Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/wnNYaC3z34vccCRQf5Ls_Frgl7s.mft
File:                     wnNYaC3z34vccCRQf5Ls_Frgl7s.mft (raw, json)
Hash identifier:          Gx4EsHxrw+jUwrh6X+zNue9qlOwVHemNkgpLTvBjVkE=
Subject key identifier:   F9:C1:65:1A:11:B1:D8:CD:03:A6:CF:24:DE:36:B3:69:16:01:19:93
Authority key identifier: C2:73:58:68:2D:F3:DF:8B:DC:70:24:50:7F:92:EC:FC:5A:E0:97:BB
Certificate issuer:       /CN=c27358682df3df8bdc7024507f92ecfc5ae097bb
Certificate serial:       019848F72BA45B519C3323579962E56D146C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wnNYaC3z34vccCRQf5Ls_Frgl7s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/wnNYaC3z34vccCRQf5Ls_Frgl7s.mft
Manifest number:          1607
Signing time:             Sat 26 Jul 2025 23:00:14 +0000
Manifest this update:     Sat 26 Jul 2025 23:00:14 +0000
Manifest next update:     Sun 27 Jul 2025 23:00:14 +0000
Files and hashes:         1: 4nK8mBu8KH58Djeo3td_0Crw3KY.roa (hash: zQgvuYZT7k7Pe+7tNXcpWarsNSwzQ+DP9gqFroEYWW0=)
                          2: LkEe0RaAHIQyFAgqLFfu7IF-fJc.roa (hash: NiYCGksYq+dLcXAYzq8f7QTlHaWi1LxHnyypP6wHNrE=)
                          3: MghkPZ3l1Mt5EpONpLu4boLVfIM.roa (hash: 4PywlPrXiO64YW8z7+xrLPHcnjRQHH/ovXTQM30bxGk=)
                          4: wnNYaC3z34vccCRQf5Ls_Frgl7s.crl (hash: 6aGIKYYC/WM1yw8GlE8HUIpYdf8LjeJXevffMgZIdQU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/wnNYaC3z34vccCRQf5Ls_Frgl7s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/wnNYaC3z34vccCRQf5Ls_Frgl7s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wnNYaC3z34vccCRQf5Ls_Frgl7s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:f7:2b:a4:5b:51:9c:33:23:57:99:62:e5:6d:14:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c27358682df3df8bdc7024507f92ecfc5ae097bb
        Validity
            Not Before: Jul 26 23:00:14 2025 GMT
            Not After : Jul 27 23:00:14 2025 GMT
        Subject: CN=f9c1651a11b1d8cd03a6cf24de36b36916011993
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:10:66:67:e7:2a:54:8b:84:9c:65:3e:d8:c2:
                    84:a8:af:bc:7c:65:a1:61:26:cc:a2:44:aa:4b:31:
                    35:2b:98:74:35:b2:a0:a8:e3:0f:a5:59:ca:e6:e5:
                    84:f6:3b:e8:8b:1f:8b:76:76:cd:f1:de:63:03:d5:
                    f5:48:82:cd:16:d1:f2:a4:99:9c:27:0d:e3:44:ed:
                    78:3e:20:b8:3a:15:04:5a:65:91:5e:46:85:60:be:
                    37:4e:89:6b:ab:b9:67:b2:a4:fe:63:d0:5e:75:2f:
                    b9:5d:a7:f9:02:ee:9a:55:e4:de:75:2c:f6:6c:9f:
                    f7:a2:87:cd:c1:2f:97:a8:72:08:57:6f:4b:82:96:
                    5e:88:b6:2c:27:1e:10:48:3d:f5:d4:af:c7:a6:6e:
                    21:53:d2:0b:f1:a6:ea:c8:66:6d:39:a6:55:4f:36:
                    d1:e6:93:64:f2:1c:08:49:58:d3:9c:ac:e3:60:d9:
                    23:29:df:44:57:5f:53:f2:da:ad:9a:10:48:0d:f3:
                    a0:51:41:ae:83:6d:82:07:e6:9e:85:12:47:16:dc:
                    6f:86:48:ac:e7:f6:6c:9f:91:23:40:35:66:c3:f6:
                    46:17:d6:4b:ab:07:e1:01:ea:ea:d2:0d:9b:d6:5c:
                    d4:3d:27:9d:87:54:7e:a0:d9:4a:68:af:b9:02:25:
