Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/27911b-064f-4d62-ba1c-e6626af759b7/1/WWAuSwhZTFyv--tQ0eCp1HDrkuU.mft
File:                     WWAuSwhZTFyv--tQ0eCp1HDrkuU.mft (raw, json)
Hash identifier:          +M3M0OH7r47KvbEuqU2BfBwfF/o5L0Raj+kV+j5iypg=
Subject key identifier:   14:1A:7D:05:75:F7:D9:9F:30:40:70:4B:FB:DF:98:CA:AC:EF:4D:03
Authority key identifier: 59:60:2E:4B:08:59:4C:5C:AF:FB:EB:50:D1:E0:A9:D4:70:EB:92:E5
Certificate issuer:       /CN=59602e4b08594c5caffbeb50d1e0a9d470eb92e5
Certificate serial:       0199FF229DE2126CD8BB6DF67362EF596145
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WWAuSwhZTFyv--tQ0eCp1HDrkuU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/27911b-064f-4d62-ba1c-e6626af759b7/1/WWAuSwhZTFyv--tQ0eCp1HDrkuU.mft
Manifest number:          1422
Signing time:             Mon 20 Oct 2025 01:01:22 +0000
Manifest this update:     Mon 20 Oct 2025 01:01:22 +0000
Manifest next update:     Tue 21 Oct 2025 01:01:22 +0000
Files and hashes:         1: WWAuSwhZTFyv--tQ0eCp1HDrkuU.crl (hash: 1SFfb7MKz5HlJlLqituM5/mnmVthGbOpsU0h2AdGUaI=)
                          2: Xihi8aGiKGmm1wm5o0bdg-SFO4M.roa (hash: UB6flWnnaqdKwm5uBg0CvnmFwbf9VSTpt0Wz6M2wzJs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/27911b-064f-4d62-ba1c-e6626af759b7/1/WWAuSwhZTFyv--tQ0eCp1HDrkuU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/27911b-064f-4d62-ba1c-e6626af759b7/1/WWAuSwhZTFyv--tQ0eCp1HDrkuU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WWAuSwhZTFyv--tQ0eCp1HDrkuU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ff:22:9d:e2:12:6c:d8:bb:6d:f6:73:62:ef:59:61:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59602e4b08594c5caffbeb50d1e0a9d470eb92e5
        Validity
            Not Before: Oct 20 01:01:22 2025 GMT
            Not After : Oct 21 01:01:22 2025 GMT
        Subject: CN=141a7d0575f7d99f3040704bfbdf98caacef4d03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:5d:6d:d4:81:a9:4e:28:7a:be:a6:11:fa:bd:
                    08:bd:1e:20:f6:a4:f6:95:80:94:38:d9:bc:7c:2a:
                    6c:e8:f7:06:b2:9c:5a:12:01:e1:5a:00:f9:bc:10:
                    5d:92:7c:1d:03:2c:98:37:c6:a1:93:89:f9:50:45:
                    a5:21:5a:2b:9b:3b:96:69:c3:ec:fc:9c:8a:9f:86:
                    83:48:aa:69:77:1e:19:aa:58:ab:84:e3:7d:2c:55:
                    73:6d:5f:a7:3d:bc:7d:67:20:e8:32:5f:63:26:11:
                    cb:f3:41:d0:29:17:7c:d1:4a:64:9e:7d:65:80:1c:
                    82:7a:23:a5:da:a3:81:a0:cc:65:3d:d4:84:85:27:
                    29:99:d7:5a:5e:c9:72:fa:e2:17:8d:f2:53:69:ec:
                    9b:5b:8b:ff:b7:03:ec:0c:b9:0c:3a:1d:6a:0a:8a:
                    56:79:ab:7f:08:a5:7f:28:20:3b:b7:d0:18:1d:14:
                    48:fc:96:e7:75:a7:05:54:a9:9b:b6:4e:5c:3c:76:
                    95:2e:86:ba:b4:86:7a:16:32:48:48:4c:b5:de:6b:
                    14:4c:62:89:b8:a7:32:19:e6:48:b7:96:9c:b8:54:
                    8b:36:ab:6a:9f:55:c8:15:a2:b2:6d:be:31:5b:2e:
                    1f:59:cc:26:58:11:31:ea:8a:b0:ac:1b:0c:ee:ca:
                    f8:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:1A:7D:05:75:F7:D9:9F:30:40:70:4B:FB:DF:98:CA:AC:EF:4D:03
