Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/WdNqIemzaNdIurjHe-vd4sInxsM.mft
File:                     WdNqIemzaNdIurjHe-vd4sInxsM.mft (raw, json)
Hash identifier:          aqp3RAYX3HIYsGXADs3KFZxvrt+8i6Z+u5qpTLBTyKw=
Subject key identifier:   8F:18:72:21:27:FA:A3:52:9B:98:13:19:BD:46:92:00:D1:DF:CB:A9
Authority key identifier: 59:D3:6A:21:E9:B3:68:D7:48:BA:B8:C7:7B:EB:DD:E2:C2:27:C6:C3
Certificate issuer:       /CN=59d36a21e9b368d748bab8c77bebdde2c227c6c3
Certificate serial:       0199FD34888C1BE9E316EE9F80BC65A51ABE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WdNqIemzaNdIurjHe-vd4sInxsM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/WdNqIemzaNdIurjHe-vd4sInxsM.mft
Manifest number:          08C0
Signing time:             Sun 19 Oct 2025 16:01:42 +0000
Manifest this update:     Sun 19 Oct 2025 16:01:42 +0000
Manifest next update:     Mon 20 Oct 2025 16:01:42 +0000
Files and hashes:         1: 2sZdgnxG39Ec4iWQKIqHRPm_-nk.roa (hash: 1XVkgkrwmMauPThY8HLX2JQkAHIe6uakbKzIFrk1NHc=)
                          2: WdNqIemzaNdIurjHe-vd4sInxsM.crl (hash: YrgI3wrquOuD54zQVIE9FiwmFEnorE2YdxuGdYpwQ+M=)
                          3: is_XEdqOSIZdOdAUliJ38zXn5ZE.roa (hash: +WoDzk7VKcG/lDal047Esdi6HVzF1DiurqrDKoqvrhI=)
                          4: k47IkFzsvbAU-luJwFSjcXBgPII.roa (hash: LRzevFO33ciORneOuJWjPwolGOd6frxZBqlkG2Q4ros=)
                          5: skXm2fkwzq64ONGiXwLfUYMzOOo.roa (hash: eZX3z+2+p9WFafZJ1Sv1eq5Rzpet45IDFVeaiO++2eM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/WdNqIemzaNdIurjHe-vd4sInxsM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/WdNqIemzaNdIurjHe-vd4sInxsM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WdNqIemzaNdIurjHe-vd4sInxsM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:34:88:8c:1b:e9:e3:16:ee:9f:80:bc:65:a5:1a:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59d36a21e9b368d748bab8c77bebdde2c227c6c3
        Validity
            Not Before: Oct 19 16:01:42 2025 GMT
            Not After : Oct 20 16:01:42 2025 GMT
        Subject: CN=8f18722127faa3529b981319bd469200d1dfcba9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ca:cc:82:32:ab:e0:e6:a3:a9:19:06:2c:63:
                    8b:20:ec:15:f4:84:6f:a2:c1:4a:68:5c:4a:0b:40:
                    3d:c8:8c:49:1f:6f:0f:12:2e:57:ef:ad:d4:2d:e1:
                    8d:43:90:a2:05:93:50:45:35:1e:74:d2:33:06:b0:
                    40:8c:96:6f:18:af:f2:4d:fd:a5:7a:15:90:44:90:
                    f1:e2:6b:12:fb:e3:fa:4d:19:b2:37:11:60:6d:e2:
                    f8:fc:fe:1d:a0:3d:d5:c0:f8:94:d4:d3:2c:af:d3:
                    9c:c4:cd:6f:52:62:48:86:fe:82:8d:4d:d4:46:14:
                    5a:c8:d6:13:27:e5:fa:d8:26:3d:a4:2a:54:f9:21:
                    6d:6a:af:e7:92:01:9b:10:c8:40:4b:27:13:25:e6:
                    f1:a4:c5:6e:c0:a1:f0:a3:ce:2b:f0:a1:4b:be:68:
                    85:01:0f:a7:99:e0:bb:30:42:80:c8:b0:0b:d2:94:
                    7f:76:ce:21:62:ba:75:3c:3b:0a:54:e4:f9:a1:b6:
                    43:14:51:8e:87:95:47:69:a1:e7:7b:e2:ea:22:f9:
                    eb:57:c6:87:08:2c:b6:95:5b:8e:f9:6d:2e:b3:34:
                    fe:72:52:43:f2:1b:6f:a9:fb:46:0a:f3:ad:00:4b:
                    26:0a:00:20:4e:2f:0b:ab:37:e8:0f:0f:1c:14:49:
                    b5:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:18:72:21:27:FA:A3:52:9B:98:13:19:BD:46:92:00:D1:DF:CB:A9
            X509v3 Authority Key Identifier:
                keyid:59:D3:6A:21:E9:B3:68:D7:48:BA:B8:C7:7B:EB:DD:E2:C2:27:C6:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WdNqIemzaNdIurjHe-vd4sInxsM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/WdNqIemzaNdIurjHe-vd4sInxsM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/WdNqIemzaNdIurjHe-vd4sInxsM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:34:73:c9:6d:a1:74:b1:aa:52:35:35:92:5f:7e:22:3b:d1:
         ca:b0:df:6d:b6:ce:01:25:42:c6:01:23:24:97:a1:1c:22:78:
         11:f6:e5:24:00:d2:70:8f:7d:64:ed:36:26:7b:a8:5d:f4:2e:
         11:cb:12:67:ed:66:bf:01:32:bc:76:07:7b:ff:11:8b:e8:ba:
         4c:6f:bc:31:d6:6c:cd:5b:80:fa:4d:3f:6f:6b:45:03:d8:8f:
         e3:8b:8b:f1:22:f3:93:9b:5a:4c:9d:e5:ad:40:15:7d:78:af:
         4f:59:d4:29:dd:4c:66:e9:81:0f:82:e0:2c:3d:39:9a:df:cb:
         53:fd:84:09:56:49:dd:6e:27:cb:53:0a:5e:a4:56:06:c6:d1:
         22:2b:1f:bb:c4:06:a9:22:23:21:fd:0d:6f:3e:8f:e0:f0:ee:
         5b:04:02:e2:44:d5:f5:b3:1a:4a:b1:00:1c:2d:c7:67:75:3b:
         bd:47:14:fc:9c:0d:09:7f:3a:2d:06:d2:96:94:82:50:3c:61:
         a6:06:6c:eb:b2:b4:50:33:85:47:4d:fb:67:8d:50:a4:4b:ca:
         74:f9:16:90:7d:29:9d:b1:1c:a1:cb:00:32:3e:e4:06:0f:bc:
         6d:2c:9b:b8:1e:36:23:02:b5:b3:7b:bc:ce:c4:a6:a0:bc:a5:
         c4:03:65:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:28:38 2025 by rpki-client