Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/83f818-19c0-4702-83e5-d95636a7a664/1/WtikTa0xXyHqmS_G4QSCxB7N_PU.mft
File:                     WtikTa0xXyHqmS_G4QSCxB7N_PU.mft (raw, json)
Hash identifier:          a3Wl0pWVbUGwBw/j2nPqx+iNp868+7sZ0v3F2k3ZfJM=
Subject key identifier:   85:8B:E1:C0:E5:9C:AC:A4:0C:E0:E4:B4:F4:6E:5B:18:A5:92:4F:3A
Authority key identifier: 5A:D8:A4:4D:AD:31:5F:21:EA:99:2F:C6:E1:04:82:C4:1E:CD:FC:F5
Certificate issuer:       /CN=5ad8a44dad315f21ea992fc6e10482c41ecdfcf5
Certificate serial:       019A24793CCD1EC531848AB1B77C6FF7071B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WtikTa0xXyHqmS_G4QSCxB7N_PU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/83f818-19c0-4702-83e5-d95636a7a664/1/WtikTa0xXyHqmS_G4QSCxB7N_PU.mft
Manifest number:          0BF4
Signing time:             Mon 27 Oct 2025 07:01:56 +0000
Manifest this update:     Mon 27 Oct 2025 07:01:56 +0000
Manifest next update:     Tue 28 Oct 2025 07:01:56 +0000
Files and hashes:         1: WtikTa0xXyHqmS_G4QSCxB7N_PU.crl (hash: EQPmrt7RLNzNXFjSbuIq8pp/KhyHBiIxblMpkr1qAaI=)
                          2: msxG7fVlnDAYePROmUZc_iRkDYE.roa (hash: HIW6BTQ/XoS8mnCW6YgbllIH/uwqHf+PyB7dx5BzoNo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/83f818-19c0-4702-83e5-d95636a7a664/1/WtikTa0xXyHqmS_G4QSCxB7N_PU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/83f818-19c0-4702-83e5-d95636a7a664/1/WtikTa0xXyHqmS_G4QSCxB7N_PU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WtikTa0xXyHqmS_G4QSCxB7N_PU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Oct 2025 07:01:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:24:79:3c:cd:1e:c5:31:84:8a:b1:b7:7c:6f:f7:07:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ad8a44dad315f21ea992fc6e10482c41ecdfcf5
        Validity
            Not Before: Oct 27 07:01:56 2025 GMT
            Not After : Oct 28 07:01:56 2025 GMT
        Subject: CN=858be1c0e59caca40ce0e4b4f46e5b18a5924f3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:00:a3:98:39:54:a3:ae:e0:86:a9:54:e4:d0:
                    5a:07:37:a5:76:36:b6:27:56:79:29:bf:ac:d9:00:
                    5e:94:ba:30:a8:0d:0a:e7:16:0e:9a:d3:25:32:2d:
                    7b:e7:d1:d4:7e:2c:43:02:9f:2a:f8:f3:91:7b:95:
                    c4:66:62:22:15:8a:19:4f:31:2b:e2:b3:a4:dd:b5:
                    5e:6e:61:a1:7b:6c:e2:1d:1a:f7:33:f4:da:81:3d:
                    82:1b:1c:c3:27:0b:ee:36:ac:35:e9:0b:8e:9a:de:
                    3b:8f:68:89:e2:55:7b:fc:28:95:55:93:63:d2:99:
                    69:53:54:d1:4c:2b:a5:87:30:1a:b9:4b:a4:f6:92:
                    86:32:36:00:58:70:21:83:d5:5f:e5:1c:d6:1a:b3:
                    bb:7a:d5:b9:7e:13:a6:5a:ea:c9:7c:b1:03:9d:bc:
                    81:c6:ed:e8:df:7c:6e:62:1b:22:86:04:a2:e3:f7:
                    51:a0:77:f9:a6:7e:05:67:b5:94:2d:d3:81:03:17:
                    81:40:9c:c5:6b:4a:dc:f5:3c:07:c6:c1:2d:13:73:
                    f2:73:06:6d:de:f4:f3:59:35:8d:05:a4:08:1e:ad:
                    fe:26:c2:e9:5a:e6:08:1c:df:b0:a8:8d:5a:88:39:
                    d3:c8:0b:05:80:a6:ec:8f:ca:0c:19:96:51:80:bd:
                    f6:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:8B:E1:C0:E5:9C:AC:A4:0C:E0:E4:B4:F4:6E:5B:18:A5:92:4F:3A
            X509v3 Authority Key Identifier:
                keyid:5A:D8:A4:4D:AD:31:5F:21:EA:99:2F:C6:E1:04:82:C4:1E:CD:FC:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtikTa0xXyHqmS_G4QSCxB7N_PU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/83f818-19c0-4702-83e5-d95636a7a664/1/WtikTa0xXyHqmS_G4QSCxB7N_PU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/83f818-19c0-4702-83e5-d95636a7a664/1/WtikTa0xXyHqmS_G4QSCxB7N_PU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:69:65:5e:b2:c8:8d:d4:88:e7:34:53:57:11:1f:55:cb:cc:
         7a:c1:6c:51:ab:f6:3a:d0:0c:5b:99:d4:08:da:3b:da:82:e3:
         15:62:05:2f:d6:bc:ca:6b:41:88:f9:d1:07:7b:00:3d:91:8d:
         86:56:09:e2:b9:15:70:15:40:08:82:cf:3a:d7:5a:b2:a5:cd:
         b8:aa:19:b5:f6:df:b8:52:c3:b7:04:0d:df:7c:3b:1a:23:d7:
         43:43:dd:6b:bc:02:78:0c:0f:f5:af:8c:da:c1:d6:a4:52:1c:
         4c:44:04:b4:7b:5c:ca:22:c7:be:a9:82:0c:26:9b:e5:a4:4b:
         ce:4c:ca:2e:ab:15:5e:c5:e0:c2:bb:66:ec:cb:cb:a1:70:56:
         e7:7d:f3:19:77:d9:26:40:a4:f9:aa:32:d5:7c:22:9e:96:6c:
         8b:84:c6:d4:ca:98:92:f3:98:75:af:01:87:cc:ca:d4:4c:51:
         f4:be:ea:54:0d:4a:8e:83:f6:ac:30:31:bd:61:3e:13:69:2a:
         09:81:2d:dd:5b:45:95:9a:f7:c9:12:1e:ae:d0:a5:07:89:a1:
         b2:dc:3d:29:43:ea:9b:cc:17:27:4c:7c:c3:e9:c8:fa:22:c8:
         a7:f9:e2:a1:1b:51:94:75:00:7a:5a:49:bb:26:70:81:d1:25:
         0a:99:03:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:09:20 2025 by rpki-client