Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/566938-e2a8-48b3-816b-27b113cff53b/1/waskfGNq04m_n4xQdMgiAjDo7cw.mft
File:                     waskfGNq04m_n4xQdMgiAjDo7cw.mft (raw, json)
Hash identifier:          1zx7CX52BSvWEigJTWzoBlMBhTot9J1XPLYy2SJpzfM=
Subject key identifier:   17:23:E0:3C:62:1E:17:E2:96:56:7C:1A:3E:8D:96:28:8A:3C:C3:AE
Authority key identifier: C1:AB:24:7C:63:6A:D3:89:BF:9F:8C:50:74:C8:22:02:30:E8:ED:CC
Certificate issuer:       /CN=c1ab247c636ad389bf9f8c5074c8220230e8edcc
Certificate serial:       0199FAD7C157FD0A20BB9E4F85AAFA5E2EAC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/waskfGNq04m_n4xQdMgiAjDo7cw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/566938-e2a8-48b3-816b-27b113cff53b/1/waskfGNq04m_n4xQdMgiAjDo7cw.mft
Manifest number:          16E6
Signing time:             Sun 19 Oct 2025 05:01:07 +0000
Manifest this update:     Sun 19 Oct 2025 05:01:07 +0000
Manifest next update:     Mon 20 Oct 2025 05:01:07 +0000
Files and hashes:         1: YhlJJJSXn0316GXMCt3evKM4RRA.roa (hash: GoRGuSI9MFxsC15qVirr/MrX3xBRfDPgJUjig6NxAVs=)
                          2: l9EgD7Cv7e532Hlt9LLUu3z8_dw.roa (hash: 4Xh0ogOpmmD0jHDBdjnr8Hc05bJosT/Z9VheuQZJvIw=)
                          3: ux1IC1yxeTUgRbCsz7aKGJRUxDA.roa (hash: Cbk3gKO+GYUzaeJI/vrLpgkHk9pkTZFjphWYEpQbc/Y=)
                          4: waskfGNq04m_n4xQdMgiAjDo7cw.crl (hash: RAbRSYcG9BXtGxLRW7hxLEyWHxN9/2h51FMgaGHLreI=)
                          5: xPSDuA4Q8aGWwP6K3N_nyK74gDo.roa (hash: UU3ufwB67xN9A6E6STJlvefFGKYdsphPt8rIQ8rp99U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/566938-e2a8-48b3-816b-27b113cff53b/1/waskfGNq04m_n4xQdMgiAjDo7cw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/566938-e2a8-48b3-816b-27b113cff53b/1/waskfGNq04m_n4xQdMgiAjDo7cw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/waskfGNq04m_n4xQdMgiAjDo7cw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 05:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:d7:c1:57:fd:0a:20:bb:9e:4f:85:aa:fa:5e:2e:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1ab247c636ad389bf9f8c5074c8220230e8edcc
        Validity
            Not Before: Oct 19 05:01:07 2025 GMT
            Not After : Oct 20 05:01:07 2025 GMT
        Subject: CN=1723e03c621e17e296567c1a3e8d96288a3cc3ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:53:ca:30:5f:e6:0d:49:93:a6:a4:f7:e0:be:
                    e1:b8:15:03:87:f1:ab:27:ca:84:69:ea:4c:24:97:
                    36:5d:ef:fd:4a:29:95:f5:34:3e:1a:0e:64:71:50:
                    c2:50:b0:4e:7a:c5:2f:00:37:54:0a:84:80:03:45:
                    ca:3e:3c:31:06:be:af:ee:d4:e9:70:a9:5a:b6:1e:
                    d3:d0:20:6f:47:9e:a0:11:13:66:a6:ad:ad:20:80:
                    21:e5:11:44:19:06:ef:09:a3:71:7c:a7:30:fc:d7:
                    75:ff:58:c6:0c:1b:bd:1b:fc:9c:ac:68:70:60:58:
                    ea:40:fa:7f:f1:9c:2a:77:1b:c2:d5:54:2d:bd:05:
                    17:0a:00:60:8e:1a:b0:91:ad:bd:67:00:0d:73:38:
                    db:ee:11:79:38:c4:d9:2a:66:bb:f4:8b:01:9a:f8:
                    94:b0:65:89:3d:90:48:b7:2b:c0:ab:65:27:53:74:
                    b4:13:10:bd:62:0e:ed:a9:95:fa:13:a7:cb:bf:50:
                    e1:b0:e6:e5:bd:f6:5b:8d:42:f5:f3:d4:66:54:bf:
                    2e:ec:98:c6:65:01:d2:ab:40:9a:89:2d:20:cf:02:
