Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/d84758-f25d-4b3d-9176-a881563795d3/1/wVxXxJbEN46ATCYTOYB11U74qWI.mft
File:                     wVxXxJbEN46ATCYTOYB11U74qWI.mft (raw, json)
Hash identifier:          2WHeuwxYyzTXbjID0YOi9ftXZwZqBCFuOh1+FhjArOo=
Subject key identifier:   D6:9E:58:16:A3:5F:63:07:E6:1E:A3:A4:26:C3:81:79:02:CF:1D:12
Authority key identifier: C1:5C:57:C4:96:C4:37:8E:80:4C:26:13:39:80:75:D5:4E:F8:A9:62
Certificate issuer:       /CN=c15c57c496c4378e804c2613398075d54ef8a962
Certificate serial:       0199FBEBC083B34AD126385DC36970326CC1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wVxXxJbEN46ATCYTOYB11U74qWI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/d84758-f25d-4b3d-9176-a881563795d3/1/wVxXxJbEN46ATCYTOYB11U74qWI.mft
Manifest number:          01B4
Signing time:             Sun 19 Oct 2025 10:02:35 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:35 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:35 +0000
Files and hashes:         1: r_DBy6crqhZV3E-t_JBcSU0M1aQ.roa (hash: x0KRqoMjmgWvFfwQSKfZBbO2VD1mpoCn3DkZilOBe/8=)
                          2: wVxXxJbEN46ATCYTOYB11U74qWI.crl (hash: qbxK6hwUBimx0ELhuNXuUAwx/ila0oknXTd8ZDd2NhY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/d84758-f25d-4b3d-9176-a881563795d3/1/wVxXxJbEN46ATCYTOYB11U74qWI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/d84758-f25d-4b3d-9176-a881563795d3/1/wVxXxJbEN46ATCYTOYB11U74qWI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wVxXxJbEN46ATCYTOYB11U74qWI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:c0:83:b3:4a:d1:26:38:5d:c3:69:70:32:6c:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c15c57c496c4378e804c2613398075d54ef8a962
        Validity
            Not Before: Oct 19 10:02:35 2025 GMT
            Not After : Oct 20 10:02:35 2025 GMT
        Subject: CN=d69e5816a35f6307e61ea3a426c3817902cf1d12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:e7:00:f5:5f:6f:85:06:fc:fb:1a:85:12:9b:
                    22:10:2b:b4:2b:2e:83:a8:e0:a4:a2:7b:44:9a:00:
                    4f:14:28:16:33:08:7b:6f:39:3d:85:3c:d6:47:67:
                    23:b6:19:8a:84:de:c1:2f:58:91:17:8c:cd:93:95:
                    11:86:f1:93:16:cc:fb:90:b0:68:d9:2f:c3:46:26:
                    b9:0e:71:a9:d2:5a:60:db:54:cb:5b:ce:97:c0:20:
                    6a:73:00:17:b8:f2:bd:0a:04:f2:c4:aa:83:23:2c:
                    17:e0:05:b4:48:c0:cf:08:6b:58:81:08:43:a8:8d:
                    7b:1b:22:fb:51:a5:a3:b8:54:db:b9:35:6a:c6:f6:
                    47:7b:f2:de:9d:29:cf:37:4c:88:45:86:5c:46:f7:
                    b8:a6:9a:ca:97:0b:bc:86:a9:b5:ea:54:c6:e4:ee:
                    89:99:e1:1d:a3:c1:cc:cd:ed:e7:b5:89:4e:d8:6b:
                    db:43:73:a2:56:6e:e5:84:0a:21:b0:cc:59:34:66:
                    a3:05:d8:6c:36:64:0c:b9:a3:f7:61:a2:d9:ee:93:
                    ea:6f:7e:e4:34:55:06:cd:b3:59:5a:74:48:5a:a0:
                    31:44:f3:53:2b:24:9a:49:44:3d:5f:91:58:55:7f:
                    dc:0e:18:0b:c0:03:44:a6:83:67:79:c2:0e:15:46:
                    72:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:9E:58:16:A3:5F:63:07:E6:1E:A3:A4:26:C3:81:79:02:CF:1D:12
