Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/b8a50a-86a0-4bf4-8eff-f647c50c21a5/1/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.mft
File:                     wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.mft (raw, json)
Hash identifier:          /zLBG2POg3MplzTqhVUZHhL7NTdPSFVRErSmCj2eicI=
Subject key identifier:   21:E4:06:42:04:8B:F3:7E:CB:A6:71:8D:A9:6F:7B:D5:BF:94:EB:21
Authority key identifier: C3:34:84:59:0C:CF:F0:9A:3D:D5:DD:80:85:BE:ED:B4:2F:C4:AD:84
Certificate issuer:       /CN=c33484590ccff09a3dd5dd8085beedb42fc4ad84
Certificate serial:       0199FF595469D14D457B8008631F5C3EFD22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/b8a50a-86a0-4bf4-8eff-f647c50c21a5/1/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.mft
Manifest number:          0EDC
Signing time:             Mon 20 Oct 2025 02:01:08 +0000
Manifest this update:     Mon 20 Oct 2025 02:01:08 +0000
Manifest next update:     Tue 21 Oct 2025 02:01:08 +0000
Files and hashes:         1: 5R5QxNHPxmr20xOEdihdn49Gqm0.roa (hash: 2rt++DxlRXOs+zCMhZPZtbhcL9D247iOIf522F37NiI=)
                          2: wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.crl (hash: 4K5VrKVU+Cu13owFSKjeH5mi3RzX3V+92wbQZs3Jd5M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/b8a50a-86a0-4bf4-8eff-f647c50c21a5/1/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/b8a50a-86a0-4bf4-8eff-f647c50c21a5/1/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ff:59:54:69:d1:4d:45:7b:80:08:63:1f:5c:3e:fd:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c33484590ccff09a3dd5dd8085beedb42fc4ad84
        Validity
            Not Before: Oct 20 02:01:08 2025 GMT
            Not After : Oct 21 02:01:08 2025 GMT
        Subject: CN=21e40642048bf37ecba6718da96f7bd5bf94eb21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:99:b8:80:5c:f5:3c:64:da:be:65:55:c7:43:
                    d4:54:18:ff:7a:19:8a:56:42:11:92:5e:01:ce:fe:
                    9e:09:37:e8:e3:d9:e6:08:c7:b6:3b:23:67:11:70:
                    4d:24:de:4d:30:e9:eb:90:b8:41:fa:4a:ce:ae:b2:
                    7a:d8:33:50:a1:76:38:28:a9:b6:69:34:a4:ad:76:
                    7a:d0:a2:ad:93:21:60:68:03:20:53:54:b7:1e:93:
                    61:b9:10:d6:c5:0d:f8:93:f3:c3:6d:38:9d:2f:cc:
                    56:25:1e:ae:d8:3d:33:64:d3:4b:d6:71:49:64:82:
                    28:7f:84:97:1f:b5:03:83:3b:17:3c:30:b4:7e:53:
                    cf:5a:1f:81:79:9f:3e:a8:ca:3d:1d:3d:0f:f0:91:
                    b5:ad:07:85:97:47:01:6f:1e:44:40:d3:6b:86:c5:
                    ab:c3:34:55:f5:d6:f2:51:24:2a:ca:c1:bf:1d:26:
                    03:6d:ad:57:cd:27:40:88:e6:a4:b4:ca:2f:9e:15:
                    bc:15:d6:29:1d:28:de:a0:65:35:e3:80:37:66:fe:
                    85:64:d1:7a:cb:f0:c0:05:7d:cb:f8:07:ac:30:94:
                    da:0f:8f:84:a9:25:b6:d3:f3:8e:7b:e9:28:a5:7c:
                    31:82:40:e8:7b:3a:d7:70:57:72:31:e3:7d:16:53:
                    60:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:E4:06:42:04:8B:F3:7E:CB:A6:71:8D:A9:6F:7B:D5:BF:94:EB:21
            X509v3 Authority Key Identifier:
                keyid:C3:34:84:59:0C:CF:F0:9A:3D:D5:DD:80:85:BE:ED:B4:2F:C4:AD:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b8a50a-86a0-4bf4-8eff-f647c50c21a5/1/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b8a50a-86a0-4bf4-8eff-f647c50c21a5/1/wzSEWQzP8Jo91d2Ahb7ttC_ErYQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:3f:62:8b:0e:d5:82:bc:ec:1c:06:79:9f:31:fa:6f:1b:f2:
         09:b9:5c:ca:7b:87:b2:f6:aa:11:4f:ea:35:3b:aa:11:c5:57:
         ac:4f:63:29:64:5f:98:73:e8:5a:de:43:54:f3:80:86:a2:c2:
         d0:2c:96:a6:e2:3a:37:02:13:30:02:ee:18:b0:5a:ba:22:3d:
         e0:ae:ca:ea:60:96:3f:e9:cb:46:e7:38:94:b8:0f:95:4b:6d:
         a4:7e:f1:dc:1b:b8:44:53:fb:78:a2:9e:cf:7e:8f:23:83:69:
         29:ec:0a:78:58:af:7d:11:a1:2c:a2:df:f7:96:2c:69:77:ae:
         49:14:89:44:45:f2:41:a8:bf:b4:b5:49:f1:ea:06:b2:06:80:
         38:25:0b:16:54:43:d4:4a:ac:f7:4c:aa:d6:5f:8b:b4:04:57:
         da:91:e8:ae:cc:31:6d:ee:1d:43:cb:ba:f3:62:6d:f4:ee:0b:
         dc:18:57:ce:87:e3:6d:50:a4:c0:fb:e2:85:75:ce:62:bc:cf:
         93:ab:e1:fc:45:aa:d2:be:d5:b1:8f:5c:02:40:be:fe:a4:a6:
         8f:05:7f:b1:55:54:50:c5:c0:e4:29:f8:07:be:59:8d:5c:5e:
         a7:b6:65:f3:a2:6a:62:32:ef:0a:d6:3b:11:66:ff:8c:55:d5:
         5d:7f:c0:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:03:34 2025 by rpki-client