Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/451550-2bb2-4937-9f52-2ff8e9d23f97/1/W5mOGE1PxK_6IFCQmdkZoxoHlHs.mft
File:                     W5mOGE1PxK_6IFCQmdkZoxoHlHs.mft (raw, json)
Hash identifier:          eKigE/ooRpYfVLJko84GbOzN1BvR/XA32mR/8vHO1r8=
Subject key identifier:   CA:EE:35:29:BC:85:D6:4C:3B:37:85:FD:AB:AC:F8:2F:FC:4B:44:87
Authority key identifier: 5B:99:8E:18:4D:4F:C4:AF:FA:20:50:90:99:D9:19:A3:1A:07:94:7B
Certificate issuer:       /CN=5b998e184d4fc4affa20509099d919a31a07947b
Certificate serial:       0199FBEAF965D27A29048070664102244F23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W5mOGE1PxK_6IFCQmdkZoxoHlHs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/451550-2bb2-4937-9f52-2ff8e9d23f97/1/W5mOGE1PxK_6IFCQmdkZoxoHlHs.mft
Manifest number:          16E1
Signing time:             Sun 19 Oct 2025 10:01:44 +0000
Manifest this update:     Sun 19 Oct 2025 10:01:44 +0000
Manifest next update:     Mon 20 Oct 2025 10:01:44 +0000
Files and hashes:         1: W5mOGE1PxK_6IFCQmdkZoxoHlHs.crl (hash: +hfxISgKjE/JW4flzZPR+k/OsbKjo3TYaKG4ppyUQDs=)
                          2: gtNjwWIklt9RQOUEEkHBnNPLSqM.roa (hash: vH0Ya4SYvhAbrE7j6LOzzc7/NQSUnPHlrM/bMm0UTx8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/451550-2bb2-4937-9f52-2ff8e9d23f97/1/W5mOGE1PxK_6IFCQmdkZoxoHlHs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/451550-2bb2-4937-9f52-2ff8e9d23f97/1/W5mOGE1PxK_6IFCQmdkZoxoHlHs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W5mOGE1PxK_6IFCQmdkZoxoHlHs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 10:01:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:ea:f9:65:d2:7a:29:04:80:70:66:41:02:24:4f:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b998e184d4fc4affa20509099d919a31a07947b
        Validity
            Not Before: Oct 19 10:01:44 2025 GMT
            Not After : Oct 20 10:01:44 2025 GMT
        Subject: CN=caee3529bc85d64c3b3785fdabacf82ffc4b4487
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:db:de:31:ed:9f:a7:25:4b:01:dc:d2:ef:d7:
                    9b:30:61:48:27:8b:82:31:ef:dd:59:29:03:43:be:
                    59:f7:87:1f:b0:50:95:28:46:3f:8c:af:55:ab:fb:
                    cd:fb:47:3a:54:19:1d:70:64:de:09:35:36:b7:f5:
                    67:4c:67:2e:47:2d:20:10:f5:de:1a:8d:06:e2:6d:
                    5f:c6:c6:f8:65:35:c1:f7:9d:0f:5e:f3:ae:10:28:
                    71:66:83:21:61:3a:6a:6b:fd:82:ea:1e:d2:6d:b5:
                    49:c3:ec:10:b8:fe:4f:35:d0:42:27:aa:73:37:5e:
                    e3:e2:a6:58:60:d2:4e:2b:83:b1:ed:fe:53:24:63:
                    54:7b:66:e9:4c:ff:b0:2c:db:39:65:46:2a:48:b8:
                    6b:1a:8a:11:60:de:e8:aa:71:ed:9a:3d:b9:f6:19:
                    83:32:5d:0a:ba:85:2e:ae:fe:ce:38:8f:59:12:0a:
                    79:ef:fa:27:dc:f0:69:bc:8b:e6:2a:e3:93:6d:8b:
                    ba:b0:41:9f:9f:11:0f:eb:aa:6d:9d:31:f1:d6:6b:
                    bf:c8:42:8d:7a:b1:c5:27:d6:ca:c3:d3:42:cd:f6:
                    4e:98:da:8f:04:fd:1c:60:79:2e:34:44:b6:3c:60:
                    79:7f:c2:7a:aa:fe:44:fe:18:47:99:60:f2:d1:bd:
                    3c:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:EE:35:29:BC:85:D6:4C:3B:37:85:FD:AB:AC:F8:2F:FC:4B:44:87
            X509v3 Authority Key Identifier:
                keyid:5B:99:8E:18:4D:4F:C4:AF:FA:20:50:90:99:D9:19:A3:1A:07:94:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W5mOGE1PxK_6IFCQmdkZoxoHlHs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/451550-2bb2-4937-9f52-2ff8e9d23f97/1/W5mOGE1PxK_6IFCQmdkZoxoHlHs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/451550-2bb2-4937-9f52-2ff8e9d23f97/1/W5mOGE1PxK_6IFCQmdkZoxoHlHs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:9e:c1:56:17:ce:67:0c:17:53:d9:ec:fa:51:f3:f3:1e:81:
         8c:21:07:1f:3f:97:7b:c5:f2:bc:f7:b4:e5:bb:8f:fd:90:be:
         1b:55:c6:3a:17:ec:44:40:6e:7f:92:26:da:d9:0b:e4:54:4e:
         17:94:80:20:f3:68:57:23:d6:7f:e7:de:8d:56:9c:1c:10:1e:
         fd:8f:c4:da:71:ac:fd:10:4c:57:ab:4f:43:bb:62:ad:78:f3:
         51:92:49:63:db:9e:02:f4:3e:8a:03:13:ff:62:ce:37:17:0f:
         7b:cc:ba:bd:38:ac:9d:00:c0:99:7c:fc:94:7d:0e:f6:84:94:
         b2:c8:32:de:d0:14:48:c9:7a:35:44:c2:48:cf:ed:cc:12:3a:
         df:ed:47:76:ee:48:75:fe:b4:f0:4b:e4:43:e3:7f:71:a9:ff:
         1c:e7:34:c7:50:d4:f1:27:6f:55:e2:21:46:38:7f:0b:f7:30:
         a3:f9:27:34:29:44:b4:64:a4:40:0e:4a:ce:52:3f:24:67:74:
         f8:b6:05:5a:9a:76:25:65:97:47:3e:e0:59:3d:dd:bf:9b:4b:
         4e:a1:9f:32:90:39:e1:02:a2:ce:cb:3a:8e:4b:60:b5:96:13:
         17:eb:cd:6c:39:b0:2f:93:b4:28:f9:25:ea:06:32:d7:0d:41:
         b6:47:e6:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:39:20 2025 by rpki-client