Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/2a84e9-68b3-4e3f-b615-a0ad61d194a1/1/wzCs3wQbXcx-XsbPj_i9BkjoZww.mft
File:                     wzCs3wQbXcx-XsbPj_i9BkjoZww.mft (raw, json)
Hash identifier:          O8yt6eYbEZBYMwG0ICo1Qfjm253S8m6l6qH07qZ1xxA=
Subject key identifier:   00:C2:70:E3:9B:FB:CF:4F:A0:71:89:1F:A0:EA:87:48:9D:C6:C6:B6
Authority key identifier: C3:30:AC:DF:04:1B:5D:CC:7E:5E:C6:CF:8F:F8:BD:06:48:E8:67:0C
Certificate issuer:       /CN=c330acdf041b5dcc7e5ec6cf8ff8bd0648e8670c
Certificate serial:       01974B8DC08809755E828873331021AE9EAC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wzCs3wQbXcx-XsbPj_i9BkjoZww.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/2a84e9-68b3-4e3f-b615-a0ad61d194a1/1/wzCs3wQbXcx-XsbPj_i9BkjoZww.mft
Manifest number:          1216
Signing time:             Sat 07 Jun 2025 18:01:10 +0000
Manifest this update:     Sat 07 Jun 2025 18:01:10 +0000
Manifest next update:     Sun 08 Jun 2025 18:01:10 +0000
Files and hashes:         1: NfY8zpyx6EDpP6DxTuquvNoK9sY.roa (hash: mmbOZfwYelbaWl9riAjIdhT8MqPp3t5vAxerApfLsl0=)
                          2: wzCs3wQbXcx-XsbPj_i9BkjoZww.crl (hash: FGURYCRguOyRfS8nve1ERUX8AuTPGjJl73mEl1lO2jk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/2a84e9-68b3-4e3f-b615-a0ad61d194a1/1/wzCs3wQbXcx-XsbPj_i9BkjoZww.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/2a84e9-68b3-4e3f-b615-a0ad61d194a1/1/wzCs3wQbXcx-XsbPj_i9BkjoZww.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wzCs3wQbXcx-XsbPj_i9BkjoZww.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 18:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:8d:c0:88:09:75:5e:82:88:73:33:10:21:ae:9e:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c330acdf041b5dcc7e5ec6cf8ff8bd0648e8670c
        Validity
            Not Before: Jun  7 18:01:10 2025 GMT
            Not After : Jun  8 18:01:10 2025 GMT
        Subject: CN=00c270e39bfbcf4fa071891fa0ea87489dc6c6b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:64:0c:86:50:10:cc:4e:66:1c:23:41:3c:ee:
                    4b:b3:cc:97:be:3e:19:72:0b:f5:3c:8f:1c:0c:3a:
                    1a:2e:53:cc:ea:08:8d:fc:e7:71:d2:6f:53:3e:c9:
                    b0:bf:66:b6:57:cf:ec:f3:db:1e:6f:bf:00:3e:6e:
                    e3:23:67:87:ed:c0:70:e6:8e:46:ca:91:ef:af:e8:
                    70:86:5a:23:dc:48:55:8b:31:ff:c8:50:7c:f7:48:
                    4f:20:7e:ed:6d:27:c6:bd:da:fa:ed:54:96:6f:6a:
                    a8:cc:31:3d:97:83:26:67:0f:70:10:d7:e9:dd:69:
                    a8:06:36:16:ad:88:f1:11:30:22:6a:75:df:be:c8:
                    20:70:7b:e4:d9:23:7c:6b:ce:37:81:ec:ae:57:06:
                    28:13:81:b5:a4:c3:59:a9:68:8f:00:30:cd:de:21:
                    bf:8d:0d:a6:c4:25:02:89:87:fc:c8:cb:a5:70:e7:
                    cd:57:d6:f9:43:51:f6:b8:25:a8:4a:6c:1b:0b:d7:
                    ef:3e:dc:38:17:a3:26:e4:6b:8d:be:72:69:ef:1c:
                    27:0d:ac:fb:97:de:29:d0:71:bc:4f:93:3e:d4:19:
                    2a:ac:0b:c0:00:4c:46:6f:41:92:0d:0a:75:90:70:
                    35:d4:75:ab:4e:63:74:e8:7f:48:8c:7a:74:0b:7c:
