Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/6555e3-82f6-46ca-a170-48f77ee85ab9/1/W8mmyFynpWV7noroCGXRLvgWagM.mft
File:                     W8mmyFynpWV7noroCGXRLvgWagM.mft (raw, json)
Hash identifier:          WfbvK2xaXvqxFGdZRDnxqUfEqnZxNfYd4EELwFdBfKM=
Subject key identifier:   61:BF:0F:36:20:AF:23:FE:D1:FC:D0:55:0A:5A:8E:CA:A5:04:5C:01
Authority key identifier: 5B:C9:A6:C8:5C:A7:A5:65:7B:9E:8A:E8:08:65:D1:2E:F8:16:6A:03
Certificate issuer:       /CN=5bc9a6c85ca7a5657b9e8ae80865d12ef8166a03
Certificate serial:       0199FC8FA4E0218E8B69CABA40D18795A580
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W8mmyFynpWV7noroCGXRLvgWagM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/6555e3-82f6-46ca-a170-48f77ee85ab9/1/W8mmyFynpWV7noroCGXRLvgWagM.mft
Manifest number:          0D29
Signing time:             Sun 19 Oct 2025 13:01:36 +0000
Manifest this update:     Sun 19 Oct 2025 13:01:36 +0000
Manifest next update:     Mon 20 Oct 2025 13:01:36 +0000
Files and hashes:         1: DkAig3sreL5BEr4m7B4017Dqunc.roa (hash: os6hbiNRGL8Q/b1fbO8kbiQWOa/7AJzjZXaqV/37DEw=)
                          2: W8mmyFynpWV7noroCGXRLvgWagM.crl (hash: FRq07qKeRkpQX+mQ84HTeLvyE6tMLzkthZ5uMBIKGd0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/6555e3-82f6-46ca-a170-48f77ee85ab9/1/W8mmyFynpWV7noroCGXRLvgWagM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/6555e3-82f6-46ca-a170-48f77ee85ab9/1/W8mmyFynpWV7noroCGXRLvgWagM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W8mmyFynpWV7noroCGXRLvgWagM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:8f:a4:e0:21:8e:8b:69:ca:ba:40:d1:87:95:a5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5bc9a6c85ca7a5657b9e8ae80865d12ef8166a03
        Validity
            Not Before: Oct 19 13:01:36 2025 GMT
            Not After : Oct 20 13:01:36 2025 GMT
        Subject: CN=61bf0f3620af23fed1fcd0550a5a8ecaa5045c01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:13:d5:75:bb:28:d9:3c:36:64:e0:2e:9d:01:
                    76:7d:cd:c9:2b:83:7c:53:da:ed:9a:c5:fa:45:d5:
                    d9:91:49:55:dc:db:93:f9:8c:ff:ac:37:6c:76:4e:
                    92:b8:a9:da:7f:11:c2:7b:90:e0:45:f1:a6:37:55:
                    ea:be:fe:72:48:b8:04:5d:d3:a7:24:1c:de:f3:ad:
                    e6:bb:99:0c:90:92:1b:e3:df:06:ec:5e:e1:ab:ca:
                    da:65:f5:ee:14:53:14:96:47:f3:0d:ea:22:da:10:
                    e8:84:dd:e7:51:b4:1a:d7:dd:6e:7b:4c:18:32:ba:
                    04:e0:d3:4e:d6:d7:1f:5c:92:9c:89:1d:c2:8b:c3:
                    f6:18:fa:41:37:ee:86:ea:cc:55:04:8a:7c:49:30:
                    73:6e:ae:e7:9f:09:0e:35:0b:a5:30:45:dc:64:d1:
                    c6:82:56:af:ca:b2:5d:7a:05:de:f4:07:cb:ea:7f:
                    95:17:13:82:54:41:bb:ac:e9:94:11:eb:43:73:a4:
                    1b:cf:85:0c:85:2b:b1:70:5e:3d:12:94:80:bb:3c:
                    a1:3f:14:16:b7:3c:4c:bf:30:bb:b8:75:a8:7e:52:
                    9d:2e:e3:c5:9e:b0:66:07:17:6d:e8:27:fe:6f:f1:
                    29:77:3a:05:44:70:94:d2:9b:48:36:2e:b2:d4:96:
                    9b:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:BF:0F:36:20:AF:23:FE:D1:FC:D0:55:0A:5A:8E:CA:A5:04:5C:01
