Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/acdbe3-b82f-495b-b55b-e1563f812929/1/wjcM8YCbe8ZjrUFDwIl2tIEC77k.mft
File:                     wjcM8YCbe8ZjrUFDwIl2tIEC77k.mft (raw, json)
Hash identifier:          CHDJxFCLibnyMpUtDn6Byz8k0zq7pmtigeUKug/WuRI=
Subject key identifier:   BA:EB:B9:EF:F7:CF:32:D8:4F:58:23:3D:9D:83:E7:78:A8:09:5B:0F
Authority key identifier: C2:37:0C:F1:80:9B:7B:C6:63:AD:41:43:C0:89:76:B4:81:02:EF:B9
Certificate issuer:       /CN=c2370cf1809b7bc663ad4143c08976b48102efb9
Certificate serial:       019849D37AF79059960AE8DB162A7B7D3E4A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wjcM8YCbe8ZjrUFDwIl2tIEC77k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/acdbe3-b82f-495b-b55b-e1563f812929/1/wjcM8YCbe8ZjrUFDwIl2tIEC77k.mft
Manifest number:          08F8
Signing time:             Sun 27 Jul 2025 03:00:52 +0000
Manifest this update:     Sun 27 Jul 2025 03:00:52 +0000
Manifest next update:     Mon 28 Jul 2025 03:00:52 +0000
Files and hashes:         1: jbzxZYmQPO4lVh_5XWCn7tDn4rY.roa (hash: cL3utd2QLzcDLl61jDEDa8thzTSW3ILE3u54VZ6FafA=)
                          2: wjcM8YCbe8ZjrUFDwIl2tIEC77k.crl (hash: 4PB8BLQM0XgQ0adnJ6NE5pY/5F5SfHtwGLQTdjTaCVQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/acdbe3-b82f-495b-b55b-e1563f812929/1/wjcM8YCbe8ZjrUFDwIl2tIEC77k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/acdbe3-b82f-495b-b55b-e1563f812929/1/wjcM8YCbe8ZjrUFDwIl2tIEC77k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wjcM8YCbe8ZjrUFDwIl2tIEC77k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:d3:7a:f7:90:59:96:0a:e8:db:16:2a:7b:7d:3e:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2370cf1809b7bc663ad4143c08976b48102efb9
        Validity
            Not Before: Jul 27 03:00:52 2025 GMT
            Not After : Jul 28 03:00:52 2025 GMT
        Subject: CN=baebb9eff7cf32d84f58233d9d83e778a8095b0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:03:f3:e8:9d:5c:e7:ee:df:23:6d:44:08:64:
                    61:4f:5c:ae:07:a3:ce:9f:46:4e:92:a2:7d:5c:35:
                    36:05:c1:20:dd:aa:bc:ed:2c:a0:fb:09:7d:9c:d9:
                    25:54:ab:ed:4c:1a:e7:0c:80:fe:72:29:fa:d1:b2:
                    fe:3e:66:73:57:15:75:0a:0c:96:23:af:70:c2:7a:
                    78:88:99:c5:39:46:15:20:6e:10:14:6e:dc:91:6e:
                    8f:a2:0e:85:ba:88:8a:36:be:2a:70:5d:43:b4:7c:
                    e6:c1:4e:4d:82:c7:9a:15:e6:c3:69:11:b3:d3:48:
                    c2:86:88:21:de:7a:a4:4f:bb:61:18:63:29:8a:06:
                    17:29:a1:43:45:f4:cf:28:6e:a9:ce:0d:b5:8f:97:
                    7b:48:50:80:8c:15:ea:f0:36:ac:42:ba:99:ce:3a:
                    db:26:29:a3:9f:cb:3e:bc:31:4e:a8:da:93:48:e7:
                    56:7a:21:0b:58:2c:be:c8:0c:a9:3b:ef:69:6c:5a:
                    d2:66:14:20:6f:eb:7c:27:5c:66:0d:c6:19:4d:a8:
                    5e:2b:d5:28:a1:b5:bf:d0:bd:41:66:46:42:07:6e:
                    dd:af:c2:11:a3:d8:83:76:00:12:02:04:b1:8c:e0:
                    3e:db:cd:d5:d1:dd:4b:ad:dc:fd:fb:5e:c5:9f:d0:
                    10:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:EB:B9:EF:F7:CF:32:D8:4F:58:23:3D:9D:83:E7:78:A8:09:5B:0F
