Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.mft
File:                     WS58HyOUw-OqqMy2R_2DZx1gmLc.mft (raw, json)
Hash identifier:          TLPpF5/RPjfYWyeqC7joLayo64Rj0nkqd9PV7AANKuU=
Subject key identifier:   8D:E9:1C:F7:2E:FF:42:AD:D9:21:7C:75:F4:24:50:8F:B6:34:2C:4F
Authority key identifier: 59:2E:7C:1F:23:94:C3:E3:AA:A8:CC:B6:47:FD:83:67:1D:60:98:B7
Certificate issuer:       /CN=592e7c1f2394c3e3aaa8ccb647fd83671d6098b7
Certificate serial:       0199FB7C80A8BF32CAC8C16EDFBA7BAA05EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.mft
Manifest number:          16F4
Signing time:             Sun 19 Oct 2025 08:01:04 +0000
Manifest this update:     Sun 19 Oct 2025 08:01:04 +0000
Manifest next update:     Mon 20 Oct 2025 08:01:04 +0000
Files and hashes:         1: 3IRgLqbP_ec1EGoarWc4xpisfyQ.roa (hash: GZRzYUts0dDxW36RNVg638JimijfwAxJcVtkZHDVq/A=)
                          2: 96CIMKKoqN02QJYrluNPvEhoHEk.roa (hash: PH9kqz02Fz7yivfLv32cVnK1ToPORdX94byNA/yE6eo=)
                          3: HcTZ55L4MSrkLfHwNTyTNa60af4.roa (hash: lgA8q/P+YEtpYxddfFcHkInhcj8mF/W8Rf9rQjSJ6rQ=)
                          4: WS58HyOUw-OqqMy2R_2DZx1gmLc.crl (hash: ZKAGgpMaq24hk9jhg9nCLg2eajZksS93ElRP1QHRp0A=)
                          5: hVkEcV5BYqMN66hJqLsfxmtD6-I.roa (hash: qGjxxeMK37L3nzimP1DFdWK9NxQEtXmgcd3DzWsOUEg=)
                          6: i7LPx3k5NSVEBiacqO7vPHaWiwU.roa (hash: gYTLRIvfaUJXoKPS7pQ+Cpl5E8jxQVsdISY+9vzV8lg=)
                          7: t7xFNtek28TRqAwV5AsSOdRcmio.roa (hash: q0nm/KnHwfhrXByIEAa1Oz0ny+0DeTEXrb5cVZLEYz8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 08:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:7c:80:a8:bf:32:ca:c8:c1:6e:df:ba:7b:aa:05:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=592e7c1f2394c3e3aaa8ccb647fd83671d6098b7
        Validity
            Not Before: Oct 19 08:01:04 2025 GMT
            Not After : Oct 20 08:01:04 2025 GMT
        Subject: CN=8de91cf72eff42add9217c75f424508fb6342c4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:d0:32:eb:e3:5e:b0:c6:42:85:1a:2a:cb:64:
                    db:db:36:cd:94:d1:cb:0a:2e:6b:27:5c:ae:53:1e:
                    e1:b9:94:e9:03:de:55:a5:d5:7b:7a:60:2e:94:fd:
                    07:bd:3f:1e:25:de:fe:d7:25:7a:8a:77:1f:d2:0d:
                    97:b2:f6:2c:f4:69:80:92:72:82:4c:af:c2:0e:9d:
                    1f:99:0f:df:13:4d:a7:c6:fe:65:d1:f9:c2:1b:36:
                    5a:03:76:53:7c:e8:ac:ee:53:aa:10:3e:f6:a8:ac:
                    72:b6:9b:a8:5e:e6:06:ab:29:db:1f:37:a7:f9:0c:
                    7a:67:40:03:a7:df:f2:ef:33:72:95:67:15:36:98:
                    3b:8c:79:02:0b:c5:52:67:15:4d:44:48:a7:38:3e:
                    a2:72:27:15:5f:64:9c:c2:29:3c:e8:d3:39:23:26:
                    09:3e:32:e4:51:15:d8:46:5e:da:1c:c7:8e:e6:16:
                    6a:1e:4c:ee:9c:a3:95:57:e7:a3:a0:fe:fb:16:ce:
                    a6:8f:10:2e:f6:c1:92:20:94:2b:a0:e3:88:45:2f:
                    4b:03:09:20:a1:ba:dd:d9:fd:41:e7:42:63:6d:28:
                    d1:76:7c:e5:af:b9:b9:d3:72:2b:15:4a:87:8f:0c:
                    82:c0:b6:8f:07:44:48:3c:34:f8:d7:07:99:0d:02:
