Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/1af625-c6ba-49db-af64-34928f9a1c4f/1/wZGnvy8Dpn_f_LcUS9L4EU3N07M.mft
File:                     wZGnvy8Dpn_f_LcUS9L4EU3N07M.mft (raw, json)
Hash identifier:          BVJqNNofoE+Ltop/7dG23qNoWyDWLwIVZthIv7a1yoo=
Subject key identifier:   5D:F3:44:7B:7A:DA:D4:19:9C:B3:B2:D9:15:F0:E7:CA:2A:04:6E:94
Authority key identifier: C1:91:A7:BF:2F:03:A6:7F:DF:FC:B7:14:4B:D2:F8:11:4D:CD:D3:B3
Certificate issuer:       /CN=c191a7bf2f03a67fdffcb7144bd2f8114dcdd3b3
Certificate serial:       01984964EE4910778B78FB00150371805F3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wZGnvy8Dpn_f_LcUS9L4EU3N07M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/1af625-c6ba-49db-af64-34928f9a1c4f/1/wZGnvy8Dpn_f_LcUS9L4EU3N07M.mft
Manifest number:          101C
Signing time:             Sun 27 Jul 2025 01:00:07 +0000
Manifest this update:     Sun 27 Jul 2025 01:00:07 +0000
Manifest next update:     Mon 28 Jul 2025 01:00:07 +0000
Files and hashes:         1: lXUonjcSHCnymM91YbnZZiIsRN8.roa (hash: xXJI5eW/OF93m/2hmmdgRHEZ3HJ/JWAyNrsIG/LgwyM=)
                          2: wZGnvy8Dpn_f_LcUS9L4EU3N07M.crl (hash: MMDnCX7dbftOWCoEMn0wMQVJIDuGKqA2PmKZpkULYpU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/1af625-c6ba-49db-af64-34928f9a1c4f/1/wZGnvy8Dpn_f_LcUS9L4EU3N07M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/1af625-c6ba-49db-af64-34928f9a1c4f/1/wZGnvy8Dpn_f_LcUS9L4EU3N07M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wZGnvy8Dpn_f_LcUS9L4EU3N07M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:64:ee:49:10:77:8b:78:fb:00:15:03:71:80:5f:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c191a7bf2f03a67fdffcb7144bd2f8114dcdd3b3
        Validity
            Not Before: Jul 27 01:00:07 2025 GMT
            Not After : Jul 28 01:00:07 2025 GMT
        Subject: CN=5df3447b7adad4199cb3b2d915f0e7ca2a046e94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:22:7e:fc:cc:28:ad:cb:af:87:5c:ef:b0:cf:
                    e1:33:68:09:b4:db:58:86:1e:92:ac:74:f6:ee:72:
                    a9:e5:e1:71:bc:55:42:fe:13:05:22:a3:14:b4:be:
                    e9:74:19:b6:4e:f7:83:45:56:0d:f7:2f:6a:19:0e:
                    70:63:f5:68:93:20:9d:90:72:be:ad:f5:1d:23:7c:
                    f1:75:fc:c3:81:d2:03:e8:fc:07:3d:9a:1d:1e:71:
                    6f:94:46:e7:75:d9:a8:5a:ef:cf:17:88:06:8f:9e:
                    67:21:40:50:da:4b:44:f6:e7:0a:c8:93:0e:58:8e:
                    b6:17:9b:74:e3:c5:e3:c8:ca:2b:ff:64:6d:ae:c3:
                    9e:8e:98:f3:46:05:c3:6e:2c:2c:b5:a8:26:91:23:
                    59:f6:20:84:c2:ba:05:25:bc:ef:6c:9e:6f:62:db:
                    7f:3a:68:07:35:bf:0b:98:1e:83:f9:71:aa:e1:2e:
                    3b:c7:c5:47:e0:6d:56:71:d7:41:64:c5:79:bb:ce:
                    9b:7b:6c:3c:f0:dc:91:8c:b6:ed:2e:bf:60:80:83:
                    72:12:1d:47:08:a3:f5:09:ee:9c:cd:7e:ce:04:07:
                    b5:65:52:06:e3:18:c7:93:2c:57:10:9d:7a:81:e1:
                    17:5c:49:34:d3:51:5d:b3:cf:08:7d:22:ac:0b:c5:
                    cb:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:F3:44:7B:7A:DA:D4:19:9C:B3:B2:D9:15:F0:E7:CA:2A:04:6E:94
