Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/580e51-4c0d-4162-a9ae-7d7fce5db05c/1/wg8AjBzMpi5vw1bWNCBVpifcbPI.mft
File:                     wg8AjBzMpi5vw1bWNCBVpifcbPI.mft (raw, json)
Hash identifier:          rwwMq5tH+xqwwN7PTP27j6Nv3lBzOC3H2mc4n0ctqi0=
Subject key identifier:   2A:03:6D:69:96:4E:5E:B6:B6:80:25:F3:9F:B8:7C:6D:E8:1D:3D:A1
Authority key identifier: C2:0F:00:8C:1C:CC:A6:2E:6F:C3:56:D6:34:20:55:A6:27:DC:6C:F2
Certificate issuer:       /CN=c20f008c1ccca62e6fc356d6342055a627dc6cf2
Certificate serial:       0198529F61361B6D13AC771541ED53489BD3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wg8AjBzMpi5vw1bWNCBVpifcbPI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/580e51-4c0d-4162-a9ae-7d7fce5db05c/1/wg8AjBzMpi5vw1bWNCBVpifcbPI.mft
Manifest number:          03F7
Signing time:             Mon 28 Jul 2025 20:00:33 +0000
Manifest this update:     Mon 28 Jul 2025 20:00:33 +0000
Manifest next update:     Tue 29 Jul 2025 20:00:33 +0000
Files and hashes:         1: CGLcLVB_nqLd9iNoes6GRQjCoVY.roa (hash: PUaaifTKcP0kb/F/TYWEggzMP0VnUab0IhVecDySCrE=)
                          2: wg8AjBzMpi5vw1bWNCBVpifcbPI.crl (hash: APOTs3zmBrTelJTRk4Zm3mkm8p0z2uHQ+8VbOgzUfIw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/580e51-4c0d-4162-a9ae-7d7fce5db05c/1/wg8AjBzMpi5vw1bWNCBVpifcbPI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/580e51-4c0d-4162-a9ae-7d7fce5db05c/1/wg8AjBzMpi5vw1bWNCBVpifcbPI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wg8AjBzMpi5vw1bWNCBVpifcbPI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Jul 2025 20:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:52:9f:61:36:1b:6d:13:ac:77:15:41:ed:53:48:9b:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c20f008c1ccca62e6fc356d6342055a627dc6cf2
        Validity
            Not Before: Jul 28 20:00:33 2025 GMT
            Not After : Jul 29 20:00:33 2025 GMT
        Subject: CN=2a036d69964e5eb6b68025f39fb87c6de81d3da1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:0e:e8:de:39:d2:d1:a1:0f:b8:4c:08:33:ce:
                    18:50:06:07:cd:22:ee:49:eb:3c:04:73:05:5d:4a:
                    fb:08:f6:54:b3:c5:34:a0:2f:b2:76:34:ec:1f:35:
                    e0:27:b7:42:c6:c1:e3:92:8e:f0:72:ee:7e:4d:36:
                    b6:a6:79:e1:50:4b:70:f6:e1:49:87:da:68:9a:c5:
                    b8:10:6f:9b:87:f4:34:85:aa:a7:fd:50:76:02:ed:
                    ee:43:16:01:f7:1a:6c:c9:10:26:b8:c8:4e:25:f8:
                    06:ef:a0:05:3d:fd:3c:38:dc:c1:bc:29:95:14:02:
                    6e:28:42:6c:4b:f4:45:dc:89:bd:3a:c0:89:06:a7:
                    fb:14:70:1c:06:94:3a:ae:2b:1d:c9:84:04:89:b5:
                    23:10:bb:b6:ff:7d:0e:e6:27:c3:74:b5:b4:0d:e0:
                    6e:b7:da:cd:03:b7:1a:4a:02:73:c1:42:d5:32:17:
                    76:4a:91:3c:26:c2:3b:7c:e5:81:16:47:7a:c6:5b:
                    df:dc:22:25:bb:83:ea:cc:3f:9c:1f:87:db:f7:49:
                    16:ee:d0:3f:c8:35:5b:52:d9:2f:56:f1:bc:fe:88:
                    0d:42:dd:cd:c6:32:a1:e9:22:26:a5:c9:97:36:e1:
                    87:08:ba:85:d2:07:aa:f4:50:6d:78:32:70:70:c8:
