Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/fcc70e-e4a5-4b19-ab4f-70127b49b323/1/wKatm4cwm9AHnPowXUhhP4fEcNg.mft
File:                     wKatm4cwm9AHnPowXUhhP4fEcNg.mft (raw, json)
Hash identifier:          sNT3eKlkEml7/BG8oJGzFyIMJiRkXQmqVWYJs5RMEmI=
Subject key identifier:   CF:4C:5C:20:93:A3:38:04:D2:06:F8:A4:4C:F4:5A:C3:95:6E:F8:C2
Authority key identifier: C0:A6:AD:9B:87:30:9B:D0:07:9C:FA:30:5D:48:61:3F:87:C4:70:D8
Certificate issuer:       /CN=c0a6ad9b87309bd0079cfa305d48613f87c470d8
Certificate serial:       0199FC8F676213646483B42F9C0540E4E3DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wKatm4cwm9AHnPowXUhhP4fEcNg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/fcc70e-e4a5-4b19-ab4f-70127b49b323/1/wKatm4cwm9AHnPowXUhhP4fEcNg.mft
Manifest number:          16E6
Signing time:             Sun 19 Oct 2025 13:01:20 +0000
Manifest this update:     Sun 19 Oct 2025 13:01:20 +0000
Manifest next update:     Mon 20 Oct 2025 13:01:20 +0000
Files and hashes:         1: fpbdoc2TI64xJycuwiFh9Gomr6A.roa (hash: cljwIs+0uajrjK0gVgOImyvI4O/zMxkT1vLqnWwJwe0=)
                          2: wKatm4cwm9AHnPowXUhhP4fEcNg.crl (hash: 1LTiWYD2+tfTvNyjoJDwvcMXdAWW5d2S6IhMiOUeEPY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/fcc70e-e4a5-4b19-ab4f-70127b49b323/1/wKatm4cwm9AHnPowXUhhP4fEcNg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/fcc70e-e4a5-4b19-ab4f-70127b49b323/1/wKatm4cwm9AHnPowXUhhP4fEcNg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wKatm4cwm9AHnPowXUhhP4fEcNg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:8f:67:62:13:64:64:83:b4:2f:9c:05:40:e4:e3:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0a6ad9b87309bd0079cfa305d48613f87c470d8
        Validity
            Not Before: Oct 19 13:01:20 2025 GMT
            Not After : Oct 20 13:01:20 2025 GMT
        Subject: CN=cf4c5c2093a33804d206f8a44cf45ac3956ef8c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:8e:13:64:56:58:36:38:97:69:19:0d:60:54:
                    44:71:49:06:87:47:27:3c:ed:e8:c4:6e:ab:c2:83:
                    02:92:82:ca:86:14:ca:7f:12:eb:c6:4b:06:a5:87:
                    14:0a:21:54:94:24:77:cb:08:f5:25:95:82:5c:63:
                    8c:4f:fa:bd:15:4d:fd:c9:91:7c:01:73:2b:1a:73:
                    98:48:42:ef:d5:4d:ca:52:77:46:96:b0:a6:a0:22:
                    7b:4a:59:bc:3a:b2:fa:cc:b0:b3:0d:b1:28:2e:6a:
                    8f:7c:54:c9:0c:8e:de:56:83:42:82:77:e0:62:05:
                    11:51:0b:99:8f:09:49:5c:af:d9:15:8a:a1:58:55:
                    43:8b:2d:c1:24:a2:cb:cd:eb:4c:80:5c:49:78:18:
                    56:9d:55:41:1f:ad:24:87:86:0f:72:ee:a4:1d:0c:
                    12:27:5e:6d:10:ac:d0:c1:2d:7f:44:fe:5c:f2:cf:
                    a2:68:3f:56:cb:8a:c0:00:4f:0b:58:fe:aa:28:c7:
                    19:e0:0d:cb:7b:2c:92:a0:a6:fd:4d:9c:f8:38:6e:
                    e8:94:50:6b:1a:0d:07:47:c5:bd:af:ca:fd:00:74:
                    6c:d3:02:1c:30:13:30:45:2b:c8:5c:22:fc:e3:cf:
                    ca:0b:5b:e1:7b:b8:a1:30:ab:77:bd:96:cf:65:cd:
                    5a:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:4C:5C:20:93:A3:38:04:D2:06:F8:A4:4C:F4:5A:C3:95:6E:F8:C2
