Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.mft
File:                     wb-PPmCQcoiedN0PtOJ_m6xHs7A.mft (raw, json)
Hash identifier:          J1FnRUtpMzMHeXt1MIJW0JHMF94plWQtsvdoBsPk4Ww=
Subject key identifier:   C7:0F:06:45:59:25:C9:8F:B9:C5:3D:A4:03:3A:D6:92:91:48:6C:6F
Authority key identifier: C1:BF:8F:3E:60:90:72:88:9E:74:DD:0F:B4:E2:7F:9B:AC:47:B3:B0
Certificate issuer:       /CN=c1bf8f3e609072889e74dd0fb4e27f9bac47b3b0
Certificate serial:       0199FC58608C364DBAC6FA53705931BDB4DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wb-PPmCQcoiedN0PtOJ_m6xHs7A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.mft
Manifest number:          16ED
Signing time:             Sun 19 Oct 2025 12:01:14 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:14 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:14 +0000
Files and hashes:         1: DIDvdbb3GKHM4R0fThp87ONTKIg.roa (hash: PpLadHjUjIbh3z8TdW7x9p2zKoB60tTFsLSNrfKJGP0=)
                          2: NiiYntce0l2g8rM0crSiQd9ju9Q.roa (hash: dXNA4zFEqgeMGWVbP7xCDHL9Yv22/YkYEyRq1Xgq0Qk=)
                          3: TKLzQ3aUn5r9wRqdWWY_X3np5Nw.roa (hash: FHEE5b54dYwOgG8q4mFeJQWJCBG47+yi4U4T7p61+TU=)
                          4: UwTNWro9evVq9A2tmjUi9EC7e1U.roa (hash: blbaLMvxLnOeS1jYks60LVjVa40KZBXbFkM1K6NYTsw=)
                          5: YD46-wu1gX9Rfc3-h0IJxr5M_6I.roa (hash: eydJEhyuH7mmIcl4Z67qIv5vGkaTb2dD7M7gIFncDbg=)
                          6: awX-yLV9QhTtYIRH8dzM3NZ-YyE.roa (hash: cUBeWKNk+8N9DHilcnVglMXRUVzQzFqcjW7BKF+It/4=)
                          7: hXz87hx_B-hbL3xb1XWOpeq_ghU.roa (hash: qgegZ0Q4MVtx4Pfhi+QnSP0PfWput13BxQSPM+9zyGM=)
                          8: nGG-OUODAxwLxi6jNHbpt8RGNb8.roa (hash: CE5MyGR9lb1V5N4ocRK2ocMWINjBM6Y8ecSTUiTujPU=)
                          9: wb-PPmCQcoiedN0PtOJ_m6xHs7A.crl (hash: Q4YOhQgnU43Uu0Miwfg8oFZg8x1G3Co/b3YWVLScrdo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wb-PPmCQcoiedN0PtOJ_m6xHs7A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:58:60:8c:36:4d:ba:c6:fa:53:70:59:31:bd:b4:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1bf8f3e609072889e74dd0fb4e27f9bac47b3b0
        Validity
            Not Before: Oct 19 12:01:14 2025 GMT
            Not After : Oct 20 12:01:14 2025 GMT
        Subject: CN=c70f06455925c98fb9c53da4033ad69291486c6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:0c:1c:b2:70:25:1d:77:9e:85:e4:a0:25:e7:
                    6a:7b:3f:e3:23:32:cc:e1:ce:31:c6:cc:7a:f0:f5:
                    4a:26:07:15:4f:4c:6a:e2:3a:d8:62:67:6e:2d:fb:
                    6c:4c:bf:4b:2f:05:f3:a1:59:6a:ac:8d:d6:3b:78:
                    5b:7b:12:b7:de:12:81:09:a2:57:3e:72:a8:13:c4:
                    eb:a0:f6:2b:c7:35:37:2a:ef:68:7f:4a:f7:58:81:
                    f5:4d:9c:7e:f6:c7:f9:0b:db:e7:8c:32:b5:4c:9d:
                    83:87:50:b2:4b:3c:64:8c:bb:f4:10:89:59:85:2b:
                    f1:fa:88:8a:47:8a:7d:f5:48:8a:e2:61:b0:9c:0e:
                    54:8e:53:b3:87:ea:cc:c3:a1:c1:7a:22:e1:af:91:
                    b3:ad:5c:3a:9e:2c:38:bc:56:65:36:7a:9c:aa:91:
                    77:3a:13:77:11:3b:97:86:da:3f:b3:0b:a0:c4:95:
                    a5:ce:75:c8:55:3d:fb:6c:48:b0:ec:56:17:b7:9c:
                    62:f2:a1:d2:ea:38:31:e0:7f:7c:d3:c7:3d:33:dd:
                    07:b0:81:1e:ba:7e:96:d1:5a:74:ca:8c:e8:dc:4d:
                    ec:39:a7:29:52:8d:a4:86:9a:c4:e9:ed:eb:1e:9d:
                    c9:30:b4:6e:af:0e:10:7f:66:27:f1:50:a4:da:8b:
                    ef:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:0F:06:45:59:25:C9:8F:B9:C5:3D:A4:03:3A:D6:92:91:48:6C:6F
            X509v3 Authority Key Identifier:
                keyid:C1:BF:8F:3E:60:90:72:88:9E:74:DD:0F:B4:E2:7F:9B:AC:47:B3:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wb-PPmCQcoiedN0PtOJ_m6xHs7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:73:7b:88:68:52:84:2f:dc:1c:c7:fb:cd:94:0e:b2:2b:27:
         22:b8:39:1c:b0:b4:e0:95:18:c8:96:25:97:5f:da:6e:d9:a2:
         7c:35:38:2e:b7:bf:bd:60:3b:74:b5:73:d8:53:d5:9e:57:43:
         9b:25:a4:d8:82:7e:83:c8:0b:80:d9:85:75:c1:09:b9:15:dc:
         e9:e8:04:8b:e7:73:84:6d:5f:f8:d0:20:af:41:0c:6a:a9:9d:
         f8:fd:71:5a:6f:90:ab:98:bf:1d:81:e4:6c:da:0b:6c:f9:d7:
         87:06:fb:bb:ff:22:ed:87:a4:18:a2:3c:60:13:62:30:01:06:
         67:9c:ef:07:9f:91:8c:3b:ab:55:34:a2:a8:42:31:80:0e:ff:
         fb:94:f6:2d:86:f4:04:2a:d8:25:c7:e2:d7:19:08:34:3f:f0:
         56:45:a6:26:8a:aa:64:17:16:40:3b:4b:0f:60:31:fc:d0:1a:
         36:e2:f8:1d:4e:45:75:95:dd:fe:88:81:20:7d:a7:2f:21:36:
         fe:9d:53:2f:0c:d6:0d:c3:69:ab:e3:c8:59:2a:c9:e4:75:b9:
         b2:0d:c1:c3:09:72:3e:30:1c:53:4b:e8:79:a6:3b:68:77:4c:
         e6:32:0c:03:64:d8:22:9e:62:6f:6f:3e:52:e8:e5:ab:f3:de:
         f2:b8:d0:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:47:06 2025 by rpki-client