Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.mft
File:                     wIlCOvG-AwJxltH4HfIpkpeM2m4.mft (raw, json)
Hash identifier:          GsF4o8PAhLWGC+jPaOd8IBWytNwhKVBlTWR+sl8BZNU=
Subject key identifier:   24:3D:80:13:85:77:06:5F:89:6B:7B:10:8C:ED:A3:77:E6:19:01:2C
Authority key identifier: C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E
Certificate issuer:       /CN=c089423af1be03027196d1f81df22992978cda6e
Certificate serial:       0199FEB51BD340A60FE58F1027ED8D641CD7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.mft
Manifest number:          1706
Signing time:             Sun 19 Oct 2025 23:01:45 +0000
Manifest this update:     Sun 19 Oct 2025 23:01:45 +0000
Manifest next update:     Mon 20 Oct 2025 23:01:45 +0000
Files and hashes:         1: 7S7ARH6OeOMmEIzUWrymG1HMgUg.roa (hash: 4by5oqUTQ7giLqJYKeU0H0kpc5OHsvVhuQQi+oZ4Ey4=)
                          2: CTPnkSwaGYtL6imrEx676VqeZC4.roa (hash: D1Nv8O7aG0N8He1Qo3asb3aVDNKj9swYpH0SQDNKYk8=)
                          3: _EXnENeiZDru6Rg5eptQB0B0h-Q.roa (hash: R9ZxoaDJ13dNCFiLuLrziErqKQo2in5XnYm6NVb3JRs=)
                          4: cxLUtvRc1PE7p_j4spKLO77ND2g.roa (hash: 62Na0cXlNHEPB5HNROm00kPAIvHRuW520fWysT/wQWE=)
                          5: leNx016N_dkYChafjBIEq47VD6U.roa (hash: 71MUZoRwZSAtTYDE2sZfcbqmgD/V7iHl+V3oCDVt/es=)
                          6: mIPjHyHgx7EJeioOE4Q4P4Mqbt8.roa (hash: xSfoMU51fVLShF8gxOk3DAFmiELwAMru8mqI9rYFDks=)
                          7: pK-akxxW38kMPF3tOSehLJv18so.roa (hash: 8z7zWmQVHk3yetyyEcN2QnaYdcDrAOln5Kbg821DOsE=)
                          8: v2_OrqVCWea_JKzk_uWX1QKv4ow.roa (hash: rg1iH+wIMvW6P+H3H16YTC46vO9pXuraY8V/Do1pZt4=)
                          9: wIlCOvG-AwJxltH4HfIpkpeM2m4.crl (hash: IGgnnebBM0bT2uF5uoCHfSETlt2kXvgSceZucKyMvEQ=)
                          10: zVdyTzKpDbl0OAfYCejOiPP6RQs.roa (hash: wp8HYAuHuZQdxEStR+YkNo073hELbbV4MwFVMqI82ug=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 23:01:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:b5:1b:d3:40:a6:0f:e5:8f:10:27:ed:8d:64:1c:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c089423af1be03027196d1f81df22992978cda6e
        Validity
            Not Before: Oct 19 23:01:45 2025 GMT
            Not After : Oct 20 23:01:45 2025 GMT
        Subject: CN=243d80138577065f896b7b108ceda377e619012c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:27:e8:4f:2a:a4:44:1c:01:3b:e5:ca:cf:dc:
                    c6:84:05:c8:2b:1d:9a:43:48:8e:80:fd:95:dd:0d:
                    04:02:1c:24:fe:a0:f9:3f:df:cf:6b:8d:19:b6:c7:
                    62:3d:92:5b:72:6b:3f:34:87:ed:07:81:1d:9e:d9:
                    fb:db:a9:d8:9c:c6:d8:b9:ac:e2:6f:96:ad:19:7e:
                    71:2d:9c:c2:1e:50:ec:d5:01:ed:4b:30:16:9a:64:
                    0c:5b:2d:ff:d9:a0:7b:84:d7:34:d9:66:2b:e6:78:
                    3b:98:5d:4d:ca:9f:10:3a:84:fc:6d:27:0a:68:95:
                    c7:61:d3:d0:29:7a:29:c7:14:bd:00:71:b3:94:cf:
                    e9:45:d0:d1:8d:a0:1d:c2:66:b0:55:79:90:7d:92:
                    2a:a5:90:eb:b5:10:52:98:e5:43:98:65:f2:69:4a:
                    65:6d:c6:08:05:e6:dc:de:2f:69:1a:f6:97:82:e7:
                    74:f8:c2:ae:54:5c:aa:31:03:91:5b:9e:01:54:60:
                    7a:f9:28:62:9e:eb:5e:7f:c1:37:6f:e8:4b:bc:31:
                    be:99:f3:5f:ec:67:69:c7:45:81:78:1c:0f:28:0d:
                    a6:5b:d6:71:ab:f5:17:5d:68:f0:47:72:9d:e5:e6:
                    49:7d:b5:a4:9c:97:8e:c1:65:14:1b:96:69:f2:16:
                    d7:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:3D:80:13:85:77:06:5F:89:6B:7B:10:8C:ED:A3:77:E6:19:01:2C
            X509v3 Authority Key Identifier:
                keyid:C0:89:42:3A:F1:BE:03:02:71:96:D1:F8:1D:F2:29:92:97:8C:DA:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wIlCOvG-AwJxltH4HfIpkpeM2m4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc2912-c7b0-4df4-9aa8-65332b47f5eb/1/wIlCOvG-AwJxltH4HfIpkpeM2m4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:17:30:53:99:89:8e:66:a5:13:c9:5f:6d:be:8f:60:75:19:
         bd:e6:c9:13:44:b5:21:23:76:12:62:22:c2:28:0c:8a:70:80:
         7c:63:4d:68:0b:12:7b:b5:65:3b:93:7a:48:31:84:47:48:29:
         28:22:78:5c:16:a2:c1:6d:a9:83:27:a5:be:66:11:bd:74:8c:
         a9:07:29:da:64:d9:76:c8:77:15:b0:33:38:d2:4a:3a:cb:86:
         df:c4:96:5a:dc:45:48:65:e3:f3:2a:aa:78:ab:66:d4:41:74:
         07:9b:12:4f:a7:3c:62:ef:35:f7:4a:67:e6:48:01:1d:19:16:
         32:7c:63:24:ec:26:16:08:83:4e:9b:c1:14:7e:3e:62:6d:3b:
         6d:05:70:9b:b4:cc:6c:9f:38:1f:0c:1e:d4:be:0d:63:64:95:
         bd:4d:8c:e4:91:9f:fb:38:7b:13:01:02:44:7b:45:5e:70:21:
         54:d3:61:45:25:5e:13:1c:ca:f9:ad:1a:9f:6f:6f:a0:a8:2f:
         01:21:c0:52:7e:29:f4:71:db:c3:f0:1b:2b:e1:4a:85:c8:93:
         6a:c0:55:51:fb:52:14:a4:ca:85:ae:74:03:ca:ff:8d:0b:97:
         0f:e7:f1:c9:d0:e4:3e:11:ee:1b:7e:a4:db:a6:58:6b:8e:08:
         83:04:57:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:12:02 2025 by rpki-client