Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/327952-4c66-4b95-b6de-43118e496d40/1/wtgszwyN6n1_atcujmJGLXviDVY.mft
File:                     wtgszwyN6n1_atcujmJGLXviDVY.mft (raw, json)
Hash identifier:          VCnsn1QMePD1QUtSZ4y8fZNX80oMk8Hgy7UCLSxGPDI=
Subject key identifier:   1A:A6:CB:39:D8:F2:80:59:BA:7C:9D:4E:CE:36:96:29:5C:9B:D6:6E
Authority key identifier: C2:D8:2C:CF:0C:8D:EA:7D:7F:6A:D7:2E:8E:62:46:2D:7B:E2:0D:56
Certificate issuer:       /CN=c2d82ccf0c8dea7d7f6ad72e8e62462d7be20d56
Certificate serial:       019A22C0B1DD9B6DFA63C6CFFF74AFF9BA33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wtgszwyN6n1_atcujmJGLXviDVY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/327952-4c66-4b95-b6de-43118e496d40/1/wtgszwyN6n1_atcujmJGLXviDVY.mft
Manifest number:          16FE
Signing time:             Sun 26 Oct 2025 23:00:45 +0000
Manifest this update:     Sun 26 Oct 2025 23:00:45 +0000
Manifest next update:     Mon 27 Oct 2025 23:00:45 +0000
Files and hashes:         1: 56E2eRNFxzpXqTECZSNhq9NrPOQ.roa (hash: kVqvgKF+nZSGal/AwDKY90LYsegDO41+Dxp8TZ0XdP8=)
                          2: JtbkknZoz-ZpYkGR5Faik_dT6m8.roa (hash: CKgz0QGH5sNSVcZST2h0jpMtQH08uuEFFd8ZyzC9G3o=)
                          3: ltRYivrHDrWNdxne_A9FIv1LJlY.roa (hash: qB1Eut1IyAFg4Lz5YzqH97WbuLNnEkbs/hF3c3T/wFo=)
                          4: wtgszwyN6n1_atcujmJGLXviDVY.crl (hash: FldCo38rlSS/KcEODYV2Fb+Hrq9UwQ+R6KARG8NAOWU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/327952-4c66-4b95-b6de-43118e496d40/1/wtgszwyN6n1_atcujmJGLXviDVY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/327952-4c66-4b95-b6de-43118e496d40/1/wtgszwyN6n1_atcujmJGLXviDVY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wtgszwyN6n1_atcujmJGLXviDVY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Oct 2025 23:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:22:c0:b1:dd:9b:6d:fa:63:c6:cf:ff:74:af:f9:ba:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2d82ccf0c8dea7d7f6ad72e8e62462d7be20d56
        Validity
            Not Before: Oct 26 23:00:45 2025 GMT
            Not After : Oct 27 23:00:45 2025 GMT
        Subject: CN=1aa6cb39d8f28059ba7c9d4ece3696295c9bd66e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:6f:05:a7:a9:03:9c:6d:73:33:08:11:49:53:
                    22:04:dd:5b:cc:40:05:68:94:3e:15:c3:a7:9b:d3:
                    ab:37:02:ba:56:de:78:a1:d2:45:ab:67:7d:62:df:
                    2a:41:14:81:d6:0b:ae:18:0c:10:80:87:73:fd:ef:
                    61:6f:16:69:83:6d:da:e4:39:6a:91:f4:75:1d:80:
                    a2:ac:b0:ad:95:f7:57:00:6c:09:06:23:d6:b8:25:
                    c2:9a:61:c9:59:ab:86:6c:30:16:38:43:7d:77:94:
                    f2:f7:33:e2:d1:f2:b0:89:fb:b2:76:5f:50:53:e6:
                    bb:a8:72:a1:fd:df:4c:70:c9:7d:62:95:b7:e3:06:
                    8b:d1:d2:47:2a:90:1b:c9:28:6c:3c:86:2b:2b:45:
                    18:4e:97:cd:9c:14:79:86:e4:b9:a8:40:46:e3:82:
                    95:8b:aa:5f:0b:64:bf:2b:9f:bc:7b:61:19:62:a9:
                    25:59:09:1c:d2:e8:7a:34:2e:e7:88:b0:95:61:e3:
                    2f:30:34:5a:93:54:8c:fd:a5:d0:d3:ef:8b:4f:cd:
                    d3:ab:9d:c8:b0:85:5b:53:71:49:a3:1e:a1:7e:af:
                    e6:7f:4a:b8:70:a2:8d:b5:bd:6e:0e:de:35:82:44:
                    cd:39:cb:7e:11:b5:d9:f4:71:73:be:43:82:cb:6a:
                    17:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:A6:CB:39:D8:F2:80:59:BA:7C:9D:4E:CE:36:96:29:5C:9B:D6:6E
            X509v3 Authority Key Identifier:
                keyid:C2:D8:2C:CF:0C:8D:EA:7D:7F:6A:D7:2E:8E:62:46:2D:7B:E2:0D:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtgszwyN6n1_atcujmJGLXviDVY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/327952-4c66-4b95-b6de-43118e496d40/1/wtgszwyN6n1_atcujmJGLXviDVY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/327952-4c66-4b95-b6de-43118e496d40/1/wtgszwyN6n1_atcujmJGLXviDVY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:03:4f:2a:2c:c6:5f:f4:85:39:30:9b:b1:90:03:59:06:e5:
         07:20:af:68:90:51:d7:b6:7e:e9:f0:28:34:cc:bf:39:49:34:
         35:2a:a5:5d:28:0f:a2:39:61:de:ee:1c:a3:d9:97:9f:18:f3:
         a9:94:3a:a8:7a:94:d9:90:a0:90:79:65:3b:7b:a5:36:f0:dc:
         f7:74:a1:5a:9f:55:89:ea:99:b1:65:75:c6:08:67:cf:cd:fe:
         c8:66:be:9d:de:8a:23:a0:d1:1e:66:9d:dc:51:da:ce:05:33:
         13:d8:31:38:5e:2f:da:d3:8e:ad:18:58:16:27:61:91:11:c1:
         7e:94:33:85:b2:5c:c6:08:9f:66:42:a1:e3:ef:86:e8:1c:68:
         9d:e7:39:90:a9:34:59:17:e5:7d:94:fc:4b:01:df:bd:91:db:
         84:0a:7d:ff:82:57:b6:05:40:27:86:f6:a2:ea:83:5b:09:58:
         1e:62:8d:e0:cc:7f:91:ea:2e:32:ff:a3:32:1a:8b:65:0d:43:
         7a:8b:08:7e:46:00:bb:cb:66:9c:5d:da:4a:bb:98:d8:77:32:
         cf:cc:08:ec:92:e4:c3:43:b1:4d:08:b8:a2:ad:a6:ea:00:a1:
         01:c1:81:0b:e7:d0:18:3e:7c:15:a1:1d:77:a5:6e:d3:7a:2e:
         ed:1f:db:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 05:52:20 2025 by rpki-client