Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/b1e66a-516b-4d64-a645-e872c0d408a3/1/W-Odo6qlLRMP8HT7BJIhlm0rV8Y.mft
File:                     W-Odo6qlLRMP8HT7BJIhlm0rV8Y.mft (raw, json)
Hash identifier:          Y6jLdayGtEw3hjOEXPhxNs/R09pCEHlCTn1yDBYDnxA=
Subject key identifier:   87:CF:C3:0A:ED:E9:E4:53:31:0F:D5:26:05:95:F5:32:02:ED:F7:E1
Authority key identifier: 5B:E3:9D:A3:AA:A5:2D:13:0F:F0:74:FB:04:92:21:96:6D:2B:57:C6
Certificate issuer:       /CN=5be39da3aaa52d130ff074fb049221966d2b57c6
Certificate serial:       019A71B8E08906CA6C830B87F9E64B43F048
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W-Odo6qlLRMP8HT7BJIhlm0rV8Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/b1e66a-516b-4d64-a645-e872c0d408a3/1/W-Odo6qlLRMP8HT7BJIhlm0rV8Y.mft
Manifest number:          16BF
Signing time:             Tue 11 Nov 2025 07:02:12 +0000
Manifest this update:     Tue 11 Nov 2025 07:02:12 +0000
Manifest next update:     Wed 12 Nov 2025 07:02:12 +0000
Files and hashes:         1: Mxu35mIW7C0UP0bDs3PSbOB6g3s.roa (hash: PzV+Hvm8wXtJUXwK3RxNsLo6F6xHiBk0IePHLXsbPqk=)
                          2: W-Odo6qlLRMP8HT7BJIhlm0rV8Y.crl (hash: CG1DH/r3rGhqG71pM9VlAR4e5E0fnvvNmG+J4VYKsoA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/b1e66a-516b-4d64-a645-e872c0d408a3/1/W-Odo6qlLRMP8HT7BJIhlm0rV8Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/b1e66a-516b-4d64-a645-e872c0d408a3/1/W-Odo6qlLRMP8HT7BJIhlm0rV8Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W-Odo6qlLRMP8HT7BJIhlm0rV8Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 07:02:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:71:b8:e0:89:06:ca:6c:83:0b:87:f9:e6:4b:43:f0:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5be39da3aaa52d130ff074fb049221966d2b57c6
        Validity
            Not Before: Nov 11 07:02:12 2025 GMT
            Not After : Nov 12 07:02:12 2025 GMT
        Subject: CN=87cfc30aede9e453310fd5260595f53202edf7e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:1d:4b:2a:ca:45:d8:70:e0:32:cc:cf:3d:9a:
                    49:fd:26:9f:a3:bb:6d:da:65:2c:68:b3:f9:84:84:
                    72:41:b4:c7:8f:0a:0c:cc:49:16:43:b2:89:43:1f:
                    ad:54:6c:d9:61:7d:a9:f9:ff:75:21:bc:ca:ab:7a:
                    a7:aa:77:ca:a6:c7:d4:35:97:e6:31:23:4f:86:50:
                    32:cb:97:38:38:a5:e0:ad:e8:28:30:78:f9:ac:af:
                    11:86:2e:d3:c4:56:c1:97:8e:56:93:9f:6d:f7:d3:
                    17:02:67:b5:cc:dc:25:39:8b:a1:36:f6:80:a2:38:
                    4b:0d:d1:09:4f:27:02:78:b9:25:76:93:7c:4d:eb:
                    60:b5:9e:d8:df:9b:5a:12:c1:e2:47:70:89:ab:eb:
                    11:08:95:c3:fd:ad:87:e8:21:d8:4a:b1:16:be:1c:
                    96:47:81:04:a0:f5:b6:c0:b5:16:0f:f7:8d:8f:5d:
                    a3:33:bb:a0:27:da:0a:f3:fe:66:f3:41:91:cb:65:
                    ae:a2:5e:0c:17:26:36:87:b2:70:c5:c0:bb:fe:98:
                    03:42:63:de:6c:2a:9c:8d:3d:3b:a0:e6:f1:6b:af:
                    44:d9:0b:b9:e7:90:b4:fa:28:d9:47:f1:ff:f7:32:
                    5c:e3:d4:8e:3c:ce:83:5d:c8:61:6b:51:6d:2e:ef:
                    88:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:CF:C3:0A:ED:E9:E4:53:31:0F:D5:26:05:95:F5:32:02:ED:F7:E1
            X509v3 Authority Key Identifier:
                keyid:5B:E3:9D:A3:AA:A5:2D:13:0F:F0:74:FB:04:92:21:96:6D:2B:57:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-Odo6qlLRMP8HT7BJIhlm0rV8Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/b1e66a-516b-4d64-a645-e872c0d408a3/1/W-Odo6qlLRMP8HT7BJIhlm0rV8Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/b1e66a-516b-4d64-a645-e872c0d408a3/1/W-Odo6qlLRMP8HT7BJIhlm0rV8Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:bc:00:95:46:4e:bf:d5:61:07:1f:d8:d3:b8:19:f3:d9:46:
         e8:78:54:ad:1f:14:4f:a0:f7:02:5c:30:45:1e:f7:26:77:5d:
         8b:5f:40:ee:4d:e4:6f:f7:d6:30:65:0b:dc:f0:c3:13:31:be:
         0c:c2:0c:db:17:3a:b6:91:03:bc:fc:3e:66:71:ad:7f:38:5a:
         91:8a:75:1e:ff:c8:25:0f:41:a7:75:a2:15:4d:17:7d:a9:8b:
         59:53:f2:7f:28:94:90:8d:43:6e:14:cc:2c:59:2d:71:90:8b:
         38:a4:77:28:f5:0d:48:2a:da:b0:0d:7d:c1:8f:63:a3:22:61:
         d5:d2:5f:b6:c3:9e:93:20:48:fb:9e:f9:83:54:4b:16:44:3a:
         dd:f5:d0:d3:03:e0:89:1f:ac:a9:8c:70:e7:64:f9:89:e6:1f:
         f3:cd:07:a8:6f:20:84:d6:e8:7b:c0:03:cc:07:00:38:b0:13:
         76:5c:ac:de:e7:67:78:83:54:df:a1:ce:8f:02:58:2e:0d:5c:
         00:f1:24:b3:47:e2:3a:4f:24:ad:f8:cd:9a:fe:31:f0:14:c6:
         48:5b:66:de:de:6f:2b:bd:13:6f:ca:8d:79:f0:15:8a:73:98:
         ed:cd:c7:a3:46:95:a2:56:ad:ac:8c:4f:40:43:59:3d:b6:93:
         20:da:ec:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:19:08 2025 by rpki-client