Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/3d4bc5-c363-415f-b3da-48e4cc6b33a3/1/W_gUNe0TeJiV83XcNNBM6RrKR0Q.mft
File:                     W_gUNe0TeJiV83XcNNBM6RrKR0Q.mft (raw, json)
Hash identifier:          TTu47PIjxwBKuoi2Etr9TrFX1Dh1U2krTNJSqMMt1xk=
Subject key identifier:   37:A4:58:2B:12:68:7D:F5:71:1E:BB:5D:C7:01:A7:BA:84:CF:8A:2B
Authority key identifier: 5B:F8:14:35:ED:13:78:98:95:F3:75:DC:34:D0:4C:E9:1A:CA:47:44
Certificate issuer:       /CN=5bf81435ed13789895f375dc34d04ce91aca4744
Certificate serial:       019A251CB78C6A9E7666617EB7064B7F359F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W_gUNe0TeJiV83XcNNBM6RrKR0Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/3d4bc5-c363-415f-b3da-48e4cc6b33a3/1/W_gUNe0TeJiV83XcNNBM6RrKR0Q.mft
Manifest number:          0FF1
Signing time:             Mon 27 Oct 2025 10:00:30 +0000
Manifest this update:     Mon 27 Oct 2025 10:00:30 +0000
Manifest next update:     Tue 28 Oct 2025 10:00:30 +0000
Files and hashes:         1: W_gUNe0TeJiV83XcNNBM6RrKR0Q.crl (hash: pGSCOYOAjHNbAVvs5lCzMZMrdhUgzeMxSAyqyXoh6ow=)
                          2: c_oc0m8Q0D83TCO_fpBfaVJwNRs.roa (hash: mqb+D/ntHZJvZ/z36Bl1ItrdLaA25yJOk+uY5NUbN8E=)
                          3: h8iTz8AcPNoluNeaeW1XeZ2ZNTU.roa (hash: 6G/ihHpZFbWryvRuqI72FYSOZMMwREr3wb5GAXO7F4Q=)
                          4: pPT9mYyICtb5n_YmE-i-z8FboNk.roa (hash: L1rDzYnw/K/P26JqWUlSKAL88oGG3Ri5ojFqbgYUqu8=)
                          5: slyK1DAB4dbXemNXvoMVu6ZnABY.roa (hash: Rc7vQ1K5O9MgP86008BcYYEvvo1tQ62QMOGFXd3ulqA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/3d4bc5-c363-415f-b3da-48e4cc6b33a3/1/W_gUNe0TeJiV83XcNNBM6RrKR0Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/3d4bc5-c363-415f-b3da-48e4cc6b33a3/1/W_gUNe0TeJiV83XcNNBM6RrKR0Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W_gUNe0TeJiV83XcNNBM6RrKR0Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Oct 2025 08:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:25:1c:b7:8c:6a:9e:76:66:61:7e:b7:06:4b:7f:35:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5bf81435ed13789895f375dc34d04ce91aca4744
        Validity
            Not Before: Oct 27 10:00:30 2025 GMT
            Not After : Oct 28 10:00:30 2025 GMT
        Subject: CN=37a4582b12687df5711ebb5dc701a7ba84cf8a2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:03:6c:f9:65:b9:90:4e:1d:01:c6:37:e3:5d:
                    80:c6:3c:37:ac:3f:39:cc:31:3c:8e:61:c5:e3:49:
                    99:3f:35:58:cf:3f:d4:b8:a4:75:f0:86:8a:b7:e3:
                    43:7b:3e:c4:93:44:16:b3:fa:e9:d8:de:f3:23:20:
                    7f:2b:95:99:26:80:ef:11:b1:9b:cb:6b:60:4d:74:
                    0d:70:8b:e1:91:2c:0b:95:2e:54:24:a8:01:96:02:
                    fb:3c:fb:80:bb:9d:a6:7e:01:a8:8f:d4:f1:c6:10:
                    0c:7c:e6:87:cf:51:b8:04:af:3a:ce:03:74:85:79:
                    0a:ef:98:4e:c3:5f:40:c8:ef:84:04:b0:91:e4:0c:
                    b8:d5:e8:ae:25:0f:a2:a9:23:63:83:03:cd:6e:94:
                    7f:60:29:5e:10:b4:88:30:9b:81:2f:a9:0a:bf:14:
                    33:3a:15:90:c2:29:74:f6:54:73:5e:71:c2:f6:64:
                    9d:fd:c9:8f:34:d5:ed:39:90:e0:53:44:35:19:12:
                    91:ef:97:ac:4b:64:40:16:28:21:a3:f9:75:9a:9a:
                    d0:4e:60:03:f1:91:d6:34:aa:d5:3a:68:0c:26:d2:
