
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.mft
File:                     wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.mft (raw, json)
Hash identifier:          tv4nNXODvITwfrrQT5LHQfm4lcy3M6Wv3ki9OO/TonQ=
Subject key identifier:   19:83:7A:AA:AA:39:5C:CD:17:44:32:BA:6C:B5:EC:CF:CD:84:B4:76
Authority key identifier: C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39
Certificate issuer:       /CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339
Certificate serial:       019A4D3D53431A91AB468AC6ADC43B139C29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.mft
Manifest number:          091E
Signing time:             Tue 04 Nov 2025 05:00:55 +0000
Manifest this update:     Tue 04 Nov 2025 05:00:55 +0000
Manifest next update:     Wed 05 Nov 2025 05:00:55 +0000
Files and hashes:         1: 1-OHLRD334FWm6Zrjcgppie9BswM.roa (hash: urCbs2jOMpV/xBqYvz6vgOCjI2x8EVTTMcQlzcrKQKU=)
                          2: 1TzUGOISzDA60EIuoaOCEldIKdA.roa (hash: BLBlbTPtdydLXzYGnqSxQMivDmgQhsVxzd+uAEw/tSs=)
                          3: 5OAXbGjOqg-vS_55ZPKWFqHiJWs.roa (hash: Xs90gWSaUge8bMFZD1j250L70pMv92DLAovpQ1YIcqQ=)
                          4: 8NHyyXImfpTMW71nUWch0BiF5Xg.roa (hash: eGClbyh1h6xo26ZfLRahAomcB8GyqPbNSmUc+I5rBP8=)
                          5: 8joE7txuqPRptc2U6nWwYuYnOmI.roa (hash: Zwogdhh73hhf4ungwCilm3IbJUadAHNWf9EL+OCOw1Q=)
                          6: 9LlqBOZrF4SBJFApdi1WJjsEJwQ.roa (hash: hM+HJpIJptN08ori750yWre+VYMnzo/BXYZmLiiupXc=)
                          7: AuIUSKV86C7BXB3cKTMOXDDJDxg.roa (hash: zV0DboRCqeI5iUfqxHmafkMKaUmCDd/7aboDtWeZ6H0=)
                          8: BGHFUqVejSgU54raf_BEGdliceQ.roa (hash: /WvBr8+8azpgI7EuGeRsoFRQN1mrpglq6k/jLoAWaPg=)
                          9: FIW7fwGAyJnOAzz2Ig4OquStbIw.roa (hash: Itn/Khoc6SXbHAI9HOvcWbsIu8OiTqhQSGekM+dshLA=)
                          10: Ho010-5FAsL0AW4rW7aJrqoW8g0.roa (hash: RfaotJrye6UjauxHRFgmD8eKhZyY9JvJ6MfjuA1zSxA=)
                          11: IQkntFvhRsdycQaCoTh6uWBlM0w.roa (hash: ObXi/Gh86sV5Yu8bR/iyvVTSXYpSj+cAT5PW6Kmrdqo=)
                          12: Jc4UjjXDIHer7xI93ScihguvNyI.roa (hash: IRfvvMt08HvaaPswtbTpbce96zw5k4oSSFo123wdXVg=)
                          13: P2DSCIMV0HHkBQvcusVrkVUHJ-k.roa (hash: UOdNaKMoFJYMlUedUl0GUGdpyC2yCCaGtSt3gBG0pwM=)
                          14: _vVj7Yf7SEDc0U-oT24hLr9AmWo.roa (hash: j+iJlPVCSfJjs834awahPlI3pwAuXtW3vZid82gyL2c=)
                          15: eNZXxCCzC2aIFELjq6RpMQzGjSs.roa (hash: CXPmpeLWckeBx9Uclq/du3j6HeMssd7O/L4FVYvmJ6k=)
                          16: hEDQykrxXLfCPsLT_Uv4AhZry78.roa (hash: mRss66ZgEty+8I11/rtsJiwoCbdAIsEfAH5G7NCk4R0=)
                          17: iKcwhnEN10fRYRRzzUNUhLbzgII.roa (hash: 8XbU5xfN398bTFEwcsbwpEuYyx6/DG2cMnShSgvLAsw=)
                          18: lx-I99Rz7UE_i9h7mI7tDYnV2-Y.roa (hash: F42LmZoHNcE33lqnHRPsH2ID11JlTB7ve7cZ1cVQPlU=)
                          19: myS70wSaXraGlV45HLBBmwXwrwc.roa (hash: FZsWjRMS6HiCSjpm2cjqK9xWh87tWd8uC6DrqvB4t9Q=)
                          20: ownf_EA4QLCePC3UUTTwGnLoTLw.roa (hash: 93BCrxGb3Lysj+TYISTy8jTAsJzMKioWglq3RX6G7Ok=)
                          21: tVdCCdEU3l5ck10T4yml0loy_Tk.roa (hash: TPMYxPXKGw4cC+8aYDaQvMvT/cUGIMU4toFVtPWVXjI=)
