Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/69e7e4-e3ea-46a5-9867-1c8132d5f4b4/1/Wsj2isQVBZ1W0ZOMN1pZhqb_9LE.mft
File:                     Wsj2isQVBZ1W0ZOMN1pZhqb_9LE.mft (raw, json)
Hash identifier:          dFoQI6uqsoAWuipRCxmNdNKPTL0wkOdHbGNRjO0IAhQ=
Subject key identifier:   98:F9:13:D4:FA:04:56:4A:CF:E3:79:F0:82:26:FD:46:79:FB:E0:5C
Authority key identifier: 5A:C8:F6:8A:C4:15:05:9D:56:D1:93:8C:37:5A:59:86:A6:FF:F4:B1
Certificate issuer:       /CN=5ac8f68ac415059d56d1938c375a5986a6fff4b1
Certificate serial:       019A0335806138F49C3E19DAC6D340218ADD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wsj2isQVBZ1W0ZOMN1pZhqb_9LE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/69e7e4-e3ea-46a5-9867-1c8132d5f4b4/1/Wsj2isQVBZ1W0ZOMN1pZhqb_9LE.mft
Manifest number:          16E9
Signing time:             Mon 20 Oct 2025 20:00:29 +0000
Manifest this update:     Mon 20 Oct 2025 20:00:29 +0000
Manifest next update:     Tue 21 Oct 2025 20:00:29 +0000
Files and hashes:         1: 2x0oIHlLniQgJ8wCGF91u-VP36U.roa (hash: hTRJW3J22JabEFrfjLPUALfCkvH53/llK6Ms4YgJ720=)
                          2: Wsj2isQVBZ1W0ZOMN1pZhqb_9LE.crl (hash: RVhyFZELDenUgqHhgAmzPI9jjOEwkF5fLU8k8GrvjYA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/69e7e4-e3ea-46a5-9867-1c8132d5f4b4/1/Wsj2isQVBZ1W0ZOMN1pZhqb_9LE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/69e7e4-e3ea-46a5-9867-1c8132d5f4b4/1/Wsj2isQVBZ1W0ZOMN1pZhqb_9LE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Wsj2isQVBZ1W0ZOMN1pZhqb_9LE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 15:16:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:03:35:80:61:38:f4:9c:3e:19:da:c6:d3:40:21:8a:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ac8f68ac415059d56d1938c375a5986a6fff4b1
        Validity
            Not Before: Oct 20 20:00:29 2025 GMT
            Not After : Oct 21 20:00:29 2025 GMT
        Subject: CN=98f913d4fa04564acfe379f08226fd4679fbe05c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:9e:e1:a4:49:16:a3:9d:b0:be:5f:2f:62:ea:
                    6d:2c:47:f6:06:d5:59:5e:38:1c:e3:6b:66:5c:57:
                    50:a2:05:ae:b3:9b:ad:b2:41:9d:13:ad:a8:20:b5:
                    b4:c8:4b:67:e2:35:3f:b8:4a:97:96:81:a0:23:c9:
                    cb:d7:e9:a9:70:05:ef:32:d6:3c:b1:a0:c7:a3:3c:
                    26:ef:5d:34:68:ea:0c:19:7d:58:22:6a:c3:ec:16:
                    42:10:a8:a0:c1:dc:0f:c3:6c:be:79:d8:3e:90:ee:
                    07:73:b9:ec:a1:60:31:10:bd:ad:2c:08:2e:e0:1d:
                    07:a7:c9:10:a6:0e:ba:18:33:83:2f:42:02:fe:f9:
                    18:55:72:fe:be:2f:91:e6:3d:e6:9d:b9:27:f3:11:
                    cc:83:b9:03:f4:e2:f1:0a:bb:6f:cf:17:5d:93:d2:
                    1f:11:52:e0:94:ed:70:6d:69:08:8c:14:8f:80:bf:
                    a5:59:43:8a:07:e6:09:b5:c7:3b:5d:ca:82:07:f7:
                    94:86:70:31:45:25:0d:be:2d:bf:3e:2c:ad:e1:70:
                    f1:6f:33:7a:de:10:f2:51:9d:ed:26:c2:a5:f5:4e:
                    ae:a2:6a:39:fb:9d:49:5e:0a:68:6e:49:a5:9a:0e:
                    b5:8c:47:ad:aa:cc:8f:70:13:c5:59:30:92:5c:e4:
                    de:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:F9:13:D4:FA:04:56:4A:CF:E3:79:F0:82:26:FD:46:79:FB:E0:5C
            X509v3 Authority Key Identifier:
                keyid:5A:C8:F6:8A:C4:15:05:9D:56:D1:93:8C:37:5A:59:86:A6:FF:F4:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wsj2isQVBZ1W0ZOMN1pZhqb_9LE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/69e7e4-e3ea-46a5-9867-1c8132d5f4b4/1/Wsj2isQVBZ1W0ZOMN1pZhqb_9LE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/69e7e4-e3ea-46a5-9867-1c8132d5f4b4/1/Wsj2isQVBZ1W0ZOMN1pZhqb_9LE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:20:5b:1b:43:bd:30:5a:2b:83:be:be:1c:56:73:d7:e1:5d:
         0c:cf:51:7d:ff:f3:4c:5b:98:73:b1:d8:3c:e7:6f:e6:07:82:
         77:a3:40:85:8e:e4:ec:6b:2d:b6:cd:4a:46:62:9d:84:66:81:
         6a:ed:62:b5:c6:9d:4d:70:65:f1:f9:d5:b5:c6:12:da:ee:02:
         51:9d:0e:20:89:df:c6:65:45:d9:31:50:73:b5:7b:3a:43:d8:
         0e:62:3f:46:21:64:bf:e5:6c:9c:4f:a5:91:f5:02:e2:7d:fc:
         3f:99:3f:48:68:c1:4b:a5:d2:25:ef:a7:a3:4e:bd:52:87:a2:
         f9:66:97:34:c3:e8:06:04:5c:3b:af:17:5f:a2:96:c6:2f:a6:
         9d:31:91:12:67:74:39:fa:f7:56:92:9c:c2:ca:fc:fa:9c:0d:
         12:fe:12:1c:fb:82:1d:f6:0a:b4:4e:32:30:bf:37:19:15:59:
         73:53:f8:70:e5:bc:7b:d0:2f:9d:0e:22:8d:e4:7f:62:cd:2a:
         2f:b4:df:a5:ab:4b:34:60:7d:27:0c:ff:05:35:96:21:43:fa:
         1d:bf:23:18:67:de:3a:b0:b1:42:9d:e9:fe:a6:38:0a:2c:9e:
         77:77:9e:0f:1c:a4:f2:48:eb:53:03:fc:33:1f:52:0a:57:b9:
         9c:21:0a:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:41:22 2025 by rpki-client