Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.mft
File:                     wQTNffhMMZ0ZrzWxEE8XProsbb0.mft (raw, json)
Hash identifier:          x4BIt+/HbUbbhFLVLP7uiX8c12vqNguddZJ9LbtcLxw=
Subject key identifier:   FC:E5:4E:B7:45:9E:8E:1D:F2:BE:AD:F8:22:06:B7:93:48:54:2E:F9
Authority key identifier: C1:04:CD:7D:F8:4C:31:9D:19:AF:35:B1:10:4F:17:3E:BA:2C:6D:BD
Certificate issuer:       /CN=c104cd7df84c319d19af35b1104f173eba2c6dbd
Certificate serial:       0199FA69F6ECFF86A10463956DE16A8A88A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wQTNffhMMZ0ZrzWxEE8XProsbb0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.mft
Manifest number:          090A
Signing time:             Sun 19 Oct 2025 03:01:12 +0000
Manifest this update:     Sun 19 Oct 2025 03:01:12 +0000
Manifest next update:     Mon 20 Oct 2025 03:01:12 +0000
Files and hashes:         1: 1-XP7SSYynpJIZg4ibI0Wpm_d7y4.roa (hash: LOYh8aPG/hc+f2Wb/Cw6QofBs2xxLo7hf2Lj5w8CzgE=)
                          2: wQTNffhMMZ0ZrzWxEE8XProsbb0.crl (hash: hPRzv+QFgddDIQhN9QZU6qZvloi8R+TUaXgtyCBpq3A=)
                          3: wtdVCL_vW5DHi-a_XtUsZ9JKKCw.roa (hash: JT8633z6qqiHZIgSN23W3yJc2J/8lJJEZ1oYIJiRcWs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wQTNffhMMZ0ZrzWxEE8XProsbb0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 03:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:69:f6:ec:ff:86:a1:04:63:95:6d:e1:6a:8a:88:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c104cd7df84c319d19af35b1104f173eba2c6dbd
        Validity
            Not Before: Oct 19 03:01:12 2025 GMT
            Not After : Oct 20 03:01:12 2025 GMT
        Subject: CN=fce54eb7459e8e1df2beadf82206b79348542ef9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ad:d4:1b:85:94:73:ac:cc:6c:d5:2d:37:40:
                    c7:4b:6c:39:17:ea:b2:50:e6:d7:36:be:50:6a:4a:
                    a5:55:f1:04:5a:fe:98:1a:f5:3a:c5:6b:8e:47:92:
                    e5:35:f8:c5:1a:31:34:ae:e9:6e:ff:92:e3:a9:e3:
                    90:42:91:05:14:e6:de:65:a7:38:9c:7a:31:91:d1:
                    e4:f1:83:12:74:e0:90:c2:99:93:bc:11:c4:b8:b4:
                    a9:e9:bb:e8:0b:17:76:72:9a:f7:a3:1a:b9:e8:69:
                    c4:1c:96:32:d8:95:d0:10:06:24:07:85:79:58:93:
                    3b:25:69:51:82:a3:11:5c:da:ed:71:84:ed:30:36:
                    fa:b8:11:23:92:d9:98:c9:8d:51:49:1e:50:e8:e5:
                    90:01:75:a2:0f:c5:c2:28:b7:7d:79:ed:ba:74:11:
                    19:f7:1a:2c:e7:fd:7b:d8:5f:c1:25:63:8e:91:5c:
                    6f:4a:a6:fb:71:eb:c3:be:70:a6:3b:a4:4d:05:d9:
                    0c:2d:46:4f:62:6d:fc:41:32:d5:c5:d0:27:da:d2:
                    3d:ea:e0:a4:56:cf:1e:a9:f6:6b:9c:9b:0f:ba:6d:
                    38:39:17:5b:d3:a8:e9:6f:fa:68:f7:38:25:9a:fc:
                    9d:51:4b:fd:8d:a1:52:54:17:3f:70:af:88:20:f1:
                    78:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:E5:4E:B7:45:9E:8E:1D:F2:BE:AD:F8:22:06:B7:93:48:54:2E:F9
