Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/34536a-771a-4775-b2bd-cac8ed76a844/1/W4oWUi7DSxxbxHCCBswZY6FbvbE.mft
File:                     W4oWUi7DSxxbxHCCBswZY6FbvbE.mft (raw, json)
Hash identifier:          TjbYn2hdT4BYbzrQdFNQX+lA1GooP1hxHIVKLfOjsCg=
Subject key identifier:   C0:98:03:BD:30:26:78:C5:1D:89:22:2B:31:8E:BD:83:12:2A:4F:3E
Authority key identifier: 5B:8A:16:52:2E:C3:4B:1C:5B:C4:70:82:06:CC:19:63:A1:5B:BD:B1
Certificate issuer:       /CN=5b8a16522ec34b1c5bc4708206cc1963a15bbdb1
Certificate serial:       019A52D1B9B10621EC298BCD970557F276FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W4oWUi7DSxxbxHCCBswZY6FbvbE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/34536a-771a-4775-b2bd-cac8ed76a844/1/W4oWUi7DSxxbxHCCBswZY6FbvbE.mft
Manifest number:          155A
Signing time:             Wed 05 Nov 2025 07:01:07 +0000
Manifest this update:     Wed 05 Nov 2025 07:01:07 +0000
Manifest next update:     Thu 06 Nov 2025 07:01:07 +0000
Files and hashes:         1: MFMIui6m_VAgNwJXoFmjzhgjkd4.roa (hash: sGrw2YLX0YcDM2ukpHiB5+csfltQ5EBKIutK5Tcnjdw=)
                          2: W4oWUi7DSxxbxHCCBswZY6FbvbE.crl (hash: jt6sINrCAW65ZbCLfuEeyUufEb4vao27ZXyZdE9F+aM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/34536a-771a-4775-b2bd-cac8ed76a844/1/W4oWUi7DSxxbxHCCBswZY6FbvbE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/34536a-771a-4775-b2bd-cac8ed76a844/1/W4oWUi7DSxxbxHCCBswZY6FbvbE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W4oWUi7DSxxbxHCCBswZY6FbvbE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 06 Nov 2025 07:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:52:d1:b9:b1:06:21:ec:29:8b:cd:97:05:57:f2:76:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b8a16522ec34b1c5bc4708206cc1963a15bbdb1
        Validity
            Not Before: Nov  5 07:01:07 2025 GMT
            Not After : Nov  6 07:01:07 2025 GMT
        Subject: CN=c09803bd302678c51d89222b318ebd83122a4f3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:34:ea:18:44:09:81:56:92:fd:f9:c3:ef:2c:
                    8b:d4:d4:b5:af:08:79:90:02:9b:15:77:77:19:2c:
                    be:74:c6:08:88:b1:b3:19:37:4d:d4:cd:a5:dc:89:
                    eb:2c:ac:74:61:b8:7c:c0:62:c1:a0:51:22:d6:89:
                    80:4c:cb:f2:8d:ee:d4:a7:ad:76:38:c3:63:12:09:
                    e3:99:63:2d:43:40:b0:00:ae:06:54:8f:c4:98:9f:
                    22:bd:a9:a9:0b:30:fc:cd:6a:08:c5:97:99:a8:6c:
                    03:5f:44:10:c8:12:eb:38:66:f7:1f:d4:54:80:fe:
                    2c:22:fc:e5:62:bf:ec:51:8e:dd:47:a0:6d:59:1b:
                    9a:94:d2:c6:32:34:2b:64:8e:8c:4e:fc:7b:09:89:
                    94:b1:dc:ca:b3:99:8a:22:57:5a:c3:ea:5d:f6:bb:
                    52:c7:d0:99:19:b7:d1:81:e4:ec:dd:c3:ce:ba:4e:
                    c9:84:f5:75:15:5e:5f:55:22:92:37:43:7c:aa:80:
                    66:1f:7d:6b:51:e7:68:bd:b7:84:ad:2b:af:f1:24:
                    40:b7:65:b5:ec:09:35:08:c2:24:05:dd:97:00:ee:
                    46:1e:d1:e2:c9:84:f4:bd:90:ff:39:df:2e:c3:79:
                    30:6d:1d:24:0c:5d:b8:d3:3b:5e:fb:d7:a6:cc:c9:
                    95:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:98:03:BD:30:26:78:C5:1D:89:22:2B:31:8E:BD:83:12:2A:4F:3E
            X509v3 Authority Key Identifier:
                keyid:5B:8A:16:52:2E:C3:4B:1C:5B:C4:70:82:06:CC:19:63:A1:5B:BD:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W4oWUi7DSxxbxHCCBswZY6FbvbE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/34536a-771a-4775-b2bd-cac8ed76a844/1/W4oWUi7DSxxbxHCCBswZY6FbvbE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/34536a-771a-4775-b2bd-cac8ed76a844/1/W4oWUi7DSxxbxHCCBswZY6FbvbE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:bc:54:3a:f5:ec:61:8c:63:48:1c:6c:8c:c9:bf:f3:f6:ce:
         cb:f6:e2:e8:0d:fc:60:90:41:81:29:f0:2b:1f:fa:52:28:70:
         e0:ac:e8:da:40:81:97:fd:91:bd:d3:83:8f:04:73:fe:bb:63:
         75:72:73:ca:e9:27:91:34:1a:e1:27:27:f0:e7:e1:fc:85:08:
         bd:10:18:26:0a:bd:21:6f:fa:35:5c:e0:d8:14:d3:68:2e:00:
         78:d6:42:ba:34:7d:71:b8:44:89:61:46:ef:8d:8a:0e:59:0a:
         dc:41:df:15:16:c7:86:e2:c1:ac:f9:24:bc:5e:a1:ab:cf:6d:
         09:59:9b:b6:e2:f8:b7:10:97:2f:53:9f:fb:78:03:d4:df:0e:
         4b:50:d8:d0:5a:7a:da:22:c0:80:e0:ca:12:6a:8b:07:59:fd:
         9e:df:c4:c3:3c:5c:1d:90:56:5f:2b:20:a0:5f:4f:85:2e:4a:
         dc:08:5f:c4:b6:11:fb:d9:25:72:6d:25:d1:2a:24:95:a5:b9:
         b5:d9:7d:a1:8f:19:1d:b2:0a:e9:d1:5d:f9:2b:03:c1:91:f0:
         d0:fd:19:9a:d7:74:85:9a:5d:70:ad:65:0c:0f:4d:fc:53:9c:
         ca:a1:ec:1c:d4:52:13:a3:0a:ee:dc:f7:d0:fc:3d:d1:a8:97:
         39:07:23:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:44:44 2025 by rpki-client