Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/15326f-c174-493a-999c-cf0099e072c3/1/WH9UeNHpTyQHBXIsN4kHba9VN1c.mft
File:                     WH9UeNHpTyQHBXIsN4kHba9VN1c.mft (raw, json)
Hash identifier:          RFeAU0c1NTcvIQ72d1tWkOLLZhegZ53FLOX22ELswTw=
Subject key identifier:   B0:77:CF:5B:85:20:64:5B:D1:34:2D:C6:C6:00:A1:E7:1F:18:CE:22
Authority key identifier: 58:7F:54:78:D1:E9:4F:24:07:05:72:2C:37:89:07:6D:AF:55:37:57
Certificate issuer:       /CN=587f5478d1e94f240705722c3789076daf553757
Certificate serial:       019A006BEA459A4B12D6B8371AAF7B3FD565
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WH9UeNHpTyQHBXIsN4kHba9VN1c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/15326f-c174-493a-999c-cf0099e072c3/1/WH9UeNHpTyQHBXIsN4kHba9VN1c.mft
Manifest number:          021F
Signing time:             Mon 20 Oct 2025 07:01:03 +0000
Manifest this update:     Mon 20 Oct 2025 07:01:03 +0000
Manifest next update:     Tue 21 Oct 2025 07:01:03 +0000
Files and hashes:         1: JYHlFaw4wOmIWR_77ywpgSBNK2k.roa (hash: OvZXgWODCQ+eoxv2l2YqNiIKjAuMYd6ZKeSQVCi/uJE=)
                          2: WH9UeNHpTyQHBXIsN4kHba9VN1c.crl (hash: TiI0jXD4sEckP88olu1U2KFV0WXm+OtCLX/AR5muA+I=)
                          3: d9EPdccRI9fe31r8YXiF11dbuAE.roa (hash: Mn6la1cNZ2lvlxnLvxs6dnBmU/hxdiSINwGaH327vug=)
                          4: g1OClMd_E4NQ7EkPx7bidts26wA.roa (hash: CeqCEmByjs4N40bd+Z4KEPz6ASh9HSswP/ltMk2hKeQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/15326f-c174-493a-999c-cf0099e072c3/1/WH9UeNHpTyQHBXIsN4kHba9VN1c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/15326f-c174-493a-999c-cf0099e072c3/1/WH9UeNHpTyQHBXIsN4kHba9VN1c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WH9UeNHpTyQHBXIsN4kHba9VN1c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 07:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:00:6b:ea:45:9a:4b:12:d6:b8:37:1a:af:7b:3f:d5:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=587f5478d1e94f240705722c3789076daf553757
        Validity
            Not Before: Oct 20 07:01:03 2025 GMT
            Not After : Oct 21 07:01:03 2025 GMT
        Subject: CN=b077cf5b8520645bd1342dc6c600a1e71f18ce22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:9b:de:66:60:3d:be:fa:e2:0b:c8:45:64:d9:
                    de:cd:3d:0b:f9:60:65:e5:85:a2:48:bf:27:88:b7:
                    7f:73:80:76:53:3a:2d:fc:cc:ce:4a:b2:2b:6f:39:
                    10:29:ac:f9:0b:52:e4:f6:87:1b:08:9c:66:64:84:
                    77:1e:b8:d2:14:cf:1a:39:6f:f0:f4:f9:a5:13:25:
                    fe:7f:ca:21:4e:7d:a4:5c:c7:a7:06:34:de:ac:a1:
                    36:d6:51:12:1c:8b:29:bb:31:36:3a:e8:6d:e7:46:
                    65:aa:bb:4e:a9:9a:b5:42:c3:71:b8:68:4f:b6:c4:
                    96:c9:40:fa:cf:36:22:9c:dd:24:8f:e6:6e:be:fd:
                    09:3e:33:8f:d3:2c:cf:0c:b0:17:f1:ed:52:7e:3f:
                    f3:6b:ea:ea:e7:a5:89:fa:7f:f1:d9:46:67:52:ec:
                    ae:93:bb:6b:25:6e:2b:11:92:1f:95:fb:9b:4a:96:
                    2c:d4:b4:26:05:b9:8e:f1:6a:91:35:bd:89:bd:3d:
                    45:dd:81:07:b8:09:61:aa:26:ed:e1:95:c7:85:03:
                    81:f2:d1:a8:4d:c9:e5:07:e1:93:41:c3:b9:56:72:
                    91:a9:f1:96:a2:96:20:34:65:92:8b:6c:aa:10:7b:
