Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/cc8ffe-36b4-4c80-a907-aeaa9df01a9d/1/wCS9ve1uXS_g-1JlALP_h2ZbYA4.mft
File:                     wCS9ve1uXS_g-1JlALP_h2ZbYA4.mft (raw, json)
Hash identifier:          TqvnupGivq/mdpq8eaZ/s3PgjcUaPCUGLVFKKklyFus=
Subject key identifier:   88:4D:9F:C1:86:ED:14:FD:12:92:8E:33:A2:4C:D3:73:10:6E:F4:98
Authority key identifier: C0:24:BD:BD:ED:6E:5D:2F:E0:FB:52:65:00:B3:FF:87:66:5B:60:0E
Certificate issuer:       /CN=c024bdbded6e5d2fe0fb526500b3ff87665b600e
Certificate serial:       0199FC2142B12B79232D76CB1608A54A7158
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wCS9ve1uXS_g-1JlALP_h2ZbYA4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/cc8ffe-36b4-4c80-a907-aeaa9df01a9d/1/wCS9ve1uXS_g-1JlALP_h2ZbYA4.mft
Manifest number:          16E5
Signing time:             Sun 19 Oct 2025 11:01:02 +0000
Manifest this update:     Sun 19 Oct 2025 11:01:02 +0000
Manifest next update:     Mon 20 Oct 2025 11:01:02 +0000
Files and hashes:         1: 6-ydJeMMctB8c_kcu4H6al3x9lI.roa (hash: gkHYAXqWoGGFpT0nUFUwvYsxIUFHF9fDa7NiP95iNN8=)
                          2: wCS9ve1uXS_g-1JlALP_h2ZbYA4.crl (hash: zfxcN6rWxySIz9cFx6R84KnsUtiQPtbflM1hyFSfqXw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/cc8ffe-36b4-4c80-a907-aeaa9df01a9d/1/wCS9ve1uXS_g-1JlALP_h2ZbYA4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/cc8ffe-36b4-4c80-a907-aeaa9df01a9d/1/wCS9ve1uXS_g-1JlALP_h2ZbYA4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wCS9ve1uXS_g-1JlALP_h2ZbYA4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:21:42:b1:2b:79:23:2d:76:cb:16:08:a5:4a:71:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c024bdbded6e5d2fe0fb526500b3ff87665b600e
        Validity
            Not Before: Oct 19 11:01:02 2025 GMT
            Not After : Oct 20 11:01:02 2025 GMT
        Subject: CN=884d9fc186ed14fd12928e33a24cd373106ef498
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:1f:ad:e6:e0:ed:5f:6c:9b:af:8d:55:3f:dc:
                    ea:08:3a:49:9a:07:e7:68:61:c3:e8:2a:11:3c:5d:
                    f4:79:5d:43:52:75:21:6e:7d:fc:d3:42:9e:b2:b3:
                    2f:0c:31:d8:3b:48:d1:42:36:91:f9:60:06:30:b9:
                    9e:50:bb:aa:93:39:0e:e9:3d:c4:24:9c:1d:ed:04:
                    16:f9:92:74:b8:05:32:41:16:50:4f:e5:3c:47:22:
                    5f:2d:2b:d9:ce:71:80:5c:aa:39:18:b8:c8:e8:d6:
                    b6:a2:7d:dc:3a:61:5c:e2:8e:20:88:9a:bf:d8:76:
                    d5:35:f5:f4:92:47:d4:44:58:96:76:a2:d4:a5:a3:
                    bc:5a:40:41:11:ee:99:54:d3:64:a5:aa:bd:2c:ef:
                    3e:07:b9:0b:83:d9:d4:f8:8c:9a:b0:32:22:5c:be:
                    6f:36:64:37:35:8e:c1:64:01:d9:31:a5:4d:ef:ca:
                    21:0a:41:fb:d0:0a:d6:5e:c5:28:cb:3c:17:d2:2f:
                    6c:37:23:9b:54:a9:aa:18:0b:02:68:bb:fd:75:19:
                    f2:00:69:e5:97:5a:29:94:c9:89:0d:bb:bd:18:fe:
                    4d:34:51:40:a3:98:e7:13:fc:79:8e:26:e3:d4:dd:
                    d9:1e:72:76:8b:a2:35:d4:35:98:0a:18:1e:9c:fd:
                    80:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:4D:9F:C1:86:ED:14:FD:12:92:8E:33:A2:4C:D3:73:10:6E:F4:98
