Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/9bcada-d955-4f2a-9254-f9ec566686b9/1/wxgakj6aw8AF60xz7ceh6DJaWx4.mft
File:                     wxgakj6aw8AF60xz7ceh6DJaWx4.mft (raw, json)
Hash identifier:          m1FVJl20/cmFt6TQtBaCr39D1s54mDZhJ+HznOPZSoQ=
Subject key identifier:   57:26:E8:89:A5:4E:90:D4:C2:77:B7:30:DD:EF:27:D9:D1:15:D6:3F
Authority key identifier: C3:18:1A:92:3E:9A:C3:C0:05:EB:4C:73:ED:C7:A1:E8:32:5A:5B:1E
Certificate issuer:       /CN=c3181a923e9ac3c005eb4c73edc7a1e8325a5b1e
Certificate serial:       0199FF5978794D396FC85873302F77512508
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wxgakj6aw8AF60xz7ceh6DJaWx4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/9bcada-d955-4f2a-9254-f9ec566686b9/1/wxgakj6aw8AF60xz7ceh6DJaWx4.mft
Manifest number:          082A
Signing time:             Mon 20 Oct 2025 02:01:17 +0000
Manifest this update:     Mon 20 Oct 2025 02:01:17 +0000
Manifest next update:     Tue 21 Oct 2025 02:01:17 +0000
Files and hashes:         1: H6hSTGzUXYO8wuCS7_uXx0OkwsQ.roa (hash: C3R1uTE0vZQdguq3OxSn35ovF8rEDK/1GfpIlJlHImc=)
                          2: j6m8JD754OZd2zfkrzPKc7t_k4U.roa (hash: hUQqPswFb44tCsj8bdeOO4xSCpedzp6XZaAwqO/TYtU=)
                          3: oPzqlVtclIS1SF4yLt-sGEys0Rc.roa (hash: e1YYcOS89IG2X1r/k2fMS0Qlsda+NH4z6UJ1+i2AY+4=)
                          4: wxgakj6aw8AF60xz7ceh6DJaWx4.crl (hash: k5qSMK1kqH3hXAAFflGsCX/BSK+oOmABsNibYKaGVVM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/9bcada-d955-4f2a-9254-f9ec566686b9/1/wxgakj6aw8AF60xz7ceh6DJaWx4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/9bcada-d955-4f2a-9254-f9ec566686b9/1/wxgakj6aw8AF60xz7ceh6DJaWx4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wxgakj6aw8AF60xz7ceh6DJaWx4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ff:59:78:79:4d:39:6f:c8:58:73:30:2f:77:51:25:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3181a923e9ac3c005eb4c73edc7a1e8325a5b1e
        Validity
            Not Before: Oct 20 02:01:17 2025 GMT
            Not After : Oct 21 02:01:17 2025 GMT
        Subject: CN=5726e889a54e90d4c277b730ddef27d9d115d63f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c9:27:88:9d:18:7b:6d:2d:ff:93:37:85:46:
                    42:2d:8c:52:46:4a:10:2c:14:ba:83:1e:4d:19:f8:
                    be:74:22:39:80:29:af:61:49:bc:4c:bb:c1:12:a6:
                    00:e3:d0:12:97:a3:21:50:43:3b:b0:d1:7d:7d:14:
                    66:d1:3a:37:2c:f0:a8:e9:cd:41:c8:27:32:23:df:
                    3a:51:d7:bb:c0:f2:c8:45:fc:00:e6:e3:63:58:e8:
                    83:7c:ed:fe:8d:ba:b1:9b:2a:bf:3c:40:51:4e:75:
                    71:7c:64:70:a4:8b:7a:72:6b:16:e4:b2:7d:73:98:
                    7a:2e:6f:f8:3b:89:70:44:4c:a8:18:a9:37:04:9b:
                    64:6d:31:ab:2e:02:dd:de:09:94:0d:20:fd:f8:46:
                    ff:8a:47:33:c2:93:92:c5:f5:04:b4:8a:ef:bd:a1:
                    1f:f8:8c:78:25:32:b1:69:22:23:34:c8:dd:74:ca:
                    27:34:b0:ed:d2:83:36:6f:04:32:c5:fe:46:44:5e:
                    ee:d0:3c:fd:16:d4:03:4e:76:93:89:ce:31:91:2a:
                    c0:5e:1e:08:f7:30:ff:3e:50:93:0a:80:ad:85:ad:
                    bd:6e:ad:bf:d7:14:36:7e:0c:c1:bf:7a:7c:bc:2c:
                    e6:9d:ff:82:10:a0:6d:0d:da:55:57:25:4c:3b:b0:
                    2a:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:26:E8:89:A5:4E:90:D4:C2:77:B7:30:DD:EF:27:D9:D1:15:D6:3F
            X509v3 Authority Key Identifier:
                keyid:C3:18:1A:92:3E:9A:C3:C0:05:EB:4C:73:ED:C7:A1:E8:32:5A:5B:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wxgakj6aw8AF60xz7ceh6DJaWx4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/9bcada-d955-4f2a-9254-f9ec566686b9/1/wxgakj6aw8AF60xz7ceh6DJaWx4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/9bcada-d955-4f2a-9254-f9ec566686b9/1/wxgakj6aw8AF60xz7ceh6DJaWx4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:44:25:d1:77:7d:29:65:34:43:2a:97:64:ee:dc:7f:a7:c8:
         d4:29:56:39:ac:d1:ad:07:cf:95:f8:14:a3:f0:a4:be:d1:a9:
         4b:1f:58:6a:59:98:a8:db:39:5b:fb:05:03:68:b0:46:f7:ab:
         d4:51:d0:73:28:26:1e:ab:71:8d:42:58:50:2e:13:a3:53:19:
         3a:eb:f4:0f:67:61:29:db:ec:6a:40:f8:5c:bd:93:c1:48:21:
         2b:fd:18:d2:5e:44:08:9a:fe:d9:50:8f:c1:dc:5b:6d:f4:c9:
         ed:4b:d2:32:d1:04:4b:b9:7a:17:65:92:4e:b6:cd:38:09:60:
         e3:58:56:ae:77:25:2f:d6:73:90:7b:54:60:82:e6:0c:ba:c2:
         e0:75:12:e4:03:ef:a4:e7:1a:fc:d0:da:a9:03:73:ee:cd:c1:
         7e:eb:3f:c3:37:9a:7d:35:85:62:2a:eb:e5:c4:d5:23:20:fb:
         21:ff:cc:e2:df:47:6b:19:fe:80:f2:07:14:1a:5e:0b:b1:18:
         b5:0a:2c:05:c8:5f:f7:70:10:db:3d:f5:60:e6:d7:28:57:5c:
         fd:d2:99:d9:6b:fa:42:08:b3:8c:80:e8:07:7b:63:33:b4:b5:
         f2:49:17:05:74:29:ae:00:a4:03:ee:c6:9b:c1:cd:67:9d:9e:
         6b:06:90:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:55:40 2025 by rpki-client