Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/a40066-05ea-403e-b8e7-07cf0b33a849/1/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.mft
File:                     wGy1ZC6H1OTgMJCEIo4p5pme0Lc.mft (raw, json)
Hash identifier:          AJMYcEhMMN6x83PtghJJIJKRm0RoiyLOvATVddlRz/A=
Subject key identifier:   42:C1:0D:60:57:72:C5:6C:92:7D:12:E0:44:38:EA:B3:8B:B2:32:A5
Authority key identifier: C0:6C:B5:64:2E:87:D4:E4:E0:30:90:84:22:8E:29:E6:99:9E:D0:B7
Certificate issuer:       /CN=c06cb5642e87d4e4e0309084228e29e6999ed0b7
Certificate serial:       019848528610C733CB426D9EE0184F412FA1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/a40066-05ea-403e-b8e7-07cf0b33a849/1/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.mft
Manifest number:          0879
Signing time:             Sat 26 Jul 2025 20:00:24 +0000
Manifest this update:     Sat 26 Jul 2025 20:00:24 +0000
Manifest next update:     Sun 27 Jul 2025 20:00:24 +0000
Files and hashes:         1: U3hg_F1n66wHfUJa1B5AwM1jPe0.roa (hash: P69ebvhq55UOViQWYuaYwNEg2G9WcwEDt0JaOwktWKA=)
                          2: wGy1ZC6H1OTgMJCEIo4p5pme0Lc.crl (hash: WlJjD1aACP3+CtPQxOOgPpSPQcyKq8h9yJqFgj7AYfY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/a40066-05ea-403e-b8e7-07cf0b33a849/1/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/a40066-05ea-403e-b8e7-07cf0b33a849/1/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:52:86:10:c7:33:cb:42:6d:9e:e0:18:4f:41:2f:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c06cb5642e87d4e4e0309084228e29e6999ed0b7
        Validity
            Not Before: Jul 26 20:00:24 2025 GMT
            Not After : Jul 27 20:00:24 2025 GMT
        Subject: CN=42c10d605772c56c927d12e04438eab38bb232a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:34:4e:35:2f:27:c7:7d:41:bd:55:e6:dc:48:
                    84:54:d3:03:e1:c5:4c:8b:cc:1a:b0:0d:1c:50:b6:
                    7a:86:17:1e:7c:ea:3a:6d:39:1d:35:f7:9b:88:1b:
                    a4:48:26:f4:2a:09:55:af:84:4b:de:06:52:a7:83:
                    df:e8:b6:75:a5:80:9a:d0:3d:24:ee:64:0c:1a:14:
                    0f:22:a1:c3:6e:3a:65:43:ab:d3:b8:06:3b:3f:28:
                    d2:e6:e0:24:cc:23:b2:2b:40:28:54:fb:ef:d7:a6:
                    a1:ad:c3:48:75:10:f7:f7:bf:e5:59:71:7f:2f:c3:
                    c1:7f:f1:ca:94:48:d9:46:4a:96:01:23:3a:22:1e:
                    c1:e9:49:91:6d:03:5e:f2:5d:f3:da:98:2a:32:d1:
                    4b:f4:83:46:57:f7:35:53:dc:51:be:80:fc:66:83:
                    8b:b9:2b:5b:f4:93:97:8f:06:74:6d:73:2a:25:16:
                    2b:9e:28:af:1c:84:be:7e:2c:79:ba:bd:6e:28:dc:
                    f7:90:2f:7e:73:7b:a7:ff:89:76:db:58:39:6e:da:
                    46:88:5f:3e:e2:e6:1a:a9:e8:13:ee:5a:35:07:07:
                    63:0a:cd:1b:6a:a4:83:74:06:23:ba:81:f4:ca:8d:
                    9b:d3:65:5a:36:ba:50:ce:1f:cc:a6:60:f1:18:69:
                    97:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:C1:0D:60:57:72:C5:6C:92:7D:12:E0:44:38:EA:B3:8B:B2:32:A5
