Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/551e92-992d-41da-986b-9519693eaa7b/1/w7DVNe688o5grJiuSVs0mBtak-w.mft
File:                     w7DVNe688o5grJiuSVs0mBtak-w.mft (raw, json)
Hash identifier:          wnPwvFwR8QkLQXq6+yqHCNf1LluxgY3hfWPWLa/pWqk=
Subject key identifier:   65:EE:CF:83:CF:5B:62:9C:60:5D:17:8E:F4:94:65:55:0D:E1:43:CE
Authority key identifier: C3:B0:D5:35:EE:BC:F2:8E:60:AC:98:AE:49:5B:34:98:1B:5A:93:EC
Certificate issuer:       /CN=c3b0d535eebcf28e60ac98ae495b34981b5a93ec
Certificate serial:       019A1DD10287E7B38085AC997406A5A792D3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w7DVNe688o5grJiuSVs0mBtak-w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/551e92-992d-41da-986b-9519693eaa7b/1/w7DVNe688o5grJiuSVs0mBtak-w.mft
Manifest number:          16F9
Signing time:             Sun 26 Oct 2025 00:00:28 +0000
Manifest this update:     Sun 26 Oct 2025 00:00:28 +0000
Manifest next update:     Mon 27 Oct 2025 00:00:28 +0000
Files and hashes:         1: 1-ZTXd6PmTmIMEMe100W5NGDRj3c.roa (hash: NHkVAtdEjUnA2SCcMg/CpdPj8emXX0V3c3ArPmZsQPo=)
                          2: cKTFKLuoQdiYE7_u9RuNKWw7fco.roa (hash: KXSC0hf1ayPyYoQDrw1CY1aRR6JyJ+UZkoTbKkWxBMQ=)
                          3: d5p44SeL41Vv8U9LRNaQSIJeXfY.roa (hash: tK/nEBw1HGQWPtkPKGf1rTHF1XrAXssUZrXXRf8dXMs=)
                          4: w7DVNe688o5grJiuSVs0mBtak-w.crl (hash: +kkqGNZFvTLMUQrSdKDnnUKJa24ZxbXKVnqRfyfQeCs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/551e92-992d-41da-986b-9519693eaa7b/1/w7DVNe688o5grJiuSVs0mBtak-w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/551e92-992d-41da-986b-9519693eaa7b/1/w7DVNe688o5grJiuSVs0mBtak-w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w7DVNe688o5grJiuSVs0mBtak-w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 26 Oct 2025 19:59:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:1d:d1:02:87:e7:b3:80:85:ac:99:74:06:a5:a7:92:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3b0d535eebcf28e60ac98ae495b34981b5a93ec
        Validity
            Not Before: Oct 26 00:00:28 2025 GMT
            Not After : Oct 27 00:00:28 2025 GMT
        Subject: CN=65eecf83cf5b629c605d178ef49465550de143ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:64:32:ca:be:61:09:ec:eb:56:8e:d6:07:fe:
                    eb:cc:9d:6b:f3:ab:ab:38:9e:23:21:63:db:b2:05:
                    2b:77:1c:d6:4c:2c:6d:71:a2:52:0b:cb:cd:1a:71:
                    a9:a9:6c:be:7b:35:22:c4:1a:01:3e:21:d3:56:1d:
                    3e:39:07:73:e2:5b:d7:d2:fe:4b:54:b6:1f:11:c3:
                    ef:ae:7e:9e:89:34:0f:82:63:e1:a5:e2:3b:37:9d:
                    52:2d:fd:6f:44:a3:26:0b:a9:df:94:bf:2f:0e:53:
                    72:20:ac:eb:4f:25:2d:87:e5:d7:4e:69:83:0f:30:
                    db:9a:f3:67:bd:6a:3d:fc:6c:fc:8f:c7:ad:78:76:
                    ae:92:e7:57:dd:23:7b:7a:52:84:85:5c:e6:4b:c3:
                    bc:56:4a:c4:72:19:13:91:8c:52:a4:47:d2:a5:fd:
                    12:6c:72:d2:67:d5:4e:65:4f:3e:bb:cf:7b:e8:f8:
                    9b:ac:ac:66:a5:aa:68:a1:0c:67:e4:29:7a:4e:7d:
                    33:6d:b9:8a:42:29:d1:28:77:96:48:11:67:a9:ec:
                    4e:35:0d:9b:a1:ec:8b:bb:56:b4:33:1f:f0:a2:60:
                    0f:71:6a:71:ab:ab:d0:ab:e1:de:7d:29:90:eb:60:
                    ec:43:b2:fa:5d:7f:1b:e6:13:04:19:6e:7b:58:fb:
                    b3:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:EE:CF:83:CF:5B:62:9C:60:5D:17:8E:F4:94:65:55:0D:E1:43:CE
            X509v3 Authority Key Identifier:
                keyid:C3:B0:D5:35:EE:BC:F2:8E:60:AC:98:AE:49:5B:34:98:1B:5A:93:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w7DVNe688o5grJiuSVs0mBtak-w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/551e92-992d-41da-986b-9519693eaa7b/1/w7DVNe688o5grJiuSVs0mBtak-w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/551e92-992d-41da-986b-9519693eaa7b/1/w7DVNe688o5grJiuSVs0mBtak-w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:59:2c:ad:82:37:b9:12:b9:23:ed:45:17:44:8d:80:20:df:
         7f:98:aa:15:21:e6:e2:f4:b7:4c:fd:3f:4d:05:99:0e:45:58:
         12:34:a3:18:18:c0:79:ec:99:0a:6f:d7:07:79:de:11:0f:87:
         7b:6c:50:21:40:51:f4:b6:bf:7c:57:ea:2b:8e:dc:ca:28:92:
         74:82:83:9c:9a:dc:fd:4d:eb:32:0e:06:4a:63:f9:8b:a7:67:
         59:19:81:43:81:7a:d0:02:62:09:19:55:9b:0f:6a:3f:d3:58:
         d9:20:df:ab:ce:3c:e6:79:9a:f5:26:f9:ca:a1:2c:ae:ab:04:
         70:6c:d9:4d:76:a6:0f:bb:39:6e:56:69:2e:b7:eb:41:9c:88:
         9a:a8:37:4b:54:40:31:f2:38:b4:aa:4b:c1:d9:72:36:06:30:
         a3:f6:7e:6a:65:a7:b2:67:90:c4:04:80:5b:3d:63:e4:dc:3d:
         02:be:58:85:19:a0:dc:6b:68:f0:b6:f0:51:79:d0:4a:1e:16:
         7b:4e:7b:35:9c:18:2a:2e:ef:db:ff:1e:43:f0:f9:4b:5a:3d:
         07:fe:5d:89:9d:97:81:d7:0f:fa:45:ea:53:bc:70:a2:73:80:
         81:cc:9f:57:f0:3f:27:41:8a:44:70:b2:da:64:4d:b4:da:b8:
         f6:aa:ab:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 03:12:25 2025 by rpki-client