Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/efc172-4b94-4c55-9d36-08111103ccf9/1/wDwpVm71n88akNgtCK4QxjD5S4g.mft
File:                     wDwpVm71n88akNgtCK4QxjD5S4g.mft (raw, json)
Hash identifier:          tpfuZa8u/uHN7hdhY/Zwm76gMZqdJJY1xFMFfMBxz08=
Subject key identifier:   C8:24:2A:2B:BA:77:A5:BD:E0:DB:0A:00:CD:4C:9E:C9:2B:22:98:03
Authority key identifier: C0:3C:29:56:6E:F5:9F:CF:1A:90:D8:2D:08:AE:10:C6:30:F9:4B:88
Certificate issuer:       /CN=c03c29566ef59fcf1a90d82d08ae10c630f94b88
Certificate serial:       0199FCFD988319AAF1AFE1024DF41D14361B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wDwpVm71n88akNgtCK4QxjD5S4g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/efc172-4b94-4c55-9d36-08111103ccf9/1/wDwpVm71n88akNgtCK4QxjD5S4g.mft
Manifest number:          0D49
Signing time:             Sun 19 Oct 2025 15:01:41 +0000
Manifest this update:     Sun 19 Oct 2025 15:01:41 +0000
Manifest next update:     Mon 20 Oct 2025 15:01:41 +0000
Files and hashes:         1: uzj0M_v78Wm5cOmGNR7lI0TOqoE.roa (hash: Cc5JUHGDDrTaWZVeYu5I0BROPsTv83fnO7z2DC5tGzs=)
                          2: wDwpVm71n88akNgtCK4QxjD5S4g.crl (hash: BAwBWFpZfkgR7EnK6RnkAy4YM3ekyxU6ky7zYPDubOQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/efc172-4b94-4c55-9d36-08111103ccf9/1/wDwpVm71n88akNgtCK4QxjD5S4g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/efc172-4b94-4c55-9d36-08111103ccf9/1/wDwpVm71n88akNgtCK4QxjD5S4g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wDwpVm71n88akNgtCK4QxjD5S4g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:fd:98:83:19:aa:f1:af:e1:02:4d:f4:1d:14:36:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c03c29566ef59fcf1a90d82d08ae10c630f94b88
        Validity
            Not Before: Oct 19 15:01:41 2025 GMT
            Not After : Oct 20 15:01:41 2025 GMT
        Subject: CN=c8242a2bba77a5bde0db0a00cd4c9ec92b229803
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:9d:1d:d6:27:b4:96:ad:b9:51:03:c6:55:f5:
                    07:06:f2:79:0b:ec:8e:e5:77:92:2b:f2:a8:12:46:
                    8f:8a:23:84:e5:82:9f:75:39:df:ec:66:4b:6f:de:
                    e0:8e:a2:03:d1:81:89:81:ef:21:5f:f5:87:04:a7:
                    02:b1:c3:7c:bf:2b:da:ef:f0:fc:50:74:d4:34:68:
                    a0:52:4f:5d:92:71:99:94:a2:35:8c:5d:22:4a:cb:
                    40:3f:85:94:44:d4:1a:ab:1c:76:ca:83:bb:52:a7:
                    38:a7:44:62:a7:3b:49:89:9e:5a:44:29:fa:a0:91:
                    25:58:92:bb:c8:3e:9c:da:a7:a7:d6:d1:55:1c:80:
                    8c:d7:ca:d3:fa:6f:f2:fa:88:d7:7c:29:ec:2a:a0:
                    66:49:88:dd:23:f0:40:11:bf:e6:0b:8a:d6:96:ac:
                    56:cb:ce:f5:48:07:69:56:ad:48:c9:5a:67:a6:2d:
                    59:85:8f:94:33:25:d8:fb:e4:bb:e5:b6:cc:58:6f:
                    b6:c4:9f:dd:af:e9:b4:97:a7:47:82:54:b6:96:93:
                    b8:4a:3b:35:6d:14:6a:39:34:a0:b6:cf:c1:d3:6e:
                    cb:42:36:c8:e1:7d:79:5e:0c:17:cf:eb:9d:59:bf:
                    71:98:42:1b:d4:fd:bd:5e:67:75:bf:6f:2a:f4:23:
                    6a:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:24:2A:2B:BA:77:A5:BD:E0:DB:0A:00:CD:4C:9E:C9:2B:22:98:03
            X509v3 Authority Key Identifier:
                keyid:C0:3C:29:56:6E:F5:9F:CF:1A:90:D8:2D:08:AE:10:C6:30:F9:4B:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wDwpVm71n88akNgtCK4QxjD5S4g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/efc172-4b94-4c55-9d36-08111103ccf9/1/wDwpVm71n88akNgtCK4QxjD5S4g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/efc172-4b94-4c55-9d36-08111103ccf9/1/wDwpVm71n88akNgtCK4QxjD5S4g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:34:c9:89:a2:55:b9:93:42:b9:7b:b9:0e:68:14:38:4a:64:
         03:41:c7:91:3c:11:a1:76:4b:ad:8b:74:c3:9a:20:d8:ee:24:
         e7:35:b2:15:d0:ae:58:4a:ab:0d:21:f6:60:02:4f:95:f4:61:
         f7:dc:20:0e:d8:5d:91:90:fd:d1:d9:46:1d:5b:f8:5f:41:72:
         62:3d:db:5a:7f:8d:94:86:63:44:48:a4:fe:45:b2:70:95:07:
         19:10:71:ec:2b:93:fd:0d:e9:ce:da:8a:76:c5:aa:34:2e:0e:
         0d:53:fb:84:d2:a2:25:24:f0:11:56:db:2b:0e:65:36:ba:c0:
         b7:88:35:bb:a6:da:79:49:32:6c:19:df:fb:4d:90:8e:62:ae:
         b2:50:92:eb:05:24:51:22:b9:17:1d:57:07:18:84:a9:d9:17:
         92:32:60:d1:56:68:ea:47:a1:ea:df:df:aa:49:22:d5:37:88:
         8b:78:a6:c2:3e:77:30:b3:ff:d5:af:5e:55:29:48:c4:19:34:
         5c:d7:8f:07:78:c8:75:f9:29:ed:a9:90:78:90:48:2f:d1:49:
         00:9d:d5:3e:4c:9d:d7:14:ba:1e:96:ed:4f:3a:47:bb:ae:18:
         bc:71:4e:43:79:5d:53:06:19:b2:94:83:e6:82:53:47:db:ce:
         90:80:48:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:23:58 2025 by rpki-client