            X509v3 Authority Key Identifier:
                keyid:5B:C9:A6:C8:5C:A7:A5:65:7B:9E:8A:E8:08:65:D1:2E:F8:16:6A:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W8mmyFynpWV7noroCGXRLvgWagM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/6555e3-82f6-46ca-a170-48f77ee85ab9/1/W8mmyFynpWV7noroCGXRLvgWagM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/6555e3-82f6-46ca-a170-48f77ee85ab9/1/W8mmyFynpWV7noroCGXRLvgWagM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:57:e9:72:af:15:c3:2c:f1:5a:f5:c7:0a:47:ff:20:c4:68:
         f0:63:09:e8:2f:06:73:8a:83:9d:95:ed:40:a6:7e:98:16:24:
         e7:7a:d7:4f:b8:71:f8:68:a5:e6:df:9f:a0:df:28:f7:f2:90:
         63:8c:f3:8b:c7:f6:7f:76:83:ce:58:d1:a8:82:4c:38:5b:fd:
         33:e3:f8:17:fa:56:b3:6e:09:39:e4:16:63:1a:ad:d7:f7:84:
         1e:ab:18:1e:fc:e3:bb:3b:f0:ff:1d:09:9a:42:31:72:59:72:
         30:b4:40:db:6d:38:de:b5:6a:2b:1e:dd:18:18:0c:5d:5c:30:
         3a:e1:17:c4:f2:1a:9a:91:68:07:76:26:42:f7:7b:42:66:97:
         e0:ed:d2:3c:45:7e:69:13:b1:87:81:e2:79:5f:fc:2d:88:6a:
         80:cf:a3:af:69:1b:40:1b:ca:e8:eb:c2:f2:3f:7d:21:eb:5f:
         00:84:50:00:78:63:70:f8:45:c0:8c:99:ea:f9:b6:60:08:26:
         e8:bf:2d:58:94:90:36:f0:0c:7f:c3:9e:ae:58:bf:19:2a:d1:
         27:d5:99:4b:22:fb:58:d6:18:e3:9d:1e:00:05:47:2a:6c:68:
         a7:1e:c8:12:50:48:78:72:87:f2:bd:14:2b:68:ee:42:d5:31:
         b5:d4:9c:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8j6TgIY6Lacq6QNGHlaWAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViYzlhNmM4NWNhN2E1NjU3YjllOGFlODA4NjVkMTJlZjgx
NjZhMDMwHhcNMjUxMDE5MTMwMTM2WhcNMjUxMDIwMTMwMTM2WjAzMTEwLwYDVQQD
Eyg2MWJmMGYzNjIwYWYyM2ZlZDFmY2QwNTUwYTVhOGVjYWE1MDQ1YzAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRPVdbso2Tw2ZOAunQF2fc3JK4N8
U9rtmsX6RdXZkUlV3NuT+Yz/rDdsdk6SuKnafxHCe5DgRfGmN1Xqvv5ySLgEXdOn
JBze863mu5kMkJIb498G7F7hq8raZfXuFFMUlkfzDeoi2hDohN3nUbQa191ue0wY
MroE4NNO1tcfXJKciR3Ci8P2GPpBN+6G6sxVBIp8STBzbq7nnwkONQulMEXcZNHG
glavyrJdegXe9AfL6n+VFxOCVEG7rOmUEetDc6Qbz4UMhSuxcF49EpSAuzyhPxQW
tzxMvzC7uHWoflKdLuPFnrBmBxdt6Cf+b/EpdzoFRHCU0ptINi6y1JabuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGG/DzYgryP+0fzQVQpajsqlBFwBMB8GA1UdIwQY
MBaAFFvJpshcp6Vle56K6Ahl0S74FmoDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzhtbXlGeW5wV1Y3bm9yb0NHWFJMdmdXYWdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS82NTU1ZTMtODJmNi00NmNhLWExNzAt
NDhmNzdlZTg1YWI5LzEvVzhtbXlGeW5wV1Y3bm9yb0NHWFJMdmdXYWdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS82NTU1ZTMtODJmNi00NmNhLWExNzAtNDhmNzdlZTg1YWI5
LzEvVzhtbXlGeW5wV1Y3bm9yb0NHWFJMdmdXYWdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKlfpcq8V
wyzxWvXHCkf/IMRo8GMJ6C8Gc4qDnZXtQKZ+mBYk53rXT7hx+Gil5t+foN8o9/KQ
Y4zzi8f2f3aDzljRqIJMOFv9M+P4F/pWs24JOeQWYxqt1/eEHqsYHvzjuzvw/x0J
mkIxcllyMLRA22043rVqKx7dGBgMXVwwOuEXxPIampFoB3YmQvd7QmaX4O3SPEV+
aROxh4HieV/8LYhqgM+jr2kbQBvK6OvC8j99IetfAIRQAHhjcPhFwIyZ6vm2YAgm
6L8tWJSQNvAMf8Oerli/GSrRJ9WZSyL7WNYY450eAAVHKmxopx7IElBIeHKH8r0U
K2juQtUxtdScIw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:40:41 2025 by rpki-client