGpRXx4rPvsAE-YZ3qkzBY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:a8:b4:83:f6:82:81:5b:29:2c:ff:fd:63:5d:45:ac:aa:10:
         1c:e0:aa:3b:88:8a:64:30:d8:d1:40:bb:e2:69:eb:51:7d:2f:
         4b:dd:87:09:04:52:5a:bf:f7:37:14:dd:c4:2b:df:6f:bf:08:
         68:ba:53:7e:a0:5a:d5:6f:96:44:54:1e:1c:cf:c6:74:03:f0:
         4b:89:57:27:49:7d:cc:e8:c7:63:4a:76:3d:6f:0f:78:b7:98:
         d6:8c:64:c6:0f:74:8f:5d:01:c4:3c:b1:68:d4:71:81:dd:19:
         05:e1:46:35:cb:50:e6:e5:ec:6e:9e:38:4d:81:76:c7:bf:be:
         6b:4c:aa:9b:2e:9d:36:4d:20:0d:7b:29:28:f5:7e:56:56:e2:
         86:c0:00:5e:20:31:40:21:67:7c:41:45:14:e0:a8:6e:0b:db:
         f0:45:72:67:cd:49:5e:8e:8c:2a:1f:a1:e5:06:a5:af:ed:13:
         a1:fc:4e:a9:cc:f8:06:b8:36:50:d2:dd:e8:3b:59:b5:ac:9d:
         17:60:2d:8a:d2:ae:9b:c1:6c:30:a8:07:dd:4f:09:4f:49:75:
         9f:f7:76:a8:2e:0a:47:24:e2:4a:b4:9c:22:13:42:7a:7b:97:
         8f:a0:8b:bc:f6:0d:cf:db:0c:8d:f5:c7:35:9e:ed:ad:14:b8:
         21:83:80:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 20:30:59 2025 by rpki-client