Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/294c4e-5a2b-4bee-bc57-12ad146655ce/1/W2-maQmXQS5xZhbIHk98CHX_2XY.mft
File:                     W2-maQmXQS5xZhbIHk98CHX_2XY.mft (raw, json)
Hash identifier:          rdLbiyy8OtuKHATn4bCXgF6XPWDqUy6EYvTZD6pHsY0=
Subject key identifier:   9F:E0:04:4A:41:80:88:34:26:EC:F2:B9:65:66:EE:93:FF:5E:35:FD
Authority key identifier: 5B:6F:A6:69:09:97:41:2E:71:66:16:C8:1E:4F:7C:08:75:FF:D9:76
Certificate issuer:       /CN=5b6fa6690997412e716616c81e4f7c0875ffd976
Certificate serial:       019A03A4C874CDEA06B07A0160BF25D5E82B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W2-maQmXQS5xZhbIHk98CHX_2XY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/294c4e-5a2b-4bee-bc57-12ad146655ce/1/W2-maQmXQS5xZhbIHk98CHX_2XY.mft
Manifest number:          16EA
Signing time:             Mon 20 Oct 2025 22:02:02 +0000
Manifest this update:     Mon 20 Oct 2025 22:02:02 +0000
Manifest next update:     Tue 21 Oct 2025 22:02:02 +0000
Files and hashes:         1: W2-maQmXQS5xZhbIHk98CHX_2XY.crl (hash: YPHy81uaLwJir6LivkAxmuTGbUofIY/9a+cR86AeJgU=)
                          2: XBhVypX2lGM6_x0NsP1fksWNFzA.roa (hash: Zaq2cSOdsGQcDop6nFC8bWSLTheqL3BkExxlTIu5yQY=)
                          3: Xgr5P1UaBLoKB0nFSdLdMnYEAcA.roa (hash: xFI+ynIKk4Nft8+Xpcr+WB8ws9nItuL+8WRyzYu3/Do=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/294c4e-5a2b-4bee-bc57-12ad146655ce/1/W2-maQmXQS5xZhbIHk98CHX_2XY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/294c4e-5a2b-4bee-bc57-12ad146655ce/1/W2-maQmXQS5xZhbIHk98CHX_2XY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W2-maQmXQS5xZhbIHk98CHX_2XY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 22:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:03:a4:c8:74:cd:ea:06:b0:7a:01:60:bf:25:d5:e8:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b6fa6690997412e716616c81e4f7c0875ffd976
        Validity
            Not Before: Oct 20 22:02:02 2025 GMT
            Not After : Oct 21 22:02:02 2025 GMT
        Subject: CN=9fe0044a4180883426ecf2b96566ee93ff5e35fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:fb:3f:73:7b:94:c7:d8:53:3a:98:85:66:5a:
                    5f:e4:3c:17:2c:80:30:b1:09:66:e3:18:90:e5:f8:
                    66:2a:ff:69:6d:dc:6b:73:0d:5d:1f:e2:0d:0c:6f:
                    ac:43:bd:3d:83:13:53:35:32:d3:af:7b:d3:ba:82:
                    22:9c:d1:ca:ea:01:c5:25:fe:65:ed:71:00:9c:7c:
                    a3:9f:4a:3d:4d:d6:d3:61:9d:90:96:fa:3f:f1:8b:
                    87:f8:e6:e7:2f:d5:97:4b:bd:d6:c0:c4:ae:b9:22:
                    ba:56:7c:1b:67:69:f8:9a:8f:59:8c:a6:3d:f6:74:
                    fe:d6:52:e8:8a:d6:b4:d6:56:ff:21:cc:51:55:db:
                    5b:8f:5e:66:1f:7d:3e:87:71:c5:6c:89:24:7f:7a:
                    d2:48:40:b2:bc:4a:30:37:3d:01:4d:f8:35:db:6f:
                    7d:a8:5f:81:ab:14:e1:a5:aa:af:f3:db:2f:11:44:
                    9c:3f:f8:7f:50:e2:05:58:96:58:29:9c:d2:92:1d:
                    61:0a:66:2e:41:8a:86:a1:f1:94:8c:58:17:83:96:
                    26:fa:99:b5:7e:a6:0f:94:f2:4a:e0:8b:83:a6:0d:
                    4a:2b:2e:d2:55:fd:d1:fb:02:ac:9c:49:67:f4:a9:
                    ad:6f:18:da:3e:49:80:47:3b:fa:ca:bc:0d:07:01:
                    4c:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:E0:04:4A:41:80:88:34:26:EC:F2:B9:65:66:EE:93:FF:5E:35:FD
            X509v3 Authority Key Identifier:
                keyid:5B:6F:A6:69:09:97:41:2E:71:66:16:C8:1E:4F:7C:08:75:FF:D9:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2-maQmXQS5xZhbIHk98CHX_2XY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/294c4e-5a2b-4bee-bc57-12ad146655ce/1/W2-maQmXQS5xZhbIHk98CHX_2XY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/294c4e-5a2b-4bee-bc57-12ad146655ce/1/W2-maQmXQS5xZhbIHk98CHX_2XY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:97:89:b2:4c:89:ed:0e:40:6a:35:a5:4e:28:8c:4a:1c:de:
         bf:ea:af:71:10:f5:be:9b:ff:4d:26:ea:86:42:19:8c:71:41:
         0b:bd:ef:9a:31:09:ca:6b:6c:21:d2:b2:33:31:4d:5a:b6:1d:
         96:82:8c:7b:e1:45:7e:b7:f4:58:61:06:b2:f3:44:df:d4:c2:
         66:20:1a:c2:97:e0:b8:67:02:10:3a:4f:ac:b7:4a:e3:ed:89:
         be:28:ed:0c:82:00:fa:c8:65:e1:9a:1a:07:00:c6:8c:2c:6f:
         97:63:af:3b:a0:94:a8:65:c7:2b:96:ac:09:eb:be:37:34:c7:
         2a:db:cf:06:e8:bf:d5:8c:1b:5a:3e:84:75:8a:ab:f3:d9:fc:
         08:fd:5f:71:e2:15:f8:07:07:7c:68:fb:94:44:7b:78:7a:d4:
         61:47:70:75:18:6d:53:9c:47:29:40:bb:8a:5d:85:d5:82:6f:
         09:93:3b:a6:10:22:63:b4:11:9d:21:d0:38:fa:fc:ef:f0:ec:
         70:8d:0a:09:71:8e:b9:c7:44:7e:10:50:00:32:f9:57:0c:9e:
         a4:db:2f:20:f9:9f:90:72:09:5c:d1:3d:62:14:a5:64:d9:ea:
         01:f0:b7:1d:d0:e2:09:f1:70:7e:62:64:b1:f0:ba:d3:b2:2b:
         59:02:ef:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:02:03 2025 by rpki-client