Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.mft
File:                     CHWRWN4jS3VLcVDyGTMJbBCUqsQ.mft (raw, json)
Hash identifier:          Y07QvJtzEorJaAtH4TtJdEp4ynF8Nb7rjZIhEuAKCQk=
Subject key identifier:   3F:1A:23:98:71:AF:47:0E:9F:0F:AA:2A:3F:EA:35:C0:18:53:F9:AA
Authority key identifier: 08:75:91:58:DE:23:4B:75:4B:71:50:F2:19:33:09:6C:10:94:AA:C4
Certificate issuer:       /CN=08759158de234b754b7150f21933096c1094aac4
Certificate serial:       0199FC8F59AB779DF2110A27F92737EBE082
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.mft
Manifest number:          16E4
Signing time:             Sun 19 Oct 2025 13:01:16 +0000
Manifest this update:     Sun 19 Oct 2025 13:01:16 +0000
Manifest next update:     Mon 20 Oct 2025 13:01:16 +0000
Files and hashes:         1: 1-J2GOXt84t6tSsUvN6SzYODsM14.roa (hash: z8eYv5B023TelbPYrwzQ1iKaFGt6xVRZj+H2E/7ShQM=)
                          2: 1-iaMGqOGDTfsptPZeicjHn71QUo.roa (hash: 2s7EHYWZQ9Rhs5vjESBZQJAFQSchcccurTuwLHKrfW8=)
                          3: CHWRWN4jS3VLcVDyGTMJbBCUqsQ.crl (hash: M0/H8DR3o3HVc7BQGoDTfCbBdMiQoIAAFmsBQg35KJE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:8f:59:ab:77:9d:f2:11:0a:27:f9:27:37:eb:e0:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08759158de234b754b7150f21933096c1094aac4
        Validity
            Not Before: Oct 19 13:01:16 2025 GMT
            Not After : Oct 20 13:01:16 2025 GMT
        Subject: CN=3f1a239871af470e9f0faa2a3fea35c01853f9aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:26:b3:a5:5e:fa:04:4e:39:b6:10:5d:5f:10:
                    92:9b:59:ed:f3:0e:3e:14:66:9d:70:cc:8c:6f:14:
                    26:e7:49:69:be:c2:ba:e1:b4:eb:4f:31:23:06:a7:
                    20:a5:d1:ef:16:12:d8:35:5e:d8:07:b9:24:96:73:
                    7d:54:1d:f2:8d:88:56:e5:d6:3e:b6:f0:ed:ba:81:
                    98:0a:24:9c:cd:5c:66:1d:ee:d4:8d:51:02:3f:29:
                    86:43:cd:9c:37:e2:4f:34:c2:c7:ab:8f:0f:7b:cd:
                    65:ad:65:0e:0b:ec:32:c1:fd:a8:92:14:0f:87:34:
                    68:a4:d1:25:67:b6:dc:4d:77:11:fe:80:31:1f:f8:
                    be:9e:eb:5c:78:ef:4e:b2:2b:f6:25:4f:8c:67:d7:
                    29:bb:89:29:13:a2:0c:1d:30:94:b5:f4:8a:2e:fb:
                    c2:be:a0:fe:7c:df:a4:26:9f:57:5c:ad:bf:ca:be:
                    c7:51:47:bd:19:1c:9d:f7:e9:05:41:53:45:f5:54:
                    08:53:f5:4e:d8:ca:8d:1b:42:e5:88:1f:a0:d5:5b:
                    7b:e5:46:f7:6f:c3:0f:b7:f8:59:33:df:f2:53:d5:
                    f6:60:b1:93:1f:fd:2b:ca:0e:d1:ed:50:d2:0f:94:
                    7f:ef:33:7e:9a:ed:54:97:1b:f1:e6:cc:d9:f3:46:
                    c0:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:1A:23:98:71:AF:47:0E:9F:0F:AA:2A:3F:EA:35:C0:18:53:F9:AA
            X509v3 Authority Key Identifier:
                keyid:08:75:91:58:DE:23:4B:75:4B:71:50:F2:19:33:09:6C:10:94:AA:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6a7032-e80e-4ba7-b724-cd9eccf93b31/1/CHWRWN4jS3VLcVDyGTMJbBCUqsQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:02:25:16:46:d3:55:84:e9:6a:cc:8f:ca:83:19:c2:a1:e6:
         a0:4c:c7:13:18:9d:7d:fe:05:9a:04:0a:73:ee:48:25:d5:5a:
         82:b8:4d:8e:b4:e4:c4:38:84:9a:07:82:eb:35:77:98:cf:74:
         46:48:2b:ed:fb:9c:4a:d2:29:74:18:ff:09:1d:2f:f1:91:10:
         7a:47:c1:b8:81:0f:73:27:ab:5a:fa:ed:7c:0e:cf:08:1d:ac:
         f2:2c:8d:80:81:21:69:e3:8b:2a:b5:e3:af:c6:c1:80:30:f5:
         ff:2f:27:21:9a:73:9c:67:c4:fc:97:2a:57:29:2f:09:61:18:
         63:bb:ee:5b:7a:85:a9:9c:8b:1d:ac:12:93:b4:0c:8c:df:86:
         05:0e:0f:c0:e6:ed:3c:79:29:56:46:4e:09:52:68:1c:02:b3:
         19:14:74:f7:2c:b0:88:79:20:d1:b0:12:a3:25:77:fc:bd:4c:
         b0:50:00:53:2c:41:e4:4d:53:ad:c2:f6:47:74:ef:7f:67:fa:
         f9:13:20:e3:46:59:68:81:4d:f2:fd:d0:71:22:31:4b:87:95:
         ab:c5:ed:18:9e:f5:f3:39:e8:34:93:dc:ad:27:df:df:96:ef:
         50:41:79:21:f6:b3:39:e7:c9:68:a3:4c:b9:e5:cd:e7:3d:a9:
         7d:df:fd:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:22:56 2025 by rpki-client