Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/82ba9d-3882-47fd-91d5-4b7e5c5a9d4b/1/wTHUZWF0SmgQFsjW-aYbnBfLfw8.mft
File:                     wTHUZWF0SmgQFsjW-aYbnBfLfw8.mft (raw, json)
Hash identifier:          XDU3EquIeM6N4Z0Kfmg7v0nfEMdm4EgcvWyhN3AGkV8=
Subject key identifier:   5C:F6:A3:10:22:9C:6E:DE:71:CF:50:D9:3A:3E:97:64:25:A1:69:5C
Authority key identifier: C1:31:D4:65:61:74:4A:68:10:16:C8:D6:F9:A6:1B:9C:17:CB:7F:0F
Certificate issuer:       /CN=c131d46561744a681016c8d6f9a61b9c17cb7f0f
Certificate serial:       0199FEB4D2D27C307A79B53B0656C5071A7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wTHUZWF0SmgQFsjW-aYbnBfLfw8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/82ba9d-3882-47fd-91d5-4b7e5c5a9d4b/1/wTHUZWF0SmgQFsjW-aYbnBfLfw8.mft
Manifest number:          1542
Signing time:             Sun 19 Oct 2025 23:01:27 +0000
Manifest this update:     Sun 19 Oct 2025 23:01:27 +0000
Manifest next update:     Mon 20 Oct 2025 23:01:27 +0000
Files and hashes:         1: ZDdnNxC-Iv1H5A5BkJloJqSNxf8.roa (hash: UCqx4EaKls5iWpImDrWYZpurlTDip+uji9Lqqm7JLEg=)
                          2: wTHUZWF0SmgQFsjW-aYbnBfLfw8.crl (hash: zYICZQCQojIkdjRbNUisxowNW/4AaXZ1qcTaNMLGeMQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/82ba9d-3882-47fd-91d5-4b7e5c5a9d4b/1/wTHUZWF0SmgQFsjW-aYbnBfLfw8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/82ba9d-3882-47fd-91d5-4b7e5c5a9d4b/1/wTHUZWF0SmgQFsjW-aYbnBfLfw8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wTHUZWF0SmgQFsjW-aYbnBfLfw8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:b4:d2:d2:7c:30:7a:79:b5:3b:06:56:c5:07:1a:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c131d46561744a681016c8d6f9a61b9c17cb7f0f
        Validity
            Not Before: Oct 19 23:01:27 2025 GMT
            Not After : Oct 20 23:01:27 2025 GMT
        Subject: CN=5cf6a310229c6ede71cf50d93a3e976425a1695c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:91:f6:2b:10:f7:f7:ec:0b:db:02:5a:4d:c5:
                    1f:b7:cd:03:b0:36:e9:72:fc:cc:8b:00:8b:a9:8a:
                    5b:16:98:db:c0:fd:97:12:b8:0d:f5:65:e9:5a:5f:
                    74:3a:6d:76:5c:34:2c:e7:6e:5b:8c:42:e3:ab:3e:
                    aa:0f:13:ab:bf:1a:54:b5:03:ed:39:17:49:0a:6e:
                    73:48:e4:7e:2d:e8:bb:09:4a:2a:07:90:60:dc:48:
                    5d:bd:6c:b7:0e:11:e7:3f:ee:83:28:24:1f:fe:76:
                    a7:df:78:d4:8e:4f:9f:47:ec:92:ed:06:8b:25:1f:
                    cd:38:91:ab:1d:7f:95:92:75:bf:fb:8e:d7:74:87:
                    8e:ea:74:85:f1:cf:32:5f:bc:f8:bf:83:ea:2b:96:
                    01:eb:ac:ff:27:dc:94:01:7a:9d:48:05:6a:55:f2:
                    73:f1:1c:62:38:e4:6f:cf:c9:fb:56:1a:43:62:bc:
                    ce:64:c7:2c:85:3d:ca:95:5b:c3:5d:58:04:4f:b8:
                    0a:79:65:51:e5:f5:51:27:f6:38:fc:a4:9d:48:10:
                    29:39:ab:0e:5e:b9:18:d2:ed:07:89:3a:69:e0:2d:
                    00:76:24:15:af:c1:76:90:2a:23:bd:af:e9:b5:d6:
                    5c:d2:49:1b:8b:3a:99:86:15:19:7c:82:1f:57:a4:
                    0e:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:F6:A3:10:22:9C:6E:DE:71:CF:50:D9:3A:3E:97:64:25:A1:69:5C
            X509v3 Authority Key Identifier:
                keyid:C1:31:D4:65:61:74:4A:68:10:16:C8:D6:F9:A6:1B:9C:17:CB:7F:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wTHUZWF0SmgQFsjW-aYbnBfLfw8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/82ba9d-3882-47fd-91d5-4b7e5c5a9d4b/1/wTHUZWF0SmgQFsjW-aYbnBfLfw8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/82ba9d-3882-47fd-91d5-4b7e5c5a9d4b/1/wTHUZWF0SmgQFsjW-aYbnBfLfw8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:f3:5b:1c:19:40:16:5c:94:e0:24:d5:9e:e7:4a:54:7e:0f:
         70:d6:53:95:36:c3:af:b4:33:37:df:10:ef:e2:8c:b6:03:e3:
         08:52:d2:f8:c6:28:04:df:1d:41:ce:97:c8:bb:29:8b:3b:7f:
         1f:b6:b6:18:e6:25:ce:cc:ee:4b:2c:57:96:0d:29:4a:47:7f:
         e4:e9:f1:6b:d0:52:42:3e:90:c7:3a:f1:d9:6e:0d:18:f9:2f:
         30:69:ae:52:a8:40:40:f9:10:52:76:50:af:d8:42:68:96:f5:
         33:f6:2e:aa:fb:f8:ff:eb:b2:b9:d5:88:eb:02:41:a5:6c:3b:
         d4:1b:35:73:5e:08:20:b7:d0:b7:63:a8:c3:e2:fd:1c:ca:7e:
         46:91:ac:1e:bc:3f:1e:fd:60:e6:34:08:de:b0:20:99:b2:97:
         53:50:16:4f:94:2c:ee:0c:91:c7:20:3e:eb:de:22:97:82:9a:
         d6:cc:6d:cf:88:c3:01:87:ed:4d:c9:a0:53:08:1c:de:35:64:
         a4:b9:12:ff:57:42:0a:d7:6b:bc:fb:d8:9e:61:1d:52:a4:cc:
         fa:e2:35:74:49:6b:aa:94:56:d4:ef:69:a8:a4:c0:5e:af:e3:
         8c:2f:14:e8:67:4c:50:cb:81:85:64:4b:27:77:2b:6b:72:42:
         88:55:78:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:16:30 2025 by rpki-client