Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/1de213-f352-43a4-b88b-53eacd8963a1/1/wLjiV5ep3EPC5GOUsMixsQirQ7k.mft
File:                     wLjiV5ep3EPC5GOUsMixsQirQ7k.mft (raw, json)
Hash identifier:          0A+uyd7RygCtqZmkVzXi8sApNn1DSRiIwfEYDMkanQY=
Subject key identifier:   89:E9:0B:CD:C4:8B:B8:59:86:EE:11:31:8B:9D:96:C5:CF:42:0E:ED
Authority key identifier: C0:B8:E2:57:97:A9:DC:43:C2:E4:63:94:B0:C8:B1:B1:08:AB:43:B9
Certificate issuer:       /CN=c0b8e25797a9dc43c2e46394b0c8b1b108ab43b9
Certificate serial:       0199FFC8C4622C09A5E0BDDB251C47E000F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wLjiV5ep3EPC5GOUsMixsQirQ7k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/1de213-f352-43a4-b88b-53eacd8963a1/1/wLjiV5ep3EPC5GOUsMixsQirQ7k.mft
Manifest number:          0574
Signing time:             Mon 20 Oct 2025 04:02:51 +0000
Manifest this update:     Mon 20 Oct 2025 04:02:51 +0000
Manifest next update:     Tue 21 Oct 2025 04:02:51 +0000
Files and hashes:         1: 3oLf6nYLu-Xr7qpLQICeS2w7Tus.roa (hash: XtsupCW4EVcqvMqJHKb5yPLyEGcRcTQPpgXjTIHJ3Z4=)
                          2: wLjiV5ep3EPC5GOUsMixsQirQ7k.crl (hash: G1RS+Ov9eFjViQlkxKP/zQ2vyapoxabddkOr2vfkeQ8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/1de213-f352-43a4-b88b-53eacd8963a1/1/wLjiV5ep3EPC5GOUsMixsQirQ7k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/1de213-f352-43a4-b88b-53eacd8963a1/1/wLjiV5ep3EPC5GOUsMixsQirQ7k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wLjiV5ep3EPC5GOUsMixsQirQ7k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 04:02:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ff:c8:c4:62:2c:09:a5:e0:bd:db:25:1c:47:e0:00:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0b8e25797a9dc43c2e46394b0c8b1b108ab43b9
        Validity
            Not Before: Oct 20 04:02:51 2025 GMT
            Not After : Oct 21 04:02:51 2025 GMT
        Subject: CN=89e90bcdc48bb85986ee11318b9d96c5cf420eed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:17:f8:f1:29:4a:b9:fc:98:80:cc:09:7a:32:
                    e7:09:b0:43:4d:0d:44:36:e7:60:8b:9f:d5:c5:95:
                    d7:8c:8c:57:8c:fe:64:09:45:70:cc:7d:bb:25:f2:
                    90:ab:8d:b8:b5:8c:ba:55:2e:c5:5f:bf:5a:95:86:
                    cb:4e:8c:21:de:80:c7:51:ea:7e:b4:67:ae:cc:b0:
                    b8:3f:0a:73:75:83:db:7c:f8:ca:b2:fb:6f:30:08:
                    88:6f:23:50:de:be:dc:eb:54:46:8c:0e:79:02:3d:
                    d6:33:7f:47:d9:5e:20:68:99:7a:f0:a4:b5:74:5a:
                    1d:40:d7:d8:79:50:b2:90:1e:02:cb:ba:80:c2:a3:
                    ea:13:ec:94:81:f4:b4:71:0d:9b:85:06:60:d6:08:
                    60:3a:b5:8a:37:7d:27:22:39:d4:74:5c:80:90:ba:
                    27:02:26:80:51:f6:37:56:72:b8:56:45:c2:eb:09:
                    76:92:ef:15:92:af:6a:da:e3:16:f1:e0:0a:6f:e1:
                    5f:0c:5f:df:34:3e:59:5c:25:57:55:4c:c3:d1:d7:
                    01:fe:dd:5f:fb:4d:25:19:d1:95:3d:39:b4:e4:f1:
                    71:c0:ca:84:e3:a5:b3:4b:59:19:2b:5e:d4:f7:12:
                    ea:fe:57:0d:ee:25:06:ce:55:a0:25:f9:6d:59:f5:
                    5e:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:E9:0B:CD:C4:8B:B8:59:86:EE:11:31:8B:9D:96:C5:CF:42:0E:ED
            X509v3 Authority Key Identifier:
                keyid:C0:B8:E2:57:97:A9:DC:43:C2:E4:63:94:B0:C8:B1:B1:08:AB:43:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wLjiV5ep3EPC5GOUsMixsQirQ7k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1de213-f352-43a4-b88b-53eacd8963a1/1/wLjiV5ep3EPC5GOUsMixsQirQ7k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/1de213-f352-43a4-b88b-53eacd8963a1/1/wLjiV5ep3EPC5GOUsMixsQirQ7k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:4b:f3:3c:46:29:3f:85:22:b7:a2:b7:f1:05:6d:66:dd:0a:
         5c:5f:99:cf:f8:fb:98:03:57:14:8c:bd:a8:a0:e7:e9:e6:44:
         a9:2d:b1:76:b7:c0:37:16:60:c3:ed:e1:af:87:cb:89:d7:37:
         6a:44:a5:7c:8c:27:98:53:e7:8f:30:0a:13:ab:de:fa:28:38:
         2a:80:d3:39:78:d7:66:29:fa:b0:85:70:99:70:e9:db:d8:3d:
         a9:f0:8a:27:c7:59:ff:b6:dc:8a:e2:0b:c8:d0:89:50:ae:de:
         18:34:69:5b:4f:5c:b1:e8:1e:a8:29:79:b2:bb:ee:b1:36:dd:
         66:4f:2c:03:06:be:3d:36:f9:97:c4:fd:46:95:ba:73:f8:97:
         2c:ef:e0:1e:79:25:5e:a6:9d:90:45:bf:18:64:4a:22:16:a8:
         ef:d2:ca:03:57:78:09:c9:b9:d0:52:a8:e0:88:66:05:1f:ab:
         f8:64:d1:e3:ec:f8:51:28:d5:90:fb:64:60:e9:c1:89:09:2e:
         97:68:c2:6d:dc:4f:b8:0f:ba:d3:7d:7f:19:5d:53:ff:08:90:
         b4:e3:09:47:e6:40:65:81:eb:71:fc:2c:51:18:22:d0:89:a3:
         74:1b:55:a9:9b:ca:f4:21:68:b9:be:b1:0f:e4:da:1b:db:ad:
         70:75:82:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:47:33 2025 by rpki-client