Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/bff758-4b83-473d-b072-a2ce1cc8b87f/1/W81A0QtW87Uy-g39AdgX75PaGjQ.mft
File:                     W81A0QtW87Uy-g39AdgX75PaGjQ.mft (raw, json)
Hash identifier:          rsD9vl909NifmpN3bOEgqYjeJ6R9bfoT8IuxzcJKZec=
Subject key identifier:   2E:21:76:3D:D9:E1:2C:6D:22:B6:3F:05:8C:AC:AE:06:72:A7:36:43
Authority key identifier: 5B:CD:40:D1:0B:56:F3:B5:32:FA:0D:FD:01:D8:17:EF:93:DA:1A:34
Certificate issuer:       /CN=5bcd40d10b56f3b532fa0dfd01d817ef93da1a34
Certificate serial:       0199FFC878EDF8865155EF454DF4D18E5000
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W81A0QtW87Uy-g39AdgX75PaGjQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/bff758-4b83-473d-b072-a2ce1cc8b87f/1/W81A0QtW87Uy-g39AdgX75PaGjQ.mft
Manifest number:          16E4
Signing time:             Mon 20 Oct 2025 04:02:32 +0000
Manifest this update:     Mon 20 Oct 2025 04:02:32 +0000
Manifest next update:     Tue 21 Oct 2025 04:02:32 +0000
Files and hashes:         1: DVy9xxsaVAJcUU0BRfhNabOqMzk.roa (hash: C4OGc3b2gsAM2Wvi4DJ3HoKaAiDyltSi4czoAQFuPLg=)
                          2: OrKuFz27FK0P6O2bv_b1bL5Co9k.roa (hash: 8cEi5rfuQFGn6/7XwnoqTW0z0qfPYwGTHgFoatR1/Hk=)
                          3: W81A0QtW87Uy-g39AdgX75PaGjQ.crl (hash: ounM4YSTSNIvYTGCoWpu9dYNekC6ttDvNF9Sq/Z389E=)
                          4: Xx29scVdCmRD00pM8gqZEG2S1V4.roa (hash: feKngEcDxdbtaZY/ULJeMiuTCLcr3i9MmDhJ5JXWDaA=)
                          5: cOdMT1vBakCVhXnPerLROe0CFnU.roa (hash: CSnBhh/tdtgz5OXvaaCBm6nd3YW23jsTZHsuFLrW+tw=)
                          6: s4w35wVjXE8sREZK7Oyh4IavL0g.roa (hash: TceK26zqEtmgDQ2uUNpaKfjQftmmHU4UqyAVULIuK4A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/bff758-4b83-473d-b072-a2ce1cc8b87f/1/W81A0QtW87Uy-g39AdgX75PaGjQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/bff758-4b83-473d-b072-a2ce1cc8b87f/1/W81A0QtW87Uy-g39AdgX75PaGjQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W81A0QtW87Uy-g39AdgX75PaGjQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ff:c8:78:ed:f8:86:51:55:ef:45:4d:f4:d1:8e:50:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5bcd40d10b56f3b532fa0dfd01d817ef93da1a34
        Validity
            Not Before: Oct 20 04:02:32 2025 GMT
            Not After : Oct 21 04:02:32 2025 GMT
        Subject: CN=2e21763dd9e12c6d22b63f058cacae0672a73643
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:db:cb:ea:cc:47:88:ec:ad:41:e8:56:3d:3b:
                    30:b8:20:f7:12:95:16:11:ae:fd:47:d0:56:83:d5:
                    fa:23:da:92:db:f8:53:2d:32:1f:e5:04:65:d2:34:
                    39:80:67:f9:ed:90:97:ad:a7:9b:65:1e:bf:cd:89:
                    53:94:a2:2a:21:87:0b:47:75:36:1b:81:93:dc:40:
                    7d:2f:c1:2b:0d:0c:31:b7:75:50:b3:51:3b:d8:be:
                    d8:b5:0d:eb:93:92:23:7d:2b:84:40:19:0c:35:c9:
                    e0:4b:ef:39:b9:13:bc:ad:05:f0:60:d8:34:bc:0f:
                    da:96:a4:4c:41:e4:f1:fc:3b:4e:c7:03:59:69:1d:
                    96:2b:38:32:8d:d9:ff:9a:3a:d5:4e:4f:4b:78:5d:
                    5f:9f:19:2d:9a:cb:03:98:20:1e:67:eb:98:dc:52:
                    2f:e3:b7:70:d4:96:7f:da:77:db:9c:fc:42:be:5b:
                    ec:55:3d:c5:9c:7e:7a:b9:32:14:8b:90:19:15:43:
                    45:ae:c6:ac:93:3d:1d:cf:e8:5c:05:28:8d:11:ad:
                    24:29:d3:eb:74:af:a5:4b:2a:ce:93:6e:c1:1e:dc:
                    43:98:bc:89:67:da:52:88:35:b6:7a:27:29:41:5d:
                    64:80:29:3f:5c:df:40:f7:a3:19:89:63:e3:62:b9:
                    d6:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:21:76:3D:D9:E1:2C:6D:22:B6:3F:05:8C:AC:AE:06:72:A7:36:43
            X509v3 Authority Key Identifier:
                keyid:5B:CD:40:D1:0B:56:F3:B5:32:FA:0D:FD:01:D8:17:EF:93:DA:1A:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W81A0QtW87Uy-g39AdgX75PaGjQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/bff758-4b83-473d-b072-a2ce1cc8b87f/1/W81A0QtW87Uy-g39AdgX75PaGjQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/bff758-4b83-473d-b072-a2ce1cc8b87f/1/W81A0QtW87Uy-g39AdgX75PaGjQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:60:74:c6:0b:39:a0:37:0a:9d:6c:66:8c:ad:8f:f5:d2:5c:
         74:eb:2e:89:34:18:e0:25:a3:6b:22:80:a6:78:4e:b1:b6:3e:
         65:8f:d9:60:70:1b:24:05:02:75:1c:84:d5:a8:fe:03:91:12:
         5e:99:60:b3:51:ad:4c:49:e7:49:55:4b:2c:04:81:4e:63:34:
         54:55:12:d0:bf:9d:cf:5f:e0:6c:2a:5c:e4:b5:c2:5f:fc:e7:
         de:bc:42:f6:a5:93:11:d3:89:f4:02:90:1e:b4:3c:31:95:75:
         87:1c:6e:f8:03:1d:92:75:a0:79:21:45:c6:0e:32:b5:4a:ed:
         b7:97:52:74:c4:f7:d0:e9:01:39:da:76:39:52:e2:41:06:70:
         29:43:35:a8:c0:00:bc:42:90:8b:06:9d:d5:00:78:2c:da:fa:
         9c:57:cb:f1:2b:45:d8:75:dc:c7:b6:71:25:a1:e4:a3:42:9e:
         b8:c6:9f:44:95:2f:a1:2c:c8:5c:de:a3:d7:3f:1d:44:e7:7e:
         89:45:35:e6:d4:94:59:b6:90:88:e8:44:8f:11:78:fb:88:03:
         76:4c:af:d1:8f:e5:c0:9f:f0:2b:e2:28:4c:06:5d:cd:75:ac:
         55:22:50:c3:9d:07:b8:3d:cf:e8:8a:1e:c5:3f:16:2b:49:23:
         50:22:0c:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:52:04 2025 by rpki-client