Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/9e86ab-bc7f-4bc4-b127-42262161e940/1/w4w6HAXImev-FdI2GQmmNZfGgHg.mft
File:                     w4w6HAXImev-FdI2GQmmNZfGgHg.mft (raw, json)
Hash identifier:          2Fv6zBZGtUYfrMCjobGu+X/IXWku3n76j0fXv8CZAok=
Subject key identifier:   BA:46:A9:81:58:15:65:B7:01:70:61:BE:EB:B4:6D:C9:84:03:E5:83
Authority key identifier: C3:8C:3A:1C:05:C8:99:EB:FE:15:D2:36:19:09:A6:35:97:C6:80:78
Certificate issuer:       /CN=c38c3a1c05c899ebfe15d2361909a63597c68078
Certificate serial:       0199FEB4DF580F029D409F47D770ABC26E63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w4w6HAXImev-FdI2GQmmNZfGgHg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/9e86ab-bc7f-4bc4-b127-42262161e940/1/w4w6HAXImev-FdI2GQmmNZfGgHg.mft
Manifest number:          16E2
Signing time:             Sun 19 Oct 2025 23:01:30 +0000
Manifest this update:     Sun 19 Oct 2025 23:01:30 +0000
Manifest next update:     Mon 20 Oct 2025 23:01:30 +0000
Files and hashes:         1: 3fbk5KZ8ThDjTTk1HUs_F8dpBIQ.roa (hash: QSUPjZJR7N2hLAV4a9vMxf89Cyng2AUNsEsGu9jShnE=)
                          2: q75v5EqZWH70d3-zw1Mz9lAhrNA.roa (hash: 42QWIn0E5NYeaE/XqOKgGlGrf3JcLpIWupxVplExU4g=)
                          3: w4w6HAXImev-FdI2GQmmNZfGgHg.crl (hash: fYJVu8PhIFPV0L0hi2ZNC0dExLpXz23nBp+2r4tbD24=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/9e86ab-bc7f-4bc4-b127-42262161e940/1/w4w6HAXImev-FdI2GQmmNZfGgHg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/9e86ab-bc7f-4bc4-b127-42262161e940/1/w4w6HAXImev-FdI2GQmmNZfGgHg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w4w6HAXImev-FdI2GQmmNZfGgHg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:b4:df:58:0f:02:9d:40:9f:47:d7:70:ab:c2:6e:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c38c3a1c05c899ebfe15d2361909a63597c68078
        Validity
            Not Before: Oct 19 23:01:30 2025 GMT
            Not After : Oct 20 23:01:30 2025 GMT
        Subject: CN=ba46a981581565b7017061beebb46dc98403e583
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:74:b9:80:72:f2:d2:1b:b0:c3:c5:f2:44:cb:
                    2a:03:ea:67:0c:85:d1:9f:74:27:d9:2d:db:4a:d3:
                    9d:5a:40:4e:8f:95:4a:bb:73:a0:ad:c2:4c:c3:26:
                    e1:db:89:93:0f:56:d3:2d:46:9f:e3:2c:cd:27:31:
                    17:8a:91:a0:d3:69:1d:db:be:c1:a7:df:1c:8c:de:
                    3c:24:b1:68:96:4d:d8:1f:bd:e1:46:23:0f:fb:a2:
                    5a:ed:13:4a:96:8c:c8:1a:c0:a8:f7:60:cc:d1:ae:
                    54:37:00:c7:fe:13:61:31:0f:88:8a:b7:e1:8d:7b:
                    f6:1d:79:cf:d8:a7:ad:1c:79:35:f1:5e:ec:b9:88:
                    10:ee:50:e3:d4:be:68:54:d9:6b:2f:76:69:f3:06:
                    1b:50:25:90:78:c8:68:80:a6:e6:34:49:29:e9:df:
                    be:60:d6:a4:56:e8:f3:14:7f:de:36:cd:c2:f2:63:
                    83:13:9d:71:63:27:d2:9d:56:ac:4d:a4:4c:74:71:
                    63:b0:b2:b2:f7:0a:de:2a:5d:b1:02:c8:05:43:91:
                    49:66:c2:ff:f3:87:1f:73:a5:9b:f4:a1:47:42:6f:
                    ac:52:d9:54:34:db:b5:5e:2f:09:84:27:51:44:43:
                    a9:af:79:05:9c:d2:20:04:e9:6c:c8:ea:08:9b:4c:
                    4b:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:46:A9:81:58:15:65:B7:01:70:61:BE:EB:B4:6D:C9:84:03:E5:83
            X509v3 Authority Key Identifier:
                keyid:C3:8C:3A:1C:05:C8:99:EB:FE:15:D2:36:19:09:A6:35:97:C6:80:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w4w6HAXImev-FdI2GQmmNZfGgHg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9e86ab-bc7f-4bc4-b127-42262161e940/1/w4w6HAXImev-FdI2GQmmNZfGgHg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9e86ab-bc7f-4bc4-b127-42262161e940/1/w4w6HAXImev-FdI2GQmmNZfGgHg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:34:a1:39:34:8e:e6:ec:a7:bc:90:91:e2:1c:f5:40:7b:c5:
         a4:6d:fc:50:dd:35:f3:0c:d4:00:81:c8:84:36:e7:3c:d2:c3:
         9d:da:bb:d6:df:c9:37:31:c5:f3:a6:cb:05:41:cc:a7:ce:5f:
         07:4f:69:a0:c6:83:e5:a8:a7:b9:5b:4c:f4:a2:d5:8a:a0:ca:
         1f:a0:f9:c3:73:2a:83:13:4e:e5:c7:2b:01:92:e0:72:b4:b5:
         42:35:56:86:7f:af:9d:ad:e9:4c:e8:da:41:64:db:93:9e:96:
         a4:30:95:72:f0:5a:b5:06:c7:40:e5:ac:56:c6:2b:89:a4:54:
         5b:52:26:56:03:5f:bd:25:73:48:98:dc:93:5f:94:58:6d:54:
         a9:6f:bd:52:c9:0c:c0:be:0f:09:1d:2d:bb:eb:3b:c4:fa:a2:
         4d:17:a5:70:75:82:ec:fb:2f:70:80:e9:0b:bc:4a:5e:c9:85:
         e3:0f:34:ca:0a:ce:a0:6e:8e:8e:80:77:6c:e2:b0:b4:f2:a0:
         b0:dc:c4:49:8a:2f:38:74:f8:87:84:bc:79:3a:f2:87:e5:3d:
         ae:e0:a7:58:81:da:62:4e:0b:fd:75:ae:2f:e4:73:6b:91:5f:
         6b:38:e0:75:8f:4d:c2:05:e1:c9:e6:d3:cd:d4:ff:9f:4a:11:
         5b:b5:9d:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:19:32 2025 by rpki-client