Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/a42699-1d3f-4a70-83ce-c564b40eca05/1/WO5H0ypZk0H1_xqIvxQuFTjaQOo.mft
File:                     WO5H0ypZk0H1_xqIvxQuFTjaQOo.mft (raw, json)
Hash identifier:          eDTRFEUtlwx+/JmnWiAE07YSGKGnlUWuSSQZDeSBApk=
Subject key identifier:   8C:FD:09:D3:CF:42:41:9E:C1:01:E0:A2:CC:07:63:A6:57:FB:97:E8
Authority key identifier: 58:EE:47:D3:2A:59:93:41:F5:FF:1A:88:BF:14:2E:15:38:DA:40:EA
Certificate issuer:       /CN=58ee47d32a599341f5ff1a88bf142e1538da40ea
Certificate serial:       0199FFC849EFB78BC719679260EC71E35AB3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WO5H0ypZk0H1_xqIvxQuFTjaQOo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/a42699-1d3f-4a70-83ce-c564b40eca05/1/WO5H0ypZk0H1_xqIvxQuFTjaQOo.mft
Manifest number:          16E3
Signing time:             Mon 20 Oct 2025 04:02:20 +0000
Manifest this update:     Mon 20 Oct 2025 04:02:20 +0000
Manifest next update:     Tue 21 Oct 2025 04:02:20 +0000
Files and hashes:         1: MNitg_keBs4dR0_QJsKKFy2jt9w.roa (hash: sEGk1tMGmp6moB/qNZm65GUjuchkzx/EiGw40gyU6pI=)
                          2: WO5H0ypZk0H1_xqIvxQuFTjaQOo.crl (hash: Bec9RzwUQ1U4tkA4trvvN9shiItL22OkEC5c4jXbM+M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/a42699-1d3f-4a70-83ce-c564b40eca05/1/WO5H0ypZk0H1_xqIvxQuFTjaQOo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/a42699-1d3f-4a70-83ce-c564b40eca05/1/WO5H0ypZk0H1_xqIvxQuFTjaQOo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WO5H0ypZk0H1_xqIvxQuFTjaQOo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ff:c8:49:ef:b7:8b:c7:19:67:92:60:ec:71:e3:5a:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58ee47d32a599341f5ff1a88bf142e1538da40ea
        Validity
            Not Before: Oct 20 04:02:20 2025 GMT
            Not After : Oct 21 04:02:20 2025 GMT
        Subject: CN=8cfd09d3cf42419ec101e0a2cc0763a657fb97e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:e7:fa:21:e2:14:82:ab:13:c7:02:63:6c:93:
                    78:e6:a6:01:73:97:f3:80:c7:1a:56:17:d0:80:11:
                    3b:72:df:3a:dd:80:3d:7e:72:a2:79:4c:4a:64:70:
                    d1:c9:34:44:4b:e9:be:08:82:68:64:bd:97:8c:26:
                    ad:f2:6a:bf:90:51:10:00:20:1e:0f:c0:ca:83:85:
                    24:85:ce:d7:aa:27:d6:89:78:1d:ce:3d:2a:ac:10:
                    5a:87:91:d8:1f:2c:70:31:d2:73:3b:6f:4e:54:01:
                    3f:49:22:96:fe:95:aa:8d:b5:44:77:1c:f4:0f:80:
                    54:db:65:8e:c1:ca:ed:09:ef:54:0e:f3:1b:7f:81:
                    82:2a:7f:e6:e6:6f:62:34:dd:2c:98:a3:4b:60:7b:
                    45:39:cc:c6:6e:e2:f3:39:cb:14:f2:a0:e4:00:79:
                    d8:76:2c:94:62:d8:46:21:47:9c:ad:1a:39:6f:7d:
                    39:93:10:cc:c3:25:0e:4b:ab:4b:0c:9f:07:b6:76:
                    28:60:09:43:30:9e:61:8b:91:3b:37:6b:d0:4d:85:
                    2d:67:7c:3a:95:f6:47:72:80:f8:36:13:ec:e8:88:
                    ab:ee:6d:87:3b:92:a2:da:f3:36:d0:c4:a2:06:bc:
                    21:04:76:be:c6:38:00:20:bc:0f:ff:23:1e:e5:a6:
                    2f:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:FD:09:D3:CF:42:41:9E:C1:01:E0:A2:CC:07:63:A6:57:FB:97:E8
            X509v3 Authority Key Identifier:
                keyid:58:EE:47:D3:2A:59:93:41:F5:FF:1A:88:BF:14:2E:15:38:DA:40:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WO5H0ypZk0H1_xqIvxQuFTjaQOo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a42699-1d3f-4a70-83ce-c564b40eca05/1/WO5H0ypZk0H1_xqIvxQuFTjaQOo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a42699-1d3f-4a70-83ce-c564b40eca05/1/WO5H0ypZk0H1_xqIvxQuFTjaQOo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:25:f8:85:80:40:cd:b4:d6:bd:57:d2:bd:d4:65:ef:76:67:
         d3:dc:23:de:e8:34:e6:3c:fb:26:40:52:7c:37:44:78:af:1b:
         62:74:9e:e6:53:a2:91:7f:70:aa:5d:9b:4e:e6:5a:73:63:9c:
         e1:30:b8:6c:86:f3:63:97:e8:68:f8:3f:01:05:42:b1:7a:40:
         9d:b1:88:45:ae:56:86:26:4a:c0:11:b8:8f:13:ce:30:c1:7c:
         18:6b:e2:99:0f:77:43:bd:2b:83:b5:db:9a:d3:a2:30:e4:07:
         5e:27:19:87:02:f8:81:0c:de:74:07:92:30:54:c2:09:54:49:
         0f:06:56:a1:a6:89:ff:6a:06:9a:35:7c:c9:11:cd:38:7e:f0:
         b3:2a:3d:92:cd:69:9f:f7:a2:78:d0:82:4a:fa:eb:95:20:cc:
         da:f6:c4:02:c3:2b:c9:3c:90:cc:1a:32:59:54:54:07:68:b8:
         a6:94:e1:34:2e:c4:cf:9e:14:84:41:63:ef:3e:17:7e:d9:4e:
         4c:fd:57:9d:e0:c1:64:9c:7f:e1:ba:b7:0f:76:94:cb:f2:47:
         93:c0:02:6e:12:01:fb:54:a9:81:30:89:08:e5:aa:f4:c6:2f:
         5b:72:90:84:1b:d5:43:89:25:7d:7e:f1:43:26:ed:56:3a:5f:
         0d:f9:8a:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:18:40 2025 by rpki-client