Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.mft
File:                     wtIegEq3cTrXh33eYDqngksxmDw.mft (raw, json)
Hash identifier:          Jn+kgwWBHmcm8te6KqRa9avTsJsc/9UbYTuHgYeL394=
Subject key identifier:   6A:44:57:0C:0E:07:47:06:5A:1A:FE:D2:3E:A3:4A:60:E6:14:55:C8
Authority key identifier: C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C
Certificate issuer:       /CN=c2d21e804ab7713ad7877dde603aa7824b31983c
Certificate serial:       01983EE197B3F362915EF823A2F5D9059681
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.mft
Manifest number:          0F6E
Signing time:             Fri 25 Jul 2025 00:00:28 +0000
Manifest this update:     Fri 25 Jul 2025 00:00:28 +0000
Manifest next update:     Sat 26 Jul 2025 00:00:28 +0000
Files and hashes:         1: 6npNfqw9ft3wFBb5k5d8Au1GyrU.roa (hash: Ypl6gLmfJjGNPDL8Gk8ZFTBrn9giPszXF7Ziq9N8zCY=)
                          2: CEHno33Cl7h0GLAM4p0jfcTuU2k.roa (hash: VzZMvgTQCr8mQ/IevQojqSyjWV0o3WsjpJkJUVzQ2fo=)
                          3: F0e-LrOaO1fC5d8GXQ9bEeDZ160.roa (hash: cofTGB9X2CyIcikGAWppFcO24T6sgvWIjXIVxAl57xQ=)
                          4: GB4vtqTXSwKp7zeWzOQndrqFgF8.roa (hash: rdiyJfrKTAJ+PqJC+r6+QSHIQKbyvYvJTxSXGGM5e8w=)
                          5: GeAJ1HW4BIewoLPfGbb-SsL5NGw.roa (hash: srwRADwGDIIx52WT+/n/TTLrhpUiRbeWdmuzYXw/VCw=)
                          6: HGLfNFEmq1zoGMYRZBEFVC-KI2E.roa (hash: FKMG8ZBG6AFoA3ZFzEjcDqb09W6tPLhjGkfNe7kPOX4=)
                          7: JN30kUlZb2UdsgE-OutzbLQiERo.roa (hash: B/Z1tvVR2z8KZUGUWDKLU3ou6I+OjR3sN2Q9pxieTbk=)
                          8: biJknYRjE5L_jTv2KpvNG71JuZs.roa (hash: HCdhdiyjdtaidQONiCaAjw0Va1l2ztmngnp9upg/BOo=)
                          9: cMyuoWOy66eDKnjdJCEfhSkyz1E.roa (hash: LOQsteLks/Yul4nf8jy2hWFak5manC4iYDuO7o5PTtg=)
                          10: dxFo2JNSLNyFjO0-WsCs0C6Hof0.roa (hash: NmFePRA7yHk29wTet83LObHlNy/GZGPfuri37nzr9Xk=)
                          11: hdNNHQIFwnpnxNggYxU1p6Z-XGk.roa (hash: tOBVPWHOBl8156ZGKWKuty1/zjQtgPwsgL3f1n3MYGU=)
                          12: nq9QkGdX68nm-XUKViIxXutv5p0.roa (hash: LYeY4Ewyqeshu3FPO2U3xARlcYpAxYT/ihB3h+fhL+8=)
                          13: o0w1bPk9yQkEzOmquHjyTCzVPsc.roa (hash: m8T06/6PXu8/epS4UvU7PZ+M0wtlNs/1xaD5zm6hoAE=)
                          14: uZxgwvEf9WeuGM60Zi1VK8Mj4UI.roa (hash: 33y4OizHoHywglDgbvg5deRkLMeifLFTIVE+wULlWa4=)
