Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ce4822-c991-40f0-b154-b8bbca8636cc/1/wMs6tDkuqgs48ZZdVPy-61BnrRw.mft
File:                     wMs6tDkuqgs48ZZdVPy-61BnrRw.mft (raw, json)
Hash identifier:          fAYo7MdHnhZiz6infnM49RfenYjaOYWaljIfuDHItHc=
Subject key identifier:   74:91:BC:90:81:4A:30:95:15:F1:C8:E9:11:CB:10:C2:AF:9E:E2:9C
Authority key identifier: C0:CB:3A:B4:39:2E:AA:0B:38:F1:96:5D:54:FC:BE:EB:50:67:AD:1C
Certificate issuer:       /CN=c0cb3ab4392eaa0b38f1965d54fcbeeb5067ad1c
Certificate serial:       0199FCC6D2DEBB7371F3A302E7592336D553
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wMs6tDkuqgs48ZZdVPy-61BnrRw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/ce4822-c991-40f0-b154-b8bbca8636cc/1/wMs6tDkuqgs48ZZdVPy-61BnrRw.mft
Manifest number:          16E3
Signing time:             Sun 19 Oct 2025 14:01:52 +0000
Manifest this update:     Sun 19 Oct 2025 14:01:52 +0000
Manifest next update:     Mon 20 Oct 2025 14:01:52 +0000
Files and hashes:         1: wMs6tDkuqgs48ZZdVPy-61BnrRw.crl (hash: UAaGe0A/jqDGdI37o4uyKMQoG5t++gsp8BxQ0K1fWzI=)
                          2: xBCmHDQdfHeyTzhklHfbHAtEjac.roa (hash: v4hxG9/eDV05pt8qFpOVheOZJs0ehEmajsKsd5Fgmbc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/ce4822-c991-40f0-b154-b8bbca8636cc/1/wMs6tDkuqgs48ZZdVPy-61BnrRw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/ce4822-c991-40f0-b154-b8bbca8636cc/1/wMs6tDkuqgs48ZZdVPy-61BnrRw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wMs6tDkuqgs48ZZdVPy-61BnrRw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:c6:d2:de:bb:73:71:f3:a3:02:e7:59:23:36:d5:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0cb3ab4392eaa0b38f1965d54fcbeeb5067ad1c
        Validity
            Not Before: Oct 19 14:01:52 2025 GMT
            Not After : Oct 20 14:01:52 2025 GMT
        Subject: CN=7491bc90814a309515f1c8e911cb10c2af9ee29c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:21:cd:10:13:28:41:86:56:95:c8:74:41:f8:
                    4e:65:9f:aa:59:43:bf:16:81:3a:b2:04:3e:8e:24:
                    00:57:b8:42:08:dd:ff:f6:00:c5:e6:8e:ed:d3:9d:
                    49:8c:a2:9b:73:52:51:d5:68:49:4f:98:35:75:30:
                    c0:94:67:bb:e8:aa:a8:17:28:40:cf:f8:c4:58:6f:
                    2b:bd:39:b4:18:83:ba:1d:36:f2:fa:1e:7a:c1:07:
                    3d:bc:a4:5b:50:01:eb:88:0e:7a:b3:34:a3:99:fe:
                    d2:8f:3a:65:a4:65:b3:b4:d1:cf:0d:dd:0b:62:71:
                    06:e3:33:7f:19:25:55:98:48:bd:4a:b7:46:dc:6a:
                    15:69:5c:ec:0b:d6:fe:c2:b1:ed:67:5a:80:e7:c3:
                    69:39:8e:b1:b8:05:d1:7e:e6:a7:32:ab:cb:25:9a:
                    0b:a9:a0:99:a6:cc:ac:c1:f7:e0:22:7a:5f:37:07:
                    85:a3:d0:92:af:a2:0d:9b:cd:e0:c2:2f:86:11:9a:
                    21:c3:0a:95:8c:09:32:18:eb:24:a4:e6:93:73:62:
                    c4:ef:30:8a:08:d2:18:cb:4f:dd:40:1c:64:13:da:
                    ef:a4:17:aa:c3:ab:93:4f:ee:71:34:d2:5c:88:42:
                    a2:5e:0f:e6:27:37:3b:7b:9e:34:c2:08:d6:47:40:
                    e7:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:91:BC:90:81:4A:30:95:15:F1:C8:E9:11:CB:10:C2:AF:9E:E2:9C
            X509v3 Authority Key Identifier:
                keyid:C0:CB:3A:B4:39:2E:AA:0B:38:F1:96:5D:54:FC:BE:EB:50:67:AD:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wMs6tDkuqgs48ZZdVPy-61BnrRw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ce4822-c991-40f0-b154-b8bbca8636cc/1/wMs6tDkuqgs48ZZdVPy-61BnrRw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ce4822-c991-40f0-b154-b8bbca8636cc/1/wMs6tDkuqgs48ZZdVPy-61BnrRw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:bc:c1:70:8b:00:50:8b:af:8e:c8:51:44:28:dd:ca:56:ea:
         1c:01:ac:a6:f0:68:65:51:ca:5a:56:f4:b7:fa:73:a5:fc:2a:
         4b:dd:59:4a:35:4b:16:57:75:0d:06:d3:65:9b:47:8c:1c:68:
         42:c7:17:8f:22:11:81:b3:cd:df:51:f5:53:c4:8a:14:a0:e7:
         9c:cc:bb:ce:15:5e:a1:56:c1:d8:0f:82:e2:a3:9b:1c:29:24:
         1e:3b:e7:d1:db:58:0a:9f:ee:2b:3b:18:04:97:1c:24:e7:05:
         26:b1:21:ec:8e:5e:f1:a8:61:3b:3d:76:ad:d5:af:01:42:cb:
         c3:ac:ba:b5:e8:22:76:ec:f7:59:dd:c4:e7:19:f5:01:d6:81:
         db:1f:13:4f:8a:7b:c6:ac:98:ec:7d:9f:bb:45:06:6c:16:6e:
         8f:e6:f8:1a:d4:1e:10:9f:60:df:88:32:a2:9b:6e:7d:12:c3:
         9a:e1:88:02:46:a2:10:9c:fd:ad:17:6c:87:0e:86:f1:9a:16:
         14:2f:1b:e9:ad:6a:d6:e0:80:f5:c7:3d:86:e5:cb:96:f4:77:
         ad:55:11:a8:12:39:9b:bb:fc:bf:b6:4b:91:ee:34:54:64:63:
         40:fe:4e:24:02:af:56:5f:4d:23:d7:02:3c:bc:8b:99:10:46:
         18:da:a7:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:40:31 2025 by rpki-client