Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/9be856-0e32-400f-8e89-369cd8be25fe/1/wBHuBmZBdQpRFH2NyZobEFZY0gM.mft
File:                     wBHuBmZBdQpRFH2NyZobEFZY0gM.mft (raw, json)
Hash identifier:          D8M4kyrMUHxjIzcMDafWTC/itvxuXfk/MI7MEIjgwjg=
Subject key identifier:   26:5C:79:41:CF:DD:9C:41:73:9A:3A:E7:F4:18:4A:1D:B0:99:3E:67
Authority key identifier: C0:11:EE:06:66:41:75:0A:51:14:7D:8D:C9:9A:1B:10:56:58:D2:03
Certificate issuer:       /CN=c011ee066641750a51147d8dc99a1b105658d203
Certificate serial:       0199FA6A2DFA42687CEF828C00A51BF63EEB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wBHuBmZBdQpRFH2NyZobEFZY0gM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/9be856-0e32-400f-8e89-369cd8be25fe/1/wBHuBmZBdQpRFH2NyZobEFZY0gM.mft
Manifest number:          16E1
Signing time:             Sun 19 Oct 2025 03:01:26 +0000
Manifest this update:     Sun 19 Oct 2025 03:01:26 +0000
Manifest next update:     Mon 20 Oct 2025 03:01:26 +0000
Files and hashes:         1: 1-HSWsiWM-hDl2O_5CedvBQ55YQ8.roa (hash: le2bdDjj8eJvjQqLPVAV9ifpc64QyRhmisD9ayP5j2w=)
                          2: WfTKVc2urWFHINs-H7ByO8d8wxU.roa (hash: vrGq1fPxckNV2umjKEkVDvs5jt8ww7idFEdo+nD8HaU=)
                          3: tq6G4XKwLkPscmGDzl0ViLLGYc0.roa (hash: gCrgWGNDXJJp5RhoxWhID/tfHWwjzd875gYTpw7zJGg=)
                          4: wBHuBmZBdQpRFH2NyZobEFZY0gM.crl (hash: dS7bsGkqbdNcGCc+1Of8vBqZ4gHVBx4XnvmszQgynY4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/9be856-0e32-400f-8e89-369cd8be25fe/1/wBHuBmZBdQpRFH2NyZobEFZY0gM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/9be856-0e32-400f-8e89-369cd8be25fe/1/wBHuBmZBdQpRFH2NyZobEFZY0gM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wBHuBmZBdQpRFH2NyZobEFZY0gM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 03:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:6a:2d:fa:42:68:7c:ef:82:8c:00:a5:1b:f6:3e:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c011ee066641750a51147d8dc99a1b105658d203
        Validity
            Not Before: Oct 19 03:01:26 2025 GMT
            Not After : Oct 20 03:01:26 2025 GMT
        Subject: CN=265c7941cfdd9c41739a3ae7f4184a1db0993e67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:66:fd:e5:d5:be:d3:41:8a:dc:b1:ef:63:f3:
                    45:1a:be:d7:03:d6:00:b1:b6:cb:ab:fd:44:6f:35:
                    44:bc:42:20:59:29:4c:cf:ab:3d:9a:7e:3c:40:c5:
                    f7:ee:19:36:6a:31:24:c6:5c:b3:80:49:11:f6:72:
                    21:59:5b:53:81:d6:ab:d9:66:41:b5:63:a4:86:73:
                    95:30:2c:d0:c5:a2:db:9a:d0:e5:53:6b:5f:90:9c:
                    ac:06:27:33:94:d8:63:3f:b3:15:a7:76:cd:a9:7f:
                    91:d7:b4:e8:f1:f5:c1:85:40:eb:47:31:f3:d2:82:
                    ae:e2:9e:66:74:05:b7:13:86:e5:15:3c:26:ae:13:
                    8d:55:0c:e2:b3:ba:d3:03:7d:b7:b3:a2:f5:95:c3:
                    2f:6c:1b:9b:56:bd:63:d3:da:d0:18:66:68:09:35:
                    16:4e:d7:97:26:33:25:fc:0f:cf:cb:fb:d9:31:26:
                    14:b7:14:ca:63:79:bb:7e:58:86:36:41:39:76:b0:
                    85:75:98:88:f4:b6:9a:8e:a3:99:0d:f2:58:4c:47:
                    5c:f9:d0:43:3f:97:bd:7d:42:8a:bf:78:05:ab:4a:
                    60:d1:da:c9:dd:e1:6d:6c:24:8a:6d:ec:4d:ee:4f:
