Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.mft
File:                     wtIegEq3cTrXh33eYDqngksxmDw.mft (raw, json)
Hash identifier:          ujfyNTk5Tac/J2cejkDSmxA7TdZB6oWdzYnD1hH3OV8=
Subject key identifier:   14:C8:2B:86:58:37:D7:2C:B6:5F:38:D6:0C:99:62:FC:BF:DF:9F:9A
Authority key identifier: C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C
Certificate issuer:       /CN=c2d21e804ab7713ad7877dde603aa7824b31983c
Certificate serial:       019A1D6392DC20F1F1BB7A7C355B7E5B1CC1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.mft
Manifest number:          1066
Signing time:             Sat 25 Oct 2025 22:00:56 +0000
Manifest this update:     Sat 25 Oct 2025 22:00:56 +0000
Manifest next update:     Sun 26 Oct 2025 22:00:56 +0000
Files and hashes:         1: 6npNfqw9ft3wFBb5k5d8Au1GyrU.roa (hash: Ypl6gLmfJjGNPDL8Gk8ZFTBrn9giPszXF7Ziq9N8zCY=)
                          2: CEHno33Cl7h0GLAM4p0jfcTuU2k.roa (hash: VzZMvgTQCr8mQ/IevQojqSyjWV0o3WsjpJkJUVzQ2fo=)
                          3: F0e-LrOaO1fC5d8GXQ9bEeDZ160.roa (hash: cofTGB9X2CyIcikGAWppFcO24T6sgvWIjXIVxAl57xQ=)
                          4: GB4vtqTXSwKp7zeWzOQndrqFgF8.roa (hash: rdiyJfrKTAJ+PqJC+r6+QSHIQKbyvYvJTxSXGGM5e8w=)
                          5: GeAJ1HW4BIewoLPfGbb-SsL5NGw.roa (hash: srwRADwGDIIx52WT+/n/TTLrhpUiRbeWdmuzYXw/VCw=)
                          6: HGLfNFEmq1zoGMYRZBEFVC-KI2E.roa (hash: FKMG8ZBG6AFoA3ZFzEjcDqb09W6tPLhjGkfNe7kPOX4=)
                          7: JN30kUlZb2UdsgE-OutzbLQiERo.roa (hash: B/Z1tvVR2z8KZUGUWDKLU3ou6I+OjR3sN2Q9pxieTbk=)
                          8: biJknYRjE5L_jTv2KpvNG71JuZs.roa (hash: HCdhdiyjdtaidQONiCaAjw0Va1l2ztmngnp9upg/BOo=)
                          9: cMyuoWOy66eDKnjdJCEfhSkyz1E.roa (hash: LOQsteLks/Yul4nf8jy2hWFak5manC4iYDuO7o5PTtg=)
                          10: dxFo2JNSLNyFjO0-WsCs0C6Hof0.roa (hash: NmFePRA7yHk29wTet83LObHlNy/GZGPfuri37nzr9Xk=)
                          11: hdNNHQIFwnpnxNggYxU1p6Z-XGk.roa (hash: tOBVPWHOBl8156ZGKWKuty1/zjQtgPwsgL3f1n3MYGU=)
                          12: lWWzD8KpiSRDu-3ZBZSl7nX6Jts.roa (hash: 1vMZkkbIrJFEhAGk+wrLpatP/TeRYU6mNHkV++RVOvk=)
                          13: nq9QkGdX68nm-XUKViIxXutv5p0.roa (hash: LYeY4Ewyqeshu3FPO2U3xARlcYpAxYT/ihB3h+fhL+8=)
                          14: o0w1bPk9yQkEzOmquHjyTCzVPsc.roa (hash: m8T06/6PXu8/epS4UvU7PZ+M0wtlNs/1xaD5zm6hoAE=)
                          15: uZxgwvEf9WeuGM60Zi1VK8Mj4UI.roa (hash: 33y4OizHoHywglDgbvg5deRkLMeifLFTIVE+wULlWa4=)
                          16: vxkpUFyY_pV46Dy2vccW_kFg3Xg.roa (hash: qhf8yhleIujtWTxbbg63MczcaiHWwXzoRrg7MjpLcgQ=)
                          17: wtIegEq3cTrXh33eYDqngksxmDw.crl (hash: NV6/2wVVeOrssxz8efLKi9Y3UVShYokmEv4jRS14K4w=)
                          18: wwFX4PAqfUeMNXpGS3KNseh4ppg.roa (hash: OLlfS0/X+1Yl71pRy+nk3a/H1A/qBK8IAfXsmm/hZsc=)
                          19: xvP6wfN1chd5lcSu0kSVzIHiAYc.roa (hash: U1i9qRkMcaN/Y9oNXvskXI16N9SXKYnzmsetq5cXBYI=)
