Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/6d663a-4538-4cbf-ad1f-857580fc6167/1/w4UgGjO1J8ZEqtWuzTeCxqjC9R8.mft
File:                     w4UgGjO1J8ZEqtWuzTeCxqjC9R8.mft (raw, json)
Hash identifier:          Tpekh5wUc1YaKtqgStIGzUZJQPuRu92bAw3SQCV3BsE=
Subject key identifier:   7E:1E:F1:3E:B3:69:56:53:22:21:94:36:A3:0F:DA:99:00:FA:12:CA
Authority key identifier: C3:85:20:1A:33:B5:27:C6:44:AA:D5:AE:CD:37:82:C6:A8:C2:F5:1F
Certificate issuer:       /CN=c385201a33b527c644aad5aecd3782c6a8c2f51f
Certificate serial:       019A1F88A66ED668507B73B4BC48C0199288
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w4UgGjO1J8ZEqtWuzTeCxqjC9R8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/6d663a-4538-4cbf-ad1f-857580fc6167/1/w4UgGjO1J8ZEqtWuzTeCxqjC9R8.mft
Manifest number:          16F3
Signing time:             Sun 26 Oct 2025 08:00:40 +0000
Manifest this update:     Sun 26 Oct 2025 08:00:40 +0000
Manifest next update:     Mon 27 Oct 2025 08:00:40 +0000
Files and hashes:         1: H9QpnLm8fW1NfasYmS-Z-4wW9K0.roa (hash: ZMCXrj27lV/u3oSg3kl26pqz/wenN/+jeAtwxfISyBE=)
                          2: w4UgGjO1J8ZEqtWuzTeCxqjC9R8.crl (hash: PcWfQAhplxp4y6PithnRBCPDgKu/b/tuCJRbnU17ifg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/6d663a-4538-4cbf-ad1f-857580fc6167/1/w4UgGjO1J8ZEqtWuzTeCxqjC9R8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/6d663a-4538-4cbf-ad1f-857580fc6167/1/w4UgGjO1J8ZEqtWuzTeCxqjC9R8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w4UgGjO1J8ZEqtWuzTeCxqjC9R8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Oct 2025 03:42:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:1f:88:a6:6e:d6:68:50:7b:73:b4:bc:48:c0:19:92:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c385201a33b527c644aad5aecd3782c6a8c2f51f
        Validity
            Not Before: Oct 26 08:00:40 2025 GMT
            Not After : Oct 27 08:00:40 2025 GMT
        Subject: CN=7e1ef13eb369565322219436a30fda9900fa12ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:54:91:d5:01:d9:1c:38:99:4c:45:6a:e4:98:
                    bb:8d:ac:c2:f0:3c:fe:22:be:4a:72:bf:8a:b8:3e:
                    8a:5c:2e:1f:b7:8f:bf:31:02:3e:04:56:08:f0:68:
                    31:4f:3b:16:65:ce:28:bf:b7:51:55:03:7f:f0:f7:
                    48:17:6f:2e:f1:89:70:78:63:f5:18:f2:52:97:f5:
                    63:b1:00:a9:01:17:cb:05:f9:4a:0d:2c:12:e8:bb:
                    b4:64:3f:9d:77:ce:71:96:c5:4f:fd:60:73:0a:46:
                    b6:98:71:e5:57:d7:13:76:35:0b:98:e1:3e:ff:56:
                    8f:b0:4f:77:78:cc:8c:04:a2:42:e0:d4:70:6a:a6:
                    80:dd:9d:5b:ee:f4:46:07:53:c5:31:9f:17:d5:b0:
                    a7:a8:87:7c:8a:f6:1a:89:ff:ed:33:80:35:55:8e:
                    49:cd:e6:33:26:a7:55:cb:ee:3c:cc:28:5b:46:f2:
                    bd:b2:4a:ce:fb:ba:40:af:c3:88:24:b8:21:47:7c:
                    20:8e:44:75:92:e2:17:66:fb:66:f4:f3:97:35:2a:
                    a9:10:40:8d:fc:6b:3f:e2:f7:bb:9d:16:69:49:f5:
                    b8:a1:40:4e:1d:6f:bf:52:1f:16:84:32:2b:0b:8b:
                    01:21:92:48:47:e7:ec:11:e2:d6:94:1a:f4:2d:60:
