Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/c4975f-ea94-43a7-9326-7ca22ba141b3/1/_wcypCMoB0cBFCIh49RqKfKWwpw.mft
File:                     _wcypCMoB0cBFCIh49RqKfKWwpw.mft (raw, json)
Hash identifier:          LcJBm8lMOmi/BZyqe6Zt7ED12oh5hiMQmLgneO15tO0=
Subject key identifier:   51:5A:81:D6:26:5A:BA:4E:B0:D0:45:98:62:9F:EA:1A:FD:8C:EC:9A
Authority key identifier: FF:07:32:A4:23:28:07:47:01:14:22:21:E3:D4:6A:29:F2:96:C2:9C
Certificate issuer:       /CN=ff0732a42328074701142221e3d46a29f296c29c
Certificate serial:       0199FAD7AE2636E7ED68462C2A84B8AE4FE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_wcypCMoB0cBFCIh49RqKfKWwpw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/c4975f-ea94-43a7-9326-7ca22ba141b3/1/_wcypCMoB0cBFCIh49RqKfKWwpw.mft
Manifest number:          0290
Signing time:             Sun 19 Oct 2025 05:01:02 +0000
Manifest this update:     Sun 19 Oct 2025 05:01:02 +0000
Manifest next update:     Mon 20 Oct 2025 05:01:02 +0000
Files and hashes:         1: 1-dSj2fWJdUO6bz9sc2BYVK5JDQE.roa (hash: dsFKxx55TJI4durjTXMUPKnGnFdN9dd8cpckDwK4aTc=)
                          2: _wcypCMoB0cBFCIh49RqKfKWwpw.crl (hash: aqivqPSKvDshXTuoEID6yDapSwXksDtHSrbAlykZN08=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/c4975f-ea94-43a7-9326-7ca22ba141b3/1/_wcypCMoB0cBFCIh49RqKfKWwpw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/c4975f-ea94-43a7-9326-7ca22ba141b3/1/_wcypCMoB0cBFCIh49RqKfKWwpw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_wcypCMoB0cBFCIh49RqKfKWwpw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 05:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:d7:ae:26:36:e7:ed:68:46:2c:2a:84:b8:ae:4f:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff0732a42328074701142221e3d46a29f296c29c
        Validity
            Not Before: Oct 19 05:01:02 2025 GMT
            Not After : Oct 20 05:01:02 2025 GMT
        Subject: CN=515a81d6265aba4eb0d04598629fea1afd8cec9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:56:5e:49:91:4f:d6:f3:d3:a1:97:43:6e:e1:
                    34:d5:1f:28:15:76:5d:9a:38:14:ee:4d:fa:ac:d5:
                    b9:a0:a4:b4:e5:65:bc:7d:c0:89:a0:e5:ca:b7:e2:
                    d6:03:e1:7f:73:df:43:13:f7:87:b6:aa:4d:59:98:
                    7a:82:d3:6f:41:50:7a:fd:63:df:a3:09:d1:5c:d7:
                    3e:97:ec:95:99:b1:4b:b6:57:09:3e:6d:8a:a0:e9:
                    77:66:bb:87:b5:3c:a1:98:0e:9c:14:1e:df:56:3f:
                    fc:a5:47:c8:5d:09:e8:15:96:db:af:9c:33:6e:ce:
                    9b:20:f8:c0:bc:44:06:c7:51:97:cb:11:53:46:48:
                    55:b6:71:a6:9d:91:54:4a:25:39:0c:25:6b:75:01:
                    a9:0d:e8:6a:e2:23:57:e7:4f:fd:b7:47:f4:5c:8a:
                    f1:a7:c6:42:77:0b:8c:e2:bf:14:c1:33:45:1e:c0:
                    94:2c:04:ab:05:8f:a3:aa:6a:92:94:5d:77:63:45:
                    3b:cc:a4:c8:f9:21:c3:a1:cd:97:ff:54:52:43:d8:
                    8b:e0:f2:5e:2a:00:db:28:4a:79:20:29:8d:46:d5:
                    a4:75:f5:e8:a6:19:ea:96:07:47:26:16:54:19:2b:
                    1e:f1:dd:46:d7:9c:bc:8d:f3:21:21:dc:ce:bd:6d:
                    a3:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:5A:81:D6:26:5A:BA:4E:B0:D0:45:98:62:9F:EA:1A:FD:8C:EC:9A
            X509v3 Authority Key Identifier:
                keyid:FF:07:32:A4:23:28:07:47:01:14:22:21:E3:D4:6A:29:F2:96:C2:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_wcypCMoB0cBFCIh49RqKfKWwpw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/c4975f-ea94-43a7-9326-7ca22ba141b3/1/_wcypCMoB0cBFCIh49RqKfKWwpw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/c4975f-ea94-43a7-9326-7ca22ba141b3/1/_wcypCMoB0cBFCIh49RqKfKWwpw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:b1:fb:11:fd:0d:d7:11:0d:ff:9a:f0:f1:2c:1f:a5:ba:e4:
         92:67:ac:8a:f7:51:2e:9e:a8:c4:b6:eb:75:2b:ee:ea:e8:d7:
         70:38:20:6e:08:f0:37:34:ef:8d:6e:28:80:2b:bb:63:a7:84:
         44:f1:b6:f6:fd:54:3c:e9:33:66:55:9d:a5:4e:a8:df:79:ea:
         2f:c9:dc:a0:96:cd:ba:ec:46:b0:38:54:74:ed:e9:75:18:f4:
         b5:29:94:dc:50:40:aa:96:ed:9a:31:e5:1d:ab:67:74:b3:26:
         03:06:0b:41:1f:69:d1:62:cb:af:d6:e8:08:64:ec:4d:14:9f:
         24:ca:3e:fd:51:9d:31:71:8c:94:d6:40:f7:18:f8:ed:8f:2d:
         b9:3e:69:d3:4b:18:9e:a8:d9:cd:72:b0:bd:52:66:d7:66:e0:
         85:8a:32:c6:7f:96:b3:ae:45:cd:fa:61:b5:71:72:41:48:0b:
         02:38:19:1f:cb:19:40:54:a5:29:eb:f6:c8:21:43:e1:2c:ec:
         78:e6:92:5f:9b:b8:b8:0b:0c:da:4b:a9:24:b5:2d:f2:0f:b5:
         1b:c8:72:1c:0e:8a:5d:72:9f:52:38:90:64:bc:f0:bf:e7:e6:
         27:d5:08:80:62:8b:cf:68:7f:c8:5f:77:50:01:e4:79:60:0d:
         43:8d:ee:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:19:32 2025 by rpki-client