Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/422a4c-8394-46b4-aa18-d1fbe5a91d70/1/wLpQ_KM7GA1oQ25-8Mv2kEuvRdQ.mft
File:                     wLpQ_KM7GA1oQ25-8Mv2kEuvRdQ.mft (raw, json)
Hash identifier:          SKKmXDCGN5USGVfGBpAKKGNCPSjYiP+BnpkrNR4JpAQ=
Subject key identifier:   61:3F:71:42:F2:26:33:10:A4:64:6A:EB:9E:87:97:78:07:DC:19:66
Authority key identifier: C0:BA:50:FC:A3:3B:18:0D:68:43:6E:7E:F0:CB:F6:90:4B:AF:45:D4
Certificate issuer:       /CN=c0ba50fca33b180d68436e7ef0cbf6904baf45d4
Certificate serial:       0199FC58F397E83C15F08FD4B5EA79BF18AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wLpQ_KM7GA1oQ25-8Mv2kEuvRdQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/422a4c-8394-46b4-aa18-d1fbe5a91d70/1/wLpQ_KM7GA1oQ25-8Mv2kEuvRdQ.mft
Manifest number:          06A7
Signing time:             Sun 19 Oct 2025 12:01:51 +0000
Manifest this update:     Sun 19 Oct 2025 12:01:51 +0000
Manifest next update:     Mon 20 Oct 2025 12:01:51 +0000
Files and hashes:         1: RpRW6TZvmlJBGznF3-hnJMYz2K4.roa (hash: xykvfoJNE09ErVanuSOIuIu5xVg3V0n12SrhzPJXXrg=)
                          2: wLpQ_KM7GA1oQ25-8Mv2kEuvRdQ.crl (hash: 1mc8ZjZHP45EsvcbSdgxp4TOqidcgTS0Bm97c3EMhCg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/422a4c-8394-46b4-aa18-d1fbe5a91d70/1/wLpQ_KM7GA1oQ25-8Mv2kEuvRdQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/422a4c-8394-46b4-aa18-d1fbe5a91d70/1/wLpQ_KM7GA1oQ25-8Mv2kEuvRdQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wLpQ_KM7GA1oQ25-8Mv2kEuvRdQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:58:f3:97:e8:3c:15:f0:8f:d4:b5:ea:79:bf:18:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0ba50fca33b180d68436e7ef0cbf6904baf45d4
        Validity
            Not Before: Oct 19 12:01:51 2025 GMT
            Not After : Oct 20 12:01:51 2025 GMT
        Subject: CN=613f7142f2263310a4646aeb9e87977807dc1966
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:78:12:04:27:9a:9b:bb:5c:e6:79:a9:ef:7a:
                    6d:8f:64:07:40:c4:09:f3:b1:3c:03:61:ea:3e:08:
                    32:78:f1:cc:94:ac:f9:61:50:3a:1e:bf:e8:8e:14:
                    58:84:65:d4:80:17:31:d4:8a:09:3f:0f:c9:d0:fa:
                    a3:82:f7:6f:6e:12:e5:19:05:82:eb:4e:6d:44:7a:
                    78:fa:ce:d7:f5:52:24:b0:70:22:ea:fa:f2:ec:b2:
                    f5:83:70:5a:6f:a1:15:e1:1f:6a:7b:ef:88:98:9a:
                    18:c5:4e:1a:59:a2:34:25:08:e7:3a:be:3f:af:70:
                    8a:4b:fa:5a:55:ad:f8:f7:75:09:ed:08:af:74:f5:
                    0a:dc:e4:a5:b4:87:be:8d:6f:20:07:9c:c0:36:c3:
                    70:32:41:80:af:30:fa:54:6c:a2:31:c0:83:90:c4:
                    12:c6:64:8d:19:f4:ea:26:33:16:7c:23:bf:13:f6:
                    35:e8:6a:8c:47:58:96:46:ee:7d:bc:dc:bd:d3:3e:
                    2c:c5:66:9b:3f:d7:f2:7d:99:45:79:71:61:c4:0e:
                    99:1f:bc:43:b8:3a:83:5d:e5:20:3b:d2:ea:f9:57:
                    16:34:94:0c:34:46:cf:5d:dc:5b:4f:fe:85:97:63:
                    d4:ab:24:15:ce:14:fd:f0:5f:8b:e9:50:d3:45:8f:
                    bd:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:3F:71:42:F2:26:33:10:A4:64:6A:EB:9E:87:97:78:07:DC:19:66
            X509v3 Authority Key Identifier:
                keyid:C0:BA:50:FC:A3:3B:18:0D:68:43:6E:7E:F0:CB:F6:90:4B:AF:45:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wLpQ_KM7GA1oQ25-8Mv2kEuvRdQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/422a4c-8394-46b4-aa18-d1fbe5a91d70/1/wLpQ_KM7GA1oQ25-8Mv2kEuvRdQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/422a4c-8394-46b4-aa18-d1fbe5a91d70/1/wLpQ_KM7GA1oQ25-8Mv2kEuvRdQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:ae:11:e0:02:dd:d4:4a:b8:c1:62:1a:6c:4a:83:b3:12:3c:
         8c:38:77:81:39:9b:57:3e:f6:10:ef:26:b1:7d:f8:9e:ec:90:
         70:42:36:51:e5:b8:66:3a:a5:62:d7:24:14:de:57:fc:f9:44:
         f0:a1:2f:29:3f:cb:f9:79:3f:dc:92:a5:73:d0:60:5f:6e:c0:
         7a:94:eb:de:a6:7f:2a:56:50:4f:b1:cf:e6:33:27:c3:cc:d2:
         fc:2c:23:b2:5b:4a:53:d7:22:9e:60:c7:05:26:48:e6:08:bf:
         af:f7:f3:63:9d:5c:7b:0b:6c:02:92:15:0e:a0:4d:2f:99:a5:
         42:bb:86:21:50:f4:17:d4:38:ab:47:58:f7:40:b5:3b:99:ac:
         6b:49:44:bb:64:6d:06:78:15:8b:ab:41:c2:5e:de:5e:42:5b:
         58:a6:01:3f:ea:ba:47:b9:62:7c:42:07:67:01:36:e3:29:76:
         f1:32:46:c3:e8:36:ff:21:f8:3c:de:ae:01:2a:ae:3e:50:46:
         88:b4:de:e5:c8:16:a7:65:78:8e:2c:cc:a6:5e:10:53:fb:5a:
         bd:0a:3d:af:5e:64:73:0e:fb:5d:b3:8a:e8:91:20:61:d5:d8:
         ac:ad:24:52:45:53:be:65:f3:f5:39:42:91:3f:8f:77:9e:30:
         20:a9:c8:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:28:38 2025 by rpki-client