Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/WwZtuK4WVfw9ikqpnrvZOj_g4-Q.mft
File:                     WwZtuK4WVfw9ikqpnrvZOj_g4-Q.mft (raw, json)
Hash identifier:          rP3Y9oUmQWmvHDHIin7daZEe2gEYjoFkIhjj39jB+7o=
Subject key identifier:   31:DC:75:97:27:5B:12:F8:18:56:06:97:76:56:3C:F3:17:AF:BC:8E
Authority key identifier: 5B:06:6D:B8:AE:16:55:FC:3D:8A:4A:A9:9E:BB:D9:3A:3F:E0:E3:E4
Certificate issuer:       /CN=5b066db8ae1655fc3d8a4aa99ebbd93a3fe0e3e4
Certificate serial:       01985B34DC4B2883F28B3481D017339ECB88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WwZtuK4WVfw9ikqpnrvZOj_g4-Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/WwZtuK4WVfw9ikqpnrvZOj_g4-Q.mft
Manifest number:          14A8
Signing time:             Wed 30 Jul 2025 12:00:47 +0000
Manifest this update:     Wed 30 Jul 2025 12:00:47 +0000
Manifest next update:     Thu 31 Jul 2025 12:00:47 +0000
Files and hashes:         1: 52gpXjI8Kd7Tv-YmaRlcfsM4RAk.roa (hash: mEm534ZT6ZgaZ/3v86vVc5+tMaW3MbmkjCPIio5FpX8=)
                          2: WwZtuK4WVfw9ikqpnrvZOj_g4-Q.crl (hash: 6871DYtRQzGVDyrtb2gLw2JCMMEJIt9Lp0C2hH6teAA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/WwZtuK4WVfw9ikqpnrvZOj_g4-Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/WwZtuK4WVfw9ikqpnrvZOj_g4-Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WwZtuK4WVfw9ikqpnrvZOj_g4-Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 31 Jul 2025 12:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:5b:34:dc:4b:28:83:f2:8b:34:81:d0:17:33:9e:cb:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b066db8ae1655fc3d8a4aa99ebbd93a3fe0e3e4
        Validity
            Not Before: Jul 30 12:00:47 2025 GMT
            Not After : Jul 31 12:00:47 2025 GMT
        Subject: CN=31dc7597275b12f81856069776563cf317afbc8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:4f:57:0f:f6:61:d6:4d:95:62:bd:45:e9:17:
                    61:2c:a1:1a:47:23:66:47:46:7d:1a:2b:76:aa:a8:
                    8c:d0:da:39:b9:a2:8a:75:88:29:96:36:8d:0c:6c:
                    92:42:73:a4:0e:a9:f6:69:de:ae:15:8f:73:36:e7:
                    41:15:53:c1:cc:c6:13:0b:da:e0:c5:44:b7:fb:f6:
                    53:6d:9d:8a:55:92:dc:96:c9:12:a9:09:78:a5:dc:
                    3e:f8:6e:83:a5:4c:87:10:fe:c8:10:be:27:56:b5:
                    dc:87:9e:63:6b:02:5e:ba:c6:83:5f:4a:5d:85:1a:
                    db:05:fb:5d:8d:08:7f:e0:35:fa:98:67:8b:86:c9:
                    e4:12:c4:95:a7:ba:22:cf:46:d5:99:0d:f4:4d:09:
                    3d:10:67:a2:67:09:37:9c:8d:9d:99:b5:4e:53:5e:
                    da:75:23:90:0a:a6:f2:6d:b1:1c:57:04:89:02:df:
                    4a:e6:16:9f:a5:05:17:31:9c:8b:3d:e5:d4:db:eb:
                    eb:b2:86:92:73:04:bd:82:8a:f0:d1:fc:68:a4:ad:
                    d4:df:73:34:d9:4c:65:e0:4b:cb:e9:3f:1c:95:ee:
                    78:eb:0a:c7:2f:45:ff:c1:40:54:4c:56:c6:9c:35:
                    36:b4:cf:72:8a:17:2d:51:4a:b9:90:32:23:73:fa:
                    9a:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:DC:75:97:27:5B:12:F8:18:56:06:97:76:56:3C:F3:17:AF:BC:8E
