Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.mft
File:                     WhsazyJvPC_8McHrK2pRlLULUvQ.mft (raw, json)
Hash identifier:          kUPEtP2zqLwnR/2z566CbIt+VzvOVWmvtng8/fBMJ9g=
Subject key identifier:   7C:19:97:46:F7:43:0B:BC:FC:88:EE:8F:7E:5F:D7:3B:0E:2C:C7:B6
Authority key identifier: 5A:1B:1A:CF:22:6F:3C:2F:FC:31:C1:EB:2B:6A:51:94:B5:0B:52:F4
Certificate issuer:       /CN=5a1b1acf226f3c2ffc31c1eb2b6a5194b50b52f4
Certificate serial:       019A228A2EFE1C6D4C6A7A8458BFC3797553
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WhsazyJvPC_8McHrK2pRlLULUvQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.mft
Manifest number:          1688
Signing time:             Sun 26 Oct 2025 22:01:12 +0000
Manifest this update:     Sun 26 Oct 2025 22:01:12 +0000
Manifest next update:     Mon 27 Oct 2025 22:01:12 +0000
Files and hashes:         1: StCabivgvIyHuO75rSeb1s6xEVs.roa (hash: RRQXRwYuo2mU1htEhpek7hE+ZEmIuqOlTMtqEPaKMPA=)
                          2: WhsazyJvPC_8McHrK2pRlLULUvQ.crl (hash: xd3k7HQpsdp+ebafoKVP67NMRXTXybN2+7KE3lkac0o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WhsazyJvPC_8McHrK2pRlLULUvQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Oct 2025 19:48:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:22:8a:2e:fe:1c:6d:4c:6a:7a:84:58:bf:c3:79:75:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a1b1acf226f3c2ffc31c1eb2b6a5194b50b52f4
        Validity
            Not Before: Oct 26 22:01:12 2025 GMT
            Not After : Oct 27 22:01:12 2025 GMT
        Subject: CN=7c199746f7430bbcfc88ee8f7e5fd73b0e2cc7b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:e6:60:2a:4e:c9:7a:03:f1:e4:ff:0b:20:cb:
                    ab:92:59:98:92:43:0b:f3:b9:2e:28:21:57:e7:41:
                    f4:f8:88:7b:9b:ad:b3:41:40:11:1c:27:b9:f0:62:
                    c4:21:60:fd:fb:7e:de:be:5e:be:17:9f:c0:88:40:
                    40:5c:59:81:29:e7:7e:37:03:81:ba:bc:b7:9e:8f:
                    57:81:3c:6a:d1:06:6f:19:e6:f8:a2:64:bb:fb:10:
                    7b:95:3e:03:e4:05:23:43:8f:d4:c1:25:d7:06:80:
                    37:9c:5b:af:27:5c:14:47:dd:03:49:b1:3e:5a:8e:
                    3a:db:28:18:bb:fe:c4:06:50:25:4e:95:65:bd:0a:
                    17:f5:3a:52:18:b5:7e:6d:82:26:bf:43:95:fd:14:
                    9f:7a:18:04:15:14:36:f1:5f:c5:39:5a:60:cf:c5:
                    fb:b7:9a:c2:c5:a1:f3:70:05:02:14:0f:cc:b8:37:
                    54:68:f7:44:9d:fd:86:c5:d6:3c:1e:d5:20:f6:3c:
                    a5:74:19:60:94:c4:c0:4a:6f:85:d3:e6:5b:0d:bd:
                    a8:37:12:b8:3c:a4:4b:0f:64:dd:85:f5:4a:65:22:
                    06:45:71:de:cb:1f:5c:c4:43:42:64:c3:95:7e:4c:
                    e6:de:17:c2:fa:b8:dc:b2:a3:40:05:32:f5:49:9d:
                    61:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:19:97:46:F7:43:0B:BC:FC:88:EE:8F:7E:5F:D7:3B:0E:2C:C7:B6
            X509v3 Authority Key Identifier:
