Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/dcf976-007d-4542-b0e2-5f8fc707836a/1/WTiXF0-WdJDb9hidR53yyTcb9AQ.mft
File:                     WTiXF0-WdJDb9hidR53yyTcb9AQ.mft (raw, json)
Hash identifier:          hJRY4wYo6ALWJvI6ArtZi4zWh0cl/jqgXY83D8pEXCU=
Subject key identifier:   B9:14:DD:C1:97:E6:67:15:4F:36:65:D5:A3:33:18:93:78:F6:F8:13
Authority key identifier: 59:38:97:17:4F:96:74:90:DB:F6:18:9D:47:9D:F2:C9:37:1B:F4:04
Certificate issuer:       /CN=593897174f967490dbf6189d479df2c9371bf404
Certificate serial:       0199FDDA385CD199FC53968699A2158F11FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WTiXF0-WdJDb9hidR53yyTcb9AQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/dcf976-007d-4542-b0e2-5f8fc707836a/1/WTiXF0-WdJDb9hidR53yyTcb9AQ.mft
Manifest number:          0FF7
Signing time:             Sun 19 Oct 2025 19:02:40 +0000
Manifest this update:     Sun 19 Oct 2025 19:02:40 +0000
Manifest next update:     Mon 20 Oct 2025 19:02:40 +0000
Files and hashes:         1: Bb8ycOE7qhSFoSMHyD2xB85u_Z0.roa (hash: KcdCM+LEn+v24gkqqCtc8motwJZXGA9KFLUTB0+gGg8=)
                          2: WTiXF0-WdJDb9hidR53yyTcb9AQ.crl (hash: W8Hhahze/gCBJwYtqzJmf1pPfqChxjt8jfS/NFR/6uU=)
                          3: g-54cvk5hO2Au4tfyjhzhnHoH90.roa (hash: Q49mbpUpWnr28zAxYWF00PO3wsoqtVE5pDkqJmiOpho=)
                          4: kTl30QOsbrDzk_mb8ECK1dAhV14.roa (hash: ktEj7/KQdl7DWD89NCLPeaAfOqTe9FU+2FvlPHr9TVM=)
                          5: x4O9V3tAmzZjxZHKXXKdfDf1aNY.roa (hash: F4vKg2iqkGQkTay3EP9VXjOjSKkwkZAg3JC6CDhOzYc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/dcf976-007d-4542-b0e2-5f8fc707836a/1/WTiXF0-WdJDb9hidR53yyTcb9AQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/dcf976-007d-4542-b0e2-5f8fc707836a/1/WTiXF0-WdJDb9hidR53yyTcb9AQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WTiXF0-WdJDb9hidR53yyTcb9AQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:da:38:5c:d1:99:fc:53:96:86:99:a2:15:8f:11:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=593897174f967490dbf6189d479df2c9371bf404
        Validity
            Not Before: Oct 19 19:02:40 2025 GMT
            Not After : Oct 20 19:02:40 2025 GMT
        Subject: CN=b914ddc197e667154f3665d5a333189378f6f813
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:5e:b3:f9:dc:6c:1c:ef:be:99:d4:c6:07:92:
                    08:b6:96:ea:7d:ef:0a:fa:b8:79:d3:72:af:27:ca:
                    b4:ab:d3:dc:dd:5a:41:cd:1a:67:fe:cf:a7:cb:dc:
                    0d:c5:67:cc:f4:1f:46:f4:35:da:17:b8:14:fa:ba:
                    4b:f5:d2:02:b2:53:c3:af:b5:63:f4:ad:2e:27:07:
                    5a:92:6e:9d:e8:d9:4e:9a:95:c9:df:c8:4c:57:1a:
                    55:19:12:83:2e:eb:b3:c6:13:e7:3b:f6:b1:c3:28:
                    9c:24:5f:bb:9e:34:96:68:40:1e:f5:60:22:3b:e6:
                    b0:7a:7b:6f:7c:42:04:94:3a:42:30:8f:b0:3f:2b:
                    d8:c3:fc:f2:aa:9f:89:d1:e4:00:6d:5e:bd:64:4e:
                    a2:2d:06:83:ff:fb:e9:64:e6:5c:86:50:d9:49:7c:
                    ae:8a:bf:ec:2f:82:74:76:0b:38:00:82:bd:f0:5e:
                    09:0f:21:10:f6:f8:28:10:5c:a1:9b:6a:0e:a3:50:
                    2a:9d:21:e3:f2:54:20:62:c6:7d:05:84:53:9f:b5:
                    42:07:74:c0:49:1a:1c:eb:c9:7e:1a:93:31:a2:48:
                    7f:17:6f:fb:42:d4:35:1d:37:5c:ed:e8:a6:db:be:
                    b7:91:7c:3f:9a:6e:f6:76:8a:05:22:ed:10:36:a2:
                    a7:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:14:DD:C1:97:E6:67:15:4F:36:65:D5:A3:33:18:93:78:F6:F8:13
            X509v3 Authority Key Identifier:
                keyid:59:38:97:17:4F:96:74:90:DB:F6:18:9D:47:9D:F2:C9:37:1B:F4:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WTiXF0-WdJDb9hidR53yyTcb9AQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dcf976-007d-4542-b0e2-5f8fc707836a/1/WTiXF0-WdJDb9hidR53yyTcb9AQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dcf976-007d-4542-b0e2-5f8fc707836a/1/WTiXF0-WdJDb9hidR53yyTcb9AQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:cc:c3:f3:54:08:54:d1:92:60:a3:7b:24:45:34:67:03:b8:
         ce:af:ad:f0:4d:57:b4:e7:5a:20:82:86:97:b8:a4:a1:f2:ee:
         63:76:0b:e2:13:48:14:a2:90:72:6b:f7:ec:07:fe:1a:9e:3d:
         97:bd:b9:97:27:42:dd:1f:20:0f:bf:70:0a:d7:a7:8f:0c:b8:
         79:37:c9:79:e3:66:22:3f:c3:ec:d5:7b:82:95:70:b0:84:c0:
         d0:4f:49:77:ed:90:20:42:1f:a4:a2:3d:e7:b5:ae:60:dc:5d:
         a3:b0:de:da:6c:67:78:1b:fe:ee:35:f1:7d:8e:4b:58:fd:f5:
         0d:b7:04:ab:b4:1b:33:76:6c:da:66:fd:3f:d3:26:e1:fa:17:
         12:78:22:fd:d1:05:67:2e:ec:c2:e4:a1:47:07:9a:40:df:9c:
         ef:37:73:ad:2a:07:ec:05:f0:bf:8c:8c:cd:74:ef:e7:a6:15:
         76:fb:db:cc:7c:21:30:3a:dd:9d:5d:2e:fe:ea:75:5a:0b:4b:
         e4:03:f9:e1:9b:85:84:3a:c3:c4:07:bf:f4:17:c6:4f:38:d6:
         41:73:08:92:1d:57:4e:e6:2f:29:a7:59:63:80:59:7e:12:b5:
         41:57:63:9c:89:c3:b4:35:98:a3:6a:2a:b4:82:1d:28:80:0b:
         0e:b2:a7:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:41:05 2025 by rpki-client