Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/c455bd-b825-4901-8381-04d1247e5d0a/1/_w3fP-V3IgGv94wk6X-UTDgF_2s.mft
File:                     _w3fP-V3IgGv94wk6X-UTDgF_2s.mft (raw, json)
Hash identifier:          gKiq/RPLK6hKViUqSn2KK6SB/cst4oLiucW6ENTuK0Y=
Subject key identifier:   A5:AF:F7:E2:DD:3C:05:ED:67:31:80:29:1D:E1:73:65:E0:DE:53:2A
Authority key identifier: FF:0D:DF:3F:E5:77:22:01:AF:F7:8C:24:E9:7F:94:4C:38:05:FF:6B
Certificate issuer:       /CN=ff0ddf3fe5772201aff78c24e97f944c3805ff6b
Certificate serial:       0199FC58451CDA2356A089211C95862E66A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_w3fP-V3IgGv94wk6X-UTDgF_2s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/c455bd-b825-4901-8381-04d1247e5d0a/1/_w3fP-V3IgGv94wk6X-UTDgF_2s.mft
Manifest number:          055F
Signing time:             Sun 19 Oct 2025 12:01:07 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:07 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:07 +0000
Files and hashes:         1: 9ia0_iaxbX6JryuxqnLg3hd0L3g.roa (hash: KiNlWxgmk2eySTFhfbvvmaccM60Lf3LwZy/tqN4KWhY=)
                          2: ASer5kiqDiVWOaPZMylwsoahAIw.roa (hash: u7jpBR9dXty+UTW4qdoR89luPMWxLAPFa0EB+Y83dzY=)
                          3: U6zuk58ajYVysKNz6qXWGH9vBbQ.roa (hash: 61zuuE5vE5Y4+HWAkm8iJSGF4xuX2/gytqBlot9g8YQ=)
                          4: _w3fP-V3IgGv94wk6X-UTDgF_2s.crl (hash: rqVtO9r7rDvRPSLfqgk2ltkYNttW1yWYd1EFWIcIMY8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/c455bd-b825-4901-8381-04d1247e5d0a/1/_w3fP-V3IgGv94wk6X-UTDgF_2s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/c455bd-b825-4901-8381-04d1247e5d0a/1/_w3fP-V3IgGv94wk6X-UTDgF_2s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_w3fP-V3IgGv94wk6X-UTDgF_2s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:58:45:1c:da:23:56:a0:89:21:1c:95:86:2e:66:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff0ddf3fe5772201aff78c24e97f944c3805ff6b
        Validity
            Not Before: Oct 19 12:01:07 2025 GMT
            Not After : Oct 20 12:01:07 2025 GMT
        Subject: CN=a5aff7e2dd3c05ed673180291de17365e0de532a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f7:3e:4b:8a:b7:d9:c1:d4:cb:e4:56:d4:33:
                    88:21:70:e3:07:ff:3c:50:f6:14:fe:8b:66:e8:a9:
                    bc:98:c2:1f:1b:88:f1:d5:32:ef:12:66:e4:f5:82:
                    ac:9b:4f:1a:bb:09:bf:b6:f4:7e:9c:ad:44:07:b1:
                    0b:03:68:0a:20:2a:d9:92:88:da:11:9e:c5:f1:3a:
                    38:98:be:d2:bd:5e:ed:e7:a9:e1:c8:e8:50:bf:30:
                    32:1d:32:cc:9e:c8:75:d3:67:ad:33:40:b0:a5:90:
                    fb:d7:7f:d6:3a:b7:bf:a6:78:d5:47:0d:8c:c9:2f:
                    d0:41:f9:cc:ff:53:62:7d:c6:a0:95:88:5f:af:a6:
                    9c:fc:41:91:e6:f2:85:9b:a0:ad:49:c0:e8:92:66:
                    68:a6:24:fc:ab:4f:89:6e:47:95:85:7c:07:25:94:
                    51:68:bf:17:75:3f:cb:6a:ec:38:4d:7a:87:7f:85:
                    14:e6:2c:10:96:3a:3a:44:b3:29:f9:57:34:2b:92:
                    83:0c:2d:fa:6b:a8:2a:44:dd:25:48:58:0b:a1:ce:
                    8f:fb:71:5e:41:90:ba:ef:06:d9:28:a0:25:88:f6:
                    9e:47:08:9b:d5:e2:46:54:24:45:37:36:64:1f:c9:
                    dd:f1:08:14:44:33:be:c5:e5:31:1a:93:94:39:4d:
                    96:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:AF:F7:E2:DD:3C:05:ED:67:31:80:29:1D:E1:73:65:E0:DE:53:2A
            X509v3 Authority Key Identifier:
                keyid:FF:0D:DF:3F:E5:77:22:01:AF:F7:8C:24:E9:7F:94:4C:38:05:FF:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_w3fP-V3IgGv94wk6X-UTDgF_2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c455bd-b825-4901-8381-04d1247e5d0a/1/_w3fP-V3IgGv94wk6X-UTDgF_2s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c455bd-b825-4901-8381-04d1247e5d0a/1/_w3fP-V3IgGv94wk6X-UTDgF_2s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:ea:76:f9:70:6f:c1:2d:23:de:8c:8f:d5:e4:d7:f1:91:9d:
         75:91:cb:d0:ba:37:8f:52:cf:78:92:0c:3e:cc:bd:13:f9:5b:
         c1:89:fc:fe:f3:23:92:f6:1f:c5:c8:0b:52:8c:a4:f0:fe:63:
         0f:fb:33:37:af:fc:99:2e:42:83:23:01:ad:ec:b6:3b:95:6d:
         8b:18:e5:b0:a6:9f:95:57:9a:4b:ab:8b:97:aa:43:af:db:fd:
         3e:00:39:32:8a:3f:13:7e:52:e5:f0:bb:fa:78:80:27:35:3c:
         38:81:eb:8b:a9:74:c3:6a:a1:81:bd:6b:3b:43:3c:42:91:50:
         37:84:b5:b3:70:6b:c3:05:5c:82:bb:19:b9:73:ab:62:7a:4b:
         40:ca:12:20:0e:a4:4d:8b:01:d2:6e:af:d6:55:d9:c7:ca:23:
         34:a6:17:99:da:ec:2a:46:8a:33:98:ff:d8:47:ab:97:05:d8:
         65:aa:86:27:28:1f:42:95:4b:8d:07:2c:6a:1b:00:0b:9d:7e:
         47:57:2f:96:c4:53:9d:bf:21:af:42:81:66:94:f7:4e:97:a9:
         ed:ab:d5:db:18:b4:2c:3d:e8:16:51:b6:f1:d5:2a:b8:c2:c2:
         cd:55:94:86:99:b2:e4:d9:fc:bd:05:62:30:e7:01:49:df:11:
         45:14:1c:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:27:08 2025 by rpki-client