                    a1:03:36:b3:42:e2:a5:94:1d:2f:2b:34:c1:df:c7:
                    aa:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:5C:79:41:CF:DD:9C:41:73:9A:3A:E7:F4:18:4A:1D:B0:99:3E:67
            X509v3 Authority Key Identifier:
                keyid:C0:11:EE:06:66:41:75:0A:51:14:7D:8D:C9:9A:1B:10:56:58:D2:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBHuBmZBdQpRFH2NyZobEFZY0gM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/9be856-0e32-400f-8e89-369cd8be25fe/1/wBHuBmZBdQpRFH2NyZobEFZY0gM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/9be856-0e32-400f-8e89-369cd8be25fe/1/wBHuBmZBdQpRFH2NyZobEFZY0gM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:67:18:98:0c:fb:8a:6e:4b:d1:3d:aa:0d:a3:a0:fa:c8:2d:
         c7:ea:60:9b:a8:f7:0e:d1:c8:b1:a1:36:29:3a:fa:dd:5f:bf:
         7a:0e:f7:18:5d:ca:b8:c1:7c:e1:3a:e0:9c:c5:d8:b0:bf:63:
         09:c4:43:ba:1f:67:cd:21:cd:7c:ee:3f:98:47:a6:f9:c9:82:
         e8:42:c4:63:46:1b:4c:80:4d:62:9c:1c:2d:aa:c3:8f:4e:6c:
         dd:44:75:b7:dd:66:96:28:18:b7:67:01:64:e1:5c:26:09:0b:
         e0:62:ae:21:91:30:a3:3e:1c:f1:72:4a:c0:c1:6f:45:a0:4c:
         27:b7:a9:e6:85:02:48:a2:47:c8:fa:3a:69:a6:c6:30:4a:07:
         05:d1:60:ed:f5:98:0a:f8:b9:af:17:e1:0b:fc:6c:02:22:a5:
         85:0a:9c:ad:28:3c:92:01:dd:31:4f:c6:f5:07:4f:fb:a2:75:
         48:d7:97:8d:10:ca:8d:86:b3:42:b7:89:eb:f2:a1:1c:0d:dd:
         07:8c:3a:15:62:ea:6a:52:0e:b5:fd:cc:6f:72:31:0f:8e:f8:
         99:8c:f7:49:42:fc:d9:4f:18:8a:82:96:36:7e:ca:c4:d2:6c:
         bb:63:00:b1:a5:f0:c6:51:7b:7c:0f:5e:2a:f1:70:f4:2c:08:
         13:b0:46:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn6ai36Qmh874KMAKUb9j7rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwMTFlZTA2NjY0MTc1MGE1MTE0N2Q4ZGM5OWExYjEwNTY1
OGQyMDMwHhcNMjUxMDE5MDMwMTI2WhcNMjUxMDIwMDMwMTI2WjAzMTEwLwYDVQQD
EygyNjVjNzk0MWNmZGQ5YzQxNzM5YTNhZTdmNDE4NGExZGIwOTkzZTY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumb95dW+00GK3LHvY/NFGr7XA9YA
sbbLq/1EbzVEvEIgWSlMz6s9mn48QMX37hk2ajEkxlyzgEkR9nIhWVtTgdar2WZB
tWOkhnOVMCzQxaLbmtDlU2tfkJysBiczlNhjP7MVp3bNqX+R17To8fXBhUDrRzHz
0oKu4p5mdAW3E4blFTwmrhONVQzis7rTA323s6L1lcMvbBubVr1j09rQGGZoCTUW
TteXJjMl/A/Py/vZMSYUtxTKY3m7fliGNkE5drCFdZiI9LaajqOZDfJYTEdc+dBD
P5e9fUKKv3gFq0pg0drJ3eFtbCSKbexN7k+hAzazQuKllB0vKzTB38eqwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCZceUHP3ZxBc5o65/QYSh2wmT5nMB8GA1UdIwQY
MBaAFMAR7gZmQXUKURR9jcmaGxBWWNIDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0JIdUJtWkJkUXBSRkgyTnlab2JFRlpZMGdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi85YmU4NTYtMGUzMi00MDBmLThlODkt
MzY5Y2Q4YmUyNWZlLzEvd0JIdUJtWkJkUXBSRkgyTnlab2JFRlpZMGdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi85YmU4NTYtMGUzMi00MDBmLThlODktMzY5Y2Q4YmUyNWZl
LzEvd0JIdUJtWkJkUXBSRkgyTnlab2JFRlpZMGdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjmcYmAz7
im5L0T2qDaOg+sgtx+pgm6j3DtHIsaE2KTr63V+/eg73GF3KuMF84TrgnMXYsL9j
CcRDuh9nzSHNfO4/mEem+cmC6ELEY0YbTIBNYpwcLarDj05s3UR1t91mligYt2cB
ZOFcJgkL4GKuIZEwoz4c8XJKwMFvRaBMJ7ep5oUCSKJHyPo6aabGMEoHBdFg7fWY
Cvi5rxfhC/xsAiKlhQqcrSg8kgHdMU/G9QdP+6J1SNeXjRDKjYazQreJ6/KhHA3d
B4w6FWLqalIOtf3Mb3IxD474mYz3SUL82U8YioKWNn7KxNJsu2MAsaXwxlF7fA9e
KvFw9CwIE7BGVw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:51 2025 by rpki-client