Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/4b7576-2b9c-43af-8817-6b0065508996/1/WkpH1YK7DpaA-JJYq5bQWGfTUu8.mft
File:                     WkpH1YK7DpaA-JJYq5bQWGfTUu8.mft (raw, json)
Hash identifier:          /Afoy3ZrODlZ1Yo2dhal48f2463vqU1G87vVR6tnnbE=
Subject key identifier:   B6:36:9A:A7:54:89:41:25:89:68:8B:80:A2:CC:29:FE:49:54:1F:CE
Authority key identifier: 5A:4A:47:D5:82:BB:0E:96:80:F8:92:58:AB:96:D0:58:67:D3:52:EF
Certificate issuer:       /CN=5a4a47d582bb0e9680f89258ab96d05867d352ef
Certificate serial:       0199FBEB1D2FF9283A536E2630B8931AECDF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WkpH1YK7DpaA-JJYq5bQWGfTUu8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/4b7576-2b9c-43af-8817-6b0065508996/1/WkpH1YK7DpaA-JJYq5bQWGfTUu8.mft
Manifest number:          14CB
Signing time:             Sun 19 Oct 2025 10:01:53 +0000
Manifest this update:     Sun 19 Oct 2025 10:01:53 +0000
Manifest next update:     Mon 20 Oct 2025 10:01:53 +0000
Files and hashes:         1: IAWEnryJVpaK2PC1i1p1gzyA5aM.roa (hash: V8zeqHEXmBXDf+5VLnGO8LhbeOvdCzFQOaNucWQFdJs=)
                          2: IxvoZc4F3Qaa5ur1q1XhsdbIwYI.roa (hash: uBXV07kX7Q7HlXXY9czyil+ZyCPUWCh5XY0q2xGQk9E=)
                          3: WkpH1YK7DpaA-JJYq5bQWGfTUu8.crl (hash: cq7yN0CN6RxlAELyHF6Ggxc1xR0Owid7OXnaf0ssTKA=)
                          4: gcLYIM7NGFOjlEOaeCFYBSRJsQU.roa (hash: Gb37A8lctlHsApBbJF+wFlN+wBQgxlqZQzSQ9DIxfCE=)
                          5: tMFph9cmJacY9_6pBYOFi0X8qxI.roa (hash: yN3wCBUXrF4u5FVJmYsnf0p7F7khnudzz4ntTOuoOuA=)
                          6: tYYSCJCFza29RNke_2EcrZu7XHo.roa (hash: lB4PFBQhaKp43hqTQ3cMQhuQr2bCAaP0ut24A/mZGfI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/4b7576-2b9c-43af-8817-6b0065508996/1/WkpH1YK7DpaA-JJYq5bQWGfTUu8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/4b7576-2b9c-43af-8817-6b0065508996/1/WkpH1YK7DpaA-JJYq5bQWGfTUu8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WkpH1YK7DpaA-JJYq5bQWGfTUu8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:1d:2f:f9:28:3a:53:6e:26:30:b8:93:1a:ec:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a4a47d582bb0e9680f89258ab96d05867d352ef
        Validity
            Not Before: Oct 19 10:01:53 2025 GMT
            Not After : Oct 20 10:01:53 2025 GMT
        Subject: CN=b6369aa75489412589688b80a2cc29fe49541fce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:83:0f:1a:65:25:8a:01:8e:ec:e9:fb:33:08:
                    7b:56:58:a2:bb:b8:e2:95:dd:bd:f0:8e:d9:fd:79:
                    1c:60:ea:68:03:09:04:ec:82:ce:7b:9d:f8:13:6b:
                    d4:fe:64:10:96:58:d8:43:ca:4e:20:fd:b1:e1:36:
                    f1:bd:a0:05:b3:17:28:6b:ea:63:43:c9:d3:bb:91:
                    e4:a5:1d:35:49:e7:15:a7:d9:b1:a3:74:c2:b9:0f:
                    c8:c1:3e:6e:05:58:89:41:70:60:8b:45:0e:fe:d0:
                    d6:8f:79:d4:42:ef:a3:30:e3:33:f3:3e:7c:f6:a7:
                    cb:39:01:80:19:ac:68:20:06:65:7a:67:ef:cc:2b:
                    be:1c:e3:b1:70:2a:14:49:9b:4a:05:ae:91:fb:4b:
                    13:8a:ed:ab:cf:c9:70:ea:1f:97:97:12:9c:9e:ff:
                    37:aa:b1:e4:8c:cf:58:c8:ad:8a:49:f4:59:ab:8d:
                    64:90:e9:66:d3:f0:4a:f2:73:38:76:7b:7b:e4:86:
                    c6:61:87:59:ab:41:d5:a0:80:71:4c:27:93:d2:b2:
                    71:d1:e8:75:f7:93:5c:55:4a:ca:19:b4:76:1f:d1:
                    94:45:59:b6:63:8b:30:da:67:8a:5c:47:77:ad:f4:
                    98:7b:36:cd:52:fe:4a:0f:82:2b:e1:d2:20:2b:09:
                    0d:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:36:9A:A7:54:89:41:25:89:68:8B:80:A2:CC:29:FE:49:54:1F:CE
            X509v3 Authority Key Identifier:
                keyid:5A:4A:47:D5:82:BB:0E:96:80:F8:92:58:AB:96:D0:58:67:D3:52:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WkpH1YK7DpaA-JJYq5bQWGfTUu8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/4b7576-2b9c-43af-8817-6b0065508996/1/WkpH1YK7DpaA-JJYq5bQWGfTUu8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/4b7576-2b9c-43af-8817-6b0065508996/1/WkpH1YK7DpaA-JJYq5bQWGfTUu8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:8c:f1:9f:50:b0:07:4c:26:d9:9b:b7:34:d4:64:77:3d:b6:
         1c:07:67:de:61:fa:8b:8c:2f:ef:c5:8d:ce:08:e8:ca:14:00:
         07:43:59:b6:9e:f6:f8:c8:b3:57:3f:69:73:9a:dd:34:25:2e:
         1a:0e:17:fa:a8:2a:fa:68:1a:d6:8c:b4:26:c0:27:cd:45:08:
         1f:48:e2:31:46:e0:54:2d:2b:f1:14:b3:a7:6a:c4:fb:ee:b7:
         8f:1e:9d:29:82:b8:f2:a9:6f:04:95:cc:93:fe:56:a2:62:f4:
         4b:c6:76:d2:4f:bb:15:6e:25:fc:82:ac:ae:cb:21:43:15:5a:
         6d:53:da:35:a4:50:45:32:09:09:9d:58:31:49:50:14:55:49:
         cc:e3:83:38:de:90:dc:3a:de:a9:2e:c5:66:66:77:8e:3d:5a:
         3b:d6:87:a6:95:92:03:50:c3:1e:e3:84:ff:e3:51:27:50:56:
         5d:cd:ef:5e:28:73:0c:1e:11:2b:2c:db:e5:af:fe:7c:51:9d:
         16:53:3d:14:2f:f9:38:8a:b1:85:23:01:4c:4f:3d:75:1a:ea:
         98:7f:b2:89:57:50:b1:56:e5:84:0a:ca:73:aa:2e:28:5b:5c:
         a4:fc:81:82:93:3f:b1:68:ed:5e:51:45:88:70:48:b3:ca:ae:
         2a:42:e5:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:39:43 2025 by rpki-client