Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/b10e06-257c-4995-879d-6d07d7f1a701/1/wXzDfx7YGsN7IPrw9CxBq4CPE8E.mft
File:                     wXzDfx7YGsN7IPrw9CxBq4CPE8E.mft (raw, json)
Hash identifier:          PJvIbPPx3VivQMVq62yhg7Y7vcYerk8I2OUGjYirpLM=
Subject key identifier:   63:34:91:20:99:5B:DE:C6:ED:36:79:A3:FA:D5:FF:75:FD:23:67:2B
Authority key identifier: C1:7C:C3:7F:1E:D8:1A:C3:7B:20:FA:F0:F4:2C:41:AB:80:8F:13:C1
Certificate issuer:       /CN=c17cc37f1ed81ac37b20faf0f42c41ab808f13c1
Certificate serial:       0199FC59154BC99E03AA17FC2216B8DC121E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wXzDfx7YGsN7IPrw9CxBq4CPE8E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/b10e06-257c-4995-879d-6d07d7f1a701/1/wXzDfx7YGsN7IPrw9CxBq4CPE8E.mft
Manifest number:          16E3
Signing time:             Sun 19 Oct 2025 12:02:00 +0000
Manifest this update:     Sun 19 Oct 2025 12:02:00 +0000
Manifest next update:     Mon 20 Oct 2025 12:02:00 +0000
Files and hashes:         1: BQLlzRf92AV-wOpCiU3Uf7zFDTE.roa (hash: ojPLMpm1/7UXMtqHbqCurY3+N3TkMNGJ/j/f6zcsUls=)
                          2: E00rNsoiT3py_3yapmHFtC_Nhrg.roa (hash: NbpIiEieVkToVn1q+xbEvBZtrUTnRwlkypf+PLwHZU0=)
                          3: Vk7acJCttlxBVWzc1q7a4nWM7rQ.roa (hash: jqcFx2BzSJp7wY2CXpCRm4It9qRY3jR3QXLHSWI1gbo=)
                          4: W7hm1v1BZSRkI-g-Q988i-QfQmg.roa (hash: tTl/U0i8KKl6mpPXvqkEhYGwVtb5LDrDTJXxu7tcm3E=)
                          5: wXzDfx7YGsN7IPrw9CxBq4CPE8E.crl (hash: A3Xo/nBff+US8NAztunUvIT3n2Eaj4xR+7le7wR4fYI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/b10e06-257c-4995-879d-6d07d7f1a701/1/wXzDfx7YGsN7IPrw9CxBq4CPE8E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/b10e06-257c-4995-879d-6d07d7f1a701/1/wXzDfx7YGsN7IPrw9CxBq4CPE8E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wXzDfx7YGsN7IPrw9CxBq4CPE8E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:59:15:4b:c9:9e:03:aa:17:fc:22:16:b8:dc:12:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c17cc37f1ed81ac37b20faf0f42c41ab808f13c1
        Validity
            Not Before: Oct 19 12:02:00 2025 GMT
            Not After : Oct 20 12:02:00 2025 GMT
        Subject: CN=63349120995bdec6ed3679a3fad5ff75fd23672b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:40:83:13:2b:a1:0b:c8:1b:ec:c0:80:81:96:
                    69:5a:75:a9:de:1e:7e:29:44:b3:aa:ee:6b:2f:9f:
                    dc:d7:69:e9:f7:b4:14:ca:4a:19:0c:98:b8:ab:91:
                    00:88:2c:3e:e2:a1:3d:8e:52:b1:4a:75:29:ae:54:
                    02:c5:de:51:f8:02:37:0e:62:f5:c6:55:1e:91:38:
                    fb:02:5c:98:cd:9d:1d:55:ca:a8:1e:42:66:21:d1:
                    5b:bd:0c:88:af:3f:d9:e0:02:54:6f:15:ba:af:ff:
                    42:1e:03:45:37:7d:39:09:9c:32:2b:3b:e1:f8:2d:
                    78:44:c2:be:d7:90:29:04:24:a2:29:ee:ae:85:bf:
                    77:86:e7:9c:d4:0b:6b:47:59:47:e6:5b:c4:bc:76:
                    3b:06:45:e8:d6:13:b5:c6:bc:f8:77:50:bf:af:e5:
                    54:13:36:d5:19:45:12:1d:8b:6c:ab:16:82:89:63:
                    98:ee:35:89:39:d3:2c:0b:ec:7c:3d:ca:a5:45:57:
                    3b:33:fd:9c:44:e8:88:9f:2e:12:2e:83:cd:ad:8f:
                    b4:7e:77:c2:8a:83:78:d6:ff:aa:27:a5:e2:b8:fa:
                    a6:b7:d8:68:ec:0d:60:9b:28:bd:04:2e:ab:af:fe:
                    79:94:2f:6f:59:88:eb:3a:6d:d1:42:66:9a:d7:47:
                    39:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:34:91:20:99:5B:DE:C6:ED:36:79:A3:FA:D5:FF:75:FD:23:67:2B
            X509v3 Authority Key Identifier:
                keyid:C1:7C:C3:7F:1E:D8:1A:C3:7B:20:FA:F0:F4:2C:41:AB:80:8F:13:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wXzDfx7YGsN7IPrw9CxBq4CPE8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b10e06-257c-4995-879d-6d07d7f1a701/1/wXzDfx7YGsN7IPrw9CxBq4CPE8E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/b10e06-257c-4995-879d-6d07d7f1a701/1/wXzDfx7YGsN7IPrw9CxBq4CPE8E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:b4:b0:8a:6a:0b:a2:a0:34:ab:ca:4b:2d:5a:92:2e:a1:7d:
         eb:ec:f4:4e:bb:5d:b2:63:b6:10:e9:24:40:f6:70:e2:76:5c:
         b7:8f:5e:96:69:ee:7c:a1:44:4c:7e:6e:6f:9f:f8:26:d9:8c:
         c6:f9:f0:9b:1f:f2:3c:a7:cc:3c:9c:82:ce:bc:ab:f2:c7:c2:
         b0:99:14:ca:d8:0d:ab:09:c9:31:d2:ab:d0:58:70:e5:52:c0:
         25:a1:30:65:f0:9f:03:70:f6:d5:76:06:4b:1b:ef:77:67:4d:
         19:31:42:c0:4e:9c:05:a7:70:5e:51:5b:62:1a:a7:63:cd:1f:
         30:15:62:1d:71:14:fe:89:a0:48:8f:7a:f1:43:80:69:24:b7:
         16:7f:d7:d9:8b:ec:2f:bc:d3:60:cc:1e:cc:ba:03:b9:eb:bd:
         a8:eb:c7:ff:b2:e6:5a:ee:05:d0:fb:d7:c3:b8:97:15:ec:12:
         ba:f9:f0:c0:f2:95:1b:e5:90:43:f0:e4:0c:8e:7b:ab:fd:20:
         98:fe:dc:28:68:4f:f1:47:c0:cd:45:e3:a4:44:4b:5f:31:81:
         3c:55:9c:50:1b:a0:a0:f1:22:28:b6:28:93:03:29:43:60:95:
         e0:92:6a:12:83:33:b8:a6:62:3e:1e:15:91:ac:46:4b:99:16:
         d3:1b:0f:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:11 2025 by rpki-client