                    9d:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:1E:F1:3E:B3:69:56:53:22:21:94:36:A3:0F:DA:99:00:FA:12:CA
            X509v3 Authority Key Identifier:
                keyid:C3:85:20:1A:33:B5:27:C6:44:AA:D5:AE:CD:37:82:C6:A8:C2:F5:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w4UgGjO1J8ZEqtWuzTeCxqjC9R8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6d663a-4538-4cbf-ad1f-857580fc6167/1/w4UgGjO1J8ZEqtWuzTeCxqjC9R8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/6d663a-4538-4cbf-ad1f-857580fc6167/1/w4UgGjO1J8ZEqtWuzTeCxqjC9R8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:dc:44:45:ed:2f:46:0f:9d:1c:52:6d:eb:ab:72:a0:6c:0e:
         61:ed:58:78:4e:cf:34:18:b3:76:06:2f:ce:32:57:9b:59:5a:
         26:07:3e:cf:36:6e:11:30:26:1b:e4:61:d7:cf:45:7a:33:64:
         77:f3:02:22:85:e1:2e:2e:0c:6a:3b:3c:d0:80:41:eb:4b:07:
         f2:e8:9a:28:9e:ef:59:7b:c9:83:bd:f6:71:90:a0:5d:71:05:
         f7:82:2f:52:3c:0b:82:a4:f3:b9:6f:47:b3:49:aa:12:b2:f0:
         d2:5a:31:ee:3a:55:1b:d8:b4:26:41:84:03:e7:3a:e9:d5:e9:
         05:ac:2e:89:2f:c7:b6:7c:d4:bd:68:e1:06:68:0f:c0:15:84:
         81:4f:6f:a5:ea:9c:c0:fd:a6:64:30:07:21:cf:46:c7:a4:0e:
         56:e2:de:34:59:32:12:2a:6a:57:94:34:0a:74:5a:82:e6:c1:
         df:21:8a:46:4a:d3:52:48:c2:c7:59:b6:81:02:09:74:45:c6:
         ab:47:94:c0:7b:62:2c:a1:67:09:4a:7c:89:64:b3:9b:e0:f6:
         20:45:24:7b:0d:10:af:9c:d8:f8:86:89:3a:8c:83:fd:1c:97:
         9d:1a:8d:88:9e:3a:b1:71:05:6a:15:c7:39:32:ba:48:bf:4e:
         a0:0e:b3:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZofiKZu1mhQe3O0vEjAGZKIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzODUyMDFhMzNiNTI3YzY0NGFhZDVhZWNkMzc4MmM2YThj
MmY1MWYwHhcNMjUxMDI2MDgwMDQwWhcNMjUxMDI3MDgwMDQwWjAzMTEwLwYDVQQD
Eyg3ZTFlZjEzZWIzNjk1NjUzMjIyMTk0MzZhMzBmZGE5OTAwZmExMmNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA01SR1QHZHDiZTEVq5Ji7jazC8Dz+
Ir5Kcr+KuD6KXC4ft4+/MQI+BFYI8GgxTzsWZc4ov7dRVQN/8PdIF28u8YlweGP1
GPJSl/VjsQCpARfLBflKDSwS6Lu0ZD+dd85xlsVP/WBzCka2mHHlV9cTdjULmOE+
/1aPsE93eMyMBKJC4NRwaqaA3Z1b7vRGB1PFMZ8X1bCnqId8ivYaif/tM4A1VY5J
zeYzJqdVy+48zChbRvK9skrO+7pAr8OIJLghR3wgjkR1kuIXZvtm9POXNSqpEECN
/Gs/4ve7nRZpSfW4oUBOHW+/Uh8WhDIrC4sBIZJIR+fsEeLWlBr0LWCdLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH4e8T6zaVZTIiGUNqMP2pkA+hLKMB8GA1UdIwQY
MBaAFMOFIBoztSfGRKrVrs03gsaowvUfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzRVZ0dqTzFKOFpFcXRXdXpUZUN4cWpDOVI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS82ZDY2M2EtNDUzOC00Y2JmLWFkMWYt
ODU3NTgwZmM2MTY3LzEvdzRVZ0dqTzFKOFpFcXRXdXpUZUN4cWpDOVI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS82ZDY2M2EtNDUzOC00Y2JmLWFkMWYtODU3NTgwZmM2MTY3
LzEvdzRVZ0dqTzFKOFpFcXRXdXpUZUN4cWpDOVI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFdxERe0v
Rg+dHFJt66tyoGwOYe1YeE7PNBizdgYvzjJXm1laJgc+zzZuETAmG+Rh189FejNk
d/MCIoXhLi4Majs80IBB60sH8uiaKJ7vWXvJg732cZCgXXEF94IvUjwLgqTzuW9H
s0mqErLw0lox7jpVG9i0JkGEA+c66dXpBawuiS/HtnzUvWjhBmgPwBWEgU9vpeqc
wP2mZDAHIc9Gx6QOVuLeNFkyEipqV5Q0CnRagubB3yGKRkrTUkjCx1m2gQIJdEXG
q0eUwHtiLKFnCUp8iWSzm+D2IEUkew0Qr5zY+IaJOoyD/RyXnRqNiJ46sXEFahXH
OTK6SL9OoA6zsQ==
-----END CERTIFICATE-----
Generated at Sun Oct 26 11:16:36 2025 by rpki-client