Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/2a84e9-68b3-4e3f-b615-a0ad61d194a1/1/wzCs3wQbXcx-XsbPj_i9BkjoZww.mft
File:                     wzCs3wQbXcx-XsbPj_i9BkjoZww.mft (raw, json)
Hash identifier:          rkLDdWLr3/EJlkxCzD2lIv5NboWUJF+JmC77/0to7kQ=
Subject key identifier:   06:1C:81:FA:A6:89:A2:04:F6:D4:DC:D3:F5:50:06:E4:57:E4:CE:82
Authority key identifier: C3:30:AC:DF:04:1B:5D:CC:7E:5E:C6:CF:8F:F8:BD:06:48:E8:67:0C
Certificate issuer:       /CN=c330acdf041b5dcc7e5ec6cf8ff8bd0648e8670c
Certificate serial:       019922C31267281C82E99983706B136BCC8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wzCs3wQbXcx-XsbPj_i9BkjoZww.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/2a84e9-68b3-4e3f-b615-a0ad61d194a1/1/wzCs3wQbXcx-XsbPj_i9BkjoZww.mft
Manifest number:          130A
Signing time:             Sun 07 Sep 2025 06:00:33 +0000
Manifest this update:     Sun 07 Sep 2025 06:00:33 +0000
Manifest next update:     Mon 08 Sep 2025 06:00:33 +0000
Files and hashes:         1: NfY8zpyx6EDpP6DxTuquvNoK9sY.roa (hash: mmbOZfwYelbaWl9riAjIdhT8MqPp3t5vAxerApfLsl0=)
                          2: wzCs3wQbXcx-XsbPj_i9BkjoZww.crl (hash: 7YNj0g7yLTPq64oIHq8FdAtqEqXf5hMvkQ2RnmBOSX0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/2a84e9-68b3-4e3f-b615-a0ad61d194a1/1/wzCs3wQbXcx-XsbPj_i9BkjoZww.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/2a84e9-68b3-4e3f-b615-a0ad61d194a1/1/wzCs3wQbXcx-XsbPj_i9BkjoZww.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wzCs3wQbXcx-XsbPj_i9BkjoZww.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:c3:12:67:28:1c:82:e9:99:83:70:6b:13:6b:cc:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c330acdf041b5dcc7e5ec6cf8ff8bd0648e8670c
        Validity
            Not Before: Sep  7 06:00:33 2025 GMT
            Not After : Sep  8 06:00:33 2025 GMT
        Subject: CN=061c81faa689a204f6d4dcd3f55006e457e4ce82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:6c:61:ff:7b:a7:b2:a1:c9:60:90:4c:b6:db:
                    05:a6:8f:e3:ca:72:0d:5e:3d:e8:8b:7f:24:6a:20:
                    fe:39:eb:79:a4:34:78:6b:f6:14:e3:61:7f:fe:3d:
                    ee:77:cc:9c:11:02:26:0b:3f:5e:05:41:76:82:a3:
                    80:6a:f6:6f:ef:68:4c:4b:ee:91:7d:ad:d2:37:df:
                    29:f3:50:4e:4a:24:08:28:07:44:99:7a:81:36:0b:
                    6a:34:3a:89:9b:7d:11:b5:7c:08:53:b4:bc:f0:ca:
                    21:43:d8:4c:3c:c4:57:9d:ee:14:90:85:4f:d9:ee:
                    45:d2:b5:c6:19:d7:05:85:67:1d:ad:3e:df:e1:47:
                    eb:d3:f5:e8:24:59:f3:bf:7f:17:9f:a0:3e:a3:71:
                    a3:a8:93:b6:0a:84:6c:73:fc:25:a7:83:30:89:8e:
                    f3:d0:f9:ed:b2:bd:f9:49:48:d5:6d:17:29:f0:dc:
                    ef:38:e1:b8:d6:d6:04:10:54:e0:ef:0b:c2:a3:6a:
                    a4:89:45:64:50:00:4b:f1:2f:27:16:e7:a9:53:1c:
                    59:39:4b:43:2b:1e:df:ca:5e:f2:7f:23:51:bb:79:
                    82:0b:4a:0b:0c:6b:1a:43:f3:f5:fb:cb:e8:3d:bc:
                    3d:16:77:92:72:a8:48:96:8e:3b:e6:75:c7:c9:2d:
                    05:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:1C:81:FA:A6:89:A2:04:F6:D4:DC:D3:F5:50:06:E4:57:E4:CE:82
            X509v3 Authority Key Identifier:
                keyid:C3:30:AC:DF:04:1B:5D:CC:7E:5E:C6:CF:8F:F8:BD:06:48:E8:67:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wzCs3wQbXcx-XsbPj_i9BkjoZww.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2a84e9-68b3-4e3f-b615-a0ad61d194a1/1/wzCs3wQbXcx-XsbPj_i9BkjoZww.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2a84e9-68b3-4e3f-b615-a0ad61d194a1/1/wzCs3wQbXcx-XsbPj_i9BkjoZww.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:e6:6d:90:68:a1:59:2d:66:31:be:1e:a7:39:46:bd:dd:90:
         23:35:30:19:18:f0:c0:58:9d:86:ac:5b:63:e3:ff:43:10:12:
         cf:0f:10:4b:ab:1c:2c:2a:14:c0:8a:11:dd:b9:c7:7d:08:c2:
         31:b1:8c:7a:41:1d:28:75:ce:12:27:67:71:d0:b0:ca:db:4b:
         26:83:45:9a:e4:f8:d5:97:07:6a:24:6b:a8:05:18:ce:8b:31:
         42:1d:22:70:a9:c4:04:eb:14:98:45:df:a8:b6:ab:89:50:88:
         1c:aa:c6:32:26:0f:fd:d4:5a:36:6e:99:da:61:4e:ec:6f:2e:
         67:23:0b:1d:68:ab:51:9a:a4:fd:c2:3f:45:8e:5f:14:2d:56:
         4f:7d:1e:9f:f0:68:ee:f6:72:67:13:10:05:af:15:1a:74:cd:
         05:c2:c1:03:2f:2f:a7:4b:c7:45:e6:99:90:f5:c9:64:a8:dc:
         79:20:b7:31:f2:3f:9e:95:fa:b7:8f:ba:e9:2e:96:0a:0d:43:
         2f:34:8c:c1:99:3c:71:2a:f9:3f:cd:49:ae:12:a2:37:ce:27:
         ec:1f:95:24:1b:42:b8:cb:67:37:a1:be:95:df:e7:d3:28:b0:
         d2:e5:a9:a7:5b:93:04:3d:a5:fc:e8:35:b6:29:46:11:01:df:
         09:ea:9f:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:18:49 2025 by rpki-client