                          20: z9W-SXWXNvPf50hBoKJTZsS-x88.roa (hash: Pj96ONEJXoTrBWw/wBWoBoF3HEpksk4ZBOjXYOlm2eQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 26 Oct 2025 19:59:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:1d:63:92:dc:20:f1:f1:bb:7a:7c:35:5b:7e:5b:1c:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2d21e804ab7713ad7877dde603aa7824b31983c
        Validity
            Not Before: Oct 25 22:00:56 2025 GMT
            Not After : Oct 26 22:00:56 2025 GMT
        Subject: CN=14c82b865837d72cb65f38d60c9962fcbfdf9f9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:79:f0:e8:76:53:de:20:6a:70:d6:21:b1:30:
                    14:dd:05:74:7f:61:a0:40:f9:6b:f8:85:2b:8e:ce:
                    34:22:bf:db:71:9c:09:fb:ef:1d:df:3c:65:78:22:
                    8e:de:27:32:3d:e9:9e:bc:a2:aa:ac:66:04:bd:0b:
                    a7:59:c2:1b:e1:51:cc:cf:63:66:48:4e:51:24:6b:
                    10:87:e1:a5:30:4a:4f:7f:bd:50:5d:c4:84:a2:98:
                    26:81:ca:ba:c7:22:b9:e8:a5:75:9e:54:64:7f:bd:
                    e7:32:22:1a:b8:ec:f3:07:53:2d:8b:79:92:9d:72:
                    00:f2:9a:f1:ad:85:0d:1c:6d:f0:c9:5a:41:80:49:
                    c3:90:b5:ae:32:e2:9d:67:b9:3e:4f:95:5f:11:05:
                    31:85:8a:21:47:58:62:00:fb:16:84:0f:b9:28:97:
                    a2:18:f6:3c:e4:83:86:5f:71:df:b8:57:0b:6e:f9:
                    9e:57:ac:62:82:20:ac:8b:07:f2:8d:35:c6:ad:93:
                    37:c9:96:81:ff:c6:6e:64:1d:97:5b:3e:40:8c:b9:
                    5b:0c:4d:a9:42:fd:53:8e:61:c2:5f:ee:ee:c4:d6:
                    00:d5:2b:f8:8f:7a:85:14:46:a4:29:f1:d8:ba:69:
                    c5:36:c6:12:9c:b1:48:b4:a1:03:73:ac:ab:da:7e:
                    20:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:C8:2B:86:58:37:D7:2C:B6:5F:38:D6:0C:99:62:FC:BF:DF:9F:9A
            X509v3 Authority Key Identifier:
                keyid:C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:29:8b:63:ff:52:e4:44:22:1f:46:d8:04:c2:79:66:ea:d7:
         d0:5e:02:66:4d:2a:61:ce:9a:49:f1:0d:55:4f:86:ef:f9:13:
         55:66:14:c3:77:99:96:38:bf:76:f5:0e:ad:06:a2:47:98:05:
         bd:9b:79:16:6a:7f:90:47:73:69:52:11:81:bc:a6:fc:1d:ec:
         ac:d1:90:42:e6:c3:23:4b:12:80:e8:82:55:05:b5:0c:4b:d3:
         8a:58:be:b4:47:b0:32:c1:64:03:58:8c:7c:f3:82:64:62:33:
         82:d3:4e:63:52:80:9b:05:a4:d3:70:21:51:4e:2d:00:f8:de:
         de:14:e5:c7:83:10:7f:bc:44:60:96:cf:0b:ec:6d:6c:10:50:
         a8:e1:92:a7:ac:41:98:3e:62:65:d6:94:d1:41:e7:a4:1d:04:
         5d:c9:b1:b2:c5:8c:1a:cc:5c:c5:2e:90:c2:ba:18:43:84:3d:
         48:c9:1d:f3:9c:85:ba:28:54:28:a4:2e:27:05:79:d3:8e:ca:
         b5:ac:c3:e6:bf:63:4e:6e:aa:74:e8:e1:b5:6b:56:d6:71:89:
         ba:0f:86:8b:c0:8e:52:10:60:ed:bd:77:2e:de:fe:17:ad:1b:
         a9:3b:7f:fa:98:db:f3:66:88:e3:36:4d:ef:c2:74:9b:dd:b3:
         42:8d:69:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 02:59:36 2025 by rpki-client