Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.mft
File:                     WtRDrRlESBQSLzsny5OlBavlB5k.mft (raw, json)
Hash identifier:          QEBNd3DGbeWW2agNvJztUQmSzSLgRwMNQFVX8TLXo78=
Subject key identifier:   84:F5:C3:75:BF:93:6F:4A:BD:BE:71:3C:53:9B:74:50:32:A8:4A:C2
Authority key identifier: 5A:D4:43:AD:19:44:48:14:12:2F:3B:27:CB:93:A5:05:AB:E5:07:99
Certificate issuer:       /CN=5ad443ad19444814122f3b27cb93a505abe50799
Certificate serial:       019A0ECC0F4826DA3952A8DF3DD4CE1B1F5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WtRDrRlESBQSLzsny5OlBavlB5k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.mft
Manifest number:          16EC
Signing time:             Thu 23 Oct 2025 02:00:45 +0000
Manifest this update:     Thu 23 Oct 2025 02:00:45 +0000
Manifest next update:     Fri 24 Oct 2025 02:00:45 +0000
Files and hashes:         1: EBp8FPomAjz-fJECFgdn5Kk0Sik.roa (hash: V1BbvemmFGDZNIpt/J1Q4nVP7R7H+EyQbSb8eICOYWQ=)
                          2: WtRDrRlESBQSLzsny5OlBavlB5k.crl (hash: ofgJ4W26RTxfXU96EeM1GOW8+kmz+d5UY/I24VoOYhA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WtRDrRlESBQSLzsny5OlBavlB5k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Oct 2025 02:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:0e:cc:0f:48:26:da:39:52:a8:df:3d:d4:ce:1b:1f:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ad443ad19444814122f3b27cb93a505abe50799
        Validity
            Not Before: Oct 23 02:00:45 2025 GMT
            Not After : Oct 24 02:00:45 2025 GMT
        Subject: CN=84f5c375bf936f4abdbe713c539b745032a84ac2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:0f:05:4a:21:bc:e0:16:0b:4d:bd:c8:64:48:
                    53:6d:3e:c6:56:9a:f6:af:2c:ea:ee:75:69:50:9a:
                    2c:1e:0c:c1:4f:47:d6:9f:e8:6f:ec:41:56:04:41:
                    a1:d2:08:21:16:50:d2:c1:80:a2:e9:da:7e:d4:8f:
                    93:d5:36:34:08:cd:48:05:9c:1f:33:b5:3e:d5:e2:
                    97:27:eb:39:ce:d5:b5:60:8c:d9:fe:48:5f:ae:f4:
                    6d:3a:23:ee:43:9a:22:ce:d9:d6:a5:36:76:12:40:
                    3a:24:7c:ed:dd:4d:6e:8d:48:ca:08:5b:61:ae:0f:
                    5b:7e:b9:55:5d:03:ca:31:a4:96:75:06:c9:d7:5a:
                    d1:3c:3e:86:a8:05:59:4c:2b:f0:cc:b8:96:b5:fb:
                    9b:34:17:bd:ef:57:9e:52:af:9e:40:bc:83:4d:f8:
                    5f:d4:67:19:1e:32:77:79:33:02:54:11:d7:3c:da:
                    33:ca:57:c4:7e:f2:15:58:9d:3a:b7:bb:26:36:83:
                    52:50:aa:ce:c6:42:9c:bd:de:5c:31:6d:8d:58:26:
                    b0:45:c4:0f:9a:0c:9c:a5:fb:c7:75:b5:cc:2d:32:
                    d4:8b:8e:54:3f:65:75:1f:c3:d0:95:71:3a:7c:ed:
                    b5:7c:ea:e7:92:d8:00:9c:84:23:aa:e5:e3:b6:72:
                    5f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:F5:C3:75:BF:93:6F:4A:BD:BE:71:3C:53:9B:74:50:32:A8:4A:C2
            X509v3 Authority Key Identifier:
