Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/wnNYaC3z34vccCRQf5Ls_Frgl7s.mft
File:                     wnNYaC3z34vccCRQf5Ls_Frgl7s.mft (raw, json)
Hash identifier:          5alelqywWzfGLL9UeRgZ32VDqdO6DfAUuEdJ0+sbB7A=
Subject key identifier:   EB:49:6B:52:89:07:AE:41:19:5B:2F:60:B2:C6:C6:57:12:CF:15:83
Authority key identifier: C2:73:58:68:2D:F3:DF:8B:DC:70:24:50:7F:92:EC:FC:5A:E0:97:BB
Certificate issuer:       /CN=c27358682df3df8bdc7024507f92ecfc5ae097bb
Certificate serial:       019A25F8A6055A005453A4EB707B79D17349
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wnNYaC3z34vccCRQf5Ls_Frgl7s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/wnNYaC3z34vccCRQf5Ls_Frgl7s.mft
Manifest number:          1703
Signing time:             Mon 27 Oct 2025 14:00:43 +0000
Manifest this update:     Mon 27 Oct 2025 14:00:43 +0000
Manifest next update:     Tue 28 Oct 2025 14:00:43 +0000
Files and hashes:         1: 4nK8mBu8KH58Djeo3td_0Crw3KY.roa (hash: zQgvuYZT7k7Pe+7tNXcpWarsNSwzQ+DP9gqFroEYWW0=)
                          2: LkEe0RaAHIQyFAgqLFfu7IF-fJc.roa (hash: NiYCGksYq+dLcXAYzq8f7QTlHaWi1LxHnyypP6wHNrE=)
                          3: wnNYaC3z34vccCRQf5Ls_Frgl7s.crl (hash: q5NA8yrn0J+mDEBdlhrv/vWVLgHDQH2IRczPP56iBeA=)
                          4: xEEMdPhC2rNk7bJVkwuJYqlveKw.roa (hash: bA+nImsoiqS77/m8QvZz//Ouvxt5jwaI3lpfp/XkOe8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/wnNYaC3z34vccCRQf5Ls_Frgl7s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/wnNYaC3z34vccCRQf5Ls_Frgl7s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wnNYaC3z34vccCRQf5Ls_Frgl7s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Oct 2025 14:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:25:f8:a6:05:5a:00:54:53:a4:eb:70:7b:79:d1:73:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c27358682df3df8bdc7024507f92ecfc5ae097bb
        Validity
            Not Before: Oct 27 14:00:43 2025 GMT
            Not After : Oct 28 14:00:43 2025 GMT
        Subject: CN=eb496b528907ae41195b2f60b2c6c65712cf1583
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f9:44:f4:df:a1:4f:c0:7b:0a:23:d4:71:15:
                    37:3c:a3:23:8e:b7:21:86:ce:4a:b4:63:11:65:47:
                    2d:4e:58:f9:98:a9:85:77:0a:f5:8a:a9:17:cb:79:
                    b5:37:70:3a:a7:ad:a3:e3:2c:b2:c3:b0:53:35:cf:
                    e9:4b:7e:df:79:fb:18:1f:2d:5c:06:9b:5d:94:3d:
                    e6:d0:dc:52:8f:1a:0d:7e:75:6d:c1:5f:6c:ce:38:
                    4a:16:9a:da:82:ab:2c:24:58:2a:3f:a3:d3:3c:5c:
                    00:01:9b:b4:fd:d1:1b:cc:b8:e7:a5:9c:39:a8:ee:
                    d9:83:b8:cb:b6:64:d2:cd:82:b1:bc:f5:f4:7c:23:
                    43:6b:e2:de:55:97:f8:ad:e0:ed:8c:a4:6c:a5:c9:
                    44:f4:f8:cf:27:5c:f7:77:39:49:49:d7:58:ea:a6:
                    db:e7:df:66:02:89:3f:9c:e0:2c:f2:09:4d:d9:92:
                    01:ee:d7:99:9a:13:50:09:88:ec:b8:fe:12:d0:ba:
                    22:6f:ae:52:b8:3a:1b:6c:eb:59:13:68:5f:f1:ed:
                    d7:35:0d:d7:a0:12:74:b1:e9:27:ca:f9:a4:93:65:
                    1c:b2:3b:77:53:27:f3:f6:de:a0:44:cf:2a:de:9d:
                    04:29:5f:dd:43:ba:6f:24:48:0d:8f:42:79:2f:60:
                    5e:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:49:6B:52:89:07:AE:41:19:5B:2F:60:B2:C6:C6:57:12:CF:15:83
            X509v3 Authority Key Identifier:
                keyid:C2:73:58:68:2D:F3:DF:8B:DC:70:24:50:7F:92:EC:FC:5A:E0:97:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wnNYaC3z34vccCRQf5Ls_Frgl7s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/wnNYaC3z34vccCRQf5Ls_Frgl7s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/wnNYaC3z34vccCRQf5Ls_Frgl7s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         de:a6:65:6d:da:75:d0:7c:2b:7f:15:75:bd:5c:18:d3:b1:ec:
         b6:f0:92:f2:06:42:56:ae:21:50:bc:52:bf:8f:31:c7:07:2b:
         65:d3:73:8e:30:19:67:f8:c6:54:88:6b:53:58:55:02:b7:b4:
         46:45:90:46:54:63:c4:0b:01:4b:3e:21:ba:9a:98:f4:7c:f2:
         a2:05:f2:e5:43:fc:f0:0a:2c:34:df:ae:50:71:17:da:f5:ea:
         6c:e0:29:8f:6c:ba:f9:56:ca:d0:e1:40:13:78:fc:c8:a9:aa:
         37:4d:b2:5a:7a:c3:56:ad:2f:83:e4:ee:64:cf:75:b9:01:21:
         c4:47:e1:88:11:55:33:44:89:30:7c:5d:eb:65:ce:3d:86:fb:
         10:3d:dc:c9:a3:41:19:84:0d:b9:ee:52:f2:1b:07:07:a1:72:
         15:90:5c:5b:2d:ec:23:20:81:c0:4e:84:3b:b8:b6:55:17:61:
         7d:4c:30:e1:16:cb:e5:90:17:d2:d4:62:67:12:7d:80:09:c7:
         27:13:78:ac:ec:db:cc:cc:91:e3:8a:0a:de:58:1e:99:e5:52:
         b7:07:bb:0b:c0:5b:3a:fc:e6:a8:95:fd:be:09:85:35:e6:c2:
         26:a7:a4:a8:f5:0f:e6:36:a9:e9:c9:01:ee:d5:0f:76:25:9c:
         ac:63:b2:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 16:56:58 2025 by rpki-client