Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/1adf3c-ba33-435b-a6d5-957aabbc8483/1/WpXS40Wh9Nqk7f58Bc5d92tZrPA.mft
File:                     WpXS40Wh9Nqk7f58Bc5d92tZrPA.mft (raw, json)
Hash identifier:          DH71mZjhqDYGQIKR+RUIHY7ZdZ3vYnUa8agTWZ8oxOc=
Subject key identifier:   1E:84:D2:7D:20:F0:82:22:4F:87:0C:49:F8:34:BD:D9:B2:03:6E:47
Authority key identifier: 5A:95:D2:E3:45:A1:F4:DA:A4:ED:FE:7C:05:CE:5D:F7:6B:59:AC:F0
Certificate issuer:       /CN=5a95d2e345a1f4daa4edfe7c05ce5df76b59acf0
Certificate serial:       0199A494D272F0B9FC019AA2CF93457F1D4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WpXS40Wh9Nqk7f58Bc5d92tZrPA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/1adf3c-ba33-435b-a6d5-957aabbc8483/1/WpXS40Wh9Nqk7f58Bc5d92tZrPA.mft
Manifest number:          09E4
Signing time:             Thu 02 Oct 2025 11:00:40 +0000
Manifest this update:     Thu 02 Oct 2025 11:00:40 +0000
Manifest next update:     Fri 03 Oct 2025 11:00:40 +0000
Files and hashes:         1: 13RrS0RVMNZjnoNzLeY0leATSKM.roa (hash: 5Kd668wao4EqEPYlsHp9hU5bq0vk1PZWy+Au8TDKmnI=)
                          2: WpXS40Wh9Nqk7f58Bc5d92tZrPA.crl (hash: 9SU+3n6hw1q+aResmih63CFWApS00XuAfPqCJ3dhfOo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:a4:94:d2:72:f0:b9:fc:01:9a:a2:cf:93:45:7f:1d:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a95d2e345a1f4daa4edfe7c05ce5df76b59acf0
        Validity
            Not Before: Oct  2 11:00:40 2025 GMT
            Not After : Oct  3 11:00:40 2025 GMT
        Subject: CN=1e84d27d20f082224f870c49f834bdd9b2036e47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:32:d2:0f:df:a4:0f:75:87:ab:fe:b2:ba:1d:
                    10:56:c8:95:45:7d:14:39:0b:e7:f4:c9:31:39:57:
                    d4:3b:e0:95:7a:45:42:39:b0:aa:8b:4f:a7:92:b1:
                    07:50:9d:7f:be:81:89:bf:10:0d:c7:4b:f0:3a:4a:
                    4d:78:6d:f4:e7:1a:69:0b:87:4e:4f:92:21:00:02:
                    96:7e:2a:f1:5c:2a:f0:b4:eb:80:3b:eb:66:12:5f:
                    08:53:84:72:08:72:c2:bd:2f:f2:f1:a5:09:8f:58:
                    d2:9a:d8:8e:13:ed:49:fc:44:69:29:8e:99:1e:29:
                    95:9f:62:21:88:a9:5f:34:d8:bf:9f:f5:9a:44:7d:
                    84:53:83:e9:3b:5e:d1:51:7a:69:ff:32:92:ce:83:
                    2e:df:db:82:73:f5:e6:ca:14:33:ec:6a:9c:33:2a:
                    55:43:39:41:05:23:a2:29:6e:18:72:38:40:79:80:
                    e2:30:78:8c:ef:f2:02:6e:9b:fa:55:3f:87:77:94:
                    84:0c:11:6e:3f:e1:0f:fb:ef:b4:bf:b6:76:d5:ac:
                    76:d2:9b:66:62:d1:8e:d4:0b:74:6e:59:40:b4:83:
                    4e:a2:d6:43:e4:70:40:b7:1a:58:24:29:e2:6b:34:
                    52:77:79:66:f0:67:ea:4f:98:bf:77:04:39:bf:79:
                    08:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:84:D2:7D:20:F0:82:22:4F:87:0C:49:F8:34:BD:D9:B2:03:6E:47
            X509v3 Authority Key Identifier:
                keyid:5A:95:D2:E3:45:A1:F4:DA:A4:ED:FE:7C:05:CE:5D:F7:6B:59:AC:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WpXS40Wh9Nqk7f58Bc5d92tZrPA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/1adf3c-ba33-435b-a6d5-957aabbc8483/1/WpXS40Wh9Nqk7f58Bc5d92tZrPA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/1adf3c-ba33-435b-a6d5-957aabbc8483/1/WpXS40Wh9Nqk7f58Bc5d92tZrPA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:67:19:b8:e2:3d:88:d0:f7:75:9e:16:9d:79:0f:f6:eb:e1:
         5c:35:0d:50:f4:29:8c:15:72:3a:15:50:87:11:42:7c:72:04:
         a5:ef:c2:48:95:1c:d2:c3:31:6a:f6:a6:c9:53:0c:35:22:88:
         3b:c5:64:b2:58:c0:45:5c:18:88:5b:24:72:be:64:8c:a9:f9:
         1d:c5:bf:be:b2:19:75:9e:d1:ba:96:14:38:8d:51:43:35:39:
         18:ec:c9:6b:a9:11:84:8e:89:6e:a3:29:d8:af:19:57:d5:7a:
         fb:a1:6d:76:4f:2b:d5:f4:10:26:9f:4a:0d:ac:5a:8c:01:aa:
         75:1e:b7:62:95:9f:46:b9:c9:20:df:4d:d6:6c:77:3a:a0:6a:
         27:0c:b4:fe:d4:85:03:f0:72:83:88:ef:da:8b:4f:3c:f9:f7:
         72:d8:ec:00:4d:77:c2:5c:ca:71:cc:a5:0e:42:d8:2a:08:b1:
         e8:6a:c4:ee:da:27:75:8c:68:a4:39:53:dd:b6:5e:1c:f3:f0:
         00:3b:af:7b:23:6e:f9:68:f3:d4:d3:f6:0a:e5:57:9e:2c:bb:
         29:c4:3a:6a:e9:06:c3:73:d7:a8:58:aa:8a:85:f1:4c:eb:50:
         c8:ca:23:44:1a:65:e2:1b:05:c4:ef:d8:d7:e9:4d:bc:f9:52:
         c9:d1:2b:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 12:10:41 2025 by rpki-client