Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/8fe4db-8c5b-40f5-9360-e596e524cabe/1/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.mft
File:                     W3l_zYQzsfSJ-JEZSGL8Nr--9ms.mft (raw, json)
Hash identifier:          nH1CD7k6kVn4C4ks5c9zMc/UEe5JWQ8Doe0anwsA9n8=
Subject key identifier:   A8:4D:4A:E9:C9:CF:45:88:3E:DD:41:93:66:18:39:0B:C8:68:E2:51
Authority key identifier: 5B:79:7F:CD:84:33:B1:F4:89:F8:91:19:48:62:FC:36:BF:BE:F6:6B
Certificate issuer:       /CN=5b797fcd8433b1f489f891194862fc36bfbef66b
Certificate serial:       0199FCC65BC6F3FC7CB49644BB446978F400
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/8fe4db-8c5b-40f5-9360-e596e524cabe/1/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.mft
Manifest number:          024F
Signing time:             Sun 19 Oct 2025 14:01:22 +0000
Manifest this update:     Sun 19 Oct 2025 14:01:22 +0000
Manifest next update:     Mon 20 Oct 2025 14:01:22 +0000
Files and hashes:         1: 1-DmKYgnKcK0PXEAQVbF_OKc3-qY.roa (hash: A2ZK2n/AK9OAPtM9+Qchv9vt+I10xrYcK4O013Ux+Cs=)
                          2: W3l_zYQzsfSJ-JEZSGL8Nr--9ms.crl (hash: Q/Q8cnAOou6zqMfFO7CE2FXe7SDMCWYl436D20HewW4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/8fe4db-8c5b-40f5-9360-e596e524cabe/1/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/8fe4db-8c5b-40f5-9360-e596e524cabe/1/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:c6:5b:c6:f3:fc:7c:b4:96:44:bb:44:69:78:f4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b797fcd8433b1f489f891194862fc36bfbef66b
        Validity
            Not Before: Oct 19 14:01:22 2025 GMT
            Not After : Oct 20 14:01:22 2025 GMT
        Subject: CN=a84d4ae9c9cf45883edd41936618390bc868e251
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:86:e3:7c:28:7f:43:69:71:64:ea:13:8f:8c:
                    ad:ca:e6:d0:44:89:60:71:4a:59:5a:df:ad:42:35:
                    f4:af:b3:8f:86:50:85:c9:13:b5:1b:62:15:e0:fa:
                    d7:96:9c:5a:78:68:2c:89:25:8b:2c:5f:2f:82:5c:
                    ff:21:c5:09:b2:00:72:af:ca:34:fe:36:91:4f:0a:
                    cb:b9:38:88:ce:ff:9d:a4:33:10:71:0f:a8:ad:f6:
                    23:d7:a3:9e:85:5b:8e:93:1f:12:7e:c0:0d:c7:e6:
                    43:23:d1:b5:2e:2f:a7:58:6c:3b:08:6c:27:d9:8b:
                    06:da:3a:fc:f7:07:0c:31:f3:66:77:89:80:f2:89:
                    55:58:86:97:1d:32:ba:6a:95:05:d2:34:fe:64:9e:
                    60:e0:a1:43:c7:9c:01:1d:c0:46:49:01:0a:ba:a2:
                    25:9e:c2:43:79:06:0c:a9:5b:97:2f:51:3c:d4:d0:
                    2b:7f:ca:e6:a1:75:25:e8:3d:f1:a8:76:04:a6:bd:
                    aa:a5:f3:1e:17:63:05:da:c4:a8:f2:85:68:89:5b:
                    28:c0:05:52:07:34:2d:4e:f6:70:f1:84:af:49:fc:
                    c5:8d:48:9e:63:cd:35:61:b4:f1:08:0b:3e:2a:8e:
                    3d:ec:68:69:af:9d:d1:1f:2e:1c:8e:94:b5:a3:1b:
                    1f:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:4D:4A:E9:C9:CF:45:88:3E:DD:41:93:66:18:39:0B:C8:68:E2:51
            X509v3 Authority Key Identifier:
                keyid:5B:79:7F:CD:84:33:B1:F4:89:F8:91:19:48:62:FC:36:BF:BE:F6:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/8fe4db-8c5b-40f5-9360-e596e524cabe/1/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/8fe4db-8c5b-40f5-9360-e596e524cabe/1/W3l_zYQzsfSJ-JEZSGL8Nr--9ms.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:3a:e3:bc:06:b3:95:5f:6a:01:1d:a7:d0:77:80:0b:2e:ac:
         db:c3:6a:61:66:c4:27:90:5a:bb:f9:cf:81:b5:4c:5c:62:87:
         ac:4c:45:ab:e3:00:02:b5:2f:b8:94:b8:c6:ee:66:19:e8:38:
         f8:b7:a0:5d:0e:05:35:36:f2:f0:95:8e:8f:95:6e:1b:4a:02:
         d5:b7:dd:fa:48:e5:ba:9b:0a:bb:7a:9f:72:74:24:04:d5:08:
         03:10:38:32:67:89:31:a4:42:c3:87:37:cf:c6:25:b5:4a:36:
         c7:98:02:49:d9:8d:85:28:85:68:21:9b:8e:6a:47:62:b9:3d:
         86:65:86:f8:31:5d:d3:d9:98:6f:b6:0a:7c:ee:53:b8:74:14:
         f1:87:ba:5a:ef:d6:9a:40:6f:37:a7:74:b6:e1:e3:3f:46:0d:
         aa:ee:51:51:2b:6e:6b:8c:83:7e:e3:63:27:98:67:e3:6f:1c:
         2a:a6:28:39:23:bf:f0:90:49:24:e7:ae:a5:57:10:48:dc:c8:
         21:3b:ab:4c:0f:8a:34:d4:6e:f8:19:d6:4f:fe:e3:ab:f1:49:
         b5:73:7e:66:f8:e0:c9:f2:e4:0e:da:a3:c9:f1:31:24:b8:91:
         09:be:13:96:77:28:52:87:4f:64:61:7e:80:bf:88:a5:a4:5b:
         eb:bd:60:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:27:05 2025 by rpki-client