            X509v3 Authority Key Identifier:
                keyid:C1:5C:57:C4:96:C4:37:8E:80:4C:26:13:39:80:75:D5:4E:F8:A9:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wVxXxJbEN46ATCYTOYB11U74qWI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d84758-f25d-4b3d-9176-a881563795d3/1/wVxXxJbEN46ATCYTOYB11U74qWI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/d84758-f25d-4b3d-9176-a881563795d3/1/wVxXxJbEN46ATCYTOYB11U74qWI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:f5:5c:c3:53:84:a2:16:80:af:05:66:12:26:13:1a:11:67:
         f9:42:6a:fd:30:b4:31:1e:2c:1f:b7:68:68:1d:ac:c2:e3:20:
         89:da:16:03:d6:88:c1:36:c2:6b:71:33:c6:e6:2d:d8:c4:0b:
         0e:50:10:ae:07:b6:e0:e0:88:26:74:54:45:f9:3a:11:88:1b:
         c4:93:88:8d:f3:8b:aa:4c:01:1f:de:98:6c:95:5d:bb:4e:28:
         27:70:c2:e1:d9:30:5d:f5:2b:45:79:1e:e8:4d:5e:7c:40:d0:
         16:28:6b:3c:17:db:06:32:78:31:f2:04:2d:01:36:61:88:18:
         31:56:3f:d1:95:3f:89:33:8a:3f:f1:80:3d:62:29:06:07:1f:
         fe:ab:98:f3:a6:64:97:dc:3b:fe:63:2a:d7:ac:a3:13:5a:0a:
         4c:72:0c:20:06:9c:a0:0d:ae:ad:fe:35:34:08:bb:5a:bb:a8:
         be:9d:4a:e7:46:07:22:80:e2:1d:8e:41:37:ef:16:28:9b:f4:
         4e:1b:cb:b5:95:a8:58:49:8f:be:5c:6f:ad:55:37:2d:72:1b:
         44:ca:b9:f9:0e:47:b8:51:32:eb:d0:f7:69:82:63:69:20:18:
         50:15:47:55:8d:5c:37:a7:f4:72:2c:58:4c:8e:46:48:1a:6d:
         fe:be:4b:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn768CDs0rRJjhdw2lwMmzBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxNWM1N2M0OTZjNDM3OGU4MDRjMjYxMzM5ODA3NWQ1NGVm
OGE5NjIwHhcNMjUxMDE5MTAwMjM1WhcNMjUxMDIwMTAwMjM1WjAzMTEwLwYDVQQD
EyhkNjllNTgxNmEzNWY2MzA3ZTYxZWEzYTQyNmMzODE3OTAyY2YxZDEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4OcA9V9vhQb8+xqFEpsiECu0Ky6D
qOCkontEmgBPFCgWMwh7bzk9hTzWR2cjthmKhN7BL1iRF4zNk5URhvGTFsz7kLBo
2S/DRia5DnGp0lpg21TLW86XwCBqcwAXuPK9CgTyxKqDIywX4AW0SMDPCGtYgQhD
qI17GyL7UaWjuFTbuTVqxvZHe/LenSnPN0yIRYZcRve4pprKlwu8hqm16lTG5O6J
meEdo8HMze3ntYlO2GvbQ3OiVm7lhAohsMxZNGajBdhsNmQMuaP3YaLZ7pPqb37k
NFUGzbNZWnRIWqAxRPNTKySaSUQ9X5FYVX/cDhgLwANEpoNnecIOFUZyUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNaeWBajX2MH5h6jpCbDgXkCzx0SMB8GA1UdIwQY
MBaAFMFcV8SWxDeOgEwmEzmAddVO+KliMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1Z4WHhKYkVONDZBVENZVE9ZQjExVTc0cVdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9kODQ3NTgtZjI1ZC00YjNkLTkxNzYt
YTg4MTU2Mzc5NWQzLzEvd1Z4WHhKYkVONDZBVENZVE9ZQjExVTc0cVdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9kODQ3NTgtZjI1ZC00YjNkLTkxNzYtYTg4MTU2Mzc5NWQz
LzEvd1Z4WHhKYkVONDZBVENZVE9ZQjExVTc0cVdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXPVcw1OE
ohaArwVmEiYTGhFn+UJq/TC0MR4sH7doaB2swuMgidoWA9aIwTbCa3EzxuYt2MQL
DlAQrge24OCIJnRURfk6EYgbxJOIjfOLqkwBH96YbJVdu04oJ3DC4dkwXfUrRXke
6E1efEDQFihrPBfbBjJ4MfIELQE2YYgYMVY/0ZU/iTOKP/GAPWIpBgcf/quY86Zk
l9w7/mMq16yjE1oKTHIMIAacoA2urf41NAi7Wruovp1K50YHIoDiHY5BN+8WKJv0
ThvLtZWoWEmPvlxvrVU3LXIbRMq5+Q5HuFEy69D3aYJjaSAYUBVHVY1cN6f0cixY
TI5GSBpt/r5LCw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:34:39 2025 by rpki-client