Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/WWDmzRsbAGOxiQ94B0XCRWBtz3M.mft
File:                     WWDmzRsbAGOxiQ94B0XCRWBtz3M.mft (raw, json)
Hash identifier:          Mvj9/af6DFL3iBJ0p7UrAC1iLCzlUCjiQ94GAzL0Ahs=
Subject key identifier:   AE:8F:30:C5:72:64:3A:9C:A0:A3:D7:13:F6:27:3F:04:32:16:94:A6
Authority key identifier: 59:60:E6:CD:1B:1B:00:63:B1:89:0F:78:07:45:C2:45:60:6D:CF:73
Certificate issuer:       /CN=5960e6cd1b1b0063b1890f780745c245606dcf73
Certificate serial:       0199FC213991FBE13C25E936DB0F7936A289
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WWDmzRsbAGOxiQ94B0XCRWBtz3M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/WWDmzRsbAGOxiQ94B0XCRWBtz3M.mft
Manifest number:          16E2
Signing time:             Sun 19 Oct 2025 11:00:59 +0000
Manifest this update:     Sun 19 Oct 2025 11:00:59 +0000
Manifest next update:     Mon 20 Oct 2025 11:00:59 +0000
Files and hashes:         1: 8Z3aUD_PAmXD6dv52YsOghcqB84.roa (hash: yqXiM+cGXnQH3xEwReOpDqFoSkq0y2lHcTn04sbV7Go=)
                          2: WWDmzRsbAGOxiQ94B0XCRWBtz3M.crl (hash: qo+KAggJT5vKXUxnwLiC1PcRMAY+RNuFpr+HrjePMiA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/WWDmzRsbAGOxiQ94B0XCRWBtz3M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/WWDmzRsbAGOxiQ94B0XCRWBtz3M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WWDmzRsbAGOxiQ94B0XCRWBtz3M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:21:39:91:fb:e1:3c:25:e9:36:db:0f:79:36:a2:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5960e6cd1b1b0063b1890f780745c245606dcf73
        Validity
            Not Before: Oct 19 11:00:59 2025 GMT
            Not After : Oct 20 11:00:59 2025 GMT
        Subject: CN=ae8f30c572643a9ca0a3d713f6273f04321694a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:59:1b:8f:a8:f1:fe:51:44:f8:95:0e:2a:32:
                    48:11:6e:7e:d8:06:92:4b:eb:a8:f8:88:49:0c:c8:
                    b6:9f:35:8c:80:8e:62:1f:ca:24:41:0a:04:da:19:
                    c7:03:f1:b6:2c:20:1b:17:da:3f:4e:8c:c6:4d:b6:
                    e5:3a:01:dd:ce:73:30:9d:30:06:8f:3d:6c:c2:33:
                    76:b0:61:38:c7:f2:0a:3c:b2:37:8d:68:7a:39:90:
                    3d:85:2c:39:b8:60:0c:86:b5:3e:56:1c:53:9a:1f:
                    d9:b1:97:ad:19:c2:06:9f:dc:a9:84:44:e1:e5:da:
                    fa:5e:39:ea:af:88:c5:4a:a3:cd:74:4d:3c:16:33:
                    a2:c7:1d:c6:38:43:bb:fa:51:c5:e0:1e:80:c7:b5:
                    87:d8:35:a8:34:a1:5e:e3:5a:a1:67:cf:8b:7e:a1:
                    a5:04:86:59:f5:de:ef:b8:b0:39:af:0b:e0:99:df:
                    dc:bc:86:49:c3:39:5e:96:99:73:98:e7:77:b1:2d:
                    35:73:ae:de:bb:0b:07:8c:80:42:ef:36:bd:13:c4:
                    15:a5:dd:b7:0d:bc:fc:c2:5b:ab:26:43:61:0c:84:
                    f7:5a:62:8c:2f:91:ab:8e:1f:ad:e9:b8:61:60:94:
                    f8:b6:08:73:fa:c5:77:e2:52:3c:de:a5:fe:54:7f:
                    62:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:8F:30:C5:72:64:3A:9C:A0:A3:D7:13:F6:27:3F:04:32:16:94:A6
            X509v3 Authority Key Identifier:
                keyid:59:60:E6:CD:1B:1B:00:63:B1:89:0F:78:07:45:C2:45:60:6D:CF:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WWDmzRsbAGOxiQ94B0XCRWBtz3M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/WWDmzRsbAGOxiQ94B0XCRWBtz3M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/d6d1be-10d9-4a3a-bd14-0a830d01afd1/1/WWDmzRsbAGOxiQ94B0XCRWBtz3M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:b8:1c:85:3f:a8:12:eb:5d:21:bb:88:6e:4f:a2:d1:00:9c:
         cb:58:d3:f5:70:01:52:af:39:9f:96:fd:b1:b5:c3:98:70:67:
         41:b3:f0:07:5c:61:f1:ae:6f:64:1f:99:75:8d:33:2d:dd:d8:
         66:51:c8:15:2d:47:06:80:a7:99:be:55:76:d7:cb:e1:44:2e:
         93:6d:eb:f8:b8:93:d3:68:93:26:1d:b1:99:7a:f1:1a:e1:82:
         f6:f0:2c:dc:da:14:8e:b3:50:50:29:b7:4d:5d:1c:69:13:6d:
         30:74:68:1f:00:e4:44:4d:e0:af:39:2d:a2:af:e6:ba:6d:c7:
         cb:9f:08:64:51:a0:41:91:1b:18:cf:30:88:aa:41:34:66:ec:
         09:a6:51:91:9b:d0:32:c5:9b:98:7f:64:1c:ab:0f:74:6e:76:
         9a:06:63:26:3f:85:0c:b8:87:ab:49:24:b2:74:6e:4e:98:e9:
         f6:8a:a8:dc:ee:b8:16:b8:53:16:eb:13:f7:3e:23:d6:c8:40:
         1f:a7:00:b0:6f:76:86:06:d8:a7:c2:4f:2e:7b:8f:6e:78:31:
         48:3d:86:35:33:9f:5c:96:70:77:cf:ad:32:11:c3:a4:29:3c:
         38:d2:89:10:46:04:9f:29:40:a5:f4:84:dc:05:2b:31:ac:5a:
         3f:97:50:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:03 2025 by rpki-client