Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/wHR_vibJzddiit_ttXt4vo3nXik.mft
File:                     wHR_vibJzddiit_ttXt4vo3nXik.mft (raw, json)
Hash identifier:          XjHa0IE6pYTVcJb16ceQ3tS3FTBLVpuLd1vTttSAnpo=
Subject key identifier:   23:60:9B:04:78:92:9E:A8:91:13:A2:42:5F:14:A9:36:79:03:19:64
Authority key identifier: C0:74:7F:BE:26:C9:CD:D7:62:8A:DF:ED:B5:7B:78:BE:8D:E7:5E:29
Certificate issuer:       /CN=c0747fbe26c9cdd7628adfedb57b78be8de75e29
Certificate serial:       0199FC582AE18AC24E15EEC39745D203B2BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wHR_vibJzddiit_ttXt4vo3nXik.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/wHR_vibJzddiit_ttXt4vo3nXik.mft
Manifest number:          16E4
Signing time:             Sun 19 Oct 2025 12:01:00 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:00 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:00 +0000
Files and hashes:         1: 2nyycqBL-rAzEQltLGtAfMtGQLM.roa (hash: MBIXdHvXsLvgHf885v+F1wgnsNoLNTld5Y4auopwyqw=)
                          2: 3bQBeV9f56eObQzYUYLO4GAQ8UY.roa (hash: HtmwpWIMcqcjPv1ZUB2JqlVZpv8JVThGiHf7qzzoBm0=)
                          3: ChVY_yTwqfm0VnhsyIrbJGaer18.roa (hash: R+XyXjI6742+O3LetUXz9z0t0N+RLDWsKAzEnh76DmE=)
                          4: QeIXKKypRp3pUKZsAXhEwiToOAw.roa (hash: 4uaN2IkF9UjmjdQnaC+MinX3CAS8fZa9J2o5ym9jh2Y=)
                          5: Rm5aIxDvXkvVkBBg3XIjNRMEevw.roa (hash: 91lRhrOUw2PQdAXyAGgZms7aAgC+waBbAPHPOWg5hPI=)
                          6: Sr0IV-rO-zHkL4o3XLlXoB58rKk.roa (hash: suoX77hNmWsUeC3U2K5nrNVPL2RuFHc2TD/yXsw9YqQ=)
                          7: ePEq_iR8SghIv87pTKid6AVEFNA.roa (hash: JKXKaBC2B7MQ6+tg8cpfMIILPOh/OoQhr9iR79J36DU=)
                          8: wHR_vibJzddiit_ttXt4vo3nXik.crl (hash: qX345ysK50FBx+G5C0FJKOhgsEjfN/35SQDl7Xyw5qw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/wHR_vibJzddiit_ttXt4vo3nXik.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/wHR_vibJzddiit_ttXt4vo3nXik.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wHR_vibJzddiit_ttXt4vo3nXik.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:58:2a:e1:8a:c2:4e:15:ee:c3:97:45:d2:03:b2:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0747fbe26c9cdd7628adfedb57b78be8de75e29
        Validity
            Not Before: Oct 19 12:01:00 2025 GMT
            Not After : Oct 20 12:01:00 2025 GMT
        Subject: CN=23609b0478929ea89113a2425f14a93679031964
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:81:38:96:81:bd:a3:c8:2b:76:6e:93:fb:dd:
                    0c:5f:d3:6b:1d:ab:82:86:0d:20:77:ea:b4:9f:9a:
                    2b:b4:08:46:f4:8c:2c:2f:89:13:ac:e7:d2:89:87:
                    fa:b6:2c:c8:bb:6c:06:1e:37:65:79:7b:ba:fb:6f:
                    c1:7d:26:04:ce:04:3a:7c:09:8f:3f:c7:23:c7:e9:
                    2f:0d:da:ca:cf:4b:8d:b9:18:8b:64:6e:48:c3:b0:
                    b2:91:ae:5a:71:b0:f6:76:77:b0:f6:e4:64:e7:f8:
                    85:8f:2f:19:17:88:b1:d1:28:16:34:88:6c:e0:10:
                    ba:44:14:d2:17:ce:9b:07:14:31:ed:8c:2b:a5:a8:
                    81:42:71:da:d3:34:25:3b:f5:ef:4e:b0:25:60:47:
                    92:52:a3:9a:c2:d2:6f:28:79:09:a8:1a:e3:ba:d0:
                    6e:6f:21:3c:c2:8a:e5:af:53:22:59:4d:9a:05:ed:
                    2a:b6:8c:17:40:32:d4:8a:cc:85:98:fc:ff:0a:25:
                    d6:f7:84:d5:4a:b9:57:67:c4:60:98:38:ec:43:f0:
                    f7:2a:f6:80:80:63:dc:32:7e:78:db:42:fd:74:a1:
                    67:24:f1:b6:92:6c:2c:78:95:b6:76:de:9c:a4:72:
                    d9:65:61:ae:c0:08:58:23:b2:a4:c5:4e:a5:a7:ff:
                    ce:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:60:9B:04:78:92:9E:A8:91:13:A2:42:5F:14:A9:36:79:03:19:64
            X509v3 Authority Key Identifier:
                keyid:C0:74:7F:BE:26:C9:CD:D7:62:8A:DF:ED:B5:7B:78:BE:8D:E7:5E:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wHR_vibJzddiit_ttXt4vo3nXik.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/wHR_vibJzddiit_ttXt4vo3nXik.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/wHR_vibJzddiit_ttXt4vo3nXik.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:b5:fe:40:b8:16:f4:03:27:30:8e:6a:45:37:1b:94:96:c6:
         26:c7:c5:44:88:25:3a:b4:64:12:92:43:6d:45:0b:47:36:b4:
         c8:db:d9:4b:d0:14:2c:70:49:e3:91:36:f2:f3:f8:a4:f1:62:
         35:a5:8e:ae:f0:59:16:e6:6d:5b:22:b2:8d:67:80:c8:44:e6:
         ad:ec:22:ab:16:1f:8b:45:51:d0:19:19:b4:eb:3e:e5:7b:75:
         95:72:25:74:c2:dc:9c:81:1a:6b:46:73:fe:cf:3d:bc:3b:2f:
         17:4f:aa:7c:f8:bc:24:81:9a:1e:46:ea:bf:eb:68:e7:56:91:
         5a:09:44:84:56:76:f7:fc:7a:b9:85:ed:da:21:3c:bd:ee:47:
         14:08:8f:84:8b:32:1c:0a:6d:e3:94:46:21:07:4e:d3:c7:9f:
         10:b4:c0:69:51:fa:f9:36:50:af:7b:8d:d6:dc:13:18:4a:a9:
         30:39:de:72:92:17:6f:80:bf:1e:6c:6b:2b:93:36:15:10:8f:
         a1:e6:bb:e9:f8:d1:a2:60:48:35:a6:7f:b6:95:37:d6:dd:2f:
         9b:58:8f:4d:7a:d2:50:f3:98:84:10:2c:d0:16:9a:45:6e:b3:
         fd:7e:05:45:da:91:3c:4a:47:7e:32:cc:32:d3:28:c2:5b:50:
         77:73:e8:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:19:43 2025 by rpki-client