Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/fb41f9-3c2e-4cc3-b24d-5d8c7adc7962/1/wb_RnDPps9MzU8_rZBee9z0yMys.mft
File:                     wb_RnDPps9MzU8_rZBee9z0yMys.mft (raw, json)
Hash identifier:          nNhPPUjmsbxf/+Zvl7KOmfmP32FujRA9yF9NgwQrS30=
Subject key identifier:   C5:EC:F3:6B:77:C2:47:CC:B2:CC:2E:58:CD:0C:87:2D:27:F4:FA:57
Authority key identifier: C1:BF:D1:9C:33:E9:B3:D3:33:53:CF:EB:64:17:9E:F7:3D:32:33:2B
Certificate issuer:       /CN=c1bfd19c33e9b3d33353cfeb64179ef73d32332b
Certificate serial:       0199FBEB24A172A870DF5E1886D84404B429
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wb_RnDPps9MzU8_rZBee9z0yMys.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/fb41f9-3c2e-4cc3-b24d-5d8c7adc7962/1/wb_RnDPps9MzU8_rZBee9z0yMys.mft
Manifest number:          16E3
Signing time:             Sun 19 Oct 2025 10:01:55 +0000
Manifest this update:     Sun 19 Oct 2025 10:01:55 +0000
Manifest next update:     Mon 20 Oct 2025 10:01:55 +0000
Files and hashes:         1: DBFDlK5pJ_In8yUaHfIwunse1tE.roa (hash: hBkF1wd780ez4BIZdoVbu1TdvJ7vKBgxWpbafISeX7E=)
                          2: wb_RnDPps9MzU8_rZBee9z0yMys.crl (hash: oy2or57WPN6tScztFNeOwnT2AD314K/UnitR29Io7L8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/fb41f9-3c2e-4cc3-b24d-5d8c7adc7962/1/wb_RnDPps9MzU8_rZBee9z0yMys.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/fb41f9-3c2e-4cc3-b24d-5d8c7adc7962/1/wb_RnDPps9MzU8_rZBee9z0yMys.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wb_RnDPps9MzU8_rZBee9z0yMys.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:24:a1:72:a8:70:df:5e:18:86:d8:44:04:b4:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1bfd19c33e9b3d33353cfeb64179ef73d32332b
        Validity
            Not Before: Oct 19 10:01:55 2025 GMT
            Not After : Oct 20 10:01:55 2025 GMT
        Subject: CN=c5ecf36b77c247ccb2cc2e58cd0c872d27f4fa57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:94:34:2d:a7:ac:ea:51:39:6d:ce:ea:60:e5:
                    50:94:51:fc:38:30:6f:72:cc:02:3b:78:fa:b8:5b:
                    5e:60:5d:8d:5b:4c:ea:10:48:ea:08:6d:6b:13:34:
                    46:b4:73:fa:6d:d7:f7:4e:d8:31:ca:22:40:f9:76:
                    1b:8b:2a:1b:9b:b6:05:0a:f8:b7:91:f3:ac:39:b7:
                    a2:9e:2d:22:60:f8:c6:a3:53:14:86:cb:14:de:8b:
                    15:7e:75:a5:fc:58:c9:da:1c:a1:67:ba:8d:ec:b0:
                    9d:01:4b:ef:fa:ad:63:73:07:a0:cf:47:65:24:d5:
                    2d:e7:2a:dc:96:59:ab:ca:03:80:3b:19:b4:98:c2:
                    f8:a7:fe:0e:3f:49:32:8d:a0:ee:1a:60:9d:88:59:
                    26:0b:ef:00:80:20:0b:06:32:28:27:e4:95:25:c8:
                    59:06:4c:0e:88:00:ed:87:e0:b1:3e:a6:5f:b2:58:
                    10:49:f9:6f:68:32:1d:e8:e9:e0:ea:1f:dd:c5:8d:
                    41:56:ba:67:6c:ec:f6:b6:de:04:d7:07:4f:22:02:
                    bd:b7:c4:12:7c:d5:d2:9c:8f:37:9b:04:5d:94:64:
                    2b:43:e5:05:21:11:23:bc:d2:c4:6c:93:02:85:d9:
                    a5:fc:49:9f:d9:b8:2c:fe:72:02:14:52:2c:37:dd:
                    28:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:EC:F3:6B:77:C2:47:CC:B2:CC:2E:58:CD:0C:87:2D:27:F4:FA:57