            X509v3 Authority Key Identifier:
                keyid:C1:04:CD:7D:F8:4C:31:9D:19:AF:35:B1:10:4F:17:3E:BA:2C:6D:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQTNffhMMZ0ZrzWxEE8XProsbb0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/4ee19c-9462-4390-a42d-7eff8f1e91cd/1/wQTNffhMMZ0ZrzWxEE8XProsbb0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:aa:40:bd:2b:5b:b7:58:30:ed:7b:69:f4:20:d0:a0:ae:b5:
         a6:52:6a:5e:3a:49:46:a4:c1:11:3a:9f:1c:97:c2:bf:cc:4a:
         2e:a6:d4:5f:d7:7c:6c:d7:f8:d6:bc:49:8b:fa:0b:8e:d0:47:
         f0:10:46:93:61:f9:3a:3e:39:cd:00:26:cb:fe:a1:a7:0b:02:
         4c:e8:b7:4a:1b:f4:c3:56:e0:46:7c:32:dd:f8:fa:c6:c4:80:
         3c:e2:34:c5:b4:1d:96:25:7b:2d:6d:41:ba:bb:ad:8c:6a:97:
         11:61:e6:da:78:24:15:e7:1f:43:eb:6a:d1:95:f6:b0:6b:ce:
         69:4d:4c:ba:4b:83:b3:80:60:7d:81:d2:a4:58:e9:3b:4a:65:
         c5:ac:73:92:6f:dd:21:35:76:66:a2:48:79:72:70:10:73:cc:
         d1:e9:55:65:64:09:62:06:f4:b3:81:21:38:46:aa:c5:41:67:
         ef:02:4f:e2:b9:e1:79:d6:87:83:e9:97:00:01:84:12:aa:af:
         51:64:71:db:ee:7f:f8:27:81:50:96:65:35:48:0f:6c:a9:57:
         27:cc:0a:77:2a:92:09:ee:f3:10:1f:c0:5a:e5:e4:cb:2b:ab:
         96:c0:9d:b7:bc:c0:37:0f:fe:a6:60:0c:a3:21:90:c8:12:7c:
         d5:42:c0:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn6afbs/4ahBGOVbeFqioinMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxMDRjZDdkZjg0YzMxOWQxOWFmMzViMTEwNGYxNzNlYmEy
YzZkYmQwHhcNMjUxMDE5MDMwMTEyWhcNMjUxMDIwMDMwMTEyWjAzMTEwLwYDVQQD
EyhmY2U1NGViNzQ1OWU4ZTFkZjJiZWFkZjgyMjA2Yjc5MzQ4NTQyZWY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs63UG4WUc6zMbNUtN0DHS2w5F+qy
UObXNr5QakqlVfEEWv6YGvU6xWuOR5LlNfjFGjE0rulu/5LjqeOQQpEFFObeZac4
nHoxkdHk8YMSdOCQwpmTvBHEuLSp6bvoCxd2cpr3oxq56GnEHJYy2JXQEAYkB4V5
WJM7JWlRgqMRXNrtcYTtMDb6uBEjktmYyY1RSR5Q6OWQAXWiD8XCKLd9ee26dBEZ
9xos5/172F/BJWOOkVxvSqb7cevDvnCmO6RNBdkMLUZPYm38QTLVxdAn2tI96uCk
Vs8eqfZrnJsPum04ORdb06jpb/po9zglmvydUUv9jaFSVBc/cK+IIPF4tQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPzlTrdFno4d8r6t+CIGt5NIVC75MB8GA1UdIwQY
MBaAFMEEzX34TDGdGa81sRBPFz66LG29MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1FUTmZmaE1NWjBacnpXeEVFOFhQcm9zYmIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC80ZWUxOWMtOTQ2Mi00MzkwLWE0MmQt
N2VmZjhmMWU5MWNkLzEvd1FUTmZmaE1NWjBacnpXeEVFOFhQcm9zYmIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC80ZWUxOWMtOTQ2Mi00MzkwLWE0MmQtN2VmZjhmMWU5MWNk
LzEvd1FUTmZmaE1NWjBacnpXeEVFOFhQcm9zYmIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg6pAvStb
t1gw7Xtp9CDQoK61plJqXjpJRqTBETqfHJfCv8xKLqbUX9d8bNf41rxJi/oLjtBH
8BBGk2H5Oj45zQAmy/6hpwsCTOi3Shv0w1bgRnwy3fj6xsSAPOI0xbQdliV7LW1B
urutjGqXEWHm2ngkFecfQ+tq0ZX2sGvOaU1MukuDs4BgfYHSpFjpO0plxaxzkm/d
ITV2ZqJIeXJwEHPM0elVZWQJYgb0s4EhOEaqxUFn7wJP4rnhedaHg+mXAAGEEqqv
UWRx2+5/+CeBUJZlNUgPbKlXJ8wKdyqSCe7zEB/AWuXkyyurlsCdt7zANw/+pmAM
oyGQyBJ81ULAkA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:07:02 2025 by rpki-client