            X509v3 Authority Key Identifier:
                keyid:C0:A6:AD:9B:87:30:9B:D0:07:9C:FA:30:5D:48:61:3F:87:C4:70:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wKatm4cwm9AHnPowXUhhP4fEcNg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/fcc70e-e4a5-4b19-ab4f-70127b49b323/1/wKatm4cwm9AHnPowXUhhP4fEcNg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/fcc70e-e4a5-4b19-ab4f-70127b49b323/1/wKatm4cwm9AHnPowXUhhP4fEcNg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:e7:38:bb:5d:bf:e7:3f:7e:ac:df:21:96:1e:22:b2:43:44:
         b7:cf:9e:02:3c:40:2f:7b:c6:be:a9:35:62:6e:ea:c2:9a:0d:
         0b:2a:54:05:a4:9c:32:22:28:1d:de:dd:37:6e:2b:3b:cc:87:
         b9:4c:6a:51:d7:38:8d:4c:2c:b8:be:a1:61:da:ed:e0:98:48:
         99:67:cf:dc:58:2b:b8:0c:50:a4:fa:e4:17:2b:db:19:f7:a8:
         95:e2:a1:1d:dc:6a:37:d2:74:b1:46:9d:54:95:76:a0:f5:dd:
         60:c9:8d:f3:c1:ab:e6:ca:75:6d:8e:88:84:38:51:4d:da:e5:
         92:42:ac:d1:bc:72:df:55:00:9d:67:81:3d:55:67:57:66:bb:
         0b:be:be:bc:15:7b:a2:c2:ad:58:95:63:49:29:05:95:7f:38:
         64:d2:fe:a4:c1:b4:8e:63:c5:b2:73:6e:6e:42:44:08:25:12:
         a2:78:e5:05:60:de:e0:a1:53:53:6b:81:d1:6b:18:f3:38:28:
         d8:25:41:6c:ea:13:0d:04:4c:fb:db:f9:bd:b0:fb:68:9e:99:
         38:fb:32:2a:77:c6:3d:a1:5b:54:92:f8:ef:a9:03:87:21:80:
         b8:38:eb:af:d7:82:61:f3:a2:a2:b4:dd:2f:22:24:9d:dc:09:
         5b:38:0f:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8j2diE2Rkg7QvnAVA5OPaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwYTZhZDliODczMDliZDAwNzljZmEzMDVkNDg2MTNmODdj
NDcwZDgwHhcNMjUxMDE5MTMwMTIwWhcNMjUxMDIwMTMwMTIwWjAzMTEwLwYDVQQD
EyhjZjRjNWMyMDkzYTMzODA0ZDIwNmY4YTQ0Y2Y0NWFjMzk1NmVmOGMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkI4TZFZYNjiXaRkNYFREcUkGh0cn
PO3oxG6rwoMCkoLKhhTKfxLrxksGpYcUCiFUlCR3ywj1JZWCXGOMT/q9FU39yZF8
AXMrGnOYSELv1U3KUndGlrCmoCJ7Slm8OrL6zLCzDbEoLmqPfFTJDI7eVoNCgnfg
YgURUQuZjwlJXK/ZFYqhWFVDiy3BJKLLzetMgFxJeBhWnVVBH60kh4YPcu6kHQwS
J15tEKzQwS1/RP5c8s+iaD9Wy4rAAE8LWP6qKMcZ4A3LeyySoKb9TZz4OG7olFBr
Gg0HR8W9r8r9AHRs0wIcMBMwRSvIXCL848/KC1vhe7ihMKt3vZbPZc1akwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM9MXCCTozgE0gb4pEz0WsOVbvjCMB8GA1UdIwQY
MBaAFMCmrZuHMJvQB5z6MF1IYT+HxHDYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0thdG00Y3dtOUFIblBvd1hVaGhQNGZFY05nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9mY2M3MGUtZTRhNS00YjE5LWFiNGYt
NzAxMjdiNDliMzIzLzEvd0thdG00Y3dtOUFIblBvd1hVaGhQNGZFY05nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC9mY2M3MGUtZTRhNS00YjE5LWFiNGYtNzAxMjdiNDliMzIz
LzEvd0thdG00Y3dtOUFIblBvd1hVaGhQNGZFY05nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ+c4u12/
5z9+rN8hlh4iskNEt8+eAjxAL3vGvqk1Ym7qwpoNCypUBaScMiIoHd7dN24rO8yH
uUxqUdc4jUwsuL6hYdrt4JhImWfP3FgruAxQpPrkFyvbGfeoleKhHdxqN9J0sUad
VJV2oPXdYMmN88Gr5sp1bY6IhDhRTdrlkkKs0bxy31UAnWeBPVVnV2a7C76+vBV7
osKtWJVjSSkFlX84ZNL+pMG0jmPFsnNubkJECCUSonjlBWDe4KFTU2uB0WsY8zgo
2CVBbOoTDQRM+9v5vbD7aJ6ZOPsyKnfGPaFbVJL476kDhyGAuDjrr9eCYfOiorTd
LyIkndwJWzgPyw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:49:52 2025 by rpki-client