                    78:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:C1:65:1A:11:B1:D8:CD:03:A6:CF:24:DE:36:B3:69:16:01:19:93
            X509v3 Authority Key Identifier:
                keyid:C2:73:58:68:2D:F3:DF:8B:DC:70:24:50:7F:92:EC:FC:5A:E0:97:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wnNYaC3z34vccCRQf5Ls_Frgl7s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/wnNYaC3z34vccCRQf5Ls_Frgl7s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f449b3-d8a8-493e-9bd7-e88465c46186/1/wnNYaC3z34vccCRQf5Ls_Frgl7s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:2e:09:73:60:c1:2b:38:45:bc:e6:43:fc:1b:d7:cc:3e:6b:
         01:a9:fa:16:82:3c:0a:60:ad:16:98:41:a1:2d:d7:1d:7c:18:
         40:a5:23:0b:75:c7:bf:44:09:a6:a5:bb:a0:4c:5e:0f:61:31:
         7a:b4:68:d0:15:bf:5d:da:49:29:bc:78:76:a4:51:83:0d:f1:
         4f:53:21:c3:1d:db:1a:b5:46:5f:a0:52:66:1d:f7:42:1f:b8:
         41:ea:df:66:31:f1:99:51:e2:bd:dd:f1:c2:fe:d7:ea:fe:4b:
         47:a5:88:9e:85:6c:ca:91:77:c4:6c:90:41:0a:05:3f:d3:69:
         42:aa:00:48:b6:b2:8c:39:1b:27:19:64:96:7f:57:d2:51:c3:
         40:8d:35:80:37:21:82:bd:d3:64:0f:3b:c4:33:0a:1c:76:fa:
         be:4e:e8:40:f9:55:c8:3e:aa:78:fe:3d:90:dd:97:26:03:c3:
         6a:32:f4:10:e5:2b:a5:3c:97:1f:7e:45:7d:7e:6d:9b:4b:4a:
         50:64:ca:55:b4:ef:1b:65:03:88:a8:09:ee:62:71:d1:a6:3f:
         b7:d4:35:38:d5:b9:e2:67:0d:98:72:e1:83:9c:f2:a5:c1:75:
         8d:9d:5f:e9:00:b8:0a:c8:04:4f:e0:c7:b3:f3:79:8b:5a:97:
         db:db:90:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhI9yukW1GcMyNXmWLlbRRsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyNzM1ODY4MmRmM2RmOGJkYzcwMjQ1MDdmOTJlY2ZjNWFl
MDk3YmIwHhcNMjUwNzI2MjMwMDE0WhcNMjUwNzI3MjMwMDE0WjAzMTEwLwYDVQQD
EyhmOWMxNjUxYTExYjFkOGNkMDNhNmNmMjRkZTM2YjM2OTE2MDExOTkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7RBmZ+cqVIuEnGU+2MKEqK+8fGWh
YSbMokSqSzE1K5h0NbKgqOMPpVnK5uWE9jvoix+LdnbN8d5jA9X1SILNFtHypJmc
Jw3jRO14PiC4OhUEWmWRXkaFYL43Tolrq7lnsqT+Y9BedS+5Xaf5Au6aVeTedSz2
bJ/3oofNwS+XqHIIV29LgpZeiLYsJx4QSD311K/Hpm4hU9IL8abqyGZtOaZVTzbR
5pNk8hwISVjTnKzjYNkjKd9EV19T8tqtmhBIDfOgUUGug22CB+aehRJHFtxvhkis
5/Zsn5EjQDVmw/ZGF9ZLqwfhAerq0g2b1lzUPSedh1R+oNlKaK+5AiV4pQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPnBZRoRsdjNA6bPJN42s2kWARmTMB8GA1UdIwQY
MBaAFMJzWGgt89+L3HAkUH+S7Pxa4Je7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd25OWWFDM3ozNHZjY0NSUWY1THNfRnJnbDdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9mNDQ5YjMtZDhhOC00OTNlLTliZDct
ZTg4NDY1YzQ2MTg2LzEvd25OWWFDM3ozNHZjY0NSUWY1THNfRnJnbDdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS9mNDQ5YjMtZDhhOC00OTNlLTliZDctZTg4NDY1YzQ2MTg2
LzEvd25OWWFDM3ozNHZjY0NSUWY1THNfRnJnbDdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASy4Jc2DB
KzhFvOZD/BvXzD5rAan6FoI8CmCtFphBoS3XHXwYQKUjC3XHv0QJpqW7oExeD2Ex
erRo0BW/XdpJKbx4dqRRgw3xT1Mhwx3bGrVGX6BSZh33Qh+4QerfZjHxmVHivd3x
wv7X6v5LR6WInoVsypF3xGyQQQoFP9NpQqoASLayjDkbJxlkln9X0lHDQI01gDch
gr3TZA87xDMKHHb6vk7oQPlVyD6qeP49kN2XJgPDajL0EOUrpTyXH35FfX5tm0tK
UGTKVbTvG2UDiKgJ7mJx0aY/t9Q1ONW54mcNmHLhg5zypcF1jZ1f6QC4CsgET+DH
s/N5i1qX29uQzg==
-----END CERTIFICATE-----
Generated at Sun Jul 27 08:34:29 2025 by rpki-client