Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/657197-c628-48b1-956d-effe955a5d64/1/wei4jx4wVzoOIOR51boAtOkYJ7Y.mft
File:                     wei4jx4wVzoOIOR51boAtOkYJ7Y.mft (raw, json)
Hash identifier:          D2KGPcvNV8a6VI/GPQGKZ3RCnfnO2jqXVCFsx2pn1pQ=
Subject key identifier:   9E:D6:12:BF:4D:E7:95:2E:1E:B6:7E:7D:E0:38:2D:F0:1F:A2:37:C7
Authority key identifier: C1:E8:B8:8F:1E:30:57:3A:0E:20:E4:79:D5:BA:00:B4:E9:18:27:B6
Certificate issuer:       /CN=c1e8b88f1e30573a0e20e479d5ba00b4e91827b6
Certificate serial:       0199FB7CC9367EC4D45F11514C107D8E8C02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wei4jx4wVzoOIOR51boAtOkYJ7Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/657197-c628-48b1-956d-effe955a5d64/1/wei4jx4wVzoOIOR51boAtOkYJ7Y.mft
Manifest number:          16E1
Signing time:             Sun 19 Oct 2025 08:01:23 +0000
Manifest this update:     Sun 19 Oct 2025 08:01:23 +0000
Manifest next update:     Mon 20 Oct 2025 08:01:23 +0000
Files and hashes:         1: X1Gl7pI0OMRR6ajfA3cvno5vstw.roa (hash: zVVJwLgXELHLdhQ+YSrbw1EHdsK7mWsiuWthVrRspkM=)
                          2: wei4jx4wVzoOIOR51boAtOkYJ7Y.crl (hash: FsVyyzCaYkZrEostuEXiAXgCxRrn+MpSmGxdgKMC1I0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/657197-c628-48b1-956d-effe955a5d64/1/wei4jx4wVzoOIOR51boAtOkYJ7Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/657197-c628-48b1-956d-effe955a5d64/1/wei4jx4wVzoOIOR51boAtOkYJ7Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wei4jx4wVzoOIOR51boAtOkYJ7Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:7c:c9:36:7e:c4:d4:5f:11:51:4c:10:7d:8e:8c:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1e8b88f1e30573a0e20e479d5ba00b4e91827b6
        Validity
            Not Before: Oct 19 08:01:23 2025 GMT
            Not After : Oct 20 08:01:23 2025 GMT
        Subject: CN=9ed612bf4de7952e1eb67e7de0382df01fa237c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:65:08:41:8c:e6:cf:ad:67:47:96:0d:ed:96:
                    0a:b2:53:7e:8d:90:11:94:b6:82:fb:39:87:c4:38:
                    05:d2:ae:9f:bb:4b:5d:7d:aa:81:c6:63:0c:16:fb:
                    20:40:b5:0c:ef:95:0c:3a:90:37:54:88:7f:b1:e0:
                    4b:48:bd:b0:bc:53:a8:5c:7c:c8:fd:99:fc:04:64:
                    15:ce:a2:a3:db:19:a5:2c:a8:aa:5b:99:d4:cb:d7:
                    8f:13:1e:7c:61:61:b3:95:b7:0e:a5:74:7e:92:9e:
                    5e:23:c7:1e:8f:df:4f:1b:72:58:da:c4:08:9b:69:
                    7f:91:89:de:b0:1b:b8:d8:6e:41:e5:74:ea:ae:e9:
                    43:dd:34:f6:9a:d5:35:0b:30:54:32:c1:cc:0e:ba:
                    ee:9e:87:04:d9:04:b3:55:d4:ef:e5:80:4a:3d:1e:
                    cc:12:4e:71:94:05:ba:05:37:83:01:f1:5e:30:6a:
                    06:d3:d2:51:f4:e3:f8:12:e6:8c:db:d3:6c:44:4d:
                    3e:b8:19:8a:40:e4:38:3b:5b:87:1b:10:43:95:78:
                    32:71:9b:30:45:cd:82:9d:85:94:1d:fa:92:dc:da:
                    eb:71:6f:3e:d4:31:ee:ee:4a:7c:d0:15:bf:3b:ca:
                    16:3e:70:f6:a8:5f:62:a1:06:11:63:5f:89:c8:d1:
                    80:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:D6:12:BF:4D:E7:95:2E:1E:B6:7E:7D:E0:38:2D:F0:1F:A2:37:C7
            X509v3 Authority Key Identifier:
                keyid:C1:E8:B8:8F:1E:30:57:3A:0E:20:E4:79:D5:BA:00:B4:E9:18:27:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wei4jx4wVzoOIOR51boAtOkYJ7Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/657197-c628-48b1-956d-effe955a5d64/1/wei4jx4wVzoOIOR51boAtOkYJ7Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/657197-c628-48b1-956d-effe955a5d64/1/wei4jx4wVzoOIOR51boAtOkYJ7Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:c8:48:a0:8f:56:70:e9:21:68:67:16:1e:ae:7d:99:ae:0e:
         9e:0b:6c:7b:0d:ad:fa:e1:63:8a:6b:65:51:f8:bd:57:ab:13:
         72:51:00:12:91:0b:df:88:a0:b6:9e:14:3f:9d:5b:ee:0b:8c:
         bf:09:41:8a:e1:e5:c0:a5:f8:de:1f:70:04:13:a2:78:db:e0:
         4f:9d:e6:e9:bb:b0:33:69:1b:c2:74:22:a9:a8:b4:69:0a:76:
         24:e3:fa:7c:62:38:8f:90:94:80:26:24:f1:fb:55:c9:e2:fa:
         8d:92:33:04:22:39:f2:a1:4a:84:5d:9e:ea:8f:0b:8e:8a:69:
         e9:03:d0:df:bd:69:36:3a:8b:b2:dc:23:e8:a1:d5:a0:a0:11:
         2f:8f:64:95:84:71:b4:de:19:df:05:fa:da:5f:bf:d0:70:f6:
         b1:04:09:21:7b:45:11:e9:30:23:1f:1f:2f:0f:5d:20:5a:77:
         96:5c:28:4a:9e:c2:78:08:64:14:70:42:06:54:a5:74:66:30:
         ff:f5:ff:b9:4c:4c:e5:c0:e0:64:d6:12:5c:63:e1:54:1d:46:
         d2:fc:b9:ff:56:d4:fb:11:0f:13:79:51:1b:11:78:d2:6c:b1:
         e7:6e:84:20:df:f6:9b:b6:dd:26:4a:13:b9:20:9b:08:2d:16:
         b6:b2:0b:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:43:30 2025 by rpki-client