Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/44222e-568e-4c43-8dc8-a54bbc34cce9/1/ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.mft
File:                     ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.mft (raw, json)
Hash identifier:          bdvVT8vQHU5tghetYzyJu+N64iYvNRSz63aXbE/5fqg=
Subject key identifier:   E3:8C:9B:84:78:2B:C5:44:F1:C0:37:06:08:90:9E:D1:C8:84:36:23
Authority key identifier: C2:CE:59:D1:AF:83:0C:94:BA:8E:A1:1C:F8:FE:C6:DD:9C:03:B9:17
Certificate issuer:       /CN=c2ce59d1af830c94ba8ea11cf8fec6dd9c03b917
Certificate serial:       0199FDD96543EA3A6D879483273A22476EA6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/44222e-568e-4c43-8dc8-a54bbc34cce9/1/ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.mft
Manifest number:          1167
Signing time:             Sun 19 Oct 2025 19:01:46 +0000
Manifest this update:     Sun 19 Oct 2025 19:01:46 +0000
Manifest next update:     Mon 20 Oct 2025 19:01:46 +0000
Files and hashes:         1: bXwup2eDRWJRx9GTrYPVFoErhfk.roa (hash: UbhOIugJ4oofUAz2tZciGbACV9Kgx7pGWE+kfVDs8E8=)
                          2: ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.crl (hash: /0pJDk6JUc8xQJWTD4J59ZM12TLOE/yh9UIng3YpoNc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/44222e-568e-4c43-8dc8-a54bbc34cce9/1/ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/44222e-568e-4c43-8dc8-a54bbc34cce9/1/ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:d9:65:43:ea:3a:6d:87:94:83:27:3a:22:47:6e:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2ce59d1af830c94ba8ea11cf8fec6dd9c03b917
        Validity
            Not Before: Oct 19 19:01:46 2025 GMT
            Not After : Oct 20 19:01:46 2025 GMT
        Subject: CN=e38c9b84782bc544f1c0370608909ed1c8843623
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:52:7c:8d:fb:4a:1c:90:0d:c6:42:85:ba:ec:
                    a6:a8:04:66:8d:29:76:8d:ba:64:df:a2:4e:42:15:
                    50:dd:09:f1:9b:d8:0b:2a:58:fa:22:f3:36:ec:bf:
                    7f:10:f6:e7:87:19:d6:bf:7d:f7:29:c7:67:d7:75:
                    b8:12:a6:9c:5b:d9:eb:12:21:52:55:9e:75:2d:c8:
                    b3:b9:34:df:5f:00:bf:f1:de:9e:db:14:7b:cd:51:
                    16:88:c6:92:e4:e4:3f:ad:2e:80:61:e0:95:42:0b:
                    92:34:35:e0:f1:30:e7:ff:ac:9c:63:d5:3f:66:be:
                    c0:f9:d3:59:c2:07:c0:b9:28:28:bd:75:cd:d2:17:
                    7b:27:c3:b7:ac:0a:28:a9:29:96:b3:43:4a:fb:d0:
                    8a:47:4f:e3:ad:60:73:c5:4f:4d:eb:6e:b7:ed:6a:
                    01:89:c2:d1:f1:e9:17:95:17:1a:95:f1:26:9d:ba:
                    9b:c0:72:67:b3:38:4f:af:99:d1:e7:db:ba:8a:e2:
                    c1:8b:8c:b4:7d:c2:6e:b1:c9:17:f4:e0:6b:47:19:
                    14:b3:d4:95:98:7f:81:71:4d:ed:ba:ff:d0:ce:b1:
                    c0:cd:cb:36:00:37:52:42:d2:32:cf:61:66:f9:34:
                    82:63:65:e2:55:95:c8:dd:0e:c0:5c:18:ae:12:75:
                    b8:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:8C:9B:84:78:2B:C5:44:F1:C0:37:06:08:90:9E:D1:C8:84:36:23
            X509v3 Authority Key Identifier:
                keyid:C2:CE:59:D1:AF:83:0C:94:BA:8E:A1:1C:F8:FE:C6:DD:9C:03:B9:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/44222e-568e-4c43-8dc8-a54bbc34cce9/1/ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/44222e-568e-4c43-8dc8-a54bbc34cce9/1/ws5Z0a-DDJS6jqEc-P7G3ZwDuRc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:85:94:d2:5d:5b:32:21:d2:82:93:dc:10:fe:aa:ec:1d:b4:
         2a:97:b6:50:4e:82:a9:2d:8e:83:1a:7c:31:9c:f1:01:21:4a:
         e4:50:e5:8c:c4:15:0f:f5:c7:0e:80:e8:41:b0:40:dc:ef:c3:
         f4:df:8b:3e:06:61:3a:24:19:13:a2:a6:b3:b1:d3:ec:c5:24:
         0a:3e:13:b1:aa:fb:aa:fa:63:5c:23:17:4f:20:14:fe:a3:98:
         5c:5a:af:78:91:a4:e4:62:e7:6c:8e:25:b7:a1:0b:d8:5e:e0:
         f2:99:46:e8:e7:4f:48:67:ca:f6:0a:11:79:1a:ff:62:4a:4a:
         4c:82:bf:42:fa:29:09:e1:23:77:cd:27:dc:c6:62:06:f3:c0:
         27:a3:ad:7a:e0:96:f9:73:ea:3a:a4:ef:5d:32:d6:24:8b:35:
         69:e6:20:6e:70:d4:d8:18:af:47:c2:d8:ff:f6:2a:8b:86:dd:
         67:25:66:8e:e3:11:ad:6d:f0:46:34:69:c8:78:e1:e4:1e:f4:
         56:e4:31:1b:0e:90:83:68:9a:c3:7b:e8:a5:e6:c3:79:d3:c7:
         96:64:76:a3:1e:16:3a:9d:9e:c4:e9:51:5e:96:79:44:52:09:
         57:cb:90:fd:11:23:c6:86:ec:cc:3f:02:7d:a1:d0:ae:74:c4:
         ea:37:9a:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:38:48 2025 by rpki-client