Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/wSXvTcnT7N9IZlXC3SMenLuwoLc.mft
File:                     wSXvTcnT7N9IZlXC3SMenLuwoLc.mft (raw, json)
Hash identifier:          voonBAF4ZRaOinMWqduQ9k7A/FSO4JS/oyWxdqMdAxg=
Subject key identifier:   F8:37:E6:AA:6C:18:72:00:D2:09:4C:92:3D:44:44:2E:18:E7:AA:53
Authority key identifier: C1:25:EF:4D:C9:D3:EC:DF:48:66:55:C2:DD:23:1E:9C:BB:B0:A0:B7
Certificate issuer:       /CN=c125ef4dc9d3ecdf486655c2dd231e9cbbb0a0b7
Certificate serial:       0199FC5856D880FDA3F82864BD09CA8A18FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wSXvTcnT7N9IZlXC3SMenLuwoLc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/wSXvTcnT7N9IZlXC3SMenLuwoLc.mft
Manifest number:          16E3
Signing time:             Sun 19 Oct 2025 12:01:11 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:11 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:11 +0000
Files and hashes:         1: uR-Qt3k3bfM3gqD_iPwjYus1OKg.roa (hash: wvva5AnG6XL5jcw7hAwIwlMKF+/vvms/lQ+w5Fd0MJA=)
                          2: wSXvTcnT7N9IZlXC3SMenLuwoLc.crl (hash: N+KDd1GRlELJKBoGiMvMF88Xvo+UsHpGrOAf6ZOsOTo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/wSXvTcnT7N9IZlXC3SMenLuwoLc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/wSXvTcnT7N9IZlXC3SMenLuwoLc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wSXvTcnT7N9IZlXC3SMenLuwoLc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:58:56:d8:80:fd:a3:f8:28:64:bd:09:ca:8a:18:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c125ef4dc9d3ecdf486655c2dd231e9cbbb0a0b7
        Validity
            Not Before: Oct 19 12:01:11 2025 GMT
            Not After : Oct 20 12:01:11 2025 GMT
        Subject: CN=f837e6aa6c187200d2094c923d44442e18e7aa53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:b5:cc:c8:ff:7e:f4:0f:0b:96:45:7a:1e:99:
                    de:31:f4:d2:8a:86:6a:6a:02:25:23:54:62:5d:c0:
                    38:ac:e4:05:58:4b:d4:2e:57:1a:70:76:6a:63:4d:
                    17:7b:c5:3a:03:68:d5:fb:94:3c:37:d4:95:d0:ad:
                    24:63:f6:a9:0b:48:41:d2:96:89:58:29:42:7b:e6:
                    1b:38:57:c7:b6:2a:8d:02:60:1f:9c:26:c8:ad:f8:
                    ec:6e:7b:40:a2:2d:28:4a:55:21:7a:ab:f0:b0:c4:
                    26:74:78:81:93:93:fc:04:7b:5f:d4:90:fd:90:79:
                    70:9a:c8:14:8e:30:da:ba:ff:74:13:bb:23:0d:22:
                    1b:32:7f:9a:07:99:78:7c:c6:08:de:a5:be:e0:82:
                    19:73:46:9e:cd:1d:14:42:67:b6:26:e8:34:fb:06:
                    52:48:95:09:83:75:be:71:f9:1e:71:b8:c9:cf:bc:
                    67:ed:97:32:f1:fe:3b:5c:e4:8c:4f:b1:ad:01:31:
                    74:de:04:f3:28:27:bd:de:7a:5b:d5:5a:d3:ce:2c:
                    ea:d5:27:fe:e5:00:c4:40:cb:ec:d9:4b:e9:b0:c2:
                    57:84:91:02:09:82:a2:dd:29:66:da:d9:08:30:04:
                    dc:93:ec:fe:42:06:c7:d4:80:a2:c7:54:28:30:2a:
                    eb:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:37:E6:AA:6C:18:72:00:D2:09:4C:92:3D:44:44:2E:18:E7:AA:53