            X509v3 Authority Key Identifier:
                keyid:C1:BF:D1:9C:33:E9:B3:D3:33:53:CF:EB:64:17:9E:F7:3D:32:33:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wb_RnDPps9MzU8_rZBee9z0yMys.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/fb41f9-3c2e-4cc3-b24d-5d8c7adc7962/1/wb_RnDPps9MzU8_rZBee9z0yMys.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/fb41f9-3c2e-4cc3-b24d-5d8c7adc7962/1/wb_RnDPps9MzU8_rZBee9z0yMys.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:27:0d:88:c8:cc:4d:ca:2a:9f:ad:18:bf:03:d5:48:7f:13:
         f0:5e:f9:60:c9:2a:45:1e:de:7a:d3:cf:c3:ae:fb:f7:d8:7c:
         ee:30:c2:8c:a0:23:08:57:9c:82:b8:00:12:69:d4:e3:cc:af:
         50:19:f7:8c:94:f9:ec:7a:32:84:4c:e3:6d:28:41:d0:62:69:
         c0:2f:a2:2f:49:3f:19:7f:0c:90:e9:1c:09:c4:d1:63:08:af:
         04:03:1e:f8:51:33:b0:9d:aa:49:e4:15:1f:a0:52:e2:55:eb:
         45:c3:62:7e:f0:9d:99:bf:52:45:d9:37:67:5e:a8:51:46:6b:
         c0:66:33:48:a9:d2:1e:d9:6c:72:04:b9:44:a0:f5:2d:49:26:
         87:de:26:d8:ba:1f:13:60:57:a1:bf:da:81:7b:26:1b:86:02:
         99:cd:98:30:45:37:09:25:f8:45:82:03:cf:4a:0c:84:86:2d:
         78:7b:9e:15:da:90:28:56:3e:81:3f:bb:70:13:ba:21:b9:15:
         df:7e:8c:4c:25:cf:86:60:7e:7b:a4:9e:de:2c:02:78:4c:5e:
         96:16:e6:73:c1:28:81:19:9e:c3:6e:45:5b:f9:f3:45:d7:d9:
         6b:54:8e:16:3a:89:fb:2a:92:e4:40:d0:43:58:08:bb:6b:3c:
         80:4b:f5:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76yShcqhw314YhthEBLQpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxYmZkMTljMzNlOWIzZDMzMzUzY2ZlYjY0MTc5ZWY3M2Qz
MjMzMmIwHhcNMjUxMDE5MTAwMTU1WhcNMjUxMDIwMTAwMTU1WjAzMTEwLwYDVQQD
EyhjNWVjZjM2Yjc3YzI0N2NjYjJjYzJlNThjZDBjODcyZDI3ZjRmYTU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzpQ0Laes6lE5bc7qYOVQlFH8ODBv
cswCO3j6uFteYF2NW0zqEEjqCG1rEzRGtHP6bdf3TtgxyiJA+XYbiyobm7YFCvi3
kfOsObeini0iYPjGo1MUhssU3osVfnWl/FjJ2hyhZ7qN7LCdAUvv+q1jcwegz0dl
JNUt5yrcllmrygOAOxm0mML4p/4OP0kyjaDuGmCdiFkmC+8AgCALBjIoJ+SVJchZ
BkwOiADth+CxPqZfslgQSflvaDId6Ong6h/dxY1BVrpnbOz2tt4E1wdPIgK9t8QS
fNXSnI83mwRdlGQrQ+UFIREjvNLEbJMChdml/Emf2bgs/nICFFIsN90oIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMXs82t3wkfMsswuWM0Mhy0n9PpXMB8GA1UdIwQY
MBaAFMG/0Zwz6bPTM1PP62QXnvc9MjMrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2JfUm5EUHBzOU16VThfclpCZWU5ejB5TXlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9mYjQxZjktM2MyZS00Y2MzLWIyNGQt
NWQ4YzdhZGM3OTYyLzEvd2JfUm5EUHBzOU16VThfclpCZWU5ejB5TXlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS9mYjQxZjktM2MyZS00Y2MzLWIyNGQtNWQ4YzdhZGM3OTYy
LzEvd2JfUm5EUHBzOU16VThfclpCZWU5ejB5TXlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABScNiMjM
Tcoqn60YvwPVSH8T8F75YMkqRR7eetPPw67799h87jDCjKAjCFecgrgAEmnU48yv
UBn3jJT57HoyhEzjbShB0GJpwC+iL0k/GX8MkOkcCcTRYwivBAMe+FEzsJ2qSeQV
H6BS4lXrRcNifvCdmb9SRdk3Z16oUUZrwGYzSKnSHtlscgS5RKD1LUkmh94m2Lof
E2BXob/agXsmG4YCmc2YMEU3CSX4RYIDz0oMhIYteHueFdqQKFY+gT+7cBO6IbkV
336MTCXPhmB+e6Se3iwCeExelhbmc8EogRmew25FW/nzRdfZa1SOFjqJ+yqS5EDQ
Q1gIu2s8gEv1KQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:07:25 2025 by rpki-client