                    c4:9d:39:e2:66:89:2a:ca:ff:d4:dc:ef:24:2a:ba:
                    7c:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:77:CF:5B:85:20:64:5B:D1:34:2D:C6:C6:00:A1:E7:1F:18:CE:22
            X509v3 Authority Key Identifier:
                keyid:58:7F:54:78:D1:E9:4F:24:07:05:72:2C:37:89:07:6D:AF:55:37:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WH9UeNHpTyQHBXIsN4kHba9VN1c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/15326f-c174-493a-999c-cf0099e072c3/1/WH9UeNHpTyQHBXIsN4kHba9VN1c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/15326f-c174-493a-999c-cf0099e072c3/1/WH9UeNHpTyQHBXIsN4kHba9VN1c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:ad:a2:07:ad:6c:1b:fa:ba:91:6b:8a:80:49:50:e1:2e:e9:
         f0:25:b6:43:33:b9:9b:e4:12:cf:ab:92:88:16:66:22:3e:a3:
         84:aa:ca:42:fc:a4:7e:83:49:25:e7:7b:f2:54:51:71:11:7d:
         ba:14:76:a1:50:63:76:76:03:50:57:ef:fb:6e:5c:e1:a3:04:
         0e:d3:29:76:07:db:87:aa:49:c7:cb:80:5d:17:ec:c7:6f:06:
         a6:3c:b8:d0:b3:7d:3b:fe:46:19:9a:0c:ce:ad:cc:76:f5:a9:
         af:5b:c7:11:de:15:d5:9c:c7:cd:01:7c:3e:42:36:68:7c:96:
         77:50:f5:7e:94:ff:9c:1f:00:43:e3:43:b7:ae:83:73:b3:8f:
         0b:90:7e:f6:16:a2:f1:91:a4:70:27:59:60:eb:e0:ff:1b:72:
         d2:bf:1f:84:5d:e6:5d:b6:6a:11:d3:14:e0:6a:40:c4:99:9c:
         99:de:a4:ca:5d:33:2b:cc:c9:3f:29:09:dd:85:c5:af:d1:f6:
         e4:0a:01:63:b4:6c:75:f9:74:30:cd:54:84:11:a2:93:9b:fe:
         22:65:a4:7f:7f:c3:17:36:41:c2:a7:b4:89:de:79:2a:68:c1:
         cc:1f:73:9f:93:39:9d:6a:b6:40:81:f7:4e:9b:34:21:75:68:
         fd:c6:28:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoAa+pFmksS1rg3Gq97P9VlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4N2Y1NDc4ZDFlOTRmMjQwNzA1NzIyYzM3ODkwNzZkYWY1
NTM3NTcwHhcNMjUxMDIwMDcwMTAzWhcNMjUxMDIxMDcwMTAzWjAzMTEwLwYDVQQD
EyhiMDc3Y2Y1Yjg1MjA2NDViZDEzNDJkYzZjNjAwYTFlNzFmMThjZTIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpveZmA9vvriC8hFZNnezT0L+WBl
5YWiSL8niLd/c4B2Uzot/MzOSrIrbzkQKaz5C1Lk9ocbCJxmZIR3HrjSFM8aOW/w
9PmlEyX+f8ohTn2kXMenBjTerKE21lESHIspuzE2Ouht50ZlqrtOqZq1QsNxuGhP
tsSWyUD6zzYinN0kj+Zuvv0JPjOP0yzPDLAX8e1Sfj/za+rq56WJ+n/x2UZnUuyu
k7trJW4rEZIflfubSpYs1LQmBbmO8WqRNb2JvT1F3YEHuAlhqibt4ZXHhQOB8tGo
TcnlB+GTQcO5VnKRqfGWopYgNGWSi2yqEHvEnTniZokqyv/U3O8kKrp8jQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLB3z1uFIGRb0TQtxsYAoecfGM4iMB8GA1UdIwQY
MBaAFFh/VHjR6U8kBwVyLDeJB22vVTdXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0g5VWVOSHBUeVFIQlhJc040a0hiYTlWTjFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8xNTMyNmYtYzE3NC00OTNhLTk5OWMt
Y2YwMDk5ZTA3MmMzLzEvV0g5VWVOSHBUeVFIQlhJc040a0hiYTlWTjFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC8xNTMyNmYtYzE3NC00OTNhLTk5OWMtY2YwMDk5ZTA3MmMz
LzEvV0g5VWVOSHBUeVFIQlhJc040a0hiYTlWTjFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAda2iB61s
G/q6kWuKgElQ4S7p8CW2QzO5m+QSz6uSiBZmIj6jhKrKQvykfoNJJed78lRRcRF9
uhR2oVBjdnYDUFfv+25c4aMEDtMpdgfbh6pJx8uAXRfsx28Gpjy40LN9O/5GGZoM
zq3MdvWpr1vHEd4V1ZzHzQF8PkI2aHyWd1D1fpT/nB8AQ+NDt66Dc7OPC5B+9hai
8ZGkcCdZYOvg/xty0r8fhF3mXbZqEdMU4GpAxJmcmd6kyl0zK8zJPykJ3YXFr9H2
5AoBY7Rsdfl0MM1UhBGik5v+ImWkf3/DFzZBwqe0id55KmjBzB9zn5M5nWq2QIH3
Tps0IXVo/cYoEQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 12:40:24 2025 by rpki-client