            X509v3 Authority Key Identifier:
                keyid:C0:24:BD:BD:ED:6E:5D:2F:E0:FB:52:65:00:B3:FF:87:66:5B:60:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wCS9ve1uXS_g-1JlALP_h2ZbYA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/cc8ffe-36b4-4c80-a907-aeaa9df01a9d/1/wCS9ve1uXS_g-1JlALP_h2ZbYA4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/cc8ffe-36b4-4c80-a907-aeaa9df01a9d/1/wCS9ve1uXS_g-1JlALP_h2ZbYA4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:2d:e3:2e:12:96:e6:5a:d7:ec:af:3c:98:f3:15:ea:86:8e:
         12:aa:5b:c4:54:70:f5:16:5e:17:7b:ff:e3:88:0e:1b:2c:21:
         9c:16:2d:90:79:d6:4f:6b:f4:95:4b:1e:b6:b2:1d:bb:83:2e:
         1f:91:e3:81:c5:53:82:95:61:c6:a7:60:1c:90:4e:a9:dd:9a:
         c5:b6:99:47:08:ef:2b:77:67:1a:25:20:95:54:e1:8c:9f:4d:
         36:11:75:dc:03:08:67:db:f9:4d:e0:5d:30:12:b4:c6:6e:b6:
         b3:4c:2e:61:36:65:96:d1:ed:5e:73:22:0d:5e:e1:54:e4:4f:
         29:4b:61:13:e1:2d:b2:d3:63:27:8c:b0:45:1b:06:95:fa:1a:
         c8:91:63:94:99:38:f3:c9:1b:be:47:6a:0c:6f:1e:27:a6:70:
         5f:bd:a0:76:16:5e:e1:f2:85:c0:6e:32:d3:94:d3:2c:c1:40:
         20:3a:c4:cd:e1:9a:03:c8:63:98:17:ca:66:fd:1c:2a:7f:e9:
         f7:1b:be:3c:cf:46:06:b7:70:a7:08:51:7d:4c:2b:13:e1:0e:
         8a:df:0b:31:d1:ab:7a:98:ae:57:1a:55:26:eb:cf:8d:ce:d7:
         90:71:2c:94:1b:35:02:3a:c7:8f:90:31:f5:c7:9f:5c:4d:58:
         1b:ec:6e:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8IUKxK3kjLXbLFgilSnFYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwMjRiZGJkZWQ2ZTVkMmZlMGZiNTI2NTAwYjNmZjg3NjY1
YjYwMGUwHhcNMjUxMDE5MTEwMTAyWhcNMjUxMDIwMTEwMTAyWjAzMTEwLwYDVQQD
Eyg4ODRkOWZjMTg2ZWQxNGZkMTI5MjhlMzNhMjRjZDM3MzEwNmVmNDk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhh+t5uDtX2ybr41VP9zqCDpJmgfn
aGHD6CoRPF30eV1DUnUhbn3800KesrMvDDHYO0jRQjaR+WAGMLmeULuqkzkO6T3E
JJwd7QQW+ZJ0uAUyQRZQT+U8RyJfLSvZznGAXKo5GLjI6Na2on3cOmFc4o4giJq/
2HbVNfX0kkfURFiWdqLUpaO8WkBBEe6ZVNNkpaq9LO8+B7kLg9nU+IyasDIiXL5v
NmQ3NY7BZAHZMaVN78ohCkH70ArWXsUoyzwX0i9sNyObVKmqGAsCaLv9dRnyAGnl
l1oplMmJDbu9GP5NNFFAo5jnE/x5jibj1N3ZHnJ2i6I11DWYChgenP2AzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIhNn8GG7RT9EpKOM6JM03MQbvSYMB8GA1UdIwQY
MBaAFMAkvb3tbl0v4PtSZQCz/4dmW2AOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0NTOXZlMXVYU19nLTFKbEFMUF9oMlpiWUE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9jYzhmZmUtMzZiNC00YzgwLWE5MDct
YWVhYTlkZjAxYTlkLzEvd0NTOXZlMXVYU19nLTFKbEFMUF9oMlpiWUE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC9jYzhmZmUtMzZiNC00YzgwLWE5MDctYWVhYTlkZjAxYTlk
LzEvd0NTOXZlMXVYU19nLTFKbEFMUF9oMlpiWUE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACy3jLhKW
5lrX7K88mPMV6oaOEqpbxFRw9RZeF3v/44gOGywhnBYtkHnWT2v0lUsetrIdu4Mu
H5HjgcVTgpVhxqdgHJBOqd2axbaZRwjvK3dnGiUglVThjJ9NNhF13AMIZ9v5TeBd
MBK0xm62s0wuYTZlltHtXnMiDV7hVORPKUthE+EtstNjJ4ywRRsGlfoayJFjlJk4
88kbvkdqDG8eJ6ZwX72gdhZe4fKFwG4y05TTLMFAIDrEzeGaA8hjmBfKZv0cKn/p
9xu+PM9GBrdwpwhRfUwrE+EOit8LMdGrepiuVxpVJuvPjc7XkHEslBs1AjrHj5Ax
9cefXE1YG+xuaw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:11:12 2025 by rpki-client