Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a5b999-f1c7-4b0e-a3de-5383aa626726/1/w-Dp9Xw7CDy2iphjD4pmFYRGjj0.mft
File:                     w-Dp9Xw7CDy2iphjD4pmFYRGjj0.mft (raw, json)
Hash identifier:          PIWr+QzWPAoOTe0bvgaLNg9rovLSadxBRUxZM/l+Q3U=
Subject key identifier:   49:CE:C7:25:8E:EA:9D:35:89:BE:31:A1:86:E5:B7:07:78:8B:DE:89
Authority key identifier: C3:E0:E9:F5:7C:3B:08:3C:B6:8A:98:63:0F:8A:66:15:84:46:8E:3D
Certificate issuer:       /CN=c3e0e9f57c3b083cb68a98630f8a661584468e3d
Certificate serial:       01985457207EEE69E04AF9A01737DBA8C42E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w-Dp9Xw7CDy2iphjD4pmFYRGjj0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/a5b999-f1c7-4b0e-a3de-5383aa626726/1/w-Dp9Xw7CDy2iphjD4pmFYRGjj0.mft
Manifest number:          0C5B
Signing time:             Tue 29 Jul 2025 04:00:52 +0000
Manifest this update:     Tue 29 Jul 2025 04:00:52 +0000
Manifest next update:     Wed 30 Jul 2025 04:00:52 +0000
Files and hashes:         1: 6bwL5YHScOT2TjF50UOzWmSHFbM.roa (hash: J7fubjulsksJL2y5CCyjiA6636klGKicCVaiq1Tvfs4=)
                          2: w-Dp9Xw7CDy2iphjD4pmFYRGjj0.crl (hash: OXbJUwlmyYgdlnHTnTr4PI+iMC6vdw3J754rI+XhUXU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/a5b999-f1c7-4b0e-a3de-5383aa626726/1/w-Dp9Xw7CDy2iphjD4pmFYRGjj0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/a5b999-f1c7-4b0e-a3de-5383aa626726/1/w-Dp9Xw7CDy2iphjD4pmFYRGjj0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w-Dp9Xw7CDy2iphjD4pmFYRGjj0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Jul 2025 23:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:54:57:20:7e:ee:69:e0:4a:f9:a0:17:37:db:a8:c4:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3e0e9f57c3b083cb68a98630f8a661584468e3d
        Validity
            Not Before: Jul 29 04:00:52 2025 GMT
            Not After : Jul 30 04:00:52 2025 GMT
        Subject: CN=49cec7258eea9d3589be31a186e5b707788bde89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:3d:b4:13:c6:7a:4e:83:1d:10:b0:c4:cf:5b:
                    49:4e:dc:04:aa:e9:41:92:c1:c3:23:c9:94:96:35:
                    e0:9d:d2:b3:cc:37:e1:ac:7c:72:8f:ce:10:0a:8e:
                    17:3a:ae:44:de:b2:9d:b7:a5:69:cd:b7:83:28:fa:
                    d8:78:a9:04:22:28:ac:fd:9b:ed:c1:40:85:85:50:
                    d2:91:24:ac:c5:a3:d0:89:3c:03:3f:e6:46:50:1d:
                    98:ca:de:13:31:cd:8b:94:3b:83:64:a0:11:db:4e:
                    0e:3b:b0:88:3d:ee:de:8e:7a:56:e4:c0:97:e8:9a:
                    f8:0c:a2:f5:95:d0:da:4d:b1:6e:e4:cc:ab:67:bc:
                    bb:2a:49:8f:1c:55:8b:d9:c6:39:83:da:cd:38:7e:
                    02:0a:08:41:df:f4:c7:f0:e8:83:d5:bd:a1:42:fe:
                    37:99:48:17:71:96:24:7c:ba:c7:85:6c:bf:c5:e3:
                    01:8e:dd:0a:ea:12:f8:58:92:37:1b:89:e4:b9:8a:
                    da:c7:ae:dd:61:b6:7e:81:7d:13:d0:bd:f7:55:94:
                    f8:5e:b5:0b:ad:4c:d4:f9:11:d2:6c:e6:f6:82:a6:
                    d9:9a:6a:c6:8c:74:6f:f4:3a:dc:9b:58:cc:08:ce:
                    b7:9e:33:d8:12:43:2a:72:b7:c5:f4:f4:bc:8e:eb:
