Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/44e4bb-9bf5-478b-85a1-649311139883/1/wl1D3N4QuSMXnVsb106kOswiEJM.mft
File:                     wl1D3N4QuSMXnVsb106kOswiEJM.mft (raw, json)
Hash identifier:          y4JWGSy/uCWw5aMEvU8FfHEXilxldGbMApQ2M4bE7xY=
Subject key identifier:   5A:26:5C:30:82:D1:1B:00:E5:0B:BD:AF:67:4D:2A:CE:1B:F6:8F:D7
Authority key identifier: C2:5D:43:DC:DE:10:B9:23:17:9D:5B:1B:D7:4E:A4:3A:CC:22:10:93
Certificate issuer:       /CN=c25d43dcde10b923179d5b1bd74ea43acc221093
Certificate serial:       0199FC8F6357728335D328FADF389BAB05A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wl1D3N4QuSMXnVsb106kOswiEJM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/44e4bb-9bf5-478b-85a1-649311139883/1/wl1D3N4QuSMXnVsb106kOswiEJM.mft
Manifest number:          0C57
Signing time:             Sun 19 Oct 2025 13:01:19 +0000
Manifest this update:     Sun 19 Oct 2025 13:01:19 +0000
Manifest next update:     Mon 20 Oct 2025 13:01:19 +0000
Files and hashes:         1: wl1D3N4QuSMXnVsb106kOswiEJM.crl (hash: x4yldq+oJI3cB0Dj7o7QfvxelBJCf7xfzysl0nlNFzk=)
                          2: yZvcP-Ps4yo6pgIgUKI5eTzNp2U.roa (hash: MDG4N8hqJwJQSXIs3A2EDMOqJcbMoF8xcYaXQrrz3Zg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/44e4bb-9bf5-478b-85a1-649311139883/1/wl1D3N4QuSMXnVsb106kOswiEJM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/44e4bb-9bf5-478b-85a1-649311139883/1/wl1D3N4QuSMXnVsb106kOswiEJM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wl1D3N4QuSMXnVsb106kOswiEJM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:8f:63:57:72:83:35:d3:28:fa:df:38:9b:ab:05:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c25d43dcde10b923179d5b1bd74ea43acc221093
        Validity
            Not Before: Oct 19 13:01:19 2025 GMT
            Not After : Oct 20 13:01:19 2025 GMT
        Subject: CN=5a265c3082d11b00e50bbdaf674d2ace1bf68fd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:83:43:83:40:fc:14:a3:b0:33:bb:b4:40:90:
                    3b:34:16:d0:dd:d2:f4:7a:01:58:07:6a:a2:29:5d:
                    5f:22:ec:62:2d:7f:99:0f:31:1d:3b:7c:14:72:16:
                    c8:14:e6:f6:3b:8f:ac:67:42:5a:3f:38:27:f7:0a:
                    88:06:a1:16:8e:06:63:97:51:36:36:33:92:fb:b9:
                    a6:3e:7b:e4:94:0f:ef:fc:31:d7:2c:54:6f:c7:6e:
                    5b:49:76:85:94:fd:44:4b:45:7c:e2:15:52:5d:c9:
                    8c:83:48:f9:7f:90:54:db:7a:9f:70:d5:11:ca:b6:
                    ac:1f:e7:3b:e3:29:93:48:17:e6:1e:73:1e:4a:27:
                    a8:47:c9:d7:3f:83:18:d3:b4:dc:d2:29:9a:92:46:
                    05:2b:c7:a3:69:5f:7f:e3:32:20:00:eb:ab:51:a6:
                    7a:d8:29:f7:a2:5c:c6:0a:9f:af:57:40:07:df:04:
                    27:e6:e5:e9:69:e2:09:f3:19:1a:58:3c:69:1a:a6:
                    ef:b2:be:60:e6:a9:43:e4:cf:f5:29:c8:58:9c:20:
                    02:8e:b6:d7:49:38:cd:08:ba:f7:36:02:77:1f:c4:
                    cd:6c:0d:33:f5:7e:22:fc:11:fa:4d:cc:87:f3:61:
                    08:ff:4c:1f:56:f7:a3:9d:f5:f4:35:9c:6e:18:25:
                    f0:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:26:5C:30:82:D1:1B:00:E5:0B:BD:AF:67:4D:2A:CE:1B:F6:8F:D7