                    36:95:ee:c2:e2:85:b0:31:1f:03:1b:5b:c9:9c:80:
                    9b:03:02:aa:7e:7f:76:e0:c2:91:00:1d:48:a8:b0:
                    9c:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:23:E0:3C:62:1E:17:E2:96:56:7C:1A:3E:8D:96:28:8A:3C:C3:AE
            X509v3 Authority Key Identifier:
                keyid:C1:AB:24:7C:63:6A:D3:89:BF:9F:8C:50:74:C8:22:02:30:E8:ED:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/waskfGNq04m_n4xQdMgiAjDo7cw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/566938-e2a8-48b3-816b-27b113cff53b/1/waskfGNq04m_n4xQdMgiAjDo7cw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/566938-e2a8-48b3-816b-27b113cff53b/1/waskfGNq04m_n4xQdMgiAjDo7cw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:8a:ca:23:23:ca:49:0f:6d:37:93:a4:42:f7:34:a7:4b:19:
         4b:44:c4:a0:61:4f:16:aa:38:c5:16:f6:4b:81:2f:51:99:d3:
         12:20:d1:2b:88:53:6f:90:dc:f1:0d:2b:59:71:93:9e:33:ec:
         63:44:fe:3f:18:22:aa:c3:83:c0:3b:b3:d3:db:97:6b:4c:0e:
         0f:60:38:14:a5:54:42:64:c9:73:9c:54:b2:56:6d:fb:17:b7:
         57:ae:d5:f0:45:50:ca:e4:aa:07:07:b6:2d:4c:29:d5:e0:93:
         4a:4f:b7:9a:af:72:99:12:a2:4c:7f:39:34:5e:34:b5:ef:77:
         f3:22:af:36:e8:62:4a:eb:98:c5:03:20:69:fb:d0:51:51:d0:
         ee:e9:18:36:00:13:93:9d:3b:9f:a4:a8:74:0c:41:f9:0e:86:
         8c:f6:ec:aa:c8:d5:c8:2d:95:ea:ae:27:ae:37:02:89:70:dd:
         ec:4d:19:27:12:a2:e5:22:ad:ea:ee:35:b4:39:27:6c:a6:fd:
         38:43:c3:57:3d:bf:25:43:bc:be:88:7a:09:9e:36:a3:36:cb:
         12:ff:c8:a1:13:bb:46:85:a1:fe:7e:0e:bf:7b:44:c9:b3:60:
         f5:17:fb:70:c3:8a:a5:a1:a8:3f:01:41:ad:11:54:19:60:52:
         ba:f3:67:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn618FX/Qogu55Phar6Xi6sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxYWIyNDdjNjM2YWQzODliZjlmOGM1MDc0YzgyMjAyMzBl
OGVkY2MwHhcNMjUxMDE5MDUwMTA3WhcNMjUxMDIwMDUwMTA3WjAzMTEwLwYDVQQD
EygxNzIzZTAzYzYyMWUxN2UyOTY1NjdjMWEzZThkOTYyODhhM2NjM2FlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVPKMF/mDUmTpqT34L7huBUDh/Gr
J8qEaepMJJc2Xe/9SimV9TQ+Gg5kcVDCULBOesUvADdUCoSAA0XKPjwxBr6v7tTp
cKlath7T0CBvR56gERNmpq2tIIAh5RFEGQbvCaNxfKcw/Nd1/1jGDBu9G/ycrGhw
YFjqQPp/8ZwqdxvC1VQtvQUXCgBgjhqwka29ZwANczjb7hF5OMTZKma79IsBmviU
sGWJPZBItyvAq2UnU3S0ExC9Yg7tqZX6E6fLv1DhsOblvfZbjUL189RmVL8u7JjG
ZQHSq0CaiS0gzwI2le7C4oWwMR8DG1vJnICbAwKqfn924MKRAB1IqLCcewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBcj4DxiHhfillZ8Gj6NliiKPMOuMB8GA1UdIwQY
MBaAFMGrJHxjatOJv5+MUHTIIgIw6O3MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2Fza2ZHTnEwNG1fbjR4UWRNZ2lBakRvN2N3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS81NjY5MzgtZTJhOC00OGIzLTgxNmIt
MjdiMTEzY2ZmNTNiLzEvd2Fza2ZHTnEwNG1fbjR4UWRNZ2lBakRvN2N3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS81NjY5MzgtZTJhOC00OGIzLTgxNmItMjdiMTEzY2ZmNTNi
LzEvd2Fza2ZHTnEwNG1fbjR4UWRNZ2lBakRvN2N3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOorKIyPK
SQ9tN5OkQvc0p0sZS0TEoGFPFqo4xRb2S4EvUZnTEiDRK4hTb5Dc8Q0rWXGTnjPs
Y0T+PxgiqsODwDuz09uXa0wOD2A4FKVUQmTJc5xUslZt+xe3V67V8EVQyuSqBwe2
LUwp1eCTSk+3mq9ymRKiTH85NF40te938yKvNuhiSuuYxQMgafvQUVHQ7ukYNgAT
k507n6SodAxB+Q6GjPbsqsjVyC2V6q4nrjcCiXDd7E0ZJxKi5SKt6u41tDknbKb9
OEPDVz2/JUO8voh6CZ42ozbLEv/IoRO7RoWh/n4Ov3tEybNg9Rf7cMOKpaGoPwFB
rRFUGWBSuvNniQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:07:29 2025 by rpki-client