            X509v3 Authority Key Identifier:
                keyid:59:60:2E:4B:08:59:4C:5C:AF:FB:EB:50:D1:E0:A9:D4:70:EB:92:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WWAuSwhZTFyv--tQ0eCp1HDrkuU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/27911b-064f-4d62-ba1c-e6626af759b7/1/WWAuSwhZTFyv--tQ0eCp1HDrkuU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/27911b-064f-4d62-ba1c-e6626af759b7/1/WWAuSwhZTFyv--tQ0eCp1HDrkuU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:1c:30:46:72:35:fc:8d:ff:51:26:31:98:6f:b7:05:a3:51:
         a5:23:0d:dc:79:f2:a8:05:a2:fe:90:3c:fd:9c:0a:59:ed:3e:
         04:1f:c8:93:dd:fc:89:39:7e:63:27:02:ea:06:bd:d3:58:94:
         ad:89:5b:bf:1b:de:f3:5a:67:ef:73:ec:32:4f:6f:4b:b9:6c:
         fd:67:14:23:5b:c4:a4:84:3b:84:c9:b3:54:44:89:df:50:7c:
         1b:86:66:4e:c0:e9:4b:4a:c8:a9:2f:77:5a:1e:f7:75:a9:1d:
         3b:39:88:44:6a:d1:c2:0d:2e:ae:d3:47:22:d2:f6:9a:be:cb:
         40:d7:03:d2:b5:a9:0d:b9:0e:46:50:39:e5:91:06:32:69:d3:
         c0:9d:63:c8:8e:36:ee:43:17:3f:c4:50:84:f6:6c:32:35:35:
         7e:5e:03:3a:15:3c:aa:68:5c:f5:8a:5f:de:32:67:a3:27:a2:
         27:74:67:a8:02:fe:10:fd:62:ba:52:34:e7:a7:74:a5:fa:b3:
         67:fa:c0:3e:f1:6a:fe:36:77:5d:e7:e3:d8:18:b0:3c:e5:10:
         3e:74:52:3e:bb:1b:ac:4d:2c:22:cf:38:92:d8:4b:a8:be:c0:
         c7:f3:c5:ff:12:6b:f7:eb:aa:b2:52:15:86:1d:97:28:84:61:
         48:df:7e:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/Ip3iEmzYu232c2LvWWFFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5NjAyZTRiMDg1OTRjNWNhZmZiZWI1MGQxZTBhOWQ0NzBl
YjkyZTUwHhcNMjUxMDIwMDEwMTIyWhcNMjUxMDIxMDEwMTIyWjAzMTEwLwYDVQQD
EygxNDFhN2QwNTc1ZjdkOTlmMzA0MDcwNGJmYmRmOThjYWFjZWY0ZDAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz11t1IGpTih6vqYR+r0IvR4g9qT2
lYCUONm8fCps6PcGspxaEgHhWgD5vBBdknwdAyyYN8ahk4n5UEWlIVormzuWacPs
/JyKn4aDSKppdx4ZqlirhON9LFVzbV+nPbx9ZyDoMl9jJhHL80HQKRd80Upknn1l
gByCeiOl2qOBoMxlPdSEhScpmddaXsly+uIXjfJTaeybW4v/twPsDLkMOh1qCopW
eat/CKV/KCA7t9AYHRRI/JbndacFVKmbtk5cPHaVLoa6tIZ6FjJISEy13msUTGKJ
uKcyGeZIt5acuFSLNqtqn1XIFaKybb4xWy4fWcwmWBEx6oqwrBsM7sr4owIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBQafQV199mfMEBwS/vfmMqs700DMB8GA1UdIwQY
MBaAFFlgLksIWUxcr/vrUNHgqdRw65LlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1dBdVN3aFpURnl2LS10UTBlQ3AxSERya3VVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC8yNzkxMWItMDY0Zi00ZDYyLWJhMWMt
ZTY2MjZhZjc1OWI3LzEvV1dBdVN3aFpURnl2LS10UTBlQ3AxSERya3VVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC8yNzkxMWItMDY0Zi00ZDYyLWJhMWMtZTY2MjZhZjc1OWI3
LzEvV1dBdVN3aFpURnl2LS10UTBlQ3AxSERya3VVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVRwwRnI1
/I3/USYxmG+3BaNRpSMN3HnyqAWi/pA8/ZwKWe0+BB/Ik938iTl+YycC6ga901iU
rYlbvxve81pn73PsMk9vS7ls/WcUI1vEpIQ7hMmzVESJ31B8G4ZmTsDpS0rIqS93
Wh73dakdOzmIRGrRwg0urtNHItL2mr7LQNcD0rWpDbkORlA55ZEGMmnTwJ1jyI42
7kMXP8RQhPZsMjU1fl4DOhU8qmhc9Ypf3jJnoyeiJ3RnqAL+EP1iulI056d0pfqz
Z/rAPvFq/jZ3Xefj2BiwPOUQPnRSPrsbrE0sIs84kthLqL7Ax/PF/xJr9+uqslIV
hh2XKIRhSN9+1A==
-----END CERTIFICATE-----
Generated at Mon Oct 20 04:48:36 2025 by rpki-client