Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/wSXvTcnT7N9IZlXC3SMenLuwoLc.mft
File:                     wSXvTcnT7N9IZlXC3SMenLuwoLc.mft (raw, json)
Hash identifier:          9bCSLKEJ1UHstQELiJjCWE1Sx1im2pFOOAdeMpWafzE=
Subject key identifier:   43:A2:DB:B3:4C:F0:8E:E3:B2:85:07:79:9D:67:A1:6A:0A:95:DF:DC
Authority key identifier: C1:25:EF:4D:C9:D3:EC:DF:48:66:55:C2:DD:23:1E:9C:BB:B0:A0:B7
Certificate issuer:       /CN=c125ef4dc9d3ecdf486655c2dd231e9cbbb0a0b7
Certificate serial:       01995FEB539D91587C1B13FD9AF6CFEB45B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wSXvTcnT7N9IZlXC3SMenLuwoLc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/wSXvTcnT7N9IZlXC3SMenLuwoLc.mft
Manifest number:          1692
Signing time:             Fri 19 Sep 2025 03:01:21 +0000
Manifest this update:     Fri 19 Sep 2025 03:01:21 +0000
Manifest next update:     Sat 20 Sep 2025 03:01:21 +0000
Files and hashes:         1: uR-Qt3k3bfM3gqD_iPwjYus1OKg.roa (hash: wvva5AnG6XL5jcw7hAwIwlMKF+/vvms/lQ+w5Fd0MJA=)
                          2: wSXvTcnT7N9IZlXC3SMenLuwoLc.crl (hash: RRi0rPMkV0EbN6mYXmvxB6AP7fdaKJQyR5Khs8b02Aw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/wSXvTcnT7N9IZlXC3SMenLuwoLc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/wSXvTcnT7N9IZlXC3SMenLuwoLc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wSXvTcnT7N9IZlXC3SMenLuwoLc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 19 Sep 2025 22:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:5f:eb:53:9d:91:58:7c:1b:13:fd:9a:f6:cf:eb:45:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c125ef4dc9d3ecdf486655c2dd231e9cbbb0a0b7
        Validity
            Not Before: Sep 19 03:01:21 2025 GMT
            Not After : Sep 20 03:01:21 2025 GMT
        Subject: CN=43a2dbb34cf08ee3b28507799d67a16a0a95dfdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b0:10:05:69:7e:cd:11:50:f0:3e:5c:0b:51:
                    b3:8b:d6:c3:21:bd:9c:4e:64:ba:35:07:2f:c5:f9:
                    1b:5f:53:59:fa:2d:b7:fb:71:f2:fc:19:8a:4b:0d:
                    b7:a4:23:df:83:91:0f:9b:7e:77:55:fe:78:4a:74:
                    2a:93:43:60:53:c3:ca:2b:c4:ad:b4:49:39:8b:c0:
                    40:34:32:59:7d:5a:ab:51:1d:56:16:d4:09:66:aa:
                    28:0b:98:7e:d4:96:de:8f:86:17:9e:3c:04:de:19:
                    44:e6:03:11:9f:63:ef:4c:a8:e0:46:2a:22:39:0b:
                    fc:bf:a7:a8:ab:e4:f1:00:ee:fc:c3:33:9f:e6:02:
                    3e:7f:86:bb:13:2b:7e:fb:bf:62:6c:bf:7d:00:26:
                    50:f1:0e:80:75:1c:c5:db:93:b9:d6:26:b3:ea:58:
                    40:58:5a:1e:72:de:f4:cb:50:c6:c9:b4:5a:e0:c1:
                    2e:6e:46:6a:ee:5b:96:85:bb:f8:e8:f9:3c:0d:b9:
                    af:9f:29:df:ec:b1:05:6e:b8:af:ce:f3:28:44:19:
                    a2:44:df:8e:42:95:2f:a2:a3:70:3c:cc:c9:54:01:
                    dc:d1:a6:e3:43:2a:f4:54:3c:ee:86:b2:02:2e:a6:
                    b4:35:fc:c4:96:45:03:4e:81:cb:a3:99:0f:e6:22:
                    00:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:A2:DB:B3:4C:F0:8E:E3:B2:85:07:79:9D:67:A1:6A:0A:95:DF:DC
            X509v3 Authority Key Identifier:
                keyid:C1:25:EF:4D:C9:D3:EC:DF:48:66:55:C2:DD:23:1E:9C:BB:B0:A0:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSXvTcnT7N9IZlXC3SMenLuwoLc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/wSXvTcnT7N9IZlXC3SMenLuwoLc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/wSXvTcnT7N9IZlXC3SMenLuwoLc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:67:65:21:fa:dc:97:de:c6:fb:81:d9:fe:7b:a7:f7:16:d7:
         2b:8a:46:0b:44:55:e6:bd:a4:cb:1e:3f:9a:24:b8:d7:4b:ca:
         a2:96:9b:c4:a9:34:26:43:bc:76:dc:5a:b3:9a:3b:37:1d:42:
         4d:6f:d6:2e:d5:13:1c:90:cb:31:98:e6:78:9b:4e:96:bb:5d:
         7e:53:fb:db:e7:f0:65:c1:8e:ad:4d:44:1a:e2:14:bf:70:73:
         89:41:6d:da:4a:d0:52:27:1b:5c:0e:f6:0c:46:14:52:5f:4f:
         9d:7c:f2:0f:75:46:b4:e5:86:77:3e:2e:71:a4:6a:53:2a:4b:
         49:02:3e:fc:33:cc:36:1d:1d:d0:54:10:dd:8a:e2:33:d0:bd:
         2b:27:02:ce:0d:0f:50:c6:f7:65:f2:6a:06:42:be:85:f9:a0:
         9f:ef:0a:ec:99:23:58:2c:9d:2e:40:37:8d:2b:0f:5e:01:b8:
         68:b3:4c:c3:7c:ce:57:e1:fc:4b:19:7f:5a:09:03:39:7d:f7:
         d0:6e:4b:4e:4e:16:ec:21:e9:9f:96:4c:e0:39:7d:c0:ab:e4:
         f5:b4:ab:ec:10:88:b7:8e:bd:77:24:4a:5b:f6:ea:6b:3d:08:
         00:37:97:e2:60:16:73:6b:eb:89:4c:3c:39:20:0f:45:19:c1:
         cb:35:49:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 07:46:11 2025 by rpki-client