            X509v3 Authority Key Identifier:
                keyid:C2:37:0C:F1:80:9B:7B:C6:63:AD:41:43:C0:89:76:B4:81:02:EF:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjcM8YCbe8ZjrUFDwIl2tIEC77k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/acdbe3-b82f-495b-b55b-e1563f812929/1/wjcM8YCbe8ZjrUFDwIl2tIEC77k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/acdbe3-b82f-495b-b55b-e1563f812929/1/wjcM8YCbe8ZjrUFDwIl2tIEC77k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:d7:c6:12:18:3c:08:4b:2f:0b:3f:2e:b8:ff:4f:7b:cd:fa:
         0d:ec:41:8a:cb:d7:9b:32:00:22:d1:f8:34:56:d6:88:b5:09:
         a4:70:76:6a:16:7c:98:2c:0d:e2:f2:c6:3c:96:fc:e9:5c:5c:
         5f:b8:c0:a2:1e:81:bc:67:6e:1b:a8:ab:e6:b5:a9:1e:8d:cc:
         ea:3d:f3:ec:f5:fb:7d:b8:dd:e0:f6:d2:b2:1c:92:ba:05:c1:
         ac:3b:aa:d8:38:05:6a:0b:b0:b9:f1:3e:14:31:4c:e0:e7:eb:
         1f:61:c9:41:e5:21:97:df:09:0c:7b:4c:61:8b:1c:cf:69:34:
         e8:c7:ce:a3:93:7e:d4:d0:dd:f5:90:2c:4a:a6:bf:76:75:89:
         9a:dc:0b:36:b5:7e:eb:f7:c0:18:31:e0:65:7c:a5:d1:aa:b7:
         b4:44:7e:b8:08:07:63:dd:ac:00:6a:ce:cb:6d:1f:73:06:12:
         c4:e4:aa:a6:b0:c1:1e:b5:43:32:b1:56:23:47:df:bc:54:6e:
         8e:a5:c4:31:67:da:5d:6b:41:b3:af:70:a5:20:4a:21:b6:9e:
         0d:54:cf:e0:7c:4b:e3:dd:0e:4c:11:1b:53:50:f9:e6:28:85:
         f6:12:f4:a0:69:f6:4d:a4:cf:05:eb:0f:0a:7f:36:8f:91:8c:
         96:48:f6:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJ03r3kFmWCujbFip7fT5KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyMzcwY2YxODA5YjdiYzY2M2FkNDE0M2MwODk3NmI0ODEw
MmVmYjkwHhcNMjUwNzI3MDMwMDUyWhcNMjUwNzI4MDMwMDUyWjAzMTEwLwYDVQQD
EyhiYWViYjllZmY3Y2YzMmQ4NGY1ODIzM2Q5ZDgzZTc3OGE4MDk1YjBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7APz6J1c5+7fI21ECGRhT1yuB6PO
n0ZOkqJ9XDU2BcEg3aq87Syg+wl9nNklVKvtTBrnDID+cin60bL+PmZzVxV1CgyW
I69wwnp4iJnFOUYVIG4QFG7ckW6Pog6FuoiKNr4qcF1DtHzmwU5NgseaFebDaRGz
00jChogh3nqkT7thGGMpigYXKaFDRfTPKG6pzg21j5d7SFCAjBXq8DasQrqZzjrb
Jimjn8s+vDFOqNqTSOdWeiELWCy+yAypO+9pbFrSZhQgb+t8J1xmDcYZTaheK9Uo
obW/0L1BZkZCB27dr8IRo9iDdgASAgSxjOA+283V0d1Lrdz9+17Fn9AQ7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLrrue/3zzLYT1gjPZ2D53ioCVsPMB8GA1UdIwQY
MBaAFMI3DPGAm3vGY61BQ8CJdrSBAu+5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2pjTThZQ2JlOFpqclVGRHdJbDJ0SUVDNzdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9hY2RiZTMtYjgyZi00OTViLWI1NWIt
ZTE1NjNmODEyOTI5LzEvd2pjTThZQ2JlOFpqclVGRHdJbDJ0SUVDNzdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny9hY2RiZTMtYjgyZi00OTViLWI1NWItZTE1NjNmODEyOTI5
LzEvd2pjTThZQ2JlOFpqclVGRHdJbDJ0SUVDNzdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuNfGEhg8
CEsvCz8uuP9Pe836DexBisvXmzIAItH4NFbWiLUJpHB2ahZ8mCwN4vLGPJb86Vxc
X7jAoh6BvGduG6ir5rWpHo3M6j3z7PX7fbjd4PbSshySugXBrDuq2DgFaguwufE+
FDFM4OfrH2HJQeUhl98JDHtMYYscz2k06MfOo5N+1NDd9ZAsSqa/dnWJmtwLNrV+
6/fAGDHgZXyl0aq3tER+uAgHY92sAGrOy20fcwYSxOSqprDBHrVDMrFWI0ffvFRu
jqXEMWfaXWtBs69wpSBKIbaeDVTP4HxL490OTBEbU1D55iiF9hL0oGn2TaTPBesP
Cn82j5GMlkj2aQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 05:26:44 2025 by rpki-client