Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/838ef1-7393-4fbd-b67b-664b8f03d180/1/WY-kIBNE1BB_eS7uJWbGLWVxTi0.mft
File:                     WY-kIBNE1BB_eS7uJWbGLWVxTi0.mft (raw, json)
Hash identifier:          bllzmNAOB+riR5KkoOPlBsaX4RGaWZM2mTkAlXz4+DM=
Subject key identifier:   5D:88:54:82:AB:57:46:B1:14:B4:8F:95:02:F8:A4:47:E5:18:EF:06
Authority key identifier: 59:8F:A4:20:13:44:D4:10:7F:79:2E:EE:25:66:C6:2D:65:71:4E:2D
Certificate issuer:       /CN=598fa4201344d4107f792eee2566c62d65714e2d
Certificate serial:       0199FD340A398B991C4F1665764B5B157E98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WY-kIBNE1BB_eS7uJWbGLWVxTi0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/838ef1-7393-4fbd-b67b-664b8f03d180/1/WY-kIBNE1BB_eS7uJWbGLWVxTi0.mft
Manifest number:          16E9
Signing time:             Sun 19 Oct 2025 16:01:10 +0000
Manifest this update:     Sun 19 Oct 2025 16:01:10 +0000
Manifest next update:     Mon 20 Oct 2025 16:01:10 +0000
Files and hashes:         1: 21Z7HmrOxiobds8TxVCgw76jX2Q.roa (hash: Skfph10GmJAF2gm8sQyaNWU8Upk0+888zHd0gic3TYc=)
                          2: 6BYQ4By2tJL3cWm4L-BQSWyvJS0.roa (hash: 3sAvJeopcRq49xZNtMv2qbQCEldVQVML4/pl6Sm3s88=)
                          3: WY-kIBNE1BB_eS7uJWbGLWVxTi0.crl (hash: Jlm2nXiCS18A0hnTNAO/EMtvIfAiE7CM8RA2xb6PAV8=)
                          4: k97CrjwrQPT8_y6vdIb8L8R85BY.roa (hash: +DDKSroEDnHlqdOq/UjhA3pHL4D5bJ4vsDTADTBgxwE=)
                          5: n6_io3-KaLYhuJtZiy1MeoUuNbk.roa (hash: nSbtIazJ2SXxi9u2NxxSLPcqXno/gu6gZmKKyNsxgLg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/838ef1-7393-4fbd-b67b-664b8f03d180/1/WY-kIBNE1BB_eS7uJWbGLWVxTi0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/838ef1-7393-4fbd-b67b-664b8f03d180/1/WY-kIBNE1BB_eS7uJWbGLWVxTi0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WY-kIBNE1BB_eS7uJWbGLWVxTi0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:34:0a:39:8b:99:1c:4f:16:65:76:4b:5b:15:7e:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=598fa4201344d4107f792eee2566c62d65714e2d
        Validity
            Not Before: Oct 19 16:01:10 2025 GMT
            Not After : Oct 20 16:01:10 2025 GMT
        Subject: CN=5d885482ab5746b114b48f9502f8a447e518ef06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:21:79:0e:dd:40:d1:11:ce:f5:8a:e8:49:51:
                    7b:13:c1:70:1f:56:27:fd:41:ec:db:0a:dd:29:6c:
                    d7:c5:e4:24:64:36:d0:dc:f8:d8:4b:7a:80:cb:f3:
                    2d:46:75:bd:4a:bd:13:91:6e:57:76:d7:4c:ec:74:
                    f3:10:f9:f0:c4:b8:f9:9a:6a:1c:ac:cd:8d:4d:94:
                    59:d4:c2:40:b6:89:25:4d:5f:1f:10:af:fc:5f:a1:
                    fb:5b:19:d2:41:be:e9:af:92:50:02:e7:ed:32:55:
                    24:70:00:8f:b8:25:04:26:d1:d0:aa:64:8b:2c:d7:
                    0f:c9:af:cf:5f:55:90:fb:ff:5d:9e:60:91:13:10:
                    6f:4f:4d:01:31:12:19:15:2a:13:ec:c1:19:df:09:
                    7d:61:bc:32:19:da:89:7e:e4:ae:ca:df:82:b4:4d:
                    d2:e6:fb:20:e9:8a:92:41:e3:a3:53:59:a1:17:fb:
                    0a:a6:36:43:e6:84:34:2d:af:ff:c3:73:87:65:ac:
                    88:d5:33:31:09:0a:83:fb:9c:0b:c5:7f:6b:89:41:
                    84:d4:f6:79:b2:2e:83:c1:14:c1:b4:6c:24:08:ba:
                    0c:20:61:e8:4c:a5:af:66:7b:70:47:01:2e:53:68:
                    fa:44:84:5f:c7:6d:20:d5:9d:49:9a:68:20:ee:90:
                    c4:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:88:54:82:AB:57:46:B1:14:B4:8F:95:02:F8:A4:47:E5:18:EF:06
            X509v3 Authority Key Identifier:
                keyid:59:8F:A4:20:13:44:D4:10:7F:79:2E:EE:25:66:C6:2D:65:71:4E:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WY-kIBNE1BB_eS7uJWbGLWVxTi0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/838ef1-7393-4fbd-b67b-664b8f03d180/1/WY-kIBNE1BB_eS7uJWbGLWVxTi0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/838ef1-7393-4fbd-b67b-664b8f03d180/1/WY-kIBNE1BB_eS7uJWbGLWVxTi0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:1a:7c:31:d6:1b:92:e3:1a:38:06:d3:60:16:b7:9d:39:94:
         00:f5:bb:9b:af:6c:42:88:70:2c:17:88:97:25:63:3a:cc:9e:
         63:8c:42:45:d0:48:dd:5e:2c:03:93:20:32:25:27:bc:20:8e:
         9a:9a:89:a5:ce:53:08:d8:e9:87:d0:dc:f9:4b:0c:23:a4:3e:
         8c:f7:c8:eb:3a:24:c5:a6:e2:05:4b:ab:10:3e:25:df:22:3f:
         8a:19:31:3c:47:77:d2:be:8b:47:13:84:7c:df:68:4a:c7:38:
         8d:c7:70:e4:df:ab:90:b5:1a:6e:fa:f5:42:e2:75:c1:2e:b3:
         9d:f5:56:04:c0:82:2f:a5:87:bc:89:a2:98:28:e9:49:c7:ae:
         16:03:12:6f:e8:ec:79:c0:c6:19:2f:a0:01:d6:a3:26:0a:d4:
         b7:4f:0e:58:07:cf:29:1e:62:d2:36:6e:ca:8c:33:19:9f:65:
         0c:46:6c:14:92:d0:04:e3:ff:0e:64:3d:e4:5b:02:20:05:16:
         4b:23:57:bd:17:90:cc:c7:11:05:c2:79:8c:a1:b9:6e:63:c0:
         de:90:cb:c4:0d:a0:e3:73:0d:20:db:2f:75:4a:db:50:1f:94:
         4d:2b:6f:03:6f:92:14:bf:93:50:a8:ed:cf:87:df:29:47:07:
         c6:03:0f:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:54:29 2025 by rpki-client