Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.mft
File:                     wtIegEq3cTrXh33eYDqngksxmDw.mft (raw, json)
Hash identifier:          lpocnZMD1seSGpmy9z+W49f8TtQyHZrCPQo3OhqexaM=
Subject key identifier:   37:66:99:6E:BB:58:20:BC:68:58:25:68:CD:81:57:8B:61:79:39:28
Authority key identifier: C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C
Certificate issuer:       /CN=c2d21e804ab7713ad7877dde603aa7824b31983c
Certificate serial:       0198334B73AA72EE7F8D35092F8FD6784841
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.mft
Manifest number:          0F68
Signing time:             Tue 22 Jul 2025 18:00:39 +0000
Manifest this update:     Tue 22 Jul 2025 18:00:39 +0000
Manifest next update:     Wed 23 Jul 2025 18:00:39 +0000
Files and hashes:         1: 6npNfqw9ft3wFBb5k5d8Au1GyrU.roa (hash: Ypl6gLmfJjGNPDL8Gk8ZFTBrn9giPszXF7Ziq9N8zCY=)
                          2: CEHno33Cl7h0GLAM4p0jfcTuU2k.roa (hash: VzZMvgTQCr8mQ/IevQojqSyjWV0o3WsjpJkJUVzQ2fo=)
                          3: F0e-LrOaO1fC5d8GXQ9bEeDZ160.roa (hash: cofTGB9X2CyIcikGAWppFcO24T6sgvWIjXIVxAl57xQ=)
                          4: GB4vtqTXSwKp7zeWzOQndrqFgF8.roa (hash: rdiyJfrKTAJ+PqJC+r6+QSHIQKbyvYvJTxSXGGM5e8w=)
                          5: GeAJ1HW4BIewoLPfGbb-SsL5NGw.roa (hash: srwRADwGDIIx52WT+/n/TTLrhpUiRbeWdmuzYXw/VCw=)
                          6: HGLfNFEmq1zoGMYRZBEFVC-KI2E.roa (hash: FKMG8ZBG6AFoA3ZFzEjcDqb09W6tPLhjGkfNe7kPOX4=)
                          7: JN30kUlZb2UdsgE-OutzbLQiERo.roa (hash: B/Z1tvVR2z8KZUGUWDKLU3ou6I+OjR3sN2Q9pxieTbk=)
                          8: biJknYRjE5L_jTv2KpvNG71JuZs.roa (hash: HCdhdiyjdtaidQONiCaAjw0Va1l2ztmngnp9upg/BOo=)
                          9: cMyuoWOy66eDKnjdJCEfhSkyz1E.roa (hash: LOQsteLks/Yul4nf8jy2hWFak5manC4iYDuO7o5PTtg=)
                          10: dxFo2JNSLNyFjO0-WsCs0C6Hof0.roa (hash: NmFePRA7yHk29wTet83LObHlNy/GZGPfuri37nzr9Xk=)
                          11: hdNNHQIFwnpnxNggYxU1p6Z-XGk.roa (hash: tOBVPWHOBl8156ZGKWKuty1/zjQtgPwsgL3f1n3MYGU=)
                          12: nq9QkGdX68nm-XUKViIxXutv5p0.roa (hash: LYeY4Ewyqeshu3FPO2U3xARlcYpAxYT/ihB3h+fhL+8=)
                          13: o0w1bPk9yQkEzOmquHjyTCzVPsc.roa (hash: m8T06/6PXu8/epS4UvU7PZ+M0wtlNs/1xaD5zm6hoAE=)
                          14: uZxgwvEf9WeuGM60Zi1VK8Mj4UI.roa (hash: 33y4OizHoHywglDgbvg5deRkLMeifLFTIVE+wULlWa4=)
                          15: vxkpUFyY_pV46Dy2vccW_kFg3Xg.roa (hash: qhf8yhleIujtWTxbbg63MczcaiHWwXzoRrg7MjpLcgQ=)
                          16: wtIegEq3cTrXh33eYDqngksxmDw.crl (hash: r6KMiNuHcaQ1mn2a4PX4NRVI0BpWzn4CFAEjks+4EhY=)
                          17: wwFX4PAqfUeMNXpGS3KNseh4ppg.roa (hash: OLlfS0/X+1Yl71pRy+nk3a/H1A/qBK8IAfXsmm/hZsc=)