                    7b:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:E9:1C:F7:2E:FF:42:AD:D9:21:7C:75:F4:24:50:8F:B6:34:2C:4F
            X509v3 Authority Key Identifier:
                keyid:59:2E:7C:1F:23:94:C3:E3:AA:A8:CC:B6:47:FD:83:67:1D:60:98:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WS58HyOUw-OqqMy2R_2DZx1gmLc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9571d6-974f-4327-b9e0-443be63fc123/1/WS58HyOUw-OqqMy2R_2DZx1gmLc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:5f:52:de:a0:29:6b:a6:5f:1f:1a:5a:01:d0:cc:63:e3:4b:
         1d:fc:ec:d1:d1:2f:f9:00:50:e7:6a:34:58:72:9a:3b:e0:82:
         9b:ba:02:38:3e:bc:e6:66:05:51:22:69:28:b3:41:e5:7d:8c:
         df:49:e2:23:c5:46:30:05:d4:8f:f6:06:93:5c:5f:c3:f1:38:
         75:10:13:06:ff:8f:5b:c9:49:76:6f:83:a1:ac:7c:21:1e:90:
         f7:48:7b:d2:f7:d7:d5:a6:eb:20:ad:27:5c:a1:84:dc:13:2e:
         da:5b:a8:c5:bb:2a:b5:b3:08:49:59:68:c5:ab:77:59:ed:56:
         d8:d3:60:66:69:57:0b:55:25:31:de:ed:ce:fc:a3:3f:f6:27:
         1d:c6:54:74:9f:5c:59:3a:3f:13:3c:c1:7d:58:db:bf:60:63:
         98:7f:7a:fe:3a:d3:51:d9:42:1d:11:8a:9a:b7:19:82:f8:dd:
         df:61:55:55:a2:67:01:0f:5b:55:c1:21:d2:d5:44:bd:5b:37:
         e6:03:a6:98:19:f4:fe:ff:79:22:d6:87:00:7d:0a:b6:c2:e0:
         c5:7c:06:39:fb:ad:b3:e1:62:7d:15:e7:de:86:8a:2a:2a:dc:
         ce:23:f5:f5:e5:1a:1a:0f:14:c4:1c:bf:b6:b4:fd:61:f5:32:
         51:ca:97:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7fICovzLKyMFu37p7qgXrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5MmU3YzFmMjM5NGMzZTNhYWE4Y2NiNjQ3ZmQ4MzY3MWQ2
MDk4YjcwHhcNMjUxMDE5MDgwMTA0WhcNMjUxMDIwMDgwMTA0WjAzMTEwLwYDVQQD
Eyg4ZGU5MWNmNzJlZmY0MmFkZDkyMTdjNzVmNDI0NTA4ZmI2MzQyYzRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA49Ay6+NesMZChRoqy2Tb2zbNlNHL
Ci5rJ1yuUx7huZTpA95VpdV7emAulP0HvT8eJd7+1yV6incf0g2XsvYs9GmAknKC
TK/CDp0fmQ/fE02nxv5l0fnCGzZaA3ZTfOis7lOqED72qKxytpuoXuYGqynbHzen
+Qx6Z0ADp9/y7zNylWcVNpg7jHkCC8VSZxVNREinOD6icicVX2Scwik86NM5IyYJ
PjLkURXYRl7aHMeO5hZqHkzunKOVV+ejoP77Fs6mjxAu9sGSIJQroOOIRS9LAwkg
obrd2f1B50JjbSjRdnzlr7m503IrFUqHjwyCwLaPB0RIPDT41weZDQJ72wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI3pHPcu/0Kt2SF8dfQkUI+2NCxPMB8GA1UdIwQY
MBaAFFkufB8jlMPjqqjMtkf9g2cdYJi3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1M1OEh5T1V3LU9xcU15MlJfMkRaeDFnbUxjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi85NTcxZDYtOTc0Zi00MzI3LWI5ZTAt
NDQzYmU2M2ZjMTIzLzEvV1M1OEh5T1V3LU9xcU15MlJfMkRaeDFnbUxjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi85NTcxZDYtOTc0Zi00MzI3LWI5ZTAtNDQzYmU2M2ZjMTIz
LzEvV1M1OEh5T1V3LU9xcU15MlJfMkRaeDFnbUxjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtV9S3qAp
a6ZfHxpaAdDMY+NLHfzs0dEv+QBQ52o0WHKaO+CCm7oCOD685mYFUSJpKLNB5X2M
30niI8VGMAXUj/YGk1xfw/E4dRATBv+PW8lJdm+Doax8IR6Q90h70vfX1abrIK0n
XKGE3BMu2luoxbsqtbMISVloxat3We1W2NNgZmlXC1UlMd7tzvyjP/YnHcZUdJ9c
WTo/EzzBfVjbv2BjmH96/jrTUdlCHRGKmrcZgvjd32FVVaJnAQ9bVcEh0tVEvVs3
5gOmmBn0/v95ItaHAH0KtsLgxXwGOfuts+FifRXn3oaKKircziP19eUaGg8UxBy/
trT9YfUyUcqXqg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 16:55:12 2025 by rpki-client