Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/12dd2c-4d0c-420a-98a5-02e6422c4181/1/wDJJW4nc6BsMf4ht38NgS94G2KY.mft
File:                     wDJJW4nc6BsMf4ht38NgS94G2KY.mft (raw, json)
Hash identifier:          LG3cZa9DbMwWoqO7JDs6ITTUl8ROztTMBJlBxNwJS0I=
Subject key identifier:   6F:C5:47:BF:DD:52:17:B6:33:83:65:77:6E:9D:6D:DF:98:26:CF:B6
Authority key identifier: C0:32:49:5B:89:DC:E8:1B:0C:7F:88:6D:DF:C3:60:4B:DE:06:D8:A6
Certificate issuer:       /CN=c032495b89dce81b0c7f886ddfc3604bde06d8a6
Certificate serial:       0199FBEBFEC1E5BE8221FB49774BB529C3BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wDJJW4nc6BsMf4ht38NgS94G2KY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/12dd2c-4d0c-420a-98a5-02e6422c4181/1/wDJJW4nc6BsMf4ht38NgS94G2KY.mft
Manifest number:          16E2
Signing time:             Sun 19 Oct 2025 10:02:51 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:51 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:51 +0000
Files and hashes:         1: mHKZZdX4P1dK57yB0hCJdDCS-A8.roa (hash: sgKlWaet9A3w8v934Vjaqn1vJ0nwSp4V/6BEjtLuqMM=)
                          2: wDJJW4nc6BsMf4ht38NgS94G2KY.crl (hash: 5GhwnFJS+dea1UiMoFcAjN4ws9VTavWouBffnswBzTU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/12dd2c-4d0c-420a-98a5-02e6422c4181/1/wDJJW4nc6BsMf4ht38NgS94G2KY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/12dd2c-4d0c-420a-98a5-02e6422c4181/1/wDJJW4nc6BsMf4ht38NgS94G2KY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wDJJW4nc6BsMf4ht38NgS94G2KY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 10:02:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:fe:c1:e5:be:82:21:fb:49:77:4b:b5:29:c3:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c032495b89dce81b0c7f886ddfc3604bde06d8a6
        Validity
            Not Before: Oct 19 10:02:51 2025 GMT
            Not After : Oct 20 10:02:51 2025 GMT
        Subject: CN=6fc547bfdd5217b6338365776e9d6ddf9826cfb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:4d:98:19:1c:cb:a7:0c:54:0b:26:ab:9e:c9:
                    13:be:c4:ae:f6:5a:4f:16:05:40:cc:57:04:d4:02:
                    71:a2:33:59:b5:6b:69:9e:76:37:94:0a:38:87:f6:
                    ee:21:f5:21:03:13:e1:93:2f:55:ee:a2:78:8f:1b:
                    49:c1:73:39:66:2c:10:e3:e0:f6:b9:9d:27:30:5e:
                    5f:3e:1c:72:c9:02:1c:ff:2e:2a:0a:55:0c:f1:0d:
                    29:72:bf:b4:ed:03:eb:e4:c6:71:5c:a8:30:66:33:
                    62:c3:00:2d:38:58:86:b4:ca:83:b9:da:01:74:ef:
                    17:1c:3f:61:0c:a7:7c:09:6f:e9:c7:b9:3b:b2:84:
                    35:70:b9:65:7e:a1:83:79:cf:b1:79:df:12:27:51:
                    3e:b0:e1:69:dc:bd:01:86:1e:e8:5c:e8:2a:19:6b:
                    33:bd:21:47:6f:44:33:bf:2c:a1:b9:14:f2:64:86:
                    3d:f7:0d:8d:86:c0:66:e1:77:4c:5d:e3:ca:38:7b:
                    a3:84:5d:c3:d6:3a:6c:2d:06:14:a9:18:4f:1f:d6:
                    ca:9e:2d:bd:8a:69:7d:64:7a:3a:e7:0b:10:ce:dd:
                    0e:2e:4d:be:5c:d9:e6:25:28:61:dc:67:0d:17:1d:
                    10:11:1f:46:65:34:3a:06:4f:3f:7a:35:32:ff:17:
                    15:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:C5:47:BF:DD:52:17:B6:33:83:65:77:6E:9D:6D:DF:98:26:CF:B6
            X509v3 Authority Key Identifier:
                keyid:C0:32:49:5B:89:DC:E8:1B:0C:7F:88:6D:DF:C3:60:4B:DE:06:D8:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wDJJW4nc6BsMf4ht38NgS94G2KY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/12dd2c-4d0c-420a-98a5-02e6422c4181/1/wDJJW4nc6BsMf4ht38NgS94G2KY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/12dd2c-4d0c-420a-98a5-02e6422c4181/1/wDJJW4nc6BsMf4ht38NgS94G2KY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:02:33:b5:39:fb:fb:8d:0b:f9:97:b3:55:0f:93:1e:3a:90:
         20:2f:0a:aa:ee:7d:b9:14:8d:67:fd:b4:d5:43:a9:f2:8f:25:
         f6:c1:5f:d4:dd:8d:8d:c6:ce:25:db:79:34:8c:ce:c6:40:22:
         34:58:1b:36:0c:31:4f:de:1a:0c:26:80:04:a8:9a:06:0d:fe:
         32:e7:93:9d:63:02:26:5d:51:30:4d:c1:73:7f:08:e6:5c:e9:
         b8:60:d2:bd:c9:6f:5e:f9:4d:90:1b:b0:77:f5:7d:76:19:29:
         7e:7c:96:13:7f:6f:09:22:fb:fd:d2:52:38:f8:30:b3:59:0d:
         2f:7c:28:21:e8:f5:1f:a3:ea:d4:1b:80:da:76:ab:cd:65:a7:
         91:34:1c:63:6f:7e:fc:87:25:e7:1f:53:35:04:26:7c:8a:af:
         8e:90:53:91:7f:b3:de:5c:e1:ff:5f:79:e6:c0:39:02:c3:79:
         be:ea:76:28:a2:3e:b8:1d:0c:d2:2a:bf:06:e8:fa:f7:81:d0:
         88:b0:d7:d7:09:bb:e1:62:81:8a:00:b2:f5:bb:b4:77:a3:82:
         5c:e6:09:72:d4:35:4f:fe:28:f0:80:a2:00:67:18:94:4f:5f:
         23:08:84:be:ff:da:51:ba:be:9c:45:26:91:d1:fe:78:10:67:
         42:26:9f:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76/7B5b6CIftJd0u1KcO+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwMzI0OTViODlkY2U4MWIwYzdmODg2ZGRmYzM2MDRiZGUw
NmQ4YTYwHhcNMjUxMDE5MTAwMjUxWhcNMjUxMDIwMTAwMjUxWjAzMTEwLwYDVQQD
Eyg2ZmM1NDdiZmRkNTIxN2I2MzM4MzY1Nzc2ZTlkNmRkZjk4MjZjZmI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4k2YGRzLpwxUCyarnskTvsSu9lpP
FgVAzFcE1AJxojNZtWtpnnY3lAo4h/buIfUhAxPhky9V7qJ4jxtJwXM5ZiwQ4+D2
uZ0nMF5fPhxyyQIc/y4qClUM8Q0pcr+07QPr5MZxXKgwZjNiwwAtOFiGtMqDudoB
dO8XHD9hDKd8CW/px7k7soQ1cLllfqGDec+xed8SJ1E+sOFp3L0Bhh7oXOgqGWsz
vSFHb0QzvyyhuRTyZIY99w2NhsBm4XdMXePKOHujhF3D1jpsLQYUqRhPH9bKni29
iml9ZHo65wsQzt0OLk2+XNnmJShh3GcNFx0QER9GZTQ6Bk8/ejUy/xcV2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG/FR7/dUhe2M4Nld26dbd+YJs+2MB8GA1UdIwQY
MBaAFMAySVuJ3OgbDH+Ibd/DYEveBtimMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0RKSlc0bmM2QnNNZjRodDM4TmdTOTRHMktZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC8xMmRkMmMtNGQwYy00MjBhLTk4YTUt
MDJlNjQyMmM0MTgxLzEvd0RKSlc0bmM2QnNNZjRodDM4TmdTOTRHMktZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC8xMmRkMmMtNGQwYy00MjBhLTk4YTUtMDJlNjQyMmM0MTgx
LzEvd0RKSlc0bmM2QnNNZjRodDM4TmdTOTRHMktZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkwIztTn7
+40L+ZezVQ+THjqQIC8Kqu59uRSNZ/201UOp8o8l9sFf1N2NjcbOJdt5NIzOxkAi
NFgbNgwxT94aDCaABKiaBg3+MueTnWMCJl1RME3Bc38I5lzpuGDSvclvXvlNkBuw
d/V9dhkpfnyWE39vCSL7/dJSOPgws1kNL3woIej1H6Pq1BuA2narzWWnkTQcY29+
/Icl5x9TNQQmfIqvjpBTkX+z3lzh/1955sA5AsN5vup2KKI+uB0M0iq/Buj694HQ
iLDX1wm74WKBigCy9bu0d6OCXOYJctQ1T/4o8ICiAGcYlE9fIwiEvv/aUbq+nEUm
kdH+eBBnQiaf8w==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:27:42 2025 by rpki-client