Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/4f08a5-432f-48fc-bd8b-fb71bd4545b0/1/wJiRTLCpRUQPhN6vPz2X_Hf9Js4.mft
File:                     wJiRTLCpRUQPhN6vPz2X_Hf9Js4.mft (raw, json)
Hash identifier:          gzEZxdvXCuG7dqjnvSJVc/EjgFezEcmum4zKjZRsapk=
Subject key identifier:   00:90:C5:87:4F:A1:82:22:93:9E:29:C6:F4:58:C3:FF:BC:10:21:CF
Authority key identifier: C0:98:91:4C:B0:A9:45:44:0F:84:DE:AF:3F:3D:97:FC:77:FD:26:CE
Certificate issuer:       /CN=c098914cb0a945440f84deaf3f3d97fc77fd26ce
Certificate serial:       0199FCC639AD0C60F52F35290829C19A8BD6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wJiRTLCpRUQPhN6vPz2X_Hf9Js4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/4f08a5-432f-48fc-bd8b-fb71bd4545b0/1/wJiRTLCpRUQPhN6vPz2X_Hf9Js4.mft
Manifest number:          1675
Signing time:             Sun 19 Oct 2025 14:01:13 +0000
Manifest this update:     Sun 19 Oct 2025 14:01:13 +0000
Manifest next update:     Mon 20 Oct 2025 14:01:13 +0000
Files and hashes:         1: f3Dh_2Y-zNZkcN90_TpfLSQTddk.roa (hash: vypiT7TdTiicDqreOdfVGNkJ1vOMr5vmxtAo64EoIdw=)
                          2: wJiRTLCpRUQPhN6vPz2X_Hf9Js4.crl (hash: jrVzeA6hXGmfsF3ZdeXrXMR5/1ISosgTp5uSTUBfLcI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/4f08a5-432f-48fc-bd8b-fb71bd4545b0/1/wJiRTLCpRUQPhN6vPz2X_Hf9Js4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/4f08a5-432f-48fc-bd8b-fb71bd4545b0/1/wJiRTLCpRUQPhN6vPz2X_Hf9Js4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wJiRTLCpRUQPhN6vPz2X_Hf9Js4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 14:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:c6:39:ad:0c:60:f5:2f:35:29:08:29:c1:9a:8b:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c098914cb0a945440f84deaf3f3d97fc77fd26ce
        Validity
            Not Before: Oct 19 14:01:13 2025 GMT
            Not After : Oct 20 14:01:13 2025 GMT
        Subject: CN=0090c5874fa18222939e29c6f458c3ffbc1021cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:39:d4:86:a6:53:ed:f0:76:8d:1d:0b:6e:49:
                    f3:ba:3d:82:56:79:57:a7:53:ee:e0:72:2a:ff:a8:
                    77:f9:39:93:ae:9d:95:8e:85:67:ad:f2:17:68:94:
                    b0:05:bc:dc:a3:70:33:3a:2c:b5:2b:c9:04:10:1c:
                    4b:6e:bd:7a:73:e3:5a:d2:46:5b:2d:a0:ef:22:8a:
                    6f:cd:4e:7b:90:c3:3e:75:b9:8d:4a:7e:0f:37:de:
                    f8:96:09:da:a5:0e:d2:d8:bb:cb:71:33:5e:11:72:
                    a6:dc:b1:f8:60:38:21:5c:63:d4:d1:05:a5:27:4e:
                    5f:8c:07:1c:7f:6d:02:cc:ee:52:c3:3e:9b:d1:fb:
                    32:4b:c7:fd:12:97:6c:65:16:1b:cf:28:fc:ca:97:
                    f8:cd:bd:8e:20:0e:70:74:a8:7a:43:a1:bf:9d:c9:
                    da:47:f3:bb:b1:65:05:e1:ae:dd:b9:db:0d:9c:b0:
                    1b:c2:b0:fe:0d:49:85:6f:50:65:f6:bc:b9:3c:5d:
                    de:89:02:54:a4:5d:66:86:7c:a9:61:d9:a8:ee:08:
                    cc:3e:f9:1b:fd:97:79:05:61:4d:f8:8e:b8:00:6e:
                    28:c5:fe:73:58:9b:81:13:9c:a1:ad:df:09:d1:c4:
                    ab:11:10:8d:88:47:c8:59:3f:42:39:a0:a9:2b:16:
                    11:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:90:C5:87:4F:A1:82:22:93:9E:29:C6:F4:58:C3:FF:BC:10:21:CF
            X509v3 Authority Key Identifier:
                keyid:C0:98:91:4C:B0:A9:45:44:0F:84:DE:AF:3F:3D:97:FC:77:FD:26:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wJiRTLCpRUQPhN6vPz2X_Hf9Js4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/4f08a5-432f-48fc-bd8b-fb71bd4545b0/1/wJiRTLCpRUQPhN6vPz2X_Hf9Js4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/4f08a5-432f-48fc-bd8b-fb71bd4545b0/1/wJiRTLCpRUQPhN6vPz2X_Hf9Js4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:c1:fd:99:52:2f:a7:1b:25:a3:98:df:e0:b9:b8:6c:0b:22:
         36:25:67:d5:a5:a2:da:2c:25:d3:9e:49:4b:cd:ae:4c:22:71:
         b3:3b:85:65:77:f9:49:30:fe:1c:8f:95:ce:b8:ab:59:41:1c:
         8c:77:32:3d:87:62:7a:04:b2:a8:d4:0c:33:2e:da:13:fe:88:
         cd:0d:bd:9a:a3:63:2e:6a:e3:e9:9a:8e:5a:9d:c6:74:af:1a:
         11:90:41:25:b2:a2:68:6a:3f:70:49:01:c1:2d:fc:1c:80:f5:
         45:73:4b:cd:d6:c3:f8:6b:ea:b1:1b:19:c6:26:dd:81:30:b9:
         42:48:ca:db:89:1f:29:ee:ea:5d:a8:aa:b7:af:89:35:81:20:
         1a:b3:f0:8c:d8:04:73:9d:79:33:57:ee:d7:00:91:55:bf:19:
         0f:69:1e:b3:e8:e9:be:e7:25:08:7c:fe:34:d5:34:c7:00:b5:
         47:d6:b2:fc:fd:d4:73:aa:e1:ee:ec:f6:54:1e:c5:c2:91:64:
         df:8d:b4:5f:8c:b5:0c:f3:ef:49:ae:4f:a0:96:e6:3c:fd:96:
         cf:da:13:ea:e4:d1:d3:a5:99:ef:7d:26:0b:fe:7b:c4:69:f0:
         f6:50:1b:f0:9e:7d:ae:10:08:b3:4c:fd:69:cb:a9:1f:2c:62:
         6b:dc:63:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:03:49 2025 by rpki-client