            X509v3 Authority Key Identifier:
                keyid:C1:91:A7:BF:2F:03:A6:7F:DF:FC:B7:14:4B:D2:F8:11:4D:CD:D3:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wZGnvy8Dpn_f_LcUS9L4EU3N07M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1af625-c6ba-49db-af64-34928f9a1c4f/1/wZGnvy8Dpn_f_LcUS9L4EU3N07M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1af625-c6ba-49db-af64-34928f9a1c4f/1/wZGnvy8Dpn_f_LcUS9L4EU3N07M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:76:e7:84:c4:f1:f7:c7:1a:c0:98:0c:1b:50:8e:7b:c2:64:
         6b:14:73:ad:80:e6:4e:e0:18:a0:b9:63:ea:93:b5:d9:45:b7:
         07:ec:84:e2:63:17:d7:61:85:26:45:ed:f6:ef:33:a8:2c:33:
         a7:19:07:03:c0:f6:d4:41:35:0c:9a:23:75:91:71:02:59:cc:
         23:98:7b:23:fc:90:3c:f5:b3:d6:da:b6:83:75:2f:0a:bb:1e:
         ad:9e:1e:50:fe:d2:d0:5a:f3:ad:2e:39:d2:be:fb:c4:cb:30:
         d8:e0:48:d2:fe:29:38:d5:68:4b:0f:8b:d9:ce:9e:36:65:2f:
         b1:1d:3f:78:d0:56:6b:2f:7f:91:dc:bb:2d:88:ed:af:d6:02:
         60:fe:d0:a5:04:82:b5:51:d3:06:4e:81:1e:cf:5b:cf:45:9a:
         89:33:09:ca:98:f1:b5:c6:8c:b7:0f:d0:3e:3d:1e:c7:50:93:
         37:43:13:e4:9d:87:e5:79:4b:58:71:39:99:6a:e9:e3:7a:4a:
         03:9b:89:a6:47:17:92:69:d6:7c:d6:1a:1a:a5:a6:9e:e9:4f:
         a3:8a:c0:b5:b6:6b:25:ef:b4:97:a6:14:b7:ec:ff:ca:33:c4:
         c4:16:97:01:2e:f7:7e:52:54:d9:e3:33:39:12:06:28:71:e6:
         c1:15:ed:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJZO5JEHeLePsAFQNxgF86MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxOTFhN2JmMmYwM2E2N2ZkZmZjYjcxNDRiZDJmODExNGRj
ZGQzYjMwHhcNMjUwNzI3MDEwMDA3WhcNMjUwNzI4MDEwMDA3WjAzMTEwLwYDVQQD
Eyg1ZGYzNDQ3YjdhZGFkNDE5OWNiM2IyZDkxNWYwZTdjYTJhMDQ2ZTk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyCJ+/Mworcuvh1zvsM/hM2gJtNtY
hh6SrHT27nKp5eFxvFVC/hMFIqMUtL7pdBm2TveDRVYN9y9qGQ5wY/VokyCdkHK+
rfUdI3zxdfzDgdID6PwHPZodHnFvlEbnddmoWu/PF4gGj55nIUBQ2ktE9ucKyJMO
WI62F5t048XjyMor/2RtrsOejpjzRgXDbiwstagmkSNZ9iCEwroFJbzvbJ5vYtt/
OmgHNb8LmB6D+XGq4S47x8VH4G1WcddBZMV5u86be2w88NyRjLbtLr9ggINyEh1H
CKP1Ce6czX7OBAe1ZVIG4xjHkyxXEJ16geEXXEk001Fds88IfSKsC8XLMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF3zRHt62tQZnLOy2RXw58oqBG6UMB8GA1UdIwQY
MBaAFMGRp78vA6Z/3/y3FEvS+BFNzdOzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1pHbnZ5OERwbl9mX0xjVVM5TDRFVTNOMDdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8xYWY2MjUtYzZiYS00OWRiLWFmNjQt
MzQ5MjhmOWExYzRmLzEvd1pHbnZ5OERwbl9mX0xjVVM5TDRFVTNOMDdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni8xYWY2MjUtYzZiYS00OWRiLWFmNjQtMzQ5MjhmOWExYzRm
LzEvd1pHbnZ5OERwbl9mX0xjVVM5TDRFVTNOMDdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE3bnhMTx
98cawJgMG1COe8JkaxRzrYDmTuAYoLlj6pO12UW3B+yE4mMX12GFJkXt9u8zqCwz
pxkHA8D21EE1DJojdZFxAlnMI5h7I/yQPPWz1tq2g3UvCrserZ4eUP7S0FrzrS45
0r77xMsw2OBI0v4pONVoSw+L2c6eNmUvsR0/eNBWay9/kdy7LYjtr9YCYP7QpQSC
tVHTBk6BHs9bz0WaiTMJypjxtcaMtw/QPj0ex1CTN0MT5J2H5XlLWHE5mWrp43pK
A5uJpkcXkmnWfNYaGqWmnulPo4rAtbZrJe+0l6YUt+z/yjPExBaXAS73flJU2eMz
ORIGKHHmwRXtDg==
-----END CERTIFICATE-----
Generated at Sun Jul 27 09:28:16 2025 by rpki-client