Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/4d27bb-f85c-4bfd-b1c3-47bcd39c3d86/1/WujHjxYTl64dvQrDIlhPYvt0AJc.mft
File:                     WujHjxYTl64dvQrDIlhPYvt0AJc.mft (raw, json)
Hash identifier:          wvDGRdSqRmsocBU9DIKUxmXX06AMpDMlCdPVXk+lfZ8=
Subject key identifier:   8B:8F:6D:F0:04:D3:8E:BE:33:64:21:0F:A5:69:67:EF:E2:78:8F:7F
Authority key identifier: 5A:E8:C7:8F:16:13:97:AE:1D:BD:0A:C3:22:58:4F:62:FB:74:00:97
Certificate issuer:       /CN=5ae8c78f161397ae1dbd0ac322584f62fb740097
Certificate serial:       0199FBEBDD3296B2010DB83F22F8DEA12A5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WujHjxYTl64dvQrDIlhPYvt0AJc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/4d27bb-f85c-4bfd-b1c3-47bcd39c3d86/1/WujHjxYTl64dvQrDIlhPYvt0AJc.mft
Manifest number:          16E8
Signing time:             Sun 19 Oct 2025 10:02:42 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:42 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:42 +0000
Files and hashes:         1: WujHjxYTl64dvQrDIlhPYvt0AJc.crl (hash: r7YKvtLa1Aa35BRm/rGnIcplYysIW4zrMJPdMYD2Khs=)
                          2: daHEI4pwK9MCoKlOIJSUBvhI06c.roa (hash: /jr1EJCG0Q64uCvZ5hBO4FDYHAmlotvlgjK0tDnckkE=)
                          3: eyQdGysIhp_r6-1FHIzSXU5efx8.roa (hash: huANc1mdWopecpKqoSK4uR5EG7Pph6cXGyXeN73ZyWA=)
                          4: haxTlRYy2yO-0mAOlc4jzaKbbWo.roa (hash: yUxYpdVjNsLpxhJtWSKKbU7j/fl7MSe7J+Jl/FZPDcE=)
                          5: qEBSULOSMZqvdv0jIfml2f7tabs.roa (hash: nH9uGd3tMpksCUbkWl3JLVG6iE75o6qgmjF/U2MlHRI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/4d27bb-f85c-4bfd-b1c3-47bcd39c3d86/1/WujHjxYTl64dvQrDIlhPYvt0AJc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/4d27bb-f85c-4bfd-b1c3-47bcd39c3d86/1/WujHjxYTl64dvQrDIlhPYvt0AJc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WujHjxYTl64dvQrDIlhPYvt0AJc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:dd:32:96:b2:01:0d:b8:3f:22:f8:de:a1:2a:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ae8c78f161397ae1dbd0ac322584f62fb740097
        Validity
            Not Before: Oct 19 10:02:42 2025 GMT
            Not After : Oct 20 10:02:42 2025 GMT
        Subject: CN=8b8f6df004d38ebe3364210fa56967efe2788f7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:be:3c:42:70:af:30:d3:6a:6d:aa:ab:04:a0:
                    68:a9:59:2f:24:f6:d0:a8:3f:b5:21:42:90:91:f5:
                    fa:ef:77:61:97:36:c0:b4:8e:3a:ca:b2:1f:40:f5:
                    bb:d3:e7:46:8d:46:bc:d7:e4:9e:57:bf:67:8a:40:
                    5d:2a:d9:dd:17:ba:82:86:60:e7:02:5e:54:15:c7:
                    26:de:74:94:5f:ac:bd:17:c7:53:77:c6:5f:78:02:
                    55:7a:aa:59:8b:6b:6a:eb:d1:17:3b:5d:84:96:d4:
                    38:3e:f0:ca:0c:02:39:36:a4:2d:f2:df:4a:f0:c9:
                    f1:96:dc:bd:46:a8:f0:45:c2:15:e4:df:74:76:95:
                    8d:1d:b7:e3:ea:f5:6a:b6:34:58:51:1d:b8:6d:6e:
                    29:97:61:8b:fb:c9:05:bb:e8:09:07:6b:55:91:64:
                    32:66:4a:b8:89:e2:42:6c:82:c9:a2:1d:44:df:ff:
                    3b:2a:ac:05:8e:72:7c:f8:a7:8e:e7:aa:32:b6:5d:
                    1a:e6:c4:cd:55:3f:b7:77:b5:78:96:ae:dd:42:3d:
                    25:97:a5:c2:05:78:7d:7c:01:60:62:ce:b5:b3:6a:
                    c5:e7:2e:11:b4:04:7e:e5:eb:bc:da:0a:a0:af:96:
                    a3:cb:8b:5b:99:94:78:b0:e4:2d:86:5d:24:84:da:
                    7c:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:8F:6D:F0:04:D3:8E:BE:33:64:21:0F:A5:69:67:EF:E2:78:8F:7F
            X509v3 Authority Key Identifier:
                keyid:5A:E8:C7:8F:16:13:97:AE:1D:BD:0A:C3:22:58:4F:62:FB:74:00:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WujHjxYTl64dvQrDIlhPYvt0AJc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/4d27bb-f85c-4bfd-b1c3-47bcd39c3d86/1/WujHjxYTl64dvQrDIlhPYvt0AJc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/4d27bb-f85c-4bfd-b1c3-47bcd39c3d86/1/WujHjxYTl64dvQrDIlhPYvt0AJc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:f8:f0:4d:8d:a1:09:83:07:76:3a:36:da:5f:01:5e:55:74:
         8c:79:88:52:98:82:14:ab:2b:4e:7c:f0:6f:69:05:02:99:d3:
         79:08:80:72:d0:48:5e:54:6e:ff:dd:2a:f5:84:a9:41:c7:27:
         7a:42:14:35:98:01:fc:91:06:e5:0d:0c:e2:c7:9b:9f:26:fa:
         ee:01:e2:22:51:fa:01:d6:93:5d:8a:bd:f0:a6:38:ab:c9:35:
         cd:3e:36:91:e6:99:ca:2c:3f:17:57:ed:1d:e2:93:3b:24:95:
         8b:42:dd:d2:2c:2e:89:8f:ed:75:1b:5e:15:f5:2c:d7:57:eb:
         78:08:2c:16:d5:97:78:87:1a:f9:1e:9f:17:c0:32:d7:66:85:
         79:e7:c5:0c:b0:c6:35:53:11:65:f2:78:72:40:a1:25:89:a9:
         2f:b7:93:ac:2e:32:4c:99:89:1c:88:bc:0a:a1:77:a4:25:24:
         a9:0d:17:55:71:27:ae:26:0a:3d:1d:8b:13:e1:ae:0c:c4:e3:
         4f:f3:c6:bb:fa:c1:33:47:37:31:64:3d:6c:cc:bd:69:3d:9a:
         9b:a9:e0:1b:7a:b3:b5:67:90:aa:af:4e:0e:0e:ef:1e:f8:f3:
         c8:8c:f2:e2:92:bf:ac:27:60:1e:69:e4:ab:1c:54:b8:35:b1:
         ad:61:00:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:49 2025 by rpki-client