Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/df215b-35e7-4ccc-aa8c-c128f27ccc78/1/W4M_gwOig5k2kGEKkYWlybaCv_s.mft
File:                     W4M_gwOig5k2kGEKkYWlybaCv_s.mft (raw, json)
Hash identifier:          Q10kd/puE7o+wZxG/PrTCZOzpiBEWGXmuAX0s5ctgBs=
Subject key identifier:   14:21:FA:81:FA:03:07:8B:02:82:2C:2B:46:72:6A:4D:3B:9D:42:A0
Authority key identifier: 5B:83:3F:83:03:A2:83:99:36:90:61:0A:91:85:A5:C9:B6:82:BF:FB
Certificate issuer:       /CN=5b833f8303a283993690610a9185a5c9b682bffb
Certificate serial:       0199FBEBFC8FBC7380448D778FDC44F6A564
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W4M_gwOig5k2kGEKkYWlybaCv_s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/df215b-35e7-4ccc-aa8c-c128f27ccc78/1/W4M_gwOig5k2kGEKkYWlybaCv_s.mft
Manifest number:          16DE
Signing time:             Sun 19 Oct 2025 10:02:50 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:50 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:50 +0000
Files and hashes:         1: W4M_gwOig5k2kGEKkYWlybaCv_s.crl (hash: NX7Mmnhc4CWWwtk40IPl9HtXwkBICDLVUwt3o96kxQc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/df215b-35e7-4ccc-aa8c-c128f27ccc78/1/W4M_gwOig5k2kGEKkYWlybaCv_s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/df215b-35e7-4ccc-aa8c-c128f27ccc78/1/W4M_gwOig5k2kGEKkYWlybaCv_s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W4M_gwOig5k2kGEKkYWlybaCv_s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 10:02:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:fc:8f:bc:73:80:44:8d:77:8f:dc:44:f6:a5:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b833f8303a283993690610a9185a5c9b682bffb
        Validity
            Not Before: Oct 19 10:02:50 2025 GMT
            Not After : Oct 20 10:02:50 2025 GMT
        Subject: CN=1421fa81fa03078b02822c2b46726a4d3b9d42a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:43:e3:07:bb:01:f1:61:df:12:e5:f2:07:ad:
                    b9:5a:18:fa:ba:33:cc:ec:29:aa:1c:75:b0:09:de:
                    61:98:99:89:3d:43:b9:7e:0f:2a:b9:26:e8:75:27:
                    e0:bf:26:67:d5:b1:41:20:60:c0:17:fa:8d:ad:fe:
                    6a:6e:e0:e1:87:d0:f5:26:47:e0:10:b2:dc:61:3c:
                    2b:20:7f:70:4b:ba:45:93:62:cb:44:bd:b9:33:2a:
                    53:2d:65:38:5f:e5:e1:7d:43:26:ee:7b:58:6e:a7:
                    40:a4:ac:e1:f1:fc:b7:8b:66:e6:96:be:45:5d:4c:
                    79:21:60:82:17:16:b0:a2:0c:b3:80:06:ba:b7:56:
                    93:e2:4c:5c:16:4a:80:08:9f:7a:8f:b5:86:cf:dc:
                    d3:5e:95:b4:df:ea:90:77:c0:d2:2f:e1:1a:24:b0:
                    09:75:02:0c:08:8e:b1:df:12:85:99:15:fe:a3:27:
                    4d:56:97:b5:b5:96:4e:7f:d5:c0:b9:4b:97:80:88:
                    7b:a1:fc:06:bc:2d:fa:da:ee:59:e6:99:cd:e7:a9:
                    ee:79:d3:1f:93:9d:86:ab:92:96:9a:47:b4:aa:ee:
                    2c:d6:92:6d:cf:e6:e0:57:5f:9f:24:77:06:3f:92:
                    fd:23:85:78:f5:33:b2:f0:6a:17:04:62:e4:b6:65:
                    07:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:21:FA:81:FA:03:07:8B:02:82:2C:2B:46:72:6A:4D:3B:9D:42:A0
            X509v3 Authority Key Identifier:
                keyid:5B:83:3F:83:03:A2:83:99:36:90:61:0A:91:85:A5:C9:B6:82:BF:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W4M_gwOig5k2kGEKkYWlybaCv_s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/df215b-35e7-4ccc-aa8c-c128f27ccc78/1/W4M_gwOig5k2kGEKkYWlybaCv_s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/df215b-35e7-4ccc-aa8c-c128f27ccc78/1/W4M_gwOig5k2kGEKkYWlybaCv_s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:2f:bb:da:9f:35:4a:b9:6b:2f:3e:c2:92:98:ef:1c:03:80:
         e4:6d:a8:5c:0e:1a:09:5d:f9:78:18:b3:56:d8:c5:90:b0:70:
         71:1f:cf:22:64:b6:53:85:e1:49:c4:46:91:fc:8c:7d:bc:7d:
         05:95:b6:f3:dd:bd:30:f6:ce:99:b4:79:10:62:95:f6:1b:f0:
         48:83:95:54:b0:c8:62:90:a1:2b:15:c2:90:07:3d:4b:19:b2:
         41:a5:75:e6:e3:52:d2:0b:ad:c9:07:bd:da:20:15:be:c5:13:
         a2:6b:f0:0d:c3:ff:e1:41:fb:38:44:20:34:b2:09:aa:9f:23:
         87:1b:ae:05:9d:a3:db:cb:29:96:de:9c:9a:92:2e:54:5c:0d:
         76:56:be:df:49:e4:8e:57:e8:c9:7a:a1:05:e7:cf:73:0c:6e:
         b4:ab:a6:e7:c6:52:b6:36:f0:e2:5f:85:69:43:1e:01:39:7c:
         7e:d3:83:6b:56:aa:32:64:96:47:6f:d8:65:7a:2d:01:9c:f4:
         3d:5b:dd:dd:cd:a0:96:1d:ff:7b:12:0a:9c:35:b9:16:f8:2a:
         bf:37:aa:87:63:c5:bf:5b:ce:c0:72:c1:27:1a:d7:ff:f5:f0:
         54:ff:e4:f9:39:14:fe:f2:d3:bc:2f:5c:f2:e8:b4:33:7e:d4:
         d3:16:51:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:26:11 2025 by rpki-client