                keyid:5A:1B:1A:CF:22:6F:3C:2F:FC:31:C1:EB:2B:6A:51:94:B5:0B:52:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WhsazyJvPC_8McHrK2pRlLULUvQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/23b5f9-8880-4b54-ad08-731ddb1c07ed/1/WhsazyJvPC_8McHrK2pRlLULUvQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:51:62:51:90:1e:b6:90:35:c9:8e:d7:a3:cc:57:67:2a:86:
         ac:b9:da:3b:2f:b9:01:14:f6:fa:f7:e1:17:02:59:7f:a4:71:
         31:07:5b:3d:4c:82:da:fc:be:83:41:d9:7c:38:91:e1:93:8a:
         c4:86:f3:8b:8b:62:e3:07:64:3b:a8:a9:60:e0:40:85:79:51:
         a7:0b:c5:83:30:11:b8:32:92:bc:ad:8c:4c:d9:00:66:09:a5:
         67:0e:b5:f8:18:4a:ea:1c:71:51:50:89:ed:2d:96:e9:55:26:
         dd:d3:88:44:34:3b:26:9a:88:ad:cb:30:d0:95:17:1e:eb:3d:
         fd:94:2c:6b:8b:ba:0b:b3:12:1d:57:06:9e:46:fb:d7:81:63:
         fe:61:90:2a:78:99:cb:aa:a6:27:ad:2a:f9:b0:31:82:84:2b:
         1a:6d:dc:91:40:77:29:84:98:98:f2:9c:33:c7:76:f6:e9:5c:
         01:b3:c4:98:e9:ca:1c:2f:70:37:36:d2:26:7e:89:3d:63:fe:
         6f:f5:cb:59:c5:2d:2a:2e:93:4e:97:35:a8:d0:74:fd:be:3c:
         24:11:f9:51:0f:39:1b:b3:db:4c:b8:de:dc:c1:86:4d:26:d9:
         93:38:20:54:93:2d:8f:37:ac:57:d5:66:9b:40:77:21:95:88:
         6e:b8:d9:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoiii7+HG1ManqEWL/DeXVTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhMWIxYWNmMjI2ZjNjMmZmYzMxYzFlYjJiNmE1MTk0YjUw
YjUyZjQwHhcNMjUxMDI2MjIwMTEyWhcNMjUxMDI3MjIwMTEyWjAzMTEwLwYDVQQD
Eyg3YzE5OTc0NmY3NDMwYmJjZmM4OGVlOGY3ZTVmZDczYjBlMmNjN2I2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1+ZgKk7JegPx5P8LIMurklmYkkML
87kuKCFX50H0+Ih7m62zQUARHCe58GLEIWD9+37evl6+F5/AiEBAXFmBKed+NwOB
ury3no9XgTxq0QZvGeb4omS7+xB7lT4D5AUjQ4/UwSXXBoA3nFuvJ1wUR90DSbE+
Wo462ygYu/7EBlAlTpVlvQoX9TpSGLV+bYImv0OV/RSfehgEFRQ28V/FOVpgz8X7
t5rCxaHzcAUCFA/MuDdUaPdEnf2GxdY8HtUg9jyldBlglMTASm+F0+ZbDb2oNxK4
PKRLD2TdhfVKZSIGRXHeyx9cxENCZMOVfkzm3hfC+rjcsqNABTL1SZ1h2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHwZl0b3Qwu8/Ijuj35f1zsOLMe2MB8GA1UdIwQY
MBaAFFobGs8ibzwv/DHB6ytqUZS1C1L0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2hzYXp5SnZQQ184TWNIcksycFJsTFVMVXZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS8yM2I1ZjktODg4MC00YjU0LWFkMDgt
NzMxZGRiMWMwN2VkLzEvV2hzYXp5SnZQQ184TWNIcksycFJsTFVMVXZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS8yM2I1ZjktODg4MC00YjU0LWFkMDgtNzMxZGRiMWMwN2Vk
LzEvV2hzYXp5SnZQQ184TWNIcksycFJsTFVMVXZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJVFiUZAe
tpA1yY7Xo8xXZyqGrLnaOy+5ART2+vfhFwJZf6RxMQdbPUyC2vy+g0HZfDiR4ZOK
xIbzi4ti4wdkO6ipYOBAhXlRpwvFgzARuDKSvK2MTNkAZgmlZw61+BhK6hxxUVCJ
7S2W6VUm3dOIRDQ7JpqIrcsw0JUXHus9/ZQsa4u6C7MSHVcGnkb714Fj/mGQKniZ
y6qmJ60q+bAxgoQrGm3ckUB3KYSYmPKcM8d29ulcAbPEmOnKHC9wNzbSJn6JPWP+
b/XLWcUtKi6TTpc1qNB0/b48JBH5UQ85G7PbTLje3MGGTSbZkzggVJMtjzesV9Vm
m0B3IZWIbrjZPQ==
-----END CERTIFICATE-----
Generated at Mon Oct 27 04:37:37 2025 by rpki-client