Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.mft
File:                     wb-PPmCQcoiedN0PtOJ_m6xHs7A.mft (raw, json)
Hash identifier:          b3B5VJCeCM/HwbC2jhg/GrqhUNn4YhuwaA8mSJNmVUs=
Subject key identifier:   BC:3E:AE:64:E2:00:92:85:8E:29:CB:A2:FD:E3:89:AD:8A:30:6A:58
Authority key identifier: C1:BF:8F:3E:60:90:72:88:9E:74:DD:0F:B4:E2:7F:9B:AC:47:B3:B0
Certificate issuer:       /CN=c1bf8f3e609072889e74dd0fb4e27f9bac47b3b0
Certificate serial:       01994E1B0E6B6C70B9AE636299C8DFFBAA88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wb-PPmCQcoiedN0PtOJ_m6xHs7A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.mft
Manifest number:          1692
Signing time:             Mon 15 Sep 2025 16:00:20 +0000
Manifest this update:     Mon 15 Sep 2025 16:00:20 +0000
Manifest next update:     Tue 16 Sep 2025 16:00:20 +0000
Files and hashes:         1: DIDvdbb3GKHM4R0fThp87ONTKIg.roa (hash: PpLadHjUjIbh3z8TdW7x9p2zKoB60tTFsLSNrfKJGP0=)
                          2: NiiYntce0l2g8rM0crSiQd9ju9Q.roa (hash: dXNA4zFEqgeMGWVbP7xCDHL9Yv22/YkYEyRq1Xgq0Qk=)
                          3: TKLzQ3aUn5r9wRqdWWY_X3np5Nw.roa (hash: FHEE5b54dYwOgG8q4mFeJQWJCBG47+yi4U4T7p61+TU=)
                          4: UwTNWro9evVq9A2tmjUi9EC7e1U.roa (hash: blbaLMvxLnOeS1jYks60LVjVa40KZBXbFkM1K6NYTsw=)
                          5: aQ15-5dar1aqgdmTJxXJsHa1LDw.roa (hash: 1rVI43V3