Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/e1b20f-4d6d-40e0-af8a-3f17cbcba5ca/1/WyWQnzuU5V9e8zaifSdKff0NlrI.mft
File:                     WyWQnzuU5V9e8zaifSdKff0NlrI.mft (raw, json)
Hash identifier:          ZP48XJfy2tT/iclGZDp36p+lrFtBk/qe3kTuWghPlbs=
Subject key identifier:   C5:6B:AC:5A:0D:D5:2F:B8:70:B3:D4:EF:73:59:40:84:21:72:2B:C2
Authority key identifier: 5B:25:90:9F:3B:94:E5:5F:5E:F3:36:A2:7D:27:4A:7D:FD:0D:96:B2
Certificate issuer:       /CN=5b25909f3b94e55f5ef336a27d274a7dfd0d96b2
Certificate serial:       0199FB7CE6F630716D5959BB91FF94C14038
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WyWQnzuU5V9e8zaifSdKff0NlrI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/e1b20f-4d6d-40e0-af8a-3f17cbcba5ca/1/WyWQnzuU5V9e8zaifSdKff0NlrI.mft
Manifest number:          1597
Signing time:             Sun 19 Oct 2025 08:01:30 +0000
Manifest this update:     Sun 19 Oct 2025 08:01:30 +0000
Manifest next update:     Mon 20 Oct 2025 08:01:30 +0000
Files and hashes:         1: FEdxURaOUkYL0WbDVp9BT5YoCGg.roa (hash: V1bhzQdOv21eP2L8drvzUoPqsAJ8/f8TJjg7qCBB23Q=)
                          2: WyWQnzuU5V9e8zaifSdKff0NlrI.crl (hash: xlzPf9ZaF175tWIddwF2jpvbSaBrTIBh1CuPS2yLpGI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/e1b20f-4d6d-40e0-af8a-3f17cbcba5ca/1/WyWQnzuU5V9e8zaifSdKff0NlrI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/e1b20f-4d6d-40e0-af8a-3f17cbcba5ca/1/WyWQnzuU5V9e8zaifSdKff0NlrI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WyWQnzuU5V9e8zaifSdKff0NlrI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:7c:e6:f6:30:71:6d:59:59:bb:91:ff:94:c1:40:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b25909f3b94e55f5ef336a27d274a7dfd0d96b2
        Validity
            Not Before: Oct 19 08:01:30 2025 GMT
            Not After : Oct 20 08:01:30 2025 GMT
        Subject: CN=c56bac5a0dd52fb870b3d4ef7359408421722bc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:17:f6:54:16:ca:83:d7:fd:b3:43:1a:2d:70:
                    ec:8c:c0:31:2d:08:ba:5c:dd:58:07:50:7b:ef:2e:
                    dd:3a:3d:a0:2c:ea:8c:02:04:90:f0:12:e3:74:cb:
                    93:b6:50:8e:e3:3a:b9:95:61:0b:98:06:03:9d:a2:
                    04:3f:1c:0e:e3:2f:7c:68:e1:5f:44:f3:a5:dd:1a:
                    31:2b:86:0d:b8:56:20:b6:6a:e4:44:cf:83:3a:ab:
                    f5:9a:50:ae:83:cf:26:fe:d7:d3:5b:85:94:ff:fb:
                    91:0f:49:c8:fe:0e:7d:70:df:b5:6e:e7:d5:bb:a8:
                    dc:9d:27:53:a1:88:62:bd:b4:86:2e:41:43:ad:4f:
                    89:d0:72:53:ce:19:29:6e:a3:61:0d:01:06:85:1b:
                    99:49:7d:86:0a:4a:21:14:4e:51:31:b9:d4:92:8f:
                    a4:56:10:df:d2:ac:e5:3c:e1:b0:f6:88:4d:1f:e2:
                    53:5c:a9:fb:a0:2d:6a:a7:31:54:1d:7a:18:32:57:
                    fe:c4:0d:1d:3f:a9:fc:74:b8:84:6a:b9:97:fc:ea:
                    0b:30:52:81:1d:42:e8:75:d7:8e:5b:08:80:71:aa:
                    01:53:43:4f:ab:05:fa:2f:80:cb:ad:52:55:a3:f3:
                    ec:cb:bf:ca:4f:92:c3:4c:d8:a8:0e:ff:5a:c6:69:
                    bf:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:6B:AC:5A:0D:D5:2F:B8:70:B3:D4:EF:73:59:40:84:21:72:2B:C2
