Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft
File:                     1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft (raw, json)
Hash identifier:          7Mf5zkfKAT3GuBebeQrjpniDoYyWv+2KOTmKGpo9ehg=
Subject key identifier:   92:C2:47:A6:7F:89:F5:9C:67:92:21:40:3C:E6:3D:AC:39:7B:81:E5
Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33
Certificate issuer:       /CN=d5637692ff5c45486d1053b149dc1420026cd733
Certificate serial:       0199FD345B28FF4A1EE15FE895275372F9FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft
Manifest number:          0CF3
Signing time:             Sun 19 Oct 2025 16:01:30 +0000
Manifest this update:     Sun 19 Oct 2025 16:01:30 +0000
Manifest next update:     Mon 20 Oct 2025 16:01:30 +0000
Files and hashes:         1: 1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl (hash: yN4EbbtSdwcimtwNdzLw5J+CS/JDLmAiuhGlYbRD52M=)
                          2: 90yTu1ZvBXsj2zvvf_cf6smqsAY.roa (hash: d0+vl+KGJdXe44PbjywGVSh4mi3ZR2K5B0XyBELq85Q=)
                          3: 9ESb3nU5cbHcLFUhNEpqkvmhj_4.roa (hash: LHv33BgF/+ayoq8UGd9MWgrIjXrwU1xij1zgE5RnA6k=)
                          4: MPC4WGBwWzUKQ4MIf9vheq3ljf8.roa (hash: X1yT4PQqSCT8h7K1UyGvzdMze10lM3EBcX0jmIp7dhY=)
                          5: QWJn3q0Lr5gGgTezlymenkp6b1w.roa (hash: FCKvF/NqXSUJyECvMZNBgT9ANA+px+Gc/iswj+zUJEI=)
                          6: UCuT9DdR1uf2eaUQ5W61UcGGe5s.roa (hash: el2ZUvN5cR0Xlq/3JU37CLxdd+Op9S06q4bKQS6tg4A=)
                          7: WkuL6FUDIfRDF14nPyGZlNz9TC8.roa (hash: D4GYrfLtGgd4PpXaht+eqgT9SvcVMk1Cz7ndFDRulUI=)
                          8: X2UArr6NpSeUa_r53UJKN_WcE2Q.roa (hash: 7e3/Cphtp59zFTi7++qenlH+zOQWGj2nPifYLt+4tUo=)
                          9: du_MXb8GLOewa44v34_3lLw6dnw.roa (hash: a2a2dhTFIXXWOYnBPekfjuJxO8TA9JqXeDf3zAfH4X8=)
                          10: gczW35cqQlBADOQAWeSQ-bYxRMo.roa (hash: 9jHvOrJ1ViTa6G5Us1NPMW3J9nbWdq6Gknf3R0RABUE=)
                          11: gq4-qZZLFBuurcOJ9Pxlu03_UHo.roa (hash: xfn9bc1Rb+filmBHMlKSU98Tci6TOw0mmXsz+N116Q0=)
                          12: n3IhM1zBRa6pSVaHWbwRlWlBc9c.roa (hash: cG88RiwnklB+hGfdAs9rfXTkd4LxMdYdGB9RXUfaE4M=)
                          13: pwMO6ssE5D-O8Xyj-6Cg12qPD5Q.roa (hash: jNpNRBAX1vK+/7+Nq5SPgMC/QUrkJvx5kFMoBcHUw5U=)
                          14: sUUBdGAF9TJecEG5749G1YWJ5bU.roa (hash: GKDRtzmqCQRfHRzfpLrnvEf31pPDp4sPaetIcigYVig=)
                          15: v4sib7AwGWB5UDZH0JAfo3wLLWI.roa (hash: oJfq8QBMpxHqOErWQWOgXlQS6GFd+/WAwjz3Gm4klT8=)
                          16: wz-KZ5KX8jTmXScvr3XeQj04j3I.roa (hash: RxnlIvfwP2SpAoX0QlB2pLFsNqlUFCANi/oFyJ3SgAs=)