                    da:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:C2:70:E3:9B:FB:CF:4F:A0:71:89:1F:A0:EA:87:48:9D:C6:C6:B6
            X509v3 Authority Key Identifier:
                keyid:C3:30:AC:DF:04:1B:5D:CC:7E:5E:C6:CF:8F:F8:BD:06:48:E8:67:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wzCs3wQbXcx-XsbPj_i9BkjoZww.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2a84e9-68b3-4e3f-b615-a0ad61d194a1/1/wzCs3wQbXcx-XsbPj_i9BkjoZww.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2a84e9-68b3-4e3f-b615-a0ad61d194a1/1/wzCs3wQbXcx-XsbPj_i9BkjoZww.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:49:6d:5f:1c:df:a1:a6:67:11:ab:60:45:c8:67:47:65:17:
         10:6c:10:f5:08:1c:b1:f8:dc:72:ee:c0:14:23:67:30:67:e8:
         c0:04:ba:a2:22:13:e7:7a:c9:2d:8d:e7:40:af:a1:56:49:45:
         fe:3c:3c:f3:40:8d:5d:b6:45:cc:36:e9:d8:1b:c6:1f:d9:0c:
         0a:4d:ae:d6:13:d5:45:75:15:a9:03:3f:7b:2b:f1:c0:d3:12:
         00:45:92:0a:46:34:1c:31:ac:89:34:f5:ff:8d:dd:34:52:a3:
         58:d2:8d:4e:23:fa:b1:6e:d0:a3:47:3f:17:84:03:c7:7a:48:
         9d:5c:70:be:a4:62:be:c6:37:4b:c0:3f:0a:4c:5d:de:c5:b1:
         a8:5e:49:4c:88:27:b5:94:78:93:2c:04:32:ad:28:80:a3:66:
         c3:1d:7b:67:d8:a3:dd:3d:b1:48:6d:dd:fa:da:14:36:18:ec:
         fe:c5:e7:38:1e:8c:b4:d3:fd:c2:4d:d0:a9:af:c4:e6:37:3a:
         0b:ed:70:94:88:67:5d:c8:4a:cb:d3:9b:00:51:50:9f:67:ff:
         96:c2:2c:25:be:c9:b5:82:3e:0f:12:65:70:2a:f0:7a:c2:90:
         04:1e:f1:fe:9d:92:3a:ff:92:b1:e9:78:70:54:e6:94:37:27:
         f4:d9:85:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdLjcCICXVegohzMxAhrp6sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzMzBhY2RmMDQxYjVkY2M3ZTVlYzZjZjhmZjhiZDA2NDhl
ODY3MGMwHhcNMjUwNjA3MTgwMTEwWhcNMjUwNjA4MTgwMTEwWjAzMTEwLwYDVQQD
EygwMGMyNzBlMzliZmJjZjRmYTA3MTg5MWZhMGVhODc0ODlkYzZjNmI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3GQMhlAQzE5mHCNBPO5Ls8yXvj4Z
cgv1PI8cDDoaLlPM6giN/Odx0m9TPsmwv2a2V8/s89seb78APm7jI2eH7cBw5o5G
ypHvr+hwhloj3EhVizH/yFB890hPIH7tbSfGvdr67VSWb2qozDE9l4MmZw9wENfp
3WmoBjYWrYjxETAianXfvsggcHvk2SN8a843geyuVwYoE4G1pMNZqWiPADDN3iG/
jQ2mxCUCiYf8yMulcOfNV9b5Q1H2uCWoSmwbC9fvPtw4F6Mm5GuNvnJp7xwnDaz7
l94p0HG8T5M+1BkqrAvAAExGb0GSDQp1kHA11HWrTmN06H9IjHp0C3zaVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFADCcOOb+89PoHGJH6Dqh0idxsa2MB8GA1UdIwQY
MBaAFMMwrN8EG13Mfl7Gz4/4vQZI6GcMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3pDczN3UWJYY3gtWHNiUGpfaTlCa2pvWnd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy8yYTg0ZTktNjhiMy00ZTNmLWI2MTUt
YTBhZDYxZDE5NGExLzEvd3pDczN3UWJYY3gtWHNiUGpfaTlCa2pvWnd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy8yYTg0ZTktNjhiMy00ZTNmLWI2MTUtYTBhZDYxZDE5NGEx
LzEvd3pDczN3UWJYY3gtWHNiUGpfaTlCa2pvWnd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARkltXxzf
oaZnEatgRchnR2UXEGwQ9Qgcsfjccu7AFCNnMGfowAS6oiIT53rJLY3nQK+hVklF
/jw880CNXbZFzDbp2BvGH9kMCk2u1hPVRXUVqQM/eyvxwNMSAEWSCkY0HDGsiTT1
/43dNFKjWNKNTiP6sW7Qo0c/F4QDx3pInVxwvqRivsY3S8A/Ckxd3sWxqF5JTIgn
tZR4kywEMq0ogKNmwx17Z9ij3T2xSG3d+toUNhjs/sXnOB6MtNP9wk3Qqa/E5jc6
C+1wlIhnXchKy9ObAFFQn2f/lsIsJb7JtYI+DxJlcCrwesKQBB7x/p2SOv+Ssel4
cFTmlDcn9NmF8w==
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:59:37 2025 by rpki-client