            X509v3 Authority Key Identifier:
                keyid:C1:25:EF:4D:C9:D3:EC:DF:48:66:55:C2:DD:23:1E:9C:BB:B0:A0:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSXvTcnT7N9IZlXC3SMenLuwoLc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/wSXvTcnT7N9IZlXC3SMenLuwoLc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/wSXvTcnT7N9IZlXC3SMenLuwoLc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:8b:a3:47:ad:52:7e:e4:7a:88:83:d6:74:bd:eb:57:f9:47:
         e3:35:14:50:1d:91:5f:e0:16:2c:e2:9c:5f:28:9a:5c:37:b3:
         70:b1:66:e1:68:0e:02:0a:71:08:30:c4:88:f8:1d:f7:d2:e7:
         30:3a:08:8f:19:b3:ff:90:4f:4c:ef:5c:51:3e:8c:c5:e3:9b:
         3c:82:00:00:c0:17:10:7d:66:85:5f:f4:a0:09:07:32:27:b9:
         78:a0:14:81:eb:3a:fd:24:c0:e8:63:a6:76:8f:41:c7:50:6c:
         83:fe:b7:88:95:6b:00:88:0d:57:06:23:89:cb:9d:f7:13:32:
         d1:d7:f6:d2:f3:51:0b:19:f2:27:aa:d5:3d:14:dc:4e:da:19:
         c0:70:e7:06:7b:40:2c:bf:f6:fe:54:54:b0:07:bf:97:2f:a8:
         ac:3c:6c:78:18:46:93:5c:f1:ff:60:ec:23:32:75:97:99:df:
         ba:73:85:85:2a:cc:09:4f:b4:2c:1c:25:76:97:0d:57:83:6f:
         e6:e6:81:b9:2e:47:7d:bb:3b:5c:dc:35:c1:50:fa:7d:9e:1a:
         07:1f:c0:9b:ab:e0:55:08:b7:e8:ee:72:22:53:dc:4b:9b:36:
         9f:f3:cc:9c:fd:49:bb:cf:0e:7d:13:78:95:32:fe:2d:06:d1:
         c2:a8:81:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8WFbYgP2j+ChkvQnKihj8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxMjVlZjRkYzlkM2VjZGY0ODY2NTVjMmRkMjMxZTljYmJi
MGEwYjcwHhcNMjUxMDE5MTIwMTExWhcNMjUxMDIwMTIwMTExWjAzMTEwLwYDVQQD
EyhmODM3ZTZhYTZjMTg3MjAwZDIwOTRjOTIzZDQ0NDQyZTE4ZTdhYTUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi7XMyP9+9A8LlkV6HpneMfTSioZq
agIlI1RiXcA4rOQFWEvULlcacHZqY00Xe8U6A2jV+5Q8N9SV0K0kY/apC0hB0paJ
WClCe+YbOFfHtiqNAmAfnCbIrfjsbntAoi0oSlUheqvwsMQmdHiBk5P8BHtf1JD9
kHlwmsgUjjDauv90E7sjDSIbMn+aB5l4fMYI3qW+4IIZc0aezR0UQme2Jug0+wZS
SJUJg3W+cfkecbjJz7xn7Zcy8f47XOSMT7GtATF03gTzKCe93npb1VrTzizq1Sf+
5QDEQMvs2UvpsMJXhJECCYKi3Slm2tkIMATck+z+QgbH1ICix1QoMCrr5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPg35qpsGHIA0glMkj1ERC4Y56pTMB8GA1UdIwQY
MBaAFMEl703J0+zfSGZVwt0jHpy7sKC3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1NYdlRjblQ3TjlJWmxYQzNTTWVuTHV3b0xjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9lYTgxNzAtMGRiMy00ZDAyLWFhOGEt
ZTc0NGM1YmVmNTYxLzEvd1NYdlRjblQ3TjlJWmxYQzNTTWVuTHV3b0xjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9lYTgxNzAtMGRiMy00ZDAyLWFhOGEtZTc0NGM1YmVmNTYx
LzEvd1NYdlRjblQ3TjlJWmxYQzNTTWVuTHV3b0xjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh4ujR61S
fuR6iIPWdL3rV/lH4zUUUB2RX+AWLOKcXyiaXDezcLFm4WgOAgpxCDDEiPgd99Ln
MDoIjxmz/5BPTO9cUT6MxeObPIIAAMAXEH1mhV/0oAkHMie5eKAUges6/STA6GOm
do9Bx1Bsg/63iJVrAIgNVwYjicud9xMy0df20vNRCxnyJ6rVPRTcTtoZwHDnBntA
LL/2/lRUsAe/ly+orDxseBhGk1zx/2DsIzJ1l5nfunOFhSrMCU+0LBwldpcNV4Nv
5uaBuS5Hfbs7XNw1wVD6fZ4aBx/Am6vgVQi36O5yIlPcS5s2n/PMnP1Ju88OfRN4
lTL+LQbRwqiB8w==
-----END CERTIFICATE-----
Generated at Sun Oct 19 21:13:31 2025 by rpki-client