                          17: ycORncNA45mJd3RcVB4kkVyYyek.roa (hash: 73ViTZ9duoNfFxXb5BewNjClF8EYFoeTaVe/H//+q5A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:34:5b:28:ff:4a:1e:e1:5f:e8:95:27:53:72:f9:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733
        Validity
            Not Before: Oct 19 16:01:30 2025 GMT
            Not After : Oct 20 16:01:30 2025 GMT
        Subject: CN=92c247a67f89f59c679221403ce63dac397b81e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:93:45:c6:d3:b1:ba:3a:d4:79:0c:78:f7:fd:
                    3a:17:5f:09:06:de:40:20:f3:0e:6c:7d:c0:c3:a6:
                    c0:ef:0b:bd:8b:fa:84:eb:4f:5a:9c:0e:bd:18:46:
                    8b:94:9d:3d:5b:a8:7c:c3:90:2a:bc:68:47:9e:d0:
                    ad:c7:d2:0e:df:80:b9:32:16:73:e0:c7:98:c8:cd:
                    4f:10:42:75:96:89:76:e0:2f:09:2e:ac:0f:1f:ce:
                    c6:27:b7:c0:07:f8:02:53:6a:ff:1b:f1:7d:59:5f:
                    4c:a7:02:5a:63:86:28:54:38:8f:56:63:ed:96:40:
                    07:26:d1:b3:99:0a:6b:65:1c:ae:85:bd:fb:cb:97:
                    7f:1e:61:00:61:47:74:7b:1e:dd:a4:2c:76:d7:2a:
                    5b:9c:65:a7:7a:04:fb:b7:29:63:d4:02:2e:44:c2:
                    e5:42:80:d9:a5:3d:7d:23:36:78:be:4c:37:2a:6b:
                    22:62:34:a9:68:fc:dc:22:65:94:81:7d:33:9c:ca:
                    fb:1f:17:2e:7f:a5:4f:56:23:e0:3f:0b:2e:88:ab:
                    36:85:a4:57:e1:a8:1d:12:f9:37:42:eb:c6:5a:a2:
                    6c:c9:cd:28:71:06:17:e2:53:1d:e5:47:92:53:e6:
                    72:04:fb:75:0e:a0:44:ec:15:b9:cc:f5:40:c8:d5:
                    b4:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:C2:47:A6:7F:89:F5:9C:67:92:21:40:3C:E6:3D:AC:39:7B:81:E5
            X509v3 Authority Key Identifier:
                keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:ea:b8:b6:ac:e0:9d:d4:10:e6:9b:31:5f:15:00:be:0a:52:
         22:20:40:1c:df:38:31:70:0c:18:67:c3:9c:ad:94:07:03:9d:
         6e:99:06:28:52:f8:b0:4e:66:c0:9f:d7:7d:d3:f4:2c:f3:e8:
         98:37:8a:bc:b0:80:8f:8f:0e:df:b8:37:aa:8c:2e:d5:ce:bd:
         48:a7:a2:97:e6:33:dc:35:a7:47:78:67:30:31:66:0e:4c:dc:
         42:6e:cf:82:d0:01:02:80:77:a7:16:72:a2:6a:bf:d9:19:76:
         4f:fe:04:4b:3a:c6:4a:13:64:b6:41:fc:71:32:32:14:a6:6a:
         5e:97:81:a8:c5:39:c8:df:4d:38:f2:8d:4f:be:7e:68:d0:43:
         dd:e7:9a:cc:19:12:52:0d:8c:74:b4:40:2d:6b:46:e6:54:bd:
         fc:7f:fb:db:44:c2:8b:83:7f:8c:95:59:da:aa:a3:ca:bb:49:
         e6:4c:bf:43:bb:05:a9:b9:02:65:f6:c6:21:b8:eb:6a:53:8a:
         ea:cf:c4:8f:bf:b9:d8:a3:22:96:ab:18:c3:b2:7e:9b:73:bb:
         d6:7a:bb:5e:b0:bb:29:a0:8c:33:a2:3c:d8:19:0e:fc:7e:c9:
         47:31:8f:0a:a6:b0:1b:56:6e:6a:95:06:b9:19:7b:39:4e:8a:
         14:af:be:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:39:33 2025 by rpki-client