Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/00a2fc-c872-44f6-9ce4-48438202dbab/1/wU7kzo087uI-Amb8r1RIIK5BB4g.mft
File:                     wU7kzo087uI-Amb8r1RIIK5BB4g.mft (raw, json)
Hash identifier:          CILUK+bY/SeJGICVyr5RxrG/kfqxQ1nqv6UQ+PMP63A=
Subject key identifier:   30:94:65:52:E1:80:B2:10:29:FB:A8:74:3F:38:FB:58:66:26:42:77
Authority key identifier: C1:4E:E4:CE:8D:3C:EE:E2:3E:02:66:FC:AF:54:48:20:AE:41:07:88
Certificate issuer:       /CN=c14ee4ce8d3ceee23e0266fcaf544820ae410788
Certificate serial:       0199FE473825A802693A6198D668DBB75F9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wU7kzo087uI-Amb8r1RIIK5BB4g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/00a2fc-c872-44f6-9ce4-48438202dbab/1/wU7kzo087uI-Amb8r1RIIK5BB4g.mft
Manifest number:          033E
Signing time:             Sun 19 Oct 2025 21:01:44 +0000
Manifest this update:     Sun 19 Oct 2025 21:01:44 +0000
Manifest next update:     Mon 20 Oct 2025 21:01:44 +0000
Files and hashes:         1: StpUpn9lX23TO-Oe-4PI79KxNG0.roa (hash: Y4gPgVsX/dvV/I4lGCjA++A6e1J5MarmPPrWMNyloHc=)
                          2: wU7kzo087uI-Amb8r1RIIK5BB4g.crl (hash: bwjWLOAor3YDfpJtdfLc/ohxV5jD5/Cxa/azWtOO5+4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/00a2fc-c872-44f6-9ce4-48438202dbab/1/wU7kzo087uI-Amb8r1RIIK5BB4g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/00a2fc-c872-44f6-9ce4-48438202dbab/1/wU7kzo087uI-Amb8r1RIIK5BB4g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wU7kzo087uI-Amb8r1RIIK5BB4g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fe:47:38:25:a8:02:69:3a:61:98:d6:68:db:b7:5f:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c14ee4ce8d3ceee23e0266fcaf544820ae410788
        Validity
            Not Before: Oct 19 21:01:44 2025 GMT
            Not After : Oct 20 21:01:44 2025 GMT
        Subject: CN=30946552e180b21029fba8743f38fb5866264277
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:5b:bd:d8:4b:e7:9b:51:4b:79:41:3c:3d:d9:
                    63:29:17:25:71:6c:51:88:5a:c4:99:df:18:80:b9:
                    b6:4b:f7:41:01:ac:21:e6:ed:73:19:07:75:d1:af:
                    38:21:60:05:74:3b:2a:63:08:56:db:24:07:1e:91:
                    aa:8b:b2:6d:16:81:54:c5:ff:a8:3d:27:47:04:5e:
                    d3:2f:f7:15:85:62:63:2e:e0:cf:7a:47:ab:53:3b:
                    a2:62:39:83:63:99:d5:0a:3c:05:5b:12:ec:66:c9:
                    ce:21:96:15:df:77:14:c6:f2:d9:e4:a3:1a:bb:ba:
                    b6:4d:91:82:e4:cc:d2:50:be:6e:95:f8:65:41:af:
                    fc:d0:9f:94:07:d0:b8:26:0d:a6:8e:9e:dc:87:70:
                    0e:33:09:45:8a:ba:06:cd:04:bb:40:fc:a1:dc:ce:
                    62:96:f3:06:86:ab:08:f7:0e:2f:95:5c:85:04:79:
                    3c:17:20:a6:5d:61:d2:e1:00:c2:eb:7a:7f:3f:39:
                    9b:d3:94:f5:55:8e:08:0e:bc:2a:f2:73:a0:5d:6b:
                    d6:b0:15:52:db:60:5a:08:90:24:c6:db:eb:dc:0b:
                    06:8e:d2:b0:ec:e8:f5:f4:45:cd:34:7a:48:4f:c3:
                    ab:07:aa:70:33:43:2c:67:28:1f:cc:92:ed:6d:20:
                    52:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:94:65:52:E1:80:B2:10:29:FB:A8:74:3F:38:FB:58:66:26:42:77
            X509v3 Authority Key Identifier:
                keyid:C1:4E:E4:CE:8D:3C:EE:E2:3E:02:66:FC:AF:54:48:20:AE:41:07:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wU7kzo087uI-Amb8r1RIIK5BB4g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/00a2fc-c872-44f6-9ce4-48438202dbab/1/wU7kzo087uI-Amb8r1RIIK5BB4g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/00a2fc-c872-44f6-9ce4-48438202dbab/1/wU7kzo087uI-Amb8r1RIIK5BB4g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:a9:43:6f:62:59:a3:28:40:42:69:e1:70:60:37:f8:f3:38:
         45:a1:a3:ff:bb:91:25:e7:18:c3:e5:1a:c5:04:04:ae:13:cb:
         01:29:01:d2:36:0c:05:43:0c:87:df:76:05:4d:e8:95:23:d8:
         63:67:a6:4f:2c:14:84:63:fa:cc:0a:c2:72:7f:14:6d:d1:40:
         3a:2c:74:2c:d4:ef:9f:c0:cf:cc:f8:e1:07:82:d7:45:f6:50:
         6e:09:a4:ce:3d:12:f3:01:0b:dc:29:9d:83:25:92:32:dd:db:
         72:20:9f:92:5b:80:bc:4b:3e:57:4e:82:7f:a0:3d:6e:44:bc:
         db:df:99:38:95:20:2b:72:4c:31:39:40:77:00:7d:f1:76:79:
         1a:d8:76:68:64:d0:4f:4f:c4:25:3f:0f:af:c5:35:52:6e:45:
         cc:af:49:82:03:e9:05:8a:82:e0:49:3f:e9:fc:ee:70:94:c5:
         d5:48:43:8a:c5:bb:c3:88:5b:0c:a0:bf:d7:24:33:80:b7:07:
         15:61:fb:32:5b:0b:55:4c:a7:60:da:b9:25:ce:d5:98:96:90:
         30:78:80:c1:9b:2d:82:95:93:ae:e1:b9:fc:45:09:e3:8c:9e:
         01:ad:7d:bc:03:41:a9:a4:16:c7:bd:09:20:fc:d5:3f:a7:4a:
         0c:f8:12:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:41:21 2025 by rpki-client