Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/4d27bb-f85c-4bfd-b1c3-47bcd39c3d86/1/WujHjxYTl64dvQrDIlhPYvt0AJc.mft
File:                     WujHjxYTl64dvQrDIlhPYvt0AJc.mft (raw, json)
Hash identifier:          08yygltBd49RBsNeqgo9zCpEmbzYJjrelANn4sVgoDU=
Subject key identifier:   9D:20:10:B8:05:51:F3:DA:AE:69:7C:46:93:F9:34:CB:C4:9C:F1:95
Authority key identifier: 5A:E8:C7:8F:16:13:97:AE:1D:BD:0A:C3:22:58:4F:62:FB:74:00:97
Certificate issuer:       /CN=5ae8c78f161397ae1dbd0ac322584f62fb740097
Certificate serial:       019A2477F6288B9C49AEB74A30C0F7A88756
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WujHjxYTl64dvQrDIlhPYvt0AJc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/4d27bb-f85c-4bfd-b1c3-47bcd39c3d86/1/WujHjxYTl64dvQrDIlhPYvt0AJc.mft
Manifest number:          16FD
Signing time:             Mon 27 Oct 2025 07:00:32 +0000
Manifest this update:     Mon 27 Oct 2025 07:00:32 +0000
Manifest next update:     Tue 28 Oct 2025 07:00:32 +0000
Files and hashes:         1: WujHjxYTl64dvQrDIlhPYvt0AJc.crl (hash: JhtOO6SkQNIgB5xhaYca62uvYzpO1EhDKgzSiiB76BI=)
                          2: daHEI4pwK9MCoKlOIJSUBvhI06c.roa (hash: /jr1EJCG0Q64uCvZ5hBO4FDYHAmlotvlgjK0tDnckkE=)
                          3: eyQdGysIhp_r6-1FHIzSXU5efx8.roa (hash: huANc1mdWopecpKqoSK4uR5EG7Pph6cXGyXeN73ZyWA=)
                          4: haxTlRYy2yO-0mAOlc4jzaKbbWo.roa (hash: yUxYpdVjNsLpxhJtWSKKbU7j/fl7MSe7J+Jl/FZPDcE=)
                          5: qEBSULOSMZqvdv0jIfml2f7tabs.roa (hash: nH9uGd3tMpksCUbkWl3JLVG6iE75o6qgmjF/U2MlHRI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/4d27bb-f85c-4bfd-b1c3-47bcd39c3d86/1/WujHjxYTl64dvQrDIlhPYvt0AJc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/4d27bb-f85c-4bfd-b1c3-47bcd39c3d86/1/WujHjxYTl64dvQrDIlhPYvt0AJc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WujHjxYTl64dvQrDIlhPYvt0AJc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Oct 2025 07:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:24:77:f6:28:8b:9c:49:ae:b7:4a:30:c0:f7:a8:87:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ae8c78f161397ae1dbd0ac322584f62fb740097
        Validity
            Not Before: Oct 27 07:00:32 2025 GMT
            Not After : Oct 28 07:00:32 2025 GMT
        Subject: CN=9d2010b80551f3daae697c4693f934cbc49cf195
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d9:24:df:19:60:0d:35:07:11:64:47:55:bb:
                    65:ae:0e:15:1d:22:b1:a6:b9:1d:bb:8f:7e:02:60:
                    c4:7d:4a:8a:a2:8b:62:3b:49:da:4e:3a:77:1f:c2:
                    97:5c:0f:57:bd:f5:72:d4:b9:94:17:d7:37:f5:38:
                    e9:1e:37:c7:69:46:af:0d:22:40:b3:84:4c:2e:7a:
                    08:20:41:4b:ad:3e:30:48:f1:38:dc:da:09:92:20:
                    3f:7e:04:a3:e7:97:b9:f8:e7:b7:ea:7f:e3:1e:3f:
                    4a:58:a1:27:4c:83:c6:29:47:44:08:2b:be:b1:d6:
                    30:8a:15:9d:9a:53:61:50:31:e0:41:c4:0c:8c:c0:
                    67:af:b4:dd:d3:7a:36:e0:75:08:64:64:15:c8:f2:
                    5e:e0:11:fa:92:dd:b3:91:4a:bd:01:8b:9a:e0:8f:
                    44:fd:78:94:91:88:fa:47:7b:71:aa:06:95:e7:53:
                    9c:3b:1b:4a:87:f9:1e:12:eb:ed:a5:27:4f:8f:d6:
                    1b:50:e9:0d:59:91:ee:72:6c:02:49:14:46:e3:b8:
                    8e:0a:76:5b:8e:56:e6:b3:4f:c7:5a:1d:69:c2:44:
                    17:44:6c:3c:d6:49:ab:c5:57:0f:a0:d7:36:ad:07:
                    6f:69:0b:26:a3:87:7f:21:91:4c:9f:5a:1f:4a:79:
                    dd:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:20:10:B8:05:51:F3:DA:AE:69:7C:46:93:F9:34:CB:C4:9C:F1:95
            X509v3 Authority Key Identifier:
                keyid:5A:E8:C7:8F:16:13:97:AE:1D:BD:0A:C3:22:58:4F:62:FB:74:00:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WujHjxYTl64dvQrDIlhPYvt0AJc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/4d27bb-f85c-4bfd-b1c3-47bcd39c3d86/1/WujHjxYTl64dvQrDIlhPYvt0AJc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/4d27bb-f85c-4bfd-b1c3-47bcd39c3d86/1/WujHjxYTl64dvQrDIlhPYvt0AJc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:a2:88:b8:fd:d2:a0:77:81:c7:bc:52:9b:17:8f:dc:b6:f0:
         65:42:9b:31:6f:20:1b:20:f8:7b:0d:da:7f:ed:64:20:66:79:
         c8:31:fd:ce:7a:f9:4d:53:35:25:1c:70:51:0c:49:ac:99:6e:
         e2:59:ea:d5:a4:f6:f6:6c:74:a7:4c:98:37:8d:4d:ed:df:1c:
         3a:b5:76:2b:1d:5e:28:d9:cd:a0:1c:fc:18:3e:ae:22:d2:b8:
         86:f4:26:dd:1b:01:10:87:5f:c1:79:25:c9:a6:73:52:0f:b2:
         27:f7:08:c0:82:12:eb:18:b8:fa:3b:c7:e2:24:0c:c8:b7:9a:
         6e:35:d0:de:ba:75:09:48:d6:be:fa:55:93:10:3d:9d:df:23:
         47:62:11:72:9f:cb:fb:e9:5b:18:be:21:bc:87:7a:a2:5c:f3:
         d7:1e:80:e6:94:87:d1:c6:72:d8:38:f0:55:d2:71:31:8a:8e:
         ee:25:a1:dd:8e:9d:3b:75:22:1c:3d:2c:07:0f:77:b7:fc:94:
         0e:f8:c2:52:3f:df:b8:5f:8c:04:4f:36:e3:70:a1:34:2b:97:
         32:5a:f8:44:14:2d:18:fd:27:90:c6:07:bb:cd:51:14:83:74:
         91:54:5e:85:5b:44:1b:6c:7e:7b:1d:6e:a1:bf:1f:91:1c:e7:
         fc:40:64:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:08:20 2025 by rpki-client