Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/acdbe3-b82f-495b-b55b-e1563f812929/1/wjcM8YCbe8ZjrUFDwIl2tIEC77k.mft
File:                     wjcM8YCbe8ZjrUFDwIl2tIEC77k.mft (raw, json)
Hash identifier:          +KB168nx/Lo0LHf1X4pe8Oqe7/7mES0DeiClks3aIFA=
Subject key identifier:   66:37:6A:AE:E9:54:6D:E9:AB:41:71:7B:6B:90:E9:C3:BA:42:71:AA
Authority key identifier: C2:37:0C:F1:80:9B:7B:C6:63:AD:41:43:C0:89:76:B4:81:02:EF:B9
Certificate issuer:       /CN=c2370cf1809b7bc663ad4143c08976b48102efb9
Certificate serial:       0199FC58890E2A9DE67BCF9E921B835C7D34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wjcM8YCbe8ZjrUFDwIl2tIEC77k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/acdbe3-b82f-495b-b55b-e1563f812929/1/wjcM8YCbe8ZjrUFDwIl2tIEC77k.mft
Manifest number:          09D9
Signing time:             Sun 19 Oct 2025 12:01:24 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:24 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:24 +0000
Files and hashes:         1: jbzxZYmQPO4lVh_5XWCn7tDn4rY.roa (hash: cL3utd2QLzcDLl61jDEDa8thzTSW3ILE3u54VZ6FafA=)
                          2: wjcM8YCbe8ZjrUFDwIl2tIEC77k.crl (hash: v1kaju2spaYJ8BXk+0OGXATV2ECRjQCpw3IyeXIdtPE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/acdbe3-b82f-495b-b55b-e1563f812929/1/wjcM8YCbe8ZjrUFDwIl2tIEC77k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/acdbe3-b82f-495b-b55b-e1563f812929/1/wjcM8YCbe8ZjrUFDwIl2tIEC77k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wjcM8YCbe8ZjrUFDwIl2tIEC77k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:58:89:0e:2a:9d:e6:7b:cf:9e:92:1b:83:5c:7d:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2370cf1809b7bc663ad4143c08976b48102efb9
        Validity
            Not Before: Oct 19 12:01:24 2025 GMT
            Not After : Oct 20 12:01:24 2025 GMT
        Subject: CN=66376aaee9546de9ab41717b6b90e9c3ba4271aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:87:7c:b1:c5:16:b7:37:7f:e7:c6:fb:6e:35:
                    5b:6b:ed:cd:ad:e5:63:62:5d:02:74:b3:e7:59:60:
                    00:f1:aa:ad:b6:cc:84:82:5e:f9:26:f3:6d:0f:3d:
                    c7:6c:c5:c0:ca:19:40:1c:35:21:56:42:a1:75:46:
                    f1:3c:96:9d:94:26:86:ac:b2:59:68:78:c9:04:00:
                    96:fd:8f:d4:d8:3f:f5:34:d3:cb:ec:f9:c8:bc:19:
                    05:47:d4:c8:ea:b4:b3:e2:10:5d:13:50:66:a3:fb:
                    00:29:40:bb:4b:cc:01:23:2f:b4:a3:81:8a:e0:f4:
                    40:9e:e4:56:43:64:53:4e:6d:54:28:d8:15:c7:47:
                    42:89:a9:06:de:41:d3:e8:c7:8a:9f:6c:6b:a7:be:
                    b9:ab:f2:61:cd:3c:37:95:76:fd:46:78:a3:a9:e9:
                    70:0e:c5:d8:58:08:d9:0b:b1:b2:fd:5d:f9:1d:ac:
                    8b:c2:58:62:e9:76:f3:61:21:c7:f6:f7:f9:96:d1:
                    a8:e9:1c:e3:27:23:d9:71:00:4c:08:ad:99:da:6b:
                    54:6d:fa:da:d5:61:fd:a9:9e:5e:f6:b7:04:ec:2c:
                    53:e6:23:0c:9b:f3:e8:3f:6c:44:ce:30:f8:07:43:
                    b7:f7:16:a6:a7:23:25:77:3a:69:20:63:e9:24:6a:
                    79:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:37:6A:AE:E9:54:6D:E9:AB:41:71:7B:6B:90:E9:C3:BA:42:71:AA
            X509v3 Authority Key Identifier:
                keyid:C2:37:0C:F1:80:9B:7B:C6:63:AD:41:43:C0:89:76:B4:81:02:EF:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjcM8YCbe8ZjrUFDwIl2tIEC77k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/acdbe3-b82f-495b-b55b-e1563f812929/1/wjcM8YCbe8ZjrUFDwIl2tIEC77k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/acdbe3-b82f-495b-b55b-e1563f812929/1/wjcM8YCbe8ZjrUFDwIl2tIEC77k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:9e:f1:4a:58:d0:3d:6d:91:bb:c1:73:c9:49:ae:e1:a7:4a:
         da:d4:bc:b7:28:a1:95:27:2e:4b:3e:23:de:ca:47:6c:3d:25:
         b7:31:e8:a5:49:e4:05:77:14:2a:54:fd:4f:25:39:56:a3:a0:
         9d:ff:3b:52:9a:a2:ea:9d:d4:dd:e0:6d:f1:5b:20:bd:5f:7b:
         91:aa:22:f6:97:71:74:10:03:f1:fd:19:f1:3a:2a:6d:aa:28:
         f8:f6:ff:54:db:d3:42:bf:79:78:69:30:ee:61:9b:a2:40:b3:
         fa:91:2d:c2:4c:fb:15:9f:f1:87:b5:3c:f4:f9:8c:fa:45:68:
         12:8c:83:53:7d:f6:bc:ee:53:f1:a4:a5:b3:04:a8:b1:13:50:
         56:00:46:36:d1:a3:17:08:bf:4e:c8:c5:30:42:5f:31:05:e4:
         f2:a6:b5:9a:18:ae:80:c1:1c:c7:b4:ff:a1:67:e7:1e:b4:5c:
         c7:a5:be:80:6c:10:7e:66:5a:56:e9:63:97:0e:98:2f:14:6e:
         7a:ca:fc:da:2c:bf:93:15:af:d2:27:74:3d:11:f0:df:e7:17:
         74:56:10:2a:6d:27:9e:7f:17:c3:78:da:91:f2:c9:d4:53:3c:
         48:0d:c5:a1:04:9b:39:bf:8d:28:00:ac:f9:69:aa:9d:3f:5c:
         16:71:d1:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:47:51 2025 by rpki-client