                    77:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:03:6D:69:96:4E:5E:B6:B6:80:25:F3:9F:B8:7C:6D:E8:1D:3D:A1
            X509v3 Authority Key Identifier:
                keyid:C2:0F:00:8C:1C:CC:A6:2E:6F:C3:56:D6:34:20:55:A6:27:DC:6C:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wg8AjBzMpi5vw1bWNCBVpifcbPI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/580e51-4c0d-4162-a9ae-7d7fce5db05c/1/wg8AjBzMpi5vw1bWNCBVpifcbPI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/580e51-4c0d-4162-a9ae-7d7fce5db05c/1/wg8AjBzMpi5vw1bWNCBVpifcbPI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:40:d9:44:7c:00:2d:ed:85:92:ea:11:82:62:cf:b3:04:16:
         1c:13:a6:3b:b6:c4:04:b1:46:cc:b0:c0:3d:c5:8d:d2:5d:4a:
         ec:10:66:a1:0a:b0:8a:ce:ca:5f:61:a2:07:14:3a:09:43:bd:
         66:fd:5c:1d:df:ce:e6:8c:fa:56:76:41:f4:5d:12:2e:90:11:
         99:8a:45:26:66:59:14:93:18:74:82:f2:91:0d:98:40:7e:77:
         c6:da:de:7c:2a:d3:59:67:e3:30:f2:c2:c9:7a:74:ce:df:e8:
         5a:58:8d:82:ef:5d:fb:78:76:d7:d3:eb:72:15:a4:8c:48:7a:
         4d:f5:45:9b:4f:ee:76:3d:b5:06:ab:ed:56:52:4a:c4:ec:c9:
         60:1b:7e:32:26:37:4d:12:d2:4c:ad:4a:09:af:1e:f0:5d:37:
         2c:88:64:f9:ec:b2:4e:c3:73:ba:43:21:e7:6f:29:64:85:2d:
         b8:4e:f2:34:b7:64:77:30:10:f9:83:1f:dd:ac:78:6a:f7:2d:
         28:8c:02:92:07:18:ab:ec:11:cc:4a:06:5f:50:6b:d2:3a:6e:
         d2:c3:f7:7a:fc:be:4e:62:8c:c4:1e:8c:a0:b2:2b:38:0f:a4:
         79:d5:eb:87:64:27:10:ea:2d:13:38:a6:f0:50:0e:63:95:9d:
         21:06:73:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhSn2E2G20TrHcVQe1TSJvTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyMGYwMDhjMWNjY2E2MmU2ZmMzNTZkNjM0MjA1NWE2Mjdk
YzZjZjIwHhcNMjUwNzI4MjAwMDMzWhcNMjUwNzI5MjAwMDMzWjAzMTEwLwYDVQQD
EygyYTAzNmQ2OTk2NGU1ZWI2YjY4MDI1ZjM5ZmI4N2M2ZGU4MWQzZGExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqg7o3jnS0aEPuEwIM84YUAYHzSLu
Ses8BHMFXUr7CPZUs8U0oC+ydjTsHzXgJ7dCxsHjko7wcu5+TTa2pnnhUEtw9uFJ
h9pomsW4EG+bh/Q0haqn/VB2Au3uQxYB9xpsyRAmuMhOJfgG76AFPf08ONzBvCmV
FAJuKEJsS/RF3Im9OsCJBqf7FHAcBpQ6risdyYQEibUjELu2/30O5ifDdLW0DeBu
t9rNA7caSgJzwULVMhd2SpE8JsI7fOWBFkd6xlvf3CIlu4PqzD+cH4fb90kW7tA/
yDVbUtkvVvG8/ogNQt3NxjKh6SImpcmXNuGHCLqF0geq9FBteDJwcMh3AwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCoDbWmWTl62toAl85+4fG3oHT2hMB8GA1UdIwQY
MBaAFMIPAIwczKYub8NW1jQgVaYn3GzyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2c4QWpCek1waTV2dzFiV05DQlZwaWZjYlBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS81ODBlNTEtNGMwZC00MTYyLWE5YWUt
N2Q3ZmNlNWRiMDVjLzEvd2c4QWpCek1waTV2dzFiV05DQlZwaWZjYlBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS81ODBlNTEtNGMwZC00MTYyLWE5YWUtN2Q3ZmNlNWRiMDVj
LzEvd2c4QWpCek1waTV2dzFiV05DQlZwaWZjYlBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvUDZRHwA
Le2FkuoRgmLPswQWHBOmO7bEBLFGzLDAPcWN0l1K7BBmoQqwis7KX2GiBxQ6CUO9
Zv1cHd/O5oz6VnZB9F0SLpARmYpFJmZZFJMYdILykQ2YQH53xtrefCrTWWfjMPLC
yXp0zt/oWliNgu9d+3h219PrchWkjEh6TfVFm0/udj21BqvtVlJKxOzJYBt+MiY3
TRLSTK1KCa8e8F03LIhk+eyyTsNzukMh528pZIUtuE7yNLdkdzAQ+YMf3ax4avct
KIwCkgcYq+wRzEoGX1Br0jpu0sP3evy+TmKMxB6MoLIrOA+kedXrh2QnEOotEzim
8FAOY5WdIQZzhQ==
-----END CERTIFICATE-----
Generated at Tue Jul 29 04:01:16 2025 by rpki-client