                    37:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:CE:C7:25:8E:EA:9D:35:89:BE:31:A1:86:E5:B7:07:78:8B:DE:89
            X509v3 Authority Key Identifier:
                keyid:C3:E0:E9:F5:7C:3B:08:3C:B6:8A:98:63:0F:8A:66:15:84:46:8E:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w-Dp9Xw7CDy2iphjD4pmFYRGjj0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a5b999-f1c7-4b0e-a3de-5383aa626726/1/w-Dp9Xw7CDy2iphjD4pmFYRGjj0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a5b999-f1c7-4b0e-a3de-5383aa626726/1/w-Dp9Xw7CDy2iphjD4pmFYRGjj0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:23:f2:e9:5c:ee:bd:1d:57:47:0d:06:94:79:bf:18:26:a7:
         6d:2b:00:e1:29:d7:67:de:c6:14:16:66:71:7f:00:b9:c3:6d:
         66:f2:3c:5a:9b:8f:97:3e:34:2c:98:86:13:0a:58:07:7d:43:
         0a:37:ec:81:7c:45:08:0d:d9:02:54:d6:53:85:53:b8:26:1c:
         35:65:54:79:bd:97:3c:62:ba:70:61:69:aa:1b:36:77:24:e8:
         ef:60:54:0b:84:9b:a3:7b:6e:d5:96:d0:43:f8:01:f5:ce:99:
         74:3f:ea:e5:42:78:a4:9f:b7:26:9c:03:af:86:9f:a0:d4:c7:
         07:f0:b2:7c:fb:dd:5b:1f:0b:c7:1d:73:3e:e2:e7:d1:eb:64:
         25:30:d5:34:bf:ab:a8:e4:41:9d:e5:95:41:32:c6:35:ca:9e:
         59:5c:38:39:3c:06:fc:6a:f4:56:07:91:82:5d:c9:2c:ef:e9:
         ec:80:f0:7b:0b:56:82:b4:e1:c7:fa:4a:41:03:3d:0e:c5:42:
         4e:a1:18:e5:a6:15:68:60:68:bd:f0:0e:f4:5a:15:e6:fe:ad:
         61:78:51:4f:c8:97:e2:71:69:9f:45:91:23:ec:3e:de:05:dc:
         1e:41:a1:d4:0d:c8:13:bb:bc:b6:45:30:79:5a:25:b5:9b:1b:
         6a:db:b3:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhUVyB+7mngSvmgFzfbqMQuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzZTBlOWY1N2MzYjA4M2NiNjhhOTg2MzBmOGE2NjE1ODQ0
NjhlM2QwHhcNMjUwNzI5MDQwMDUyWhcNMjUwNzMwMDQwMDUyWjAzMTEwLwYDVQQD
Eyg0OWNlYzcyNThlZWE5ZDM1ODliZTMxYTE4NmU1YjcwNzc4OGJkZTg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7j20E8Z6ToMdELDEz1tJTtwEqulB
ksHDI8mUljXgndKzzDfhrHxyj84QCo4XOq5E3rKdt6VpzbeDKPrYeKkEIiis/Zvt
wUCFhVDSkSSsxaPQiTwDP+ZGUB2Yyt4TMc2LlDuDZKAR204OO7CIPe7ejnpW5MCX
6Jr4DKL1ldDaTbFu5MyrZ7y7KkmPHFWL2cY5g9rNOH4CCghB3/TH8OiD1b2hQv43
mUgXcZYkfLrHhWy/xeMBjt0K6hL4WJI3G4nkuYrax67dYbZ+gX0T0L33VZT4XrUL
rUzU+RHSbOb2gqbZmmrGjHRv9Drcm1jMCM63njPYEkMqcrfF9PS8jus3fwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEnOxyWO6p01ib4xoYbltwd4i96JMB8GA1UdIwQY
MBaAFMPg6fV8Owg8toqYYw+KZhWERo49MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdy1EcDlYdzdDRHkyaXBoakQ0cG1GWVJHamowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9hNWI5OTktZjFjNy00YjBlLWEzZGUt
NTM4M2FhNjI2NzI2LzEvdy1EcDlYdzdDRHkyaXBoakQ0cG1GWVJHamowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS9hNWI5OTktZjFjNy00YjBlLWEzZGUtNTM4M2FhNjI2NzI2
LzEvdy1EcDlYdzdDRHkyaXBoakQ0cG1GWVJHamowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdiPy6Vzu
vR1XRw0GlHm/GCanbSsA4SnXZ97GFBZmcX8AucNtZvI8WpuPlz40LJiGEwpYB31D
CjfsgXxFCA3ZAlTWU4VTuCYcNWVUeb2XPGK6cGFpqhs2dyTo72BUC4Sbo3tu1ZbQ
Q/gB9c6ZdD/q5UJ4pJ+3JpwDr4afoNTHB/CyfPvdWx8Lxx1zPuLn0etkJTDVNL+r
qORBneWVQTLGNcqeWVw4OTwG/Gr0VgeRgl3JLO/p7IDwewtWgrThx/pKQQM9DsVC
TqEY5aYVaGBovfAO9FoV5v6tYXhRT8iX4nFpn0WRI+w+3gXcHkGh1A3IE7u8tkUw
eVoltZsbatuz3A==
-----END CERTIFICATE-----
Generated at Tue Jul 29 07:34:34 2025 by rpki-client