Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/w8BZHi60nQVZ5vzn7iqoHw9Zum8.mft
File:                     w8BZHi60nQVZ5vzn7iqoHw9Zum8.mft (raw, json)
Hash identifier:          M0Uh6IsdmIw/W8eIrliEA8Y11msqMc+JFrwrgMcjF1g=
Subject key identifier:   DF:BE:41:05:77:63:6A:F4:27:81:50:46:E5:3B:E7:56:37:29:C0:64
Authority key identifier: C3:C0:59:1E:2E:B4:9D:05:59:E6:FC:E7:EE:2A:A8:1F:0F:59:BA:6F
Certificate issuer:       /CN=c3c0591e2eb49d0559e6fce7ee2aa81f0f59ba6f
Certificate serial:       0199FB7CBA5A930CF975C09437B73DF409C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w8BZHi60nQVZ5vzn7iqoHw9Zum8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/w8BZHi60nQVZ5vzn7iqoHw9Zum8.mft
Manifest number:          16EE
Signing time:             Sun 19 Oct 2025 08:01:19 +0000
Manifest this update:     Sun 19 Oct 2025 08:01:19 +0000
Manifest next update:     Mon 20 Oct 2025 08:01:19 +0000
Files and hashes:         1: 2BUGtHga-91WOayxMZ7EN3sAoUE.roa (hash: 40eNzoOdvf9iy0CU470Iq6VAmpCnU36Mg3hoCFP9r9Q=)
                          2: Ka5Exl1GeddcELNpCklBpS5TlPs.roa (hash: kRYcEd/x8/mlJ+CtYhq56IHy4jqYQVlovD2KG8xYqY4=)
                          3: i5mGJT0yJZDnIoQ1wNKAWKtKyaQ.roa (hash: RYHnkpcFD3LGUlEQEfMbI20B/0yaDUu4RMrbiJV8nWc=)
                          4: w8BZHi60nQVZ5vzn7iqoHw9Zum8.crl (hash: lKGatinKX5M7stXnTtDtk1CcsZQ4M/QAc/D+TUKdsjY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/w8BZHi60nQVZ5vzn7iqoHw9Zum8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/w8BZHi60nQVZ5vzn7iqoHw9Zum8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w8BZHi60nQVZ5vzn7iqoHw9Zum8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 08:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:7c:ba:5a:93:0c:f9:75:c0:94:37:b7:3d:f4:09:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3c0591e2eb49d0559e6fce7ee2aa81f0f59ba6f
        Validity
            Not Before: Oct 19 08:01:19 2025 GMT
            Not After : Oct 20 08:01:19 2025 GMT
        Subject: CN=dfbe410577636af427815046e53be7563729c064
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:cf:b8:2e:40:12:ff:c0:00:5e:58:a0:6c:86:
                    27:75:10:92:6e:8b:70:32:58:16:55:22:42:3f:25:
                    1f:2d:01:e9:e1:15:a2:77:47:01:d1:29:f3:fe:82:
                    28:1a:59:8a:a6:6d:3c:25:2d:fb:34:04:c3:e1:41:
                    71:ca:1c:45:18:2b:cd:d5:f8:a7:a7:23:a2:28:f5:
                    79:3f:95:06:08:7d:a8:04:11:6a:eb:e2:20:38:1b:
                    f2:db:23:c3:95:81:7d:87:fd:29:6e:85:81:cf:bc:
                    84:65:b4:86:3e:0c:be:95:1f:59:ba:fb:d6:d8:bc:
                    52:5e:19:61:ec:51:7b:a8:b7:89:33:e3:35:c2:97:
                    02:58:bf:6f:65:f0:fa:d5:f3:db:32:d1:af:04:11:
                    a1:9e:47:02:50:b6:08:0e:d3:c3:76:ad:c9:0b:40:
                    a3:c8:62:8c:df:b1:32:c4:02:5e:3d:b9:dd:83:0c:
                    cd:87:6f:46:5c:85:df:29:8f:9a:2e:eb:1a:b7:da:
                    d3:65:36:dd:24:ca:13:b4:cb:9d:de:b7:58:65:65:
                    1f:08:a3:0b:da:1e:28:56:2c:86:9c:5d:b3:24:ae:
                    d9:49:5a:e2:b2:e7:62:18:e0:e2:ed:c1:7a:ab:85:
                    41:a7:af:1b:04:de:ca:a5:31:1c:2a:4f:6e:3c:42:
                    d4:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:BE:41:05:77:63:6A:F4:27:81:50:46:E5:3B:E7:56:37:29:C0:64
            X509v3 Authority Key Identifier:
                keyid:C3:C0:59:1E:2E:B4:9D:05:59:E6:FC:E7:EE:2A:A8:1F:0F:59:BA:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8BZHi60nQVZ5vzn7iqoHw9Zum8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/w8BZHi60nQVZ5vzn7iqoHw9Zum8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/w8BZHi60nQVZ5vzn7iqoHw9Zum8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:18:b8:05:26:a3:85:1a:4f:54:84:a4:93:fa:79:8e:ad:f7:
         fc:f7:78:bb:ac:05:9a:b6:2f:80:51:bc:1e:38:a1:d6:77:46:
         15:e3:da:7c:2f:a0:e3:d0:a9:50:70:73:fb:93:13:cb:2b:1c:
         3e:8e:dc:59:b7:0c:44:1b:27:37:45:6d:dc:64:12:d3:07:37:
         5d:ed:a4:c3:31:92:e8:42:61:76:88:9e:8e:17:aa:80:9a:d3:
         a8:b9:7c:c0:fd:8f:89:24:89:38:37:cd:96:90:9c:3e:10:07:
         d5:51:09:12:f9:20:c4:5b:12:db:d5:13:eb:6e:87:ea:0d:5b:
         54:98:4f:96:6c:8c:30:87:73:82:6a:3f:77:37:68:70:05:db:
         ff:ae:d2:57:a0:15:7f:d0:9b:51:64:71:73:97:f9:5e:61:b3:
         04:be:96:32:aa:36:89:59:35:54:24:74:c0:fc:c0:5d:33:a4:
         c8:f5:19:2d:0d:96:57:d1:3d:b2:85:8b:87:ba:c6:c3:15:ca:
         50:32:83:16:eb:87:b3:fb:0d:fb:c6:54:0b:22:74:fa:d8:50:
         d8:ee:03:d1:2f:85:9d:9b:aa:b3:b2:15:a6:0f:88:3a:ea:9e:
         74:0e:fe:ff:eb:1e:fe:30:f2:ae:c3:66:97:e0:04:12:b1:4d:
         a5:74:f8:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:23:53 2025 by rpki-client