            X509v3 Authority Key Identifier:
                keyid:5B:06:6D:B8:AE:16:55:FC:3D:8A:4A:A9:9E:BB:D9:3A:3F:E0:E3:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WwZtuK4WVfw9ikqpnrvZOj_g4-Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/WwZtuK4WVfw9ikqpnrvZOj_g4-Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/WwZtuK4WVfw9ikqpnrvZOj_g4-Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:eb:43:65:c5:d0:4b:ef:8c:9c:b8:b2:9b:c8:de:17:9c:a2:
         10:78:17:9c:e0:af:c9:bc:50:b6:24:79:80:c4:dd:bc:06:d6:
         19:16:11:20:58:4a:88:88:1b:1d:e3:0d:d0:a1:79:3e:fa:ac:
         e9:85:6a:63:1f:46:32:63:5e:04:ce:56:5a:96:f8:30:0c:12:
         a9:48:3c:5b:1b:f1:f0:3b:62:19:91:87:91:83:2a:87:41:f4:
         c4:7a:ed:3d:03:25:c5:f0:f3:b4:d8:aa:10:67:4b:c4:15:8e:
         1e:4d:ab:49:cd:e9:1e:c9:a0:6a:ff:dc:4e:ef:0b:76:f3:eb:
         77:1e:28:63:fd:4f:5c:4d:2a:cf:db:d9:5d:4f:d9:68:21:a3:
         a5:aa:da:4c:38:49:aa:da:36:e2:c8:42:12:14:2e:18:32:23:
         9a:b6:03:57:36:73:a8:3a:3b:90:8b:fe:f1:cf:a5:f3:35:89:
         3b:66:cf:d4:d2:c9:db:28:d0:9a:a0:eb:3c:37:22:bc:09:9a:
         6c:3f:43:92:31:bd:96:7b:01:1f:1f:d3:a4:3c:1c:09:39:c1:
         91:82:8d:8f:70:00:18:0f:5a:7b:5b:68:f2:8e:90:48:b1:d1:
         a0:6f:63:3d:db:81:14:5c:39:fd:49:c6:11:99:14:5f:06:db:
         6e:02:a1:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhbNNxLKIPyizSB0BcznsuIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViMDY2ZGI4YWUxNjU1ZmMzZDhhNGFhOTllYmJkOTNhM2Zl
MGUzZTQwHhcNMjUwNzMwMTIwMDQ3WhcNMjUwNzMxMTIwMDQ3WjAzMTEwLwYDVQQD
EygzMWRjNzU5NzI3NWIxMmY4MTg1NjA2OTc3NjU2M2NmMzE3YWZiYzhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvE9XD/Zh1k2VYr1F6RdhLKEaRyNm
R0Z9Git2qqiM0No5uaKKdYgpljaNDGySQnOkDqn2ad6uFY9zNudBFVPBzMYTC9rg
xUS3+/ZTbZ2KVZLclskSqQl4pdw++G6DpUyHEP7IEL4nVrXch55jawJeusaDX0pd
hRrbBftdjQh/4DX6mGeLhsnkEsSVp7oiz0bVmQ30TQk9EGeiZwk3nI2dmbVOU17a
dSOQCqbybbEcVwSJAt9K5hafpQUXMZyLPeXU2+vrsoaScwS9gorw0fxopK3U33M0
2Uxl4EvL6T8cle546wrHL0X/wUBUTFbGnDU2tM9yihctUUq5kDIjc/qajQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDHcdZcnWxL4GFYGl3ZWPPMXr7yOMB8GA1UdIwQY
MBaAFFsGbbiuFlX8PYpKqZ672To/4OPkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3dadHVLNFdWZnc5aWtxcG5ydlpPal9nNC1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8wZmY5ZTUtZmJiZS00YjNiLWI5Mzgt
OWNlYWExYjdhMTE2LzEvV3dadHVLNFdWZnc5aWtxcG5ydlpPal9nNC1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC8wZmY5ZTUtZmJiZS00YjNiLWI5MzgtOWNlYWExYjdhMTE2
LzEvV3dadHVLNFdWZnc5aWtxcG5ydlpPal9nNC1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJetDZcXQ
S++MnLiym8jeF5yiEHgXnOCvybxQtiR5gMTdvAbWGRYRIFhKiIgbHeMN0KF5Pvqs
6YVqYx9GMmNeBM5WWpb4MAwSqUg8Wxvx8DtiGZGHkYMqh0H0xHrtPQMlxfDztNiq
EGdLxBWOHk2rSc3pHsmgav/cTu8LdvPrdx4oY/1PXE0qz9vZXU/ZaCGjparaTDhJ
qto24shCEhQuGDIjmrYDVzZzqDo7kIv+8c+l8zWJO2bP1NLJ2yjQmqDrPDcivAma
bD9DkjG9lnsBHx/TpDwcCTnBkYKNj3AAGA9ae1to8o6QSLHRoG9jPduBFFw5/UnG
EZkUXwbbbgKhXQ==
-----END CERTIFICATE-----
Generated at Wed Jul 30 18:37:49 2025 by rpki-client