            X509v3 Authority Key Identifier:
                keyid:C0:6C:B5:64:2E:87:D4:E4:E0:30:90:84:22:8E:29:E6:99:9E:D0:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a40066-05ea-403e-b8e7-07cf0b33a849/1/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a40066-05ea-403e-b8e7-07cf0b33a849/1/wGy1ZC6H1OTgMJCEIo4p5pme0Lc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:f7:32:9e:fa:01:cf:da:67:04:10:ef:42:ac:a4:05:02:fb:
         b1:a4:22:4c:ae:9d:0b:0b:85:89:9b:a4:29:b7:49:c2:0d:90:
         64:ca:c8:30:d4:25:5a:b5:2d:83:3d:6e:fe:23:a1:a4:0a:5b:
         99:19:bb:22:b0:e9:fd:7a:7e:71:9b:d8:59:42:ce:3c:8d:ad:
         5f:d9:a3:78:7c:24:11:26:c4:a6:d4:c7:af:77:26:ff:76:c5:
         b6:53:3a:23:5a:aa:fe:c8:1f:7b:4c:92:37:b1:1b:53:6b:0f:
         a1:a9:21:ae:e1:63:9b:b0:8b:81:d1:05:8b:3c:8b:f8:ad:70:
         92:13:90:25:d0:cf:29:3b:44:9a:d2:c3:14:ea:97:b5:08:fc:
         5d:0d:f5:a5:90:4a:c6:a6:53:e8:30:ef:91:a7:9f:df:a3:71:
         f7:d9:f9:4b:0c:03:a0:5e:ed:54:f1:4b:63:4f:8e:aa:4a:18:
         c2:b9:e4:4a:e0:8a:72:3c:61:7e:1f:77:88:03:af:fd:36:d9:
         0b:b5:b7:7d:2e:8e:f3:87:c2:b0:66:c0:ab:66:b4:22:e7:7c:
         6a:ab:dc:a0:1c:99:f2:b7:da:54:b9:79:63:4f:bf:01:85:6a:
         8b:b8:70:7a:e0:f8:05:07:99:f4:36:08:f3:51:64:7c:a9:0e:
         5b:11:42:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhIUoYQxzPLQm2e4BhPQS+hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwNmNiNTY0MmU4N2Q0ZTRlMDMwOTA4NDIyOGUyOWU2OTk5
ZWQwYjcwHhcNMjUwNzI2MjAwMDI0WhcNMjUwNzI3MjAwMDI0WjAzMTEwLwYDVQQD
Eyg0MmMxMGQ2MDU3NzJjNTZjOTI3ZDEyZTA0NDM4ZWFiMzhiYjIzMmE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzRONS8nx31BvVXm3EiEVNMD4cVM
i8wasA0cULZ6hhcefOo6bTkdNfebiBukSCb0KglVr4RL3gZSp4Pf6LZ1pYCa0D0k
7mQMGhQPIqHDbjplQ6vTuAY7PyjS5uAkzCOyK0AoVPvv16ahrcNIdRD397/lWXF/
L8PBf/HKlEjZRkqWASM6Ih7B6UmRbQNe8l3z2pgqMtFL9INGV/c1U9xRvoD8ZoOL
uStb9JOXjwZ0bXMqJRYrniivHIS+fix5ur1uKNz3kC9+c3un/4l221g5btpGiF8+
4uYaqegT7lo1BwdjCs0baqSDdAYjuoH0yo2b02VaNrpQzh/MpmDxGGmXdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFELBDWBXcsVskn0S4EQ46rOLsjKlMB8GA1UdIwQY
MBaAFMBstWQuh9Tk4DCQhCKOKeaZntC3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0d5MVpDNkgxT1RnTUpDRUlvNHA1cG1lMExjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9hNDAwNjYtMDVlYS00MDNlLWI4ZTct
MDdjZjBiMzNhODQ5LzEvd0d5MVpDNkgxT1RnTUpDRUlvNHA1cG1lMExjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS9hNDAwNjYtMDVlYS00MDNlLWI4ZTctMDdjZjBiMzNhODQ5
LzEvd0d5MVpDNkgxT1RnTUpDRUlvNHA1cG1lMExjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXvcynvoB
z9pnBBDvQqykBQL7saQiTK6dCwuFiZukKbdJwg2QZMrIMNQlWrUtgz1u/iOhpApb
mRm7IrDp/Xp+cZvYWULOPI2tX9mjeHwkESbEptTHr3cm/3bFtlM6I1qq/sgfe0yS
N7EbU2sPoakhruFjm7CLgdEFizyL+K1wkhOQJdDPKTtEmtLDFOqXtQj8XQ31pZBK
xqZT6DDvkaef36Nx99n5SwwDoF7tVPFLY0+OqkoYwrnkSuCKcjxhfh93iAOv/TbZ
C7W3fS6O84fCsGbAq2a0Iud8aqvcoByZ8rfaVLl5Y0+/AYVqi7hweuD4BQeZ9DYI
81FkfKkOWxFCZg==
-----END CERTIFICATE-----
Generated at Sun Jul 27 01:22:15 2025 by rpki-client