Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/b165ca-2f33-4e8e-a896-cdaa581518f3/1/8WsoQW3b85-ySwmWaGrPrOdsmNU.mft
File:                     8WsoQW3b85-ySwmWaGrPrOdsmNU.mft (raw, json)
Hash identifier:          YbuR1e1VaokvkZxjDlX1NFi8Gtriopy9sep4eBHWOVY=
Subject key identifier:   AF:12:A2:6B:11:82:F0:42:97:62:8C:30:4D:3B:3F:91:0C:B3:B3:9B
Authority key identifier: F1:6B:28:41:6D:DB:F3:9F:B2:4B:09:96:68:6A:CF:AC:E7:6C:98:D5
Certificate issuer:       /CN=f16b28416ddbf39fb24b0996686acface76c98d5
Certificate serial:       019A725C7BEA04762B4FD12B70C664799ADE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8WsoQW3b85-ySwmWaGrPrOdsmNU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/b165ca-2f33-4e8e-a896-cdaa581518f3/1/8WsoQW3b85-ySwmWaGrPrOdsmNU.mft
Manifest number:          1722
Signing time:             Tue 11 Nov 2025 10:00:54 +0000
Manifest this update:     Tue 11 Nov 2025 10:00:54 +0000
Manifest next update:     Wed 12 Nov 2025 10:00:54 +0000
Files and hashes:         1: 6uJHb0n-o1Jmt4WfrkKYtugW_tA.roa (hash: oripnuB9VSq+/2+WmWeFeymLsX3aSd+Xhezj6MQbB30=)
                          2: 8WsoQW3b85-ySwmWaGrPrOdsmNU.crl (hash: d/RW6KY00EpTp29iJaB2PxdIA3AKN8yUMXYq0Kmo7uI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/b165ca-2f33-4e8e-a896-cdaa581518f3/1/8WsoQW3b85-ySwmWaGrPrOdsmNU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/b165ca-2f33-4e8e-a896-cdaa581518f3/1/8WsoQW3b85-ySwmWaGrPrOdsmNU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8WsoQW3b85-ySwmWaGrPrOdsmNU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 09:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:72:5c:7b:ea:04:76:2b:4f:d1:2b:70:c6:64:79:9a:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f16b28416ddbf39fb24b0996686acface76c98d5
        Validity
            Not Before: Nov 11 10:00:54 2025 GMT
            Not After : Nov 12 10:00:54 2025 GMT
        Subject: CN=af12a26b1182f04297628c304d3b3f910cb3b39b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:2f:69:98:18:2a:fc:ba:66:30:3b:3c:e3:b2:
                    20:33:63:ff:7b:f0:34:4b:9e:13:31:10:ad:bd:7f:
                    01:3b:d9:41:b5:2b:ab:cd:96:39:d5:7e:75:d1:26:
                    4f:ca:8c:dc:a3:b9:27:6d:9a:51:60:97:99:a2:30:
                    21:c1:23:f8:ae:26:d4:14:37:ad:2d:60:ba:48:d1:
                    03:4e:cc:32:37:dc:6e:aa:78:5b:3a:1f:4a:6d:24:
                    df:65:c1:67:8d:25:13:49:2d:70:ea:b4:d4:6d:92:
                    93:df:15:eb:e3:9b:1e:c7:6e:e6:22:a5:d4:43:1e:
                    09:84:20:42:0b:fc:66:98:91:66:ad:4e:e6:37:cb:
                    2d:19:e4:f5:6e:57:77:03:44:d6:a1:e8:6a:75:a8:
                    82:ae:92:3f:3d:e7:a8:bb:7e:0f:83:8a:d5:c6:c5:
                    b9:85:6e:b8:02:10:90:d2:8d:ae:fb:54:47:fe:0e:
                    da:32:1f:b7:d4:e8:c4:ad:09:1c:2b:90:ef:a7:e3:
                    e1:ae:a4:2a:94:b1:c8:19:51:4c:d9:a7:72:7e:fc:
                    da:2a:32:ed:a8:3f:14:88:b5:59:85:36:e1:97:66:
                    0b:ec:cd:c5:d1:91:41:e5:a8:2b:b7:44:b2:c9:a2:
                    1e:f4:e1:67:b7:4f:14:aa:ce:06:7a:f4:d3:55:91:
                    44:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:12:A2:6B:11:82:F0:42:97:62:8C:30:4D:3B:3F:91:0C:B3:B3:9B
            X509v3 Authority Key Identifier:
                keyid:F1:6B:28:41:6D:DB:F3:9F:B2:4B:09:96:68:6A:CF:AC:E7:6C:98:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8WsoQW3b85-ySwmWaGrPrOdsmNU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b165ca-2f33-4e8e-a896-cdaa581518f3/1/8WsoQW3b85-ySwmWaGrPrOdsmNU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b165ca-2f33-4e8e-a896-cdaa581518f3/1/8WsoQW3b85-ySwmWaGrPrOdsmNU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:a0:93:8e:6d:d8:e9:99:ee:23:6f:f2:0c:51:a3:7a:1b:3b:
         5e:1c:3c:ba:7c:9b:4e:12:74:de:98:39:84:fb:c4:9e:09:28:
         68:55:dd:34:71:9b:09:46:1c:83:6e:6d:4e:16:a1:84:76:53:
         2c:34:be:fd:6e:24:39:8d:55:67:e2:85:6e:04:94:14:d8:46:
         ea:e4:c4:9b:c7:2a:4c:89:65:75:31:61:22:72:13:dc:34:0b:
         1c:d9:a9:5c:ea:dc:64:5b:dd:e7:ef:44:f7:05:9a:7a:4c:75:
         30:33:75:8c:e6:15:b8:72:aa:7c:93:f3:d9:ad:c3:4a:aa:e4:
         78:97:1f:ba:05:06:28:a0:7f:1b:37:1b:3b:40:e4:c7:f5:a1:
         09:f9:f5:8e:69:10:9c:ab:b0:87:46:7a:21:78:e1:f7:b0:2a:
         02:5d:05:ec:ef:3e:84:56:12:c1:30:38:6e:ad:02:02:04:13:
         c6:ac:f4:fa:a9:e7:f6:7f:4c:10:71:54:e7:d1:8a:1f:ac:30:
         d9:1e:08:d9:4d:91:d4:c2:db:e8:7c:c2:bc:0e:69:b0:24:d7:
         c8:2a:fe:13:9a:a4:60:c4:b7:53:30:59:99:e9:40:44:cd:15:
         5e:9e:62:51:c9:f6:16:d9:80:bb:48:6b:54:a7:14:13:fe:7e:
         fd:8f:61:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:19:02 2025 by rpki-client