Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/37fb4a-5c96-4d17-86a0-ebb63a454a91/1/wcBezmyQitiIJRPaOiWhYHA7t_Y.mft
File:                     wcBezmyQitiIJRPaOiWhYHA7t_Y.mft (raw, json)
Hash identifier:          U73uYYDfB82lcd58RYL4b9dEyJTfuZdvN1lEpWD0DJI=
Subject key identifier:   3B:EB:93:73:07:BA:B3:5F:DD:17:52:6A:CC:4C:6F:21:6C:39:66:D3
Authority key identifier: C1:C0:5E:CE:6C:90:8A:D8:88:25:13:DA:3A:25:A1:60:70:3B:B7:F6
Certificate issuer:       /CN=c1c05ece6c908ad8882513da3a25a160703bb7f6
Certificate serial:       019A1AD00139B816DC2F7209F1E318EDEAA1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wcBezmyQitiIJRPaOiWhYHA7t_Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/37fb4a-5c96-4d17-86a0-ebb63a454a91/1/wcBezmyQitiIJRPaOiWhYHA7t_Y.mft
Manifest number:          16F3
Signing time:             Sat 25 Oct 2025 10:00:30 +0000
Manifest this update:     Sat 25 Oct 2025 10:00:30 +0000
Manifest next update:     Sun 26 Oct 2025 10:00:30 +0000
Files and hashes:         1: L5n__TlZWPdvDvLr4ZFidz4XLKs.roa (hash: joZuWv/Q4EyLrxkijZ/RW681SRLMu9NB8uvDRrrDNHk=)
                          2: wcBezmyQitiIJRPaOiWhYHA7t_Y.crl (hash: HN0hC/cwIO7TPRC6OV596uXdns0PRsa87FGImIyLM18=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/37fb4a-5c96-4d17-86a0-ebb63a454a91/1/wcBezmyQitiIJRPaOiWhYHA7t_Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/37fb4a-5c96-4d17-86a0-ebb63a454a91/1/wcBezmyQitiIJRPaOiWhYHA7t_Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wcBezmyQitiIJRPaOiWhYHA7t_Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 26 Oct 2025 08:33:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:1a:d0:01:39:b8:16:dc:2f:72:09:f1:e3:18:ed:ea:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c05ece6c908ad8882513da3a25a160703bb7f6
        Validity
            Not Before: Oct 25 10:00:30 2025 GMT
            Not After : Oct 26 10:00:30 2025 GMT
        Subject: CN=3beb937307bab35fdd17526acc4c6f216c3966d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:7c:09:6a:2b:ee:9c:99:5a:c0:7d:3d:22:f3:
                    ae:7f:5a:d2:8b:9d:d1:7a:c8:70:39:50:18:98:1f:
                    30:5f:9a:dc:9d:2b:06:aa:21:7a:e0:86:14:d9:19:
                    a1:5e:8a:8b:d1:d3:d4:b2:bb:19:d9:d8:26:25:e8:
                    ad:0c:d3:6b:68:d2:36:6d:15:93:88:64:5b:63:d3:
                    1c:33:59:e8:82:4b:74:ec:9a:f7:37:98:57:a7:e3:
                    b5:c9:50:71:53:4a:7d:d6:43:68:0e:51:70:22:6b:
                    f5:98:19:0c:c1:41:b7:5a:f2:27:a0:c9:85:ea:d8:
                    b6:2f:df:cd:99:9e:95:23:ce:4e:e5:2e:86:74:f5:
                    13:fc:5a:08:0c:80:a0:7f:38:c3:e4:12:88:bd:f6:
                    b6:87:6f:98:3f:b6:95:96:0d:25:b2:64:bf:c4:d7:
                    c6:5e:32:2c:3c:c1:a2:f5:ba:73:fd:75:39:88:6c:
                    49:71:9c:69:c5:e5:f2:5b:85:62:5e:11:fa:b2:44:
                    c6:12:91:95:44:85:cb:23:de:c1:ec:4c:f6:4d:b1:
                    88:8a:27:11:fa:42:56:e3:ac:4d:b9:9d:1a:a7:36:
                    da:4c:cc:a5:84:3a:ef:d3:d0:93:4e:f5:62:99:4c:
                    69:7b:a6:90:3d:8a:05:c3:28:2a:9f:ae:e8:c1:44:
                    a8:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:EB:93:73:07:BA:B3:5F:DD:17:52:6A:CC:4C:6F:21:6C:39:66:D3
            X509v3 Authority Key Identifier:
                keyid:C1:C0:5E:CE:6C:90:8A:D8:88:25:13:DA:3A:25:A1:60:70:3B:B7:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wcBezmyQitiIJRPaOiWhYHA7t_Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/37fb4a-5c96-4d17-86a0-ebb63a454a91/1/wcBezmyQitiIJRPaOiWhYHA7t_Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/37fb4a-5c96-4d17-86a0-ebb63a454a91/1/wcBezmyQitiIJRPaOiWhYHA7t_Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:9d:01:0c:53:8e:e5:e1:50:fb:62:79:70:09:f1:0a:78:b5:
         52:93:b9:bb:5a:09:84:6a:d1:09:3f:e6:e1:c8:47:53:cd:d5:
         af:ba:7c:6c:e8:48:94:49:3c:70:57:a2:09:49:e4:21:c7:f9:
         f0:18:4e:3c:e1:2c:a2:13:a6:c8:aa:e8:f0:83:1c:06:58:35:
         3e:e8:d0:f4:f7:46:4c:30:ac:10:c5:97:9a:2d:10:83:35:a2:
         6d:8c:12:f2:b1:30:a8:37:37:93:3d:19:77:fc:9e:f2:c1:cc:
         d2:a9:8f:3d:e6:51:47:4e:ce:af:21:3b:02:28:da:48:df:1b:
         7b:58:b7:bb:19:41:7b:7e:4c:b1:45:71:a4:89:db:0d:ff:37:
         70:a0:e4:8f:e5:60:de:76:8c:3a:ec:7d:07:78:57:1b:6b:06:
         3d:86:78:e4:f2:77:87:80:56:b8:4c:ee:2b:05:4f:85:c5:1e:
         9d:d0:6a:29:7e:1a:4a:f5:05:30:10:3e:58:1f:18:fd:f1:2b:
         36:62:78:96:10:f4:ef:d9:8d:cf:96:43:07:37:46:2a:05:19:
         06:fc:3a:0a:46:f7:8a:b7:48:ad:0a:ea:99:17:da:f8:86:7d:
         75:90:11:27:c6:44:5c:4e:34:04:af:67:73:2e:df:4d:44:5a:
         b3:0f:f6:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 13:39:20 2025 by rpki-client