            X509v3 Authority Key Identifier:
                keyid:C2:5D:43:DC:DE:10:B9:23:17:9D:5B:1B:D7:4E:A4:3A:CC:22:10:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wl1D3N4QuSMXnVsb106kOswiEJM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/44e4bb-9bf5-478b-85a1-649311139883/1/wl1D3N4QuSMXnVsb106kOswiEJM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/44e4bb-9bf5-478b-85a1-649311139883/1/wl1D3N4QuSMXnVsb106kOswiEJM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:0c:9e:34:29:92:66:84:2e:76:07:57:03:27:a7:0a:17:78:
         5b:9b:db:d8:dd:0b:9f:4a:34:43:35:d5:a4:fe:ea:f8:f8:bb:
         48:8c:d4:9f:ba:41:ab:ae:9f:71:d5:49:af:f6:71:76:b5:c5:
         31:5d:34:ab:5e:08:4a:ec:ae:9a:2a:de:f3:4f:8c:38:ab:b7:
         5d:2f:af:ad:40:75:6c:42:35:9d:02:75:dd:23:48:1b:03:bc:
         b9:eb:d8:1d:2c:99:9f:a3:23:ba:1e:b0:a1:77:7f:c6:6d:18:
         45:40:a8:b1:0e:d1:ca:2d:bd:3b:3a:f5:07:35:41:0a:4d:62:
         80:de:20:b5:9a:eb:76:9a:1e:91:db:34:dd:46:48:1a:d8:66:
         20:9d:98:d0:ed:63:26:52:ad:9c:6d:25:d5:b8:d8:f2:ca:4e:
         0e:16:74:17:ff:f7:77:f3:06:7f:a4:60:37:53:61:51:ed:18:
         10:d4:22:b8:92:ba:26:e9:b7:32:97:b3:38:8e:0b:8c:a5:d2:
         0b:bd:b1:b2:67:0f:e7:aa:7f:fb:86:0e:fb:4b:c5:04:6a:41:
         68:c3:d4:94:e8:d2:54:0c:64:61:ab:97:82:42:fa:5e:a9:c6:
         50:7b:08:dd:c6:56:82:50:c4:15:8c:e6:1d:61:3b:e5:45:00:
         86:d5:70:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8j2NXcoM10yj63zibqwWgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyNWQ0M2RjZGUxMGI5MjMxNzlkNWIxYmQ3NGVhNDNhY2My
MjEwOTMwHhcNMjUxMDE5MTMwMTE5WhcNMjUxMDIwMTMwMTE5WjAzMTEwLwYDVQQD
Eyg1YTI2NWMzMDgyZDExYjAwZTUwYmJkYWY2NzRkMmFjZTFiZjY4ZmQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqoNDg0D8FKOwM7u0QJA7NBbQ3dL0
egFYB2qiKV1fIuxiLX+ZDzEdO3wUchbIFOb2O4+sZ0JaPzgn9wqIBqEWjgZjl1E2
NjOS+7mmPnvklA/v/DHXLFRvx25bSXaFlP1ES0V84hVSXcmMg0j5f5BU23qfcNUR
yrasH+c74ymTSBfmHnMeSieoR8nXP4MY07Tc0imakkYFK8ejaV9/4zIgAOurUaZ6
2Cn3olzGCp+vV0AH3wQn5uXpaeIJ8xkaWDxpGqbvsr5g5qlD5M/1KchYnCACjrbX
STjNCLr3NgJ3H8TNbA0z9X4i/BH6TcyH82EI/0wfVvejnfX0NZxuGCXwMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFomXDCC0RsA5Qu9r2dNKs4b9o/XMB8GA1UdIwQY
MBaAFMJdQ9zeELkjF51bG9dOpDrMIhCTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2wxRDNONFF1U01YblZzYjEwNmtPc3dpRUpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS80NGU0YmItOWJmNS00NzhiLTg1YTEt
NjQ5MzExMTM5ODgzLzEvd2wxRDNONFF1U01YblZzYjEwNmtPc3dpRUpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS80NGU0YmItOWJmNS00NzhiLTg1YTEtNjQ5MzExMTM5ODgz
LzEvd2wxRDNONFF1U01YblZzYjEwNmtPc3dpRUpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkAyeNCmS
ZoQudgdXAyenChd4W5vb2N0Ln0o0QzXVpP7q+Pi7SIzUn7pBq66fcdVJr/ZxdrXF
MV00q14ISuyumire80+MOKu3XS+vrUB1bEI1nQJ13SNIGwO8uevYHSyZn6Mjuh6w
oXd/xm0YRUCosQ7Ryi29Ozr1BzVBCk1igN4gtZrrdpoekds03UZIGthmIJ2Y0O1j
JlKtnG0l1bjY8spODhZ0F//3d/MGf6RgN1NhUe0YENQiuJK6Jum3MpezOI4LjKXS
C72xsmcP56p/+4YO+0vFBGpBaMPUlOjSVAxkYauXgkL6XqnGUHsI3cZWglDEFYzm
HWE75UUAhtVwCg==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:19:32 2025 by rpki-client