Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.mft
File:                     wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.mft (raw, json)
Hash identifier:          6aMB8tErWQCG5jvPZGOnWOnbpvbPhjmXIf3n8rHMRC8=
Subject key identifier:   9E:CF:A7:F7:08:46:CB:10:72:27:25:E5:96:B1:AD:92:D6:E7:5B:ED
Authority key identifier: C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39
Certificate issuer:       /CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339
Certificate serial:       019A06A44AA812BE88EC9A728F1319317260
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.mft
Manifest number:          08F9
Signing time:             Tue 21 Oct 2025 12:00:21 +0000
Manifest this update:     Tue 21 Oct 2025 12:00:21 +0000
Manifest next update:     Wed 22 Oct 2025 12:00:21 +0000
Files and hashes:         1: 1-OHLRD334FWm6Zrjcgppie9BswM.roa (hash: urCbs2jOMpV/xBqYvz6vgOCjI2x8EVTTMcQlzcrKQKU=)
                          2: 1TzUGOISzDA60EIuoaOCEldIKdA.roa (hash: BLBlbTPtdydLXzYGnqSxQMivDmgQhsVxzd+uAEw/tSs=)
                          3: 5OAXbGjOqg-vS_55ZPKWFqHiJWs.roa (hash: Xs90gWSaUge8bMFZD1j250L70pMv92DLAovpQ1YIcqQ=)
                          4: 8NHyyXImfpTMW71nUWch0BiF5Xg.roa (hash: eGClbyh1h6xo26ZfLRahAomcB8GyqPbNSmUc+I5rBP8=)
                          5: 8joE7txuqPRptc2U6nWwYuYnOmI.roa (hash: Zwogdhh73hhf4ungwCilm3IbJUadAHNWf9EL+OCOw1Q=)
                          6: 9LlqBOZrF4SBJFApdi1WJjsEJwQ.roa (hash: hM+HJpIJptN08ori750yWre+VYMnzo/BXYZmLiiupXc=)
                          7: AuIUSKV86C7BXB3cKTMOXDDJDxg.roa (hash: zV0DboRCqeI5iUfqxHmafkMKaUmCDd/7aboDtWeZ6H0=)
                          8: BGHFUqVejSgU54raf_BEGdliceQ.roa (hash: /WvBr8+8azpgI7EuGeRsoFRQN1mrpglq6k/jLoAWaPg=)
                          9: FIW7fwGAyJnOAzz2Ig4OquStbIw.roa (hash: Itn/Khoc6SXbHAI9HOvcWbsIu8OiTqhQSGekM+dshLA=)
                          10: Ho010-5FAsL0AW4rW7aJrqoW8g0.roa (hash: RfaotJrye6UjauxHRFgmD8eKhZyY9JvJ6MfjuA1zSxA=)
                          11: IQkntFvhRsdycQaCoTh6uWBlM0w.roa (hash: ObXi/Gh86sV5Yu8bR/iyvVTSXYpSj+cAT5PW6Kmrdqo=)
                          12: Jc4UjjXDIHer7xI93ScihguvNyI.roa (hash: IRfvvMt08HvaaPswtbTpbce96zw5k4oSSFo123wdXVg=)
                          13: P2DSCIMV0HHkBQvcusVrkVUHJ-k.roa (hash: UOdNaKMoFJYMlUedUl0GUGdpyC2yCCaGtSt3gBG0pwM=)
                          14: _vVj7Yf7SEDc0U-oT24hLr9AmWo.roa (hash: j+iJlPVCSfJjs834awahPlI3pwAuXtW3vZid82gyL2c=)
                          15: eNZXxCCzC2aIFELjq6RpMQzGjSs.roa (hash: CXPmpeLWckeBx9Uclq/du3j6HeMssd7O/L4FVYvmJ6k=)
                          16: hEDQykrxXLfCPsLT_Uv4AhZry78.roa (hash: mRss66ZgEty+8I11/rtsJiwoCbdAIsEfAH5G7NCk4R0=)
                          17: iKcwhnEN10fRYRRzzUNUhLbzgII.roa (hash: 8XbU5xfN398bTFEwcsbwpEuYyx6/DG2cMnShSgvLAsw=)
                          18: lx-I99Rz7UE_i9h7mI7tDYnV2-Y.roa (hash: F42LmZoHNcE33lqnHRPsH2ID11JlTB7ve7cZ1cVQPlU=)
                          19: myS70wSaXraGlV45HLBBmwXwrwc.roa (hash: FZsWjRMS6HiCSjpm2cjqK9xWh87tWd8uC6DrqvB4t9Q=)
                          20: ownf_EA4QLCePC3UUTTwGnLoTLw.roa (hash: 93BCrxGb3Lysj+TYISTy8jTAsJzMKioWglq3RX6G7Ok=)
                          21: rPfrcA5mjZuF_3h6CvRoM6CKaHY.roa (hash: NtmAMHp+MSVAwh/AmTYU0C1XIPDHm/LFrjAn7E9M8BA=)
