Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/a9bfb5-162d-4c7e-b700-191b2ae3fa5a/1/wFlbbIrobPkGmro-um3fKmgjfwg.mft
File:                     wFlbbIrobPkGmro-um3fKmgjfwg.mft (raw, json)
Hash identifier:          I3WuIYlHsW4mRiKMHjFTVOHFlrkVZqrewqW4U7LWZRY=
Subject key identifier:   F9:40:B8:6E:79:80:EC:54:88:DD:F1:77:34:A4:ED:86:CF:7A:B8:3C
Authority key identifier: C0:59:5B:6C:8A:E8:6C:F9:06:9A:BA:3E:BA:6D:DF:2A:68:23:7F:08
Certificate issuer:       /CN=c0595b6c8ae86cf9069aba3eba6ddf2a68237f08
Certificate serial:       019A21ADE85474592DD9D59F4F48026A1068
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wFlbbIrobPkGmro-um3fKmgjfwg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/a9bfb5-162d-4c7e-b700-191b2ae3fa5a/1/wFlbbIrobPkGmro-um3fKmgjfwg.mft
Manifest number:          06A1
Signing time:             Sun 26 Oct 2025 18:00:36 +0000
Manifest this update:     Sun 26 Oct 2025 18:00:36 +0000
Manifest next update:     Mon 27 Oct 2025 18:00:36 +0000
Files and hashes:         1: 8UgkBAZONepNyI81FukUfi25Kao.roa (hash: rpUHlCnR+nUi3dHMj1nsfDs3V156wUfOtUa+u9zdDrQ=)
                          2: wFlbbIrobPkGmro-um3fKmgjfwg.crl (hash: SOcupwfHOqwUUmV07foTxT1le/MNc1qhkf9XCOLnUG0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/a9bfb5-162d-4c7e-b700-191b2ae3fa5a/1/wFlbbIrobPkGmro-um3fKmgjfwg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/a9bfb5-162d-4c7e-b700-191b2ae3fa5a/1/wFlbbIrobPkGmro-um3fKmgjfwg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wFlbbIrobPkGmro-um3fKmgjfwg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Oct 2025 14:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:21:ad:e8:54:74:59:2d:d9:d5:9f:4f:48:02:6a:10:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0595b6c8ae86cf9069aba3eba6ddf2a68237f08
        Validity
            Not Before: Oct 26 18:00:36 2025 GMT
            Not After : Oct 27 18:00:36 2025 GMT
        Subject: CN=f940b86e7980ec5488ddf17734a4ed86cf7ab83c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:aa:97:01:5f:45:60:54:05:f2:02:56:fc:41:
                    26:ee:23:13:b6:17:70:3d:fc:e9:aa:66:a7:c9:25:
                    8a:fb:ad:8d:2e:bd:34:a6:1c:c7:dc:c1:af:aa:7f:
                    33:12:4c:1b:19:54:c7:3b:b8:81:c9:70:9a:5e:a3:
                    a0:72:f1:8a:8e:be:67:a3:15:cb:e0:3d:ee:0a:76:
                    9c:4b:cc:ca:b4:b9:2b:ca:53:3b:47:95:85:47:2c:
                    32:ad:a1:dc:a9:96:b3:22:20:56:82:48:45:38:8b:
                    e1:a1:ec:dc:a8:6b:2a:df:18:94:b7:89:95:d8:5f:
                    f3:95:29:52:b5:55:15:13:17:d0:44:f8:f3:cc:19:
                    33:88:09:54:37:4e:ed:d7:e7:01:5f:95:c7:e8:05:
                    f8:de:92:84:0d:17:23:5f:ab:80:dd:4d:b7:83:dc:
                    18:9c:e1:3c:88:f3:00:78:ed:c6:d2:f8:65:46:72:
                    92:1a:2c:e9:7e:5a:6b:34:26:c1:e3:b9:8a:35:a7:
                    58:26:d4:79:2a:2a:9a:49:8a:ad:2d:b1:d1:df:3f:
                    72:e0:e3:66:1a:24:7a:1e:a5:b0:55:f3:c1:f1:84:
                    31:7e:f1:74:34:83:e9:95:9a:d8:5e:ac:a2:34:64:
                    1a:2a:4f:00:11:f8:f3:dc:67:b4:dd:74:74:b4:48:
                    39:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:40:B8:6E:79:80:EC:54:88:DD:F1:77:34:A4:ED:86:CF:7A:B8:3C
            X509v3 Authority Key Identifier:
                keyid:C0:59:5B:6C:8A:E8:6C:F9:06:9A:BA:3E:BA:6D:DF:2A:68:23:7F:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wFlbbIrobPkGmro-um3fKmgjfwg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a9bfb5-162d-4c7e-b700-191b2ae3fa5a/1/wFlbbIrobPkGmro-um3fKmgjfwg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a9bfb5-162d-4c7e-b700-191b2ae3fa5a/1/wFlbbIrobPkGmro-um3fKmgjfwg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:98:61:bc:b1:c0:7f:9b:1f:cb:4e:aa:25:48:bd:16:3a:ef:
         a7:f9:a5:7f:e5:01:01:24:2d:20:95:23:7d:d7:37:f9:f4:31:
         41:b4:a3:4c:0b:a6:aa:74:26:21:08:da:7a:5d:7e:67:2c:9f:
         25:90:07:64:55:89:09:0c:19:49:83:2d:1e:18:77:cd:27:84:
         74:d2:09:3e:78:77:0f:d0:87:b2:d5:43:a5:46:06:40:c3:da:
         b7:80:17:de:33:cc:d4:c6:04:f8:17:88:9c:79:93:44:34:39:
         12:27:b5:05:b1:98:5a:89:97:ae:7b:3e:e9:42:5d:d2:0e:b5:
         72:98:81:60:95:28:e4:95:d2:72:33:33:4b:06:ea:b9:80:df:
         6d:7b:a8:39:85:d2:60:33:80:f2:26:8f:01:96:32:0a:cd:82:
         3c:4d:e2:e5:80:89:da:69:cf:66:14:c4:30:0e:0f:8d:28:e2:
         82:45:48:bd:84:45:02:6b:ef:3e:23:92:88:e3:fa:82:d5:c6:
         cb:e1:a1:18:5d:a6:70:08:df:23:19:ab:21:50:ee:ad:2f:44:
         bf:45:67:47:6b:f5:3f:ea:24:cc:b3:a9:71:01:e8:40:93:cb:
         19:ae:e8:ea:7e:6a:7e:17:01:60:72:84:90:78:22:1c:78:00:
         b7:41:a3:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 22:31:14 2025 by rpki-client