                          18: z9W-SXWXNvPf50hBoKJTZsS-x88.roa (hash: Pj96ONEJXoTrBWw/wBWoBoF3HEpksk4ZBOjXYOlm2eQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Jul 2025 18:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:33:4b:73:aa:72:ee:7f:8d:35:09:2f:8f:d6:78:48:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2d21e804ab7713ad7877dde603aa7824b31983c
        Validity
            Not Before: Jul 22 18:00:39 2025 GMT
            Not After : Jul 23 18:00:39 2025 GMT
        Subject: CN=3766996ebb5820bc68582568cd81578b61793928
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d3:46:77:84:68:ac:ac:7f:91:10:d8:d6:ba:
                    c4:ee:00:c7:c9:7c:26:e8:56:74:d6:12:ee:bf:c8:
                    ba:37:11:e6:b5:ed:ba:20:a8:61:57:0f:7f:f7:7b:
                    e4:d7:55:fa:0c:12:9b:81:de:2a:1d:2a:25:db:e7:
                    f0:a4:49:9b:7a:26:f2:89:73:cc:97:ca:7a:74:26:
                    5f:a5:b2:55:9b:d0:14:8d:45:e2:48:09:bd:2b:21:
                    9c:1a:0b:d0:aa:77:65:68:7d:7b:95:70:69:74:47:
                    ab:0d:69:64:62:bd:cb:64:6c:75:73:05:1c:e3:9d:
                    70:3d:82:63:ba:0d:02:54:9c:f6:40:b9:a7:99:6b:
                    c2:25:b2:d5:db:50:89:cb:75:3d:77:64:25:2f:c6:
                    16:88:ee:3e:cd:a0:69:64:da:dd:cb:78:79:60:45:
                    53:d7:4c:bb:74:d6:f0:a5:0f:e2:86:6e:c6:f3:5a:
                    52:c8:f1:36:22:83:45:a3:fc:15:1d:a7:34:22:21:
                    84:a1:22:35:01:be:63:a4:19:7d:0d:40:da:93:e0:
                    54:44:5a:cd:12:10:fb:af:36:c3:8d:e0:9c:49:be:
                    52:8f:cd:68:5e:a5:c0:51:95:f2:d4:cd:47:0c:b2:
                    07:91:d5:5b:14:11:0e:6d:ac:eb:b0:06:5f:1d:f2:
                    5b:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:66:99:6E:BB:58:20:BC:68:58:25:68:CD:81:57:8B:61:79:39:28
            X509v3 Authority Key Identifier:
                keyid:C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:45:4e:87:8c:29:50:0e:b7:a4:64:22:a8:88:20:0c:7c:d8:
         68:1a:75:ee:b0:5a:38:cd:41:a3:70:dc:59:13:46:22:88:0d:
         ba:ea:f6:e5:bf:ff:0b:b8:e0:a2:55:cd:76:58:c5:29:d7:50:
         7b:0f:7d:40:5c:cd:5d:10:44:60:f4:a0:3d:74:f4:71:64:33:
         8e:ad:75:23:1a:3d:a7:c9:b9:bf:5b:ee:30:8f:dc:49:53:fd:
         b9:43:1d:0e:a6:3f:3b:46:eb:d8:9c:c4:d6:88:e1:d8:e3:f1:
         e8:9c:41:c5:05:b0:5e:47:8c:b4:93:0a:57:c8:55:68:17:6b:
         fb:c3:49:cf:55:49:6c:23:f0:ca:fe:bc:a2:65:c0:37:d7:b6:
         8f:23:e8:32:21:5a:a6:0d:9a:57:3b:9b:eb:80:22:75:8e:9c:
         fe:52:aa:98:83:fb:e8:5c:8f:0f:3a:c8:5a:a2:6e:82:9c:7e:
         33:30:f6:50:61:3a:a0:dc:0d:a6:fc:de:bd:c6:cc:71:fc:4d:
         e8:0f:3a:13:f3:70:18:b6:61:6e:08:4d:a9:1d:48:28:b8:88:
         cc:74:1e:1d:3d:48:06:60:2d:3d:79:ed:ed:dd:00:70:eb:07:
         17:ff:c9:bf:15:56:b4:22:91:b7:0c:01:86:4f:a7:83:d9:2c:
         46:0b:1d:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 02:06:15 2025 by rpki-client