                keyid:5A:D4:43:AD:19:44:48:14:12:2F:3B:27:CB:93:A5:05:AB:E5:07:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtRDrRlESBQSLzsny5OlBavlB5k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/5f8074-01ce-4cc4-b945-024e7257335f/1/WtRDrRlESBQSLzsny5OlBavlB5k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:3d:a1:cb:2f:a4:e4:39:c7:60:92:a0:5e:96:98:22:a0:ff:
         64:0e:2d:1d:b0:e8:82:d0:97:b0:ba:35:36:3c:af:38:8c:32:
         57:7d:93:08:4f:e7:d8:4e:fd:4a:26:ee:77:be:fa:01:47:cf:
         8a:df:04:fb:ee:be:de:38:db:20:38:48:2d:da:b2:a1:e4:ab:
         65:8d:48:c1:f0:52:12:14:11:d0:91:0a:b5:45:64:c7:3d:b4:
         7c:fc:78:bf:ca:d3:70:87:2c:34:43:7b:17:76:75:79:b4:b5:
         81:43:d0:1e:35:86:de:d0:e6:13:e3:35:f0:42:76:ff:f7:ad:
         7b:4b:1e:e3:01:75:87:74:71:1d:7e:47:0a:be:82:88:33:c5:
         6d:db:13:de:b0:0f:03:95:5a:26:a4:2a:6f:81:25:6d:39:9b:
         18:ff:d9:3e:db:30:d0:b0:44:a1:92:91:e1:c2:1c:7e:8d:71:
         85:9c:93:8f:44:64:96:e3:a1:2d:95:19:9a:15:bd:57:3d:c9:
         f7:c2:05:8a:c5:7a:93:96:04:a7:f0:bf:0d:74:e0:c2:30:59:
         10:75:37:4d:10:c9:e6:f3:51:21:4c:96:e6:de:f9:fc:e7:91:
         e5:f1:5b:5d:a8:02:dd:ed:e7:65:f1:bf:e0:15:9b:8b:8c:8b:
         4c:04:90:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoOzA9IJto5UqjfPdTOGx9dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhZDQ0M2FkMTk0NDQ4MTQxMjJmM2IyN2NiOTNhNTA1YWJl
NTA3OTkwHhcNMjUxMDIzMDIwMDQ1WhcNMjUxMDI0MDIwMDQ1WjAzMTEwLwYDVQQD
Eyg4NGY1YzM3NWJmOTM2ZjRhYmRiZTcxM2M1MzliNzQ1MDMyYTg0YWMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlg8FSiG84BYLTb3IZEhTbT7GVpr2
ryzq7nVpUJosHgzBT0fWn+hv7EFWBEGh0gghFlDSwYCi6dp+1I+T1TY0CM1IBZwf
M7U+1eKXJ+s5ztW1YIzZ/khfrvRtOiPuQ5oiztnWpTZ2EkA6JHzt3U1ujUjKCFth
rg9bfrlVXQPKMaSWdQbJ11rRPD6GqAVZTCvwzLiWtfubNBe971eeUq+eQLyDTfhf
1GcZHjJ3eTMCVBHXPNozylfEfvIVWJ06t7smNoNSUKrOxkKcvd5cMW2NWCawRcQP
mgycpfvHdbXMLTLUi45UP2V1H8PQlXE6fO21fOrnktgAnIQjquXjtnJfNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIT1w3W/k29Kvb5xPFObdFAyqErCMB8GA1UdIwQY
MBaAFFrUQ60ZREgUEi87J8uTpQWr5QeZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3RSRHJSbEVTQlFTTHpzbnk1T2xCYXZsQjVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi81ZjgwNzQtMDFjZS00Y2M0LWI5NDUt
MDI0ZTcyNTczMzVmLzEvV3RSRHJSbEVTQlFTTHpzbnk1T2xCYXZsQjVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi81ZjgwNzQtMDFjZS00Y2M0LWI5NDUtMDI0ZTcyNTczMzVm
LzEvV3RSRHJSbEVTQlFTTHpzbnk1T2xCYXZsQjVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXz2hyy+k
5DnHYJKgXpaYIqD/ZA4tHbDogtCXsLo1NjyvOIwyV32TCE/n2E79Sibud776AUfP
it8E++6+3jjbIDhILdqyoeSrZY1IwfBSEhQR0JEKtUVkxz20fPx4v8rTcIcsNEN7
F3Z1ebS1gUPQHjWG3tDmE+M18EJ2//ete0se4wF1h3RxHX5HCr6CiDPFbdsT3rAP
A5VaJqQqb4ElbTmbGP/ZPtsw0LBEoZKR4cIcfo1xhZyTj0RkluOhLZUZmhW9Vz3J
98IFisV6k5YEp/C/DXTgwjBZEHU3TRDJ5vNRIUyW5t75/OeR5fFbXagC3e3nZfG/
4BWbi4yLTASQVg==
-----END CERTIFICATE-----
Generated at Thu Oct 23 10:59:21 2025 by rpki-client