Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/264f9a-13ea-4c50-a6a9-712d5e17a6f6/1/leiDWblaOWSub5oM2q4H9Xn5jDU.mft
File:                     leiDWblaOWSub5oM2q4H9Xn5jDU.mft (raw, json)
Hash identifier:          eIDF4Uz6OMSH7nZ0pnUfwqnLg94zEUU/3zG6Dl1DqGU=
Subject key identifier:   CD:FC:61:D8:DE:E2:AA:39:9E:E3:EC:67:A9:D4:9E:11:44:58:83:35
Authority key identifier: 95:E8:83:59:B9:5A:39:64:AE:6F:9A:0C:DA:AE:07:F5:79:F9:8C:35
Certificate issuer:       /CN=95e88359b95a3964ae6f9a0cdaae07f579f98c35
Certificate serial:       0199FA6A803D3967A7CC168C199C3857C609
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/leiDWblaOWSub5oM2q4H9Xn5jDU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/264f9a-13ea-4c50-a6a9-712d5e17a6f6/1/leiDWblaOWSub5oM2q4H9Xn5jDU.mft
Manifest number:          04A3
Signing time:             Sun 19 Oct 2025 03:01:47 +0000
Manifest this update:     Sun 19 Oct 2025 03:01:47 +0000
Manifest next update:     Mon 20 Oct 2025 03:01:47 +0000
Files and hashes:         1: leiDWblaOWSub5oM2q4H9Xn5jDU.crl (hash: NBaWtheMsjHV+oJvfXZeym6kT+QbQWY9Ft9z1RCdHRA=)
                          2: pe1o9e3jWHQk95p2Ei_dXirE0kc.roa (hash: 7nIBr99cFeZBlfuF7+XYt3ntEwToRh90vxok7wcdM9Q=)
                          3: rzPMwtKJbrfVAK2tZQ7ho2lMTko.roa (hash: 6lSfgp9VWZJODBNAF2r5pCybLvr4sFR9bMz2OJU8t8k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/264f9a-13ea-4c50-a6a9-712d5e17a6f6/1/leiDWblaOWSub5oM2q4H9Xn5jDU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/264f9a-13ea-4c50-a6a9-712d5e17a6f6/1/leiDWblaOWSub5oM2q4H9Xn5jDU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/leiDWblaOWSub5oM2q4H9Xn5jDU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 03:01:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fa:6a:80:3d:39:67:a7:cc:16:8c:19:9c:38:57:c6:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95e88359b95a3964ae6f9a0cdaae07f579f98c35
        Validity
            Not Before: Oct 19 03:01:47 2025 GMT
            Not After : Oct 20 03:01:47 2025 GMT
        Subject: CN=cdfc61d8dee2aa399ee3ec67a9d49e1144588335
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:7f:90:37:c0:df:74:79:f3:6f:6c:ec:1d:ba:
                    6e:f8:c0:b2:de:0b:48:29:d5:7e:72:9e:23:20:3b:
                    17:b0:44:3d:32:1c:c8:2e:91:91:9e:5e:50:20:bc:
                    1b:33:fe:54:3e:83:ad:a0:ee:ec:3f:13:d1:34:28:
                    3c:57:5f:cd:2d:6d:11:c1:97:7c:46:e4:de:5d:ca:
                    9f:e9:bf:cf:bd:d3:64:df:de:64:15:d1:63:1b:5e:
                    0d:f2:02:5f:ed:0b:41:c1:c8:6d:f7:6f:9e:e6:27:
                    91:b0:0a:22:be:57:b5:c8:cb:05:78:97:72:6d:24:
                    3a:a4:e1:dc:95:79:9d:58:d1:d1:f7:31:ae:c2:16:
                    c6:d6:34:c6:7d:5f:3d:80:fc:89:6d:74:85:12:32:
                    ee:50:d8:7c:ff:7a:c1:cc:3e:5f:db:84:bc:4e:45:
                    5e:2a:9a:d5:ba:b7:21:c4:07:08:c5:51:cf:22:a7:
                    c1:01:42:7a:d6:2a:bd:04:99:fe:4c:48:e6:cc:83:
                    8a:88:e3:97:56:ae:b1:80:ad:9b:80:78:30:17:31:
                    db:f9:b7:df:e6:79:92:72:f1:47:3a:97:64:66:b1:
                    d8:b2:c6:c6:f6:5a:31:5a:e4:0b:bd:35:96:f7:87:
                    ff:b0:22:ee:ef:ac:9d:6c:e4:7d:74:fc:5a:b9:47:
                    c9:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:FC:61:D8:DE:E2:AA:39:9E:E3:EC:67:A9:D4:9E:11:44:58:83:35
            X509v3 Authority Key Identifier:
                keyid:95:E8:83:59:B9:5A:39:64:AE:6F:9A:0C:DA:AE:07:F5:79:F9:8C:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/leiDWblaOWSub5oM2q4H9Xn5jDU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/264f9a-13ea-4c50-a6a9-712d5e17a6f6/1/leiDWblaOWSub5oM2q4H9Xn5jDU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/264f9a-13ea-4c50-a6a9-712d5e17a6f6/1/leiDWblaOWSub5oM2q4H9Xn5jDU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:08:76:93:aa:ca:57:7b:5c:0e:04:8b:c6:75:89:29:83:bd:
         e8:d0:e4:b8:9a:53:b1:50:a3:92:57:e0:f5:47:d0:0c:4f:85:
         18:48:f1:e3:e1:9a:3f:cb:77:b7:9c:45:be:36:37:ae:d8:54:
         f5:41:0b:d0:2f:8f:b1:d2:df:1d:6a:43:33:9c:1f:d1:10:f8:
         35:0e:4e:20:44:cb:c6:6e:ab:12:6d:46:89:7c:7d:73:99:9d:
         77:53:57:d7:41:a2:3c:66:00:57:0e:d5:6f:c3:94:d5:96:5f:
         16:3e:0c:67:1f:bf:11:f3:a0:24:b9:cb:58:b6:43:a3:6d:e1:
         30:40:00:16:8f:6a:32:a4:9a:5d:2c:0c:d7:d5:0f:ba:4e:3d:
         1d:bd:01:34:4e:1d:3e:7d:f5:93:f4:b0:69:07:86:24:4c:69:
         d6:7d:4a:c0:89:50:c4:53:57:ae:3e:1b:7d:36:ae:42:f7:89:
         2f:5d:78:4f:1e:5a:e2:7b:45:18:8e:c4:7d:64:c1:16:3f:bc:
         f5:c5:3c:8b:10:38:de:83:8b:b9:28:3d:b3:ca:67:b1:2a:d4:
         e2:09:8e:c9:ae:f9:f2:2a:af:33:dd:6b:3d:32:ae:04:7d:f1:
         60:06:b7:ce:5a:c5:5b:e7:ba:b0:f0:df:70:13:7f:03:39:2f:
         b8:09:4a:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:06:52 2025 by rpki-client