                    fd:99:04:9e:1f:40:92:64:57:48:06:18:8d:c4:a3:
                    a4:11:54:7f:2e:89:47:36:25:84:2f:32:60:b9:77:
                    bd:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:A4:58:2B:12:68:7D:F5:71:1E:BB:5D:C7:01:A7:BA:84:CF:8A:2B
            X509v3 Authority Key Identifier:
                keyid:5B:F8:14:35:ED:13:78:98:95:F3:75:DC:34:D0:4C:E9:1A:CA:47:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W_gUNe0TeJiV83XcNNBM6RrKR0Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/3d4bc5-c363-415f-b3da-48e4cc6b33a3/1/W_gUNe0TeJiV83XcNNBM6RrKR0Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/3d4bc5-c363-415f-b3da-48e4cc6b33a3/1/W_gUNe0TeJiV83XcNNBM6RrKR0Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:4f:4a:bf:fd:77:1d:0a:4d:4f:6c:09:b6:6d:04:02:03:59:
         08:14:04:76:de:8a:6b:19:56:ea:9d:3f:cf:35:2e:02:c2:0f:
         55:c5:93:0e:53:d8:f4:f5:ee:90:bb:aa:e9:01:94:17:63:8b:
         f5:0c:f5:85:92:53:53:ce:ac:93:96:13:3b:9e:04:fc:03:2e:
         41:51:ba:7c:6d:d9:3a:a9:90:f9:db:83:77:1a:30:69:3c:9c:
         9d:65:04:cc:32:4e:26:08:43:fa:64:1f:6d:11:47:de:75:be:
         2b:e6:0a:ec:d6:07:66:34:81:6a:2b:dc:66:b4:1d:e7:27:36:
         c4:ef:9b:56:f3:cd:2f:88:a6:cf:c6:92:5f:b1:26:f2:dd:2a:
         ca:a8:3d:41:0a:f5:b7:ef:e4:90:76:2e:a1:cd:44:20:c3:3c:
         03:27:72:d7:56:00:a1:5b:62:d8:c4:fe:c2:7d:c0:e5:08:5a:
         16:71:09:42:cf:ff:f3:96:70:f2:d6:9c:ad:60:58:c6:ff:7a:
         3f:a4:bd:d5:74:cd:fe:0c:f4:2b:11:ad:7d:9c:dd:52:43:d7:
         ab:e2:91:8d:31:4f:25:4e:5e:50:ea:04:8e:df:0b:91:fb:0e:
         fe:66:1b:78:43:5a:b5:71:30:08:17:d5:11:58:76:94:f9:9d:
         b5:0b:ac:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZolHLeMap52ZmF+twZLfzWfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViZjgxNDM1ZWQxMzc4OTg5NWYzNzVkYzM0ZDA0Y2U5MWFj
YTQ3NDQwHhcNMjUxMDI3MTAwMDMwWhcNMjUxMDI4MTAwMDMwWjAzMTEwLwYDVQQD
EygzN2E0NTgyYjEyNjg3ZGY1NzExZWJiNWRjNzAxYTdiYTg0Y2Y4YTJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQNs+WW5kE4dAcY3412Axjw3rD85
zDE8jmHF40mZPzVYzz/UuKR18IaKt+NDez7Ek0QWs/rp2N7zIyB/K5WZJoDvEbGb
y2tgTXQNcIvhkSwLlS5UJKgBlgL7PPuAu52mfgGoj9TxxhAMfOaHz1G4BK86zgN0
hXkK75hOw19AyO+EBLCR5Ay41eiuJQ+iqSNjgwPNbpR/YCleELSIMJuBL6kKvxQz
OhWQwil09lRzXnHC9mSd/cmPNNXtOZDgU0Q1GRKR75esS2RAFigho/l1mprQTmAD
8ZHWNKrVOmgMJtL9mQSeH0CSZFdIBhiNxKOkEVR/LolHNiWELzJguXe9hQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDekWCsSaH31cR67XccBp7qEz4orMB8GA1UdIwQY
MBaAFFv4FDXtE3iYlfN13DTQTOkaykdEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV19nVU5lMFRlSmlWODNYY05OQk02UnJLUjBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8zZDRiYzUtYzM2My00MTVmLWIzZGEt
NDhlNGNjNmIzM2EzLzEvV19nVU5lMFRlSmlWODNYY05OQk02UnJLUjBRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy8zZDRiYzUtYzM2My00MTVmLWIzZGEtNDhlNGNjNmIzM2Ez
LzEvV19nVU5lMFRlSmlWODNYY05OQk02UnJLUjBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOU9Kv/13
HQpNT2wJtm0EAgNZCBQEdt6KaxlW6p0/zzUuAsIPVcWTDlPY9PXukLuq6QGUF2OL
9Qz1hZJTU86sk5YTO54E/AMuQVG6fG3ZOqmQ+duDdxowaTycnWUEzDJOJghD+mQf
bRFH3nW+K+YK7NYHZjSBaivcZrQd5yc2xO+bVvPNL4imz8aSX7Em8t0qyqg9QQr1
t+/kkHYuoc1EIMM8Aydy11YAoVti2MT+wn3A5QhaFnEJQs//85Zw8tacrWBYxv96
P6S91XTN/gz0KxGtfZzdUkPXq+KRjTFPJU5eUOoEjt8LkfsO/mYbeENatXEwCBfV
EVh2lPmdtQusuA==
-----END CERTIFICATE-----
Generated at Mon Oct 27 12:31:04 2025 by rpki-client