                          15: vxkpUFyY_pV46Dy2vccW_kFg3Xg.roa (hash: qhf8yhleIujtWTxbbg63MczcaiHWwXzoRrg7MjpLcgQ=)
                          16: wtIegEq3cTrXh33eYDqngksxmDw.crl (hash: xfMySf8IyhjAAHjpDQ4VhPqGcPCQ9OxeTVnR8bAYr1k=)
                          17: wwFX4PAqfUeMNXpGS3KNseh4ppg.roa (hash: OLlfS0/X+1Yl71pRy+nk3a/H1A/qBK8IAfXsmm/hZsc=)
                          18: z9W-SXWXNvPf50hBoKJTZsS-x88.roa (hash: Pj96ONEJXoTrBWw/wBWoBoF3HEpksk4ZBOjXYOlm2eQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Jul 2025 22:13:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:3e:e1:97:b3:f3:62:91:5e:f8:23:a2:f5:d9:05:96:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2d21e804ab7713ad7877dde603aa7824b31983c
        Validity
            Not Before: Jul 25 00:00:28 2025 GMT
            Not After : Jul 26 00:00:28 2025 GMT
        Subject: CN=6a44570c0e0747065a1afed23ea34a60e61455c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:39:f0:b3:4c:3e:c6:4f:3e:72:fc:43:56:98:
                    c7:c8:8a:ce:b7:5b:c0:e7:a9:e6:98:7c:fe:dd:f9:
                    c1:c2:79:af:43:c9:28:58:73:45:61:2c:59:5d:9e:
                    c5:f5:5b:e9:03:71:ce:f8:e5:4a:1c:0f:ac:9a:17:
                    f6:21:1f:80:47:7f:f2:f5:b2:d9:33:36:4a:6a:c0:
                    0e:82:9a:59:48:0c:92:78:bb:09:a7:60:1c:13:81:
                    04:1b:37:4b:aa:1d:d8:9d:38:de:c4:01:31:04:7a:
                    a7:5a:6f:ce:98:9a:a0:a3:6c:73:06:e5:8a:20:34:
                    12:1a:fa:98:2c:79:cc:8c:37:e9:f1:e3:09:f9:00:
                    39:b0:bb:87:27:32:ee:4b:d0:82:ab:b0:06:40:aa:
                    19:7a:d0:8e:7d:88:f6:d5:f5:47:0b:91:ff:9d:09:
                    24:f6:8c:7f:d8:be:51:00:97:1e:c9:6e:60:e8:82:
                    48:ab:d7:d0:99:f3:61:ed:40:6e:5c:63:28:8a:e6:
                    25:16:f2:3b:ad:fe:6e:ea:e3:fb:23:4e:e0:6f:0e:
                    ff:b3:50:61:41:ed:af:13:04:d3:7b:1f:19:3d:60:
                    9a:99:a9:6e:e6:9f:b5:1c:50:70:31:7f:a3:3a:32:
                    68:80:24:98:dc:47:d4:bd:f0:7b:45:54:69:90:5c:
                    bb:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:44:57:0C:0E:07:47:06:5A:1A:FE:D2:3E:A3:4A:60:E6:14:55:C8
            X509v3 Authority Key Identifier:
                keyid:C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:0e:b5:ff:33:6a:80:40:75:fe:ad:59:bf:37:a0:06:fa:ed:
         98:35:54:0f:c6:0d:22:ea:42:e3:cd:a5:4d:d0:7d:0b:98:1d:
         b6:cd:23:e8:a2:0e:21:b9:a6:61:8f:3f:f8:18:e3:66:02:7c:
         bb:e8:de:8e:01:f9:8e:23:69:97:01:b1:9d:7b:84:0a:ba:47:
         b3:45:1a:32:c3:d6:39:3c:e5:9b:54:6b:29:41:2d:9d:93:5b:
         aa:32:e0:4c:30:3f:09:bb:f0:27:d4:5a:f4:38:2f:e9:4e:1f:
         77:5d:29:15:3d:12:6e:c7:4a:3a:08:75:ee:ce:c9:84:1d:a7:
         8e:fe:a3:ae:7c:71:a8:d2:c9:3b:02:66:e7:ae:f4:27:01:de:
         d9:c2:ef:9c:85:f1:ca:cf:33:21:3e:82:a0:81:cb:df:39:43:
         08:78:3d:0d:e6:bd:b1:a5:2e:a8:63:12:e2:62:ce:c2:06:b8:
         02:dc:e5:ac:c9:70:6f:b4:22:ec:75:72:74:21:9c:8c:bc:8c:
         fd:72:b6:a7:b3:21:06:4f:3e:45:50:8d:83:f2:a9:12:8a:24:
         22:fb:f2:24:f9:9e:b0:c1:15:9c:b4:cf:88:37:51:de:40:f9:
         43:63:0a:0b:fe:b3:33:f0:45:cf:f2:90:21:ca:6d:bc:41:51:
         36:de:7c:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZg+4Zez82KRXvgjovXZBZaBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyZDIxZTgwNGFiNzcxM2FkNzg3N2RkZTYwM2FhNzgyNGIz
MTk4M2MwHhcNMjUwNzI1MDAwMDI4WhcNMjUwNzI2MDAwMDI4WjAzMTEwLwYDVQQD
Eyg2YTQ0NTcwYzBlMDc0NzA2NWExYWZlZDIzZWEzNGE2MGU2MTQ1NWM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTnws0w+xk8+cvxDVpjHyIrOt1vA
56nmmHz+3fnBwnmvQ8koWHNFYSxZXZ7F9VvpA3HO+OVKHA+smhf2IR+AR3/y9bLZ
MzZKasAOgppZSAySeLsJp2AcE4EEGzdLqh3YnTjexAExBHqnWm/OmJqgo2xzBuWK
IDQSGvqYLHnMjDfp8eMJ+QA5sLuHJzLuS9CCq7AGQKoZetCOfYj21fVHC5H/nQkk
9ox/2L5RAJceyW5g6IJIq9fQmfNh7UBuXGMoiuYlFvI7rf5u6uP7I07gbw7/s1Bh
Qe2vEwTTex8ZPWCamalu5p+1HFBwMX+jOjJogCSY3EfUvfB7RVRpkFy7zQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGpEVwwOB0cGWhr+0j6jSmDmFFXIMB8GA1UdIwQY
MBaAFMLSHoBKt3E614d93mA6p4JLMZg8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3RJZWdFcTNjVHJYaDMzZVlEcW5na3N4bUR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wNGI0NDYtNGFlMS00ZmU1LWI2NDYt
NTlhZTA5ZWRiZWI5LzEvd3RJZWdFcTNjVHJYaDMzZVlEcW5na3N4bUR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wNGI0NDYtNGFlMS00ZmU1LWI2NDYtNTlhZTA5ZWRiZWI5
LzEvd3RJZWdFcTNjVHJYaDMzZVlEcW5na3N4bUR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeg61/zNq
gEB1/q1ZvzegBvrtmDVUD8YNIupC482lTdB9C5gdts0j6KIOIbmmYY8/+BjjZgJ8
u+jejgH5jiNplwGxnXuECrpHs0UaMsPWOTzlm1RrKUEtnZNbqjLgTDA/CbvwJ9Ra
9Dgv6U4fd10pFT0SbsdKOgh17s7JhB2njv6jrnxxqNLJOwJm5670JwHe2cLvnIXx
ys8zIT6CoIHL3zlDCHg9Dea9saUuqGMS4mLOwga4AtzlrMlwb7Qi7HVydCGcjLyM
/XK2p7MhBk8+RVCNg/KpEookIvvyJPmesMEVnLTPiDdR3kD5Q2MKC/6zM/BFz/KQ
IcptvEFRNt58/w==
-----END CERTIFICATE-----
Generated at Fri Jul 25 06:28:46 2025 by rpki-client