            X509v3 Authority Key Identifier:
                keyid:5B:25:90:9F:3B:94:E5:5F:5E:F3:36:A2:7D:27:4A:7D:FD:0D:96:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WyWQnzuU5V9e8zaifSdKff0NlrI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/e1b20f-4d6d-40e0-af8a-3f17cbcba5ca/1/WyWQnzuU5V9e8zaifSdKff0NlrI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/e1b20f-4d6d-40e0-af8a-3f17cbcba5ca/1/WyWQnzuU5V9e8zaifSdKff0NlrI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:f0:45:20:f8:eb:f6:49:4e:83:65:e4:26:48:1b:3a:95:8a:
         5b:32:7c:fc:8a:f6:2f:af:b0:2d:6a:39:31:49:6a:86:b4:f0:
         97:e7:24:a1:b5:0b:c7:ef:66:0a:b6:e5:a8:9a:76:89:c9:f1:
         d8:86:05:5a:16:a8:1e:bb:8a:5d:16:d5:1c:cf:1e:34:97:be:
         05:c9:00:1f:21:25:81:da:69:22:de:06:ab:f8:7c:17:a3:d9:
         60:ed:1b:ad:8e:52:0b:8c:1d:8a:07:6f:f8:46:6e:69:67:2c:
         ec:bf:9b:2c:20:c2:d8:0e:1f:f9:7a:2c:f1:d6:52:83:9c:84:
         bb:ac:3a:71:44:60:c5:52:d7:98:a9:58:b9:27:9b:5e:9e:2e:
         32:36:bc:b4:7f:48:8a:22:cd:71:ea:e6:9b:35:d7:04:33:93:
         cc:11:8a:4a:8e:e1:1d:1a:84:a6:0a:f9:25:f1:42:2b:b4:b7:
         9c:8c:76:cb:09:e8:d7:d3:c2:79:9a:1f:e0:5c:4e:7c:1c:44:
         6c:a0:e3:3b:fa:82:03:a0:45:2e:57:b5:ba:ec:bb:aa:0a:0c:
         61:f5:d5:1d:f2:68:e3:73:41:26:31:96:e7:8f:70:bf:60:24:
         17:96:41:da:77:3e:c6:ec:af:92:7d:c5:79:4a:73:a4:b9:89:
         b9:1d:45:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7fOb2MHFtWVm7kf+UwUA4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViMjU5MDlmM2I5NGU1NWY1ZWYzMzZhMjdkMjc0YTdkZmQw
ZDk2YjIwHhcNMjUxMDE5MDgwMTMwWhcNMjUxMDIwMDgwMTMwWjAzMTEwLwYDVQQD
EyhjNTZiYWM1YTBkZDUyZmI4NzBiM2Q0ZWY3MzU5NDA4NDIxNzIyYmMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4hf2VBbKg9f9s0MaLXDsjMAxLQi6
XN1YB1B77y7dOj2gLOqMAgSQ8BLjdMuTtlCO4zq5lWELmAYDnaIEPxwO4y98aOFf
RPOl3RoxK4YNuFYgtmrkRM+DOqv1mlCug88m/tfTW4WU//uRD0nI/g59cN+1bufV
u6jcnSdToYhivbSGLkFDrU+J0HJTzhkpbqNhDQEGhRuZSX2GCkohFE5RMbnUko+k
VhDf0qzlPOGw9ohNH+JTXKn7oC1qpzFUHXoYMlf+xA0dP6n8dLiEarmX/OoLMFKB
HULoddeOWwiAcaoBU0NPqwX6L4DLrVJVo/Psy7/KT5LDTNioDv9axmm/SQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMVrrFoN1S+4cLPU73NZQIQhcivCMB8GA1UdIwQY
MBaAFFslkJ87lOVfXvM2on0nSn39DZayMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3lXUW56dVU1VjllOHphaWZTZEtmZjBObHJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9lMWIyMGYtNGQ2ZC00MGUwLWFmOGEt
M2YxN2NiY2JhNWNhLzEvV3lXUW56dVU1VjllOHphaWZTZEtmZjBObHJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi9lMWIyMGYtNGQ2ZC00MGUwLWFmOGEtM2YxN2NiY2JhNWNh
LzEvV3lXUW56dVU1VjllOHphaWZTZEtmZjBObHJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXPBFIPjr
9klOg2XkJkgbOpWKWzJ8/Ir2L6+wLWo5MUlqhrTwl+ckobULx+9mCrblqJp2icnx
2IYFWhaoHruKXRbVHM8eNJe+BckAHyElgdppIt4Gq/h8F6PZYO0brY5SC4wdigdv
+EZuaWcs7L+bLCDC2A4f+Xos8dZSg5yEu6w6cURgxVLXmKlYuSebXp4uMja8tH9I
iiLNcermmzXXBDOTzBGKSo7hHRqEpgr5JfFCK7S3nIx2ywno19PCeZof4FxOfBxE
bKDjO/qCA6BFLle1uuy7qgoMYfXVHfJo43NBJjGW549wv2AkF5ZB2nc+xuyvkn3F
eUpzpLmJuR1F3w==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:07 2025 by rpki-client