                          22: wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl (hash: Qa5wvLorL+9++6VB+nzlalySOyJLqc7kfmWKT2a8Zaw=)
                          23: xIOo3rZx3f0vOIzSVMh1Ya9ClVc.roa (hash: 6N6kjKKhC2oSPTyjceZNAglAGE7L0pEAqJMjbpNF7V8=)
                          24: z3kWu-yUrhb7i7RJ_9n8Pz6MTKw.roa (hash: G3LXLnUV2U2i7TF7ag92NBNGeKqfOc8dN9b41KiF4QU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 05:00:55 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4d:3d:53:43:1a:91:ab:46:8a:c6:ad:c4:3b:13:9c:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339
        Validity
            Not Before: Nov  4 05:00:55 2025 GMT
            Not After : Nov  5 05:00:55 2025 GMT
        Subject: CN=19837aaaaa395ccd174432ba6cb5eccfcd84b476
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:83:a3:8b:f4:85:94:60:74:54:8e:8f:87:84:
                    b6:4f:7a:36:bd:d6:fb:2a:c7:61:51:b6:c1:e2:e9:
                    0b:d6:0a:2b:d0:3e:41:ea:64:69:97:d2:27:46:3f:
                    e2:e7:18:7f:f3:ec:43:5d:76:b1:c9:85:78:6e:67:
                    58:48:ec:26:7e:aa:6c:91:4f:7c:8b:52:eb:de:f7:
                    be:69:ee:e1:ea:58:06:cb:42:ca:1d:73:dc:16:ff:
                    51:43:29:3c:46:3c:1a:71:38:a6:1f:60:50:4f:37:
                    d6:b0:1a:6c:a8:3f:9d:74:12:b4:8d:e6:b4:69:b3:
                    5e:54:d7:48:35:89:58:6a:7e:fe:21:e7:2a:f5:fc:
                    da:07:d2:40:67:e0:01:e5:27:6e:83:fd:6e:e2:97:
                    88:d7:d5:03:40:ec:d9:52:b2:1f:cf:22:86:1d:7f:
                    de:4b:67:7e:e3:cd:8c:bc:b9:d3:b5:bd:80:45:e0:
                    51:ad:b6:1a:5f:87:81:e8:71:8c:be:e0:5d:a7:c6:
                    3b:36:cf:b0:80:79:f8:43:a7:17:d3:b9:e8:a2:9d:
                    e6:2f:33:93:72:1c:8f:9d:c4:3f:57:4b:76:ef:cf:
                    8e:6c:60:ff:2e:2f:8d:ba:03:fe:60:9b:1f:c4:4a:
                    be:e5:77:6f:7c:0f:a5:e2:88:2e:be:e7:6c:19:f6:
                    42:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:83:7A:AA:AA:39:5C:CD:17:44:32:BA:6C:B5:EC:CF:CD:84:B4:76
            X509v3 Authority Key Identifier:
                keyid:C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         58:6c:8d:f1:86:93:fe:00:71:ec:94:ba:92:28:2f:ac:e7:ef:
         b3:2d:51:98:cc:07:ac:45:e5:ae:78:ef:3e:4e:f1:bf:c0:a7:
         99:f9:4c:3d:46:2f:c7:99:40:c4:82:10:26:17:ce:00:e1:ba:
         61:58:a1:dc:a5:bc:c3:b4:5a:3b:b1:68:01:4f:6b:26:a0:79:
         a7:14:71:29:4c:8f:3b:c8:dd:8c:03:61:28:1a:a7:7c:17:28:
         ff:02:89:be:3f:3b:27:d3:7f:f3:51:71:36:cd:97:4d:99:b5:
         d4:ab:83:4f:08:4d:a9:9a:37:76:35:cf:0d:f8:7b:3f:6f:5d:
         62:bb:b3:2c:bc:9b:89:c1:b0:31:76:9c:e1:83:5f:5f:99:36:
         93:59:83:61:c5:0e:75:bd:23:7d:1c:95:bf:1b:14:74:c1:ea:
         97:84:83:68:ec:e6:81:d3:b7:47:81:81:83:e9:44:42:23:ac:
         2d:5c:84:32:fc:d8:7c:35:4a:78:71:9d:a5:cb:1b:62:da:87:
         65:91:14:4d:34:50:8d:23:01:a2:24:51:7a:d8:7d:7d:84:09:
         05:e0:b7:15:64:e3:27:f5:00:64:b9:a6:10:84:2b:ee:61:99:
         38:fd:e7:dd:4a:7f:6c:dc:9e:12:ce:14:86:1c:c9:be:7a:dd:
         b0:68:b2:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 14:53:50 2025 by rpki-client