Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/b27203-9d48-49a5-af25-49d40a13cbc2/1/wly3EywZ99UfAC7UrYEa7PWyD1c.mft
File:                     wly3EywZ99UfAC7UrYEa7PWyD1c.mft (raw, json)
Hash identifier:          e7Et+8KlPyHafJ7VActzyHKjsjLRD10zmRhy8x1674k=
Subject key identifier:   F0:00:8C:B9:CF:A2:7D:F0:72:5F:BB:A3:66:AB:90:4F:17:A0:5A:00
Authority key identifier: C2:5C:B7:13:2C:19:F7:D5:1F:00:2E:D4:AD:81:1A:EC:F5:B2:0F:57
Certificate issuer:       /CN=c25cb7132c19f7d51f002ed4ad811aecf5b20f57
Certificate serial:       019A4DAA8B4CC5F3F6A79C906638F1734515
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wly3EywZ99UfAC7UrYEa7PWyD1c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/b27203-9d48-49a5-af25-49d40a13cbc2/1/wly3EywZ99UfAC7UrYEa7PWyD1c.mft
Manifest number:          0909
Signing time:             Tue 04 Nov 2025 07:00:13 +0000
Manifest this update:     Tue 04 Nov 2025 07:00:13 +0000
Manifest next update:     Wed 05 Nov 2025 07:00:13 +0000
Files and hashes:         1: 0yK9CSc1iwH9Ha7iv7t9MQLBMSc.roa (hash: rrGUPdLm/yz0jAaBzRKBfGiiUHE1bJZVAlwYqWnvc2g=)
                          2: Mr7THJO68NohwknMfTQKnqHV-vc.roa (hash: knt9VF7cf9YizkNpPo4OGyLEE0z8MhXR+E+kt4mIdVA=)
                          3: TB6H5V1Ni-tKp6BX2r-SHLcytb4.roa (hash: 0fhq54aZgsVM/k0+CX/b9ZvdCc1x5cY4r3GXAZAMq6M=)
                          4: qFBBKSstVuYlvg1tCU9IRdG8_KQ.roa (hash: woIS65FxXCdUB0qPb1Sk66filHI9SQzJMbXAm2PrCSk=)
                          5: wly3EywZ99UfAC7UrYEa7PWyD1c.crl (hash: hsZSVQbC+ud+njTkk7oFHc3bO4v7ehf+QPEy6uwa8oE=)
                          6: zSfZVih6hBceUixRgoQRbTOqrPs.roa (hash: azI0MEflNFx/avYXf2xzg+zXEruqyuhKpmbLg+R7a0o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/b27203-9d48-49a5-af25-49d40a13cbc2/1/wly3EywZ99UfAC7UrYEa7PWyD1c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/b27203-9d48-49a5-af25-49d40a13cbc2/1/wly3EywZ99UfAC7UrYEa7PWyD1c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wly3EywZ99UfAC7UrYEa7PWyD1c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 07:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4d:aa:8b:4c:c5:f3:f6:a7:9c:90:66:38:f1:73:45:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c25cb7132c19f7d51f002ed4ad811aecf5b20f57
        Validity
            Not Before: Nov  4 07:00:13 2025 GMT
            Not After : Nov  5 07:00:13 2025 GMT
        Subject: CN=f0008cb9cfa27df0725fbba366ab904f17a05a00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:eb:07:87:db:ae:5c:59:58:e9:4b:f1:f2:41:
                    03:34:1e:67:d7:72:9b:c6:13:5c:2a:f9:de:42:c5:
                    b5:50:50:ac:3f:d9:3e:c1:93:14:34:9e:0f:95:cb:
                    98:93:22:0f:a7:87:67:5f:80:bd:e3:d1:72:fa:6e:
                    66:b6:f0:a3:9b:8d:f1:7d:b6:c5:49:34:41:68:71:
                    87:e1:41:49:26:12:71:3f:f7:e7:8c:2c:38:f2:c5:
                    d4:2e:26:56:93:4f:c3:45:c3:46:af:a7:14:10:b3:
                    28:61:00:0e:37:24:32:8d:10:99:3b:7a:3a:da:a6:
                    b0:c5:65:04:de:65:74:fd:4a:86:7e:d3:18:fa:bd:
                    57:b4:2e:45:f4:c1:f5:4a:3f:06:66:b1:06:fa:88:
                    91:47:d1:50:80:a2:90:06:31:05:22:e8:40:ee:7f:
                    a0:c3:6a:e1:2c:fc:81:cd:e4:fc:22:4d:96:8b:9c:
                    57:ed:71:ed:39:6c:00:58:ab:ca:3c:9f:9d:71:95:
                    97:55:76:a4:5d:72:96:db:34:f4:38:f1:cc:6c:3e:
                    34:bb:cb:e9:35:c9:b3:59:bd:50:a5:b2:78:69:2d:
                    f5:42:14:78:09:4b:e0:e4:da:7d:47:54:6f:cb:f2:
                    f3:f0:13:a5:92:06:de:a2:61:c1:5c:92:cf:0b:4f:
                    8e:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:00:8C:B9:CF:A2:7D:F0:72:5F:BB:A3:66:AB:90:4F:17:A0:5A:00
            X509v3 Authority Key Identifier:
                keyid:C2:5C:B7:13:2C:19:F7:D5:1F:00:2E:D4:AD:81:1A:EC:F5:B2:0F:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wly3EywZ99UfAC7UrYEa7PWyD1c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/b27203-9d48-49a5-af25-49d40a13cbc2/1/wly3EywZ99UfAC7UrYEa7PWyD1c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/b27203-9d48-49a5-af25-49d40a13cbc2/1/wly3EywZ99UfAC7UrYEa7PWyD1c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:55:ae:c6:d7:6b:96:b8:9c:8a:af:df:72:c0:6b:90:61:49:
         91:49:86:3a:74:8f:56:f3:c2:29:60:b2:2e:5d:43:2c:f4:05:
         cd:6b:22:a6:31:12:1b:81:20:b9:91:0d:00:33:59:f0:b4:2c:
         1d:1c:b9:cb:59:3f:d9:28:dd:69:e2:aa:36:36:11:7b:ae:4c:
         12:55:dc:34:1a:d9:79:68:23:94:6f:91:9a:fc:93:21:9d:30:
         cf:37:32:40:2a:ae:7c:f7:b2:b5:6a:45:ad:42:98:38:50:b3:
         3c:41:52:9e:77:cd:aa:e6:03:52:98:bd:5f:6a:a4:73:80:8b:
         3c:76:2c:2c:41:02:e1:ad:07:cc:47:de:18:9b:16:7b:16:2e:
         c7:0e:7d:23:67:11:ac:17:a6:1c:00:fe:56:45:04:c8:da:73:
         d9:60:48:17:49:a4:9b:e1:38:47:8b:aa:d2:f4:19:46:f1:70:
         03:08:3b:d7:f5:0b:54:2e:e5:9a:f8:cd:d5:f7:1c:bc:b8:aa:
         cd:18:fd:6e:cc:14:b3:e0:a3:06:c2:c3:b4:fb:d2:55:a0:18:
         16:cb:40:26:f1:53:89:0d:00:ec:78:4c:c2:35:83:4f:85:53:
         63:b0:36:9e:3e:69:35:1b:8b:9e:32:40:78:19:28:95:e4:53:
         42:76:1e:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:29 2025 by rpki-client