                          22: tVdCCdEU3l5ck10T4yml0loy_Tk.roa (hash: TPMYxPXKGw4cC+8aYDaQvMvT/cUGIMU4toFVtPWVXjI=)
                          23: wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl (hash: QPeZmZLRSKo7JLzg7eFaowaNozk5N6RgVjxTNLKRU9c=)
                          24: xIOo3rZx3f0vOIzSVMh1Ya9ClVc.roa (hash: 6N6kjKKhC2oSPTyjceZNAglAGE7L0pEAqJMjbpNF7V8=)
                          25: z3kWu-yUrhb7i7RJ_9n8Pz6MTKw.roa (hash: G3LXLnUV2U2i7TF7ag92NBNGeKqfOc8dN9b41KiF4QU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Oct 2025 12:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:06:a4:4a:a8:12:be:88:ec:9a:72:8f:13:19:31:72:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339
        Validity
            Not Before: Oct 21 12:00:21 2025 GMT
            Not After : Oct 22 12:00:21 2025 GMT
        Subject: CN=9ecfa7f70846cb10722725e596b1ad92d6e75bed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:34:1f:5c:58:8d:9d:da:7d:5d:62:46:dd:1a:
                    a1:f3:0e:35:be:e0:4e:2e:13:90:ae:62:85:04:76:
                    de:b0:61:c3:7f:5b:de:e6:87:71:50:3c:9d:86:7f:
                    60:71:d1:ae:e7:b8:e1:92:2c:26:de:ec:bd:d2:aa:
                    65:09:56:15:dd:d1:1c:e4:03:01:a3:03:d0:30:76:
                    a2:02:52:b3:2d:38:ad:7f:71:8c:c0:8d:01:b9:ea:
                    0e:11:d0:da:03:8e:8a:53:82:c7:91:97:78:00:c7:
                    f5:0e:1a:ec:d7:17:11:df:55:8f:5b:8d:f0:06:97:
                    37:b4:a7:d3:6e:0c:f0:dd:bc:51:f5:7b:dd:bf:65:
                    3d:d0:3f:d4:14:78:e4:67:04:8f:6b:0a:37:c4:fe:
                    f9:ef:fc:3e:1d:80:18:65:3d:b5:09:7a:27:60:63:
                    bc:7a:7d:71:fe:76:43:8d:40:92:cd:99:e3:5f:58:
                    f1:90:aa:55:b0:62:ad:31:90:43:e7:62:b8:14:f9:
                    42:fd:f4:14:f0:27:0d:62:8b:61:1b:69:6a:bf:3f:
                    0a:f3:36:36:cd:91:06:6f:45:4f:23:c9:70:c4:1a:
                    98:5a:98:0e:79:e2:58:00:6e:07:6e:e4:03:fc:04:
                    cc:04:5e:d4:35:7c:d4:4e:1d:d6:71:a5:40:f5:51:
                    cc:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:CF:A7:F7:08:46:CB:10:72:27:25:E5:96:B1:AD:92:D6:E7:5B:ED
            X509v3 Authority Key Identifier:
                keyid:C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:33:2a:cd:21:aa:da:df:af:e1:85:96:98:a0:f3:4b:6a:45:
         fa:b1:27:87:22:87:e8:d4:df:20:d0:9b:c6:cf:05:98:9a:e1:
         5b:01:cc:e8:bf:05:bc:dc:e6:dc:96:51:e3:f9:a1:08:5e:94:
         c0:b1:2a:0e:a8:13:22:6e:7a:9d:82:04:0a:e1:07:df:fc:9b:
         f0:2c:ee:d8:9c:bd:7a:f7:75:15:bd:8d:81:34:7a:32:5e:37:
         a0:67:a6:c4:78:f5:8f:32:61:b4:7b:ac:ac:91:d8:ac:55:e4:
         89:83:1a:59:4d:2c:85:87:db:47:63:f9:29:a9:ec:5c:04:ea:
         fd:8c:6e:65:3e:50:36:9d:e8:05:91:09:52:bd:49:17:ce:86:
         30:38:c9:b0:ba:c3:0e:a6:e3:9a:db:cd:46:4e:b8:5c:20:cc:
         e0:76:e5:cf:eb:25:66:8a:d0:26:56:bd:8a:22:68:91:5d:ff:
         99:6c:81:cf:bc:44:90:79:22:ab:af:9b:95:62:a3:5f:20:c0:
         b6:fb:af:11:04:38:7c:df:7c:87:18:ec:0e:63:2c:a4:35:cb:
         14:1a:f5:15:86:07:d8:73:ea:f4:34:77:97:32:b2:31:04:e5:
         28:79:06:9e:7a:e3:06:6e:81:7d:61:75:6a:43:57:e5:5d:4f:
         8d:ba:bd:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 17:17:33 2025 by rpki-client