Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a5b999-f1c7-4b0e-a3de-5383aa626726/1/w-Dp9Xw7CDy2iphjD4pmFYRGjj0.mft
File:                     w-Dp9Xw7CDy2iphjD4pmFYRGjj0.mft (raw, json)
Hash identifier:          7T9uxN7IWqFc2Y7IsRic4Polyrrag7uH/3ztZJPJ6Js=
Subject key identifier:   7C:7A:11:55:49:77:80:9B:5C:2A:CB:B4:71:FC:85:FA:74:CB:61:42
Authority key identifier: C3:E0:E9:F5:7C:3B:08:3C:B6:8A:98:63:0F:8A:66:15:84:46:8E:3D
Certificate issuer:       /CN=c3e0e9f57c3b083cb68a98630f8a661584468e3d
Certificate serial:       0199FF225267461FFE6CF71DA79CB396FBF3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w-Dp9Xw7CDy2iphjD4pmFYRGjj0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/a5b999-f1c7-4b0e-a3de-5383aa626726/1/w-Dp9Xw7CDy2iphjD4pmFYRGjj0.mft
Manifest number:          0D38
Signing time:             Mon 20 Oct 2025 01:01:03 +0000
Manifest this update:     Mon 20 Oct 2025 01:01:03 +0000
Manifest next update:     Tue 21 Oct 2025 01:01:03 +0000
Files and hashes:         1: 6bwL5YHScOT2TjF50UOzWmSHFbM.roa (hash: J7fubjulsksJL2y5CCyjiA6636klGKicCVaiq1Tvfs4=)
                          2: w-Dp9Xw7CDy2iphjD4pmFYRGjj0.crl (hash: LPF12iIZitcs9o8QX7wrJFY0Ceu2kWUL1IIsrQ5nCpo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/a5b999-f1c7-4b0e-a3de-5383aa626726/1/w-Dp9Xw7CDy2iphjD4pmFYRGjj0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/a5b999-f1c7-4b0e-a3de-5383aa626726/1/w-Dp9Xw7CDy2iphjD4pmFYRGjj0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w-Dp9Xw7CDy2iphjD4pmFYRGjj0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ff:22:52:67:46:1f:fe:6c:f7:1d:a7:9c:b3:96:fb:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3e0e9f57c3b083cb68a98630f8a661584468e3d
        Validity
            Not Before: Oct 20 01:01:03 2025 GMT
            Not After : Oct 21 01:01:03 2025 GMT
        Subject: CN=7c7a11554977809b5c2acbb471fc85fa74cb6142
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:1d:9e:e5:ab:f6:4b:e4:40:f4:07:67:a0:74:
                    fe:f8:91:d9:5e:5b:51:50:27:40:34:80:3f:ba:f9:
                    a4:51:de:88:c8:6c:f2:b5:69:27:e4:fa:fa:82:05:
                    6c:1d:1f:9b:19:41:f5:a7:d9:0f:93:47:72:83:34:
                    12:6b:78:be:93:fe:d9:63:e7:73:68:a9:7e:d8:a6:
                    30:18:a2:d8:d6:f3:14:c7:bd:86:84:45:40:44:16:
                    d9:44:8d:f6:dc:48:26:47:62:bc:60:6e:95:3e:46:
                    12:f3:37:1d:e8:35:eb:2e:2d:90:b0:39:3f:18:75:
                    6d:30:9f:62:b6:22:60:65:d7:1e:26:ab:0f:f3:6d:
                    22:ae:03:02:10:3e:8c:73:d2:24:4d:0b:38:4a:a5:
                    6d:fe:6e:02:f7:41:95:41:6a:27:93:d2:df:1d:f0:
                    77:7b:44:b1:ed:79:38:a8:dd:2e:34:ec:94:d7:70:
                    a2:17:d0:71:0e:1b:44:19:39:31:9e:64:e3:55:a1:
                    98:75:73:3d:1f:60:f5:ec:1a:b1:8d:0e:0e:d8:40:
                    1f:b1:cd:4b:5e:17:b9:38:55:22:26:52:91:62:47:
                    3a:96:f0:cf:c1:61:c1:99:28:3e:ab:7c:f7:4a:73:
                    fb:eb:40:c1:01:74:63:e2:94:3a:96:e1:1e:a7:e4:
                    8a:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:7A:11:55:49:77:80:9B:5C:2A:CB:B4:71:FC:85:FA:74:CB:61:42
            X509v3 Authority Key Identifier:
                keyid:C3:E0:E9:F5:7C:3B:08:3C:B6:8A:98:63:0F:8A:66:15:84:46:8E:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w-Dp9Xw7CDy2iphjD4pmFYRGjj0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a5b999-f1c7-4b0e-a3de-5383aa626726/1/w-Dp9Xw7CDy2iphjD4pmFYRGjj0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a5b999-f1c7-4b0e-a3de-5383aa626726/1/w-Dp9Xw7CDy2iphjD4pmFYRGjj0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:a2:f2:23:d7:ca:e8:8e:13:e9:b2:d8:31:d6:21:b4:38:23:
         e1:0c:88:9e:f1:fb:f2:c0:6f:02:67:64:da:e3:e3:e3:f6:47:
         6c:f0:d2:43:93:6f:d0:7d:64:94:1a:3b:3f:a5:49:5f:f0:90:
         97:d0:72:a4:be:c9:f0:fb:da:0d:59:10:75:04:0f:cd:ec:52:
         6c:f9:b8:fc:97:81:09:d8:0e:8f:17:7d:6e:5d:91:20:28:6c:
         ee:87:90:99:d6:04:4b:35:e3:4f:62:bf:b6:77:8c:90:c8:f1:
         67:4e:ce:fe:18:3e:61:46:41:5b:9a:ef:7e:42:19:41:bc:0d:
         91:1b:a7:de:ad:3b:63:1c:b7:88:c1:2a:93:72:32:b3:28:d4:
         5c:20:d4:2a:ef:22:9c:3e:2a:e6:eb:5c:28:aa:04:dc:13:ba:
         b2:e7:24:e4:88:2b:62:9a:66:57:b4:bb:fc:3c:1c:54:ae:1f:
         cd:64:d0:0b:d1:ed:d6:ba:cd:d4:f2:b2:44:84:c6:4f:5c:44:
         57:24:08:cd:ae:ec:1f:e8:b5:3d:54:91:4b:8c:1f:12:3e:bd:
         a8:cf:2d:82:d9:77:18:fb:12:5b:26:e4:45:5f:ca:48:13:8c:
         c0:66:f3:14:a1:ef:f6:5d:43:ec:44:59:7e:03:c9:2f:ea:d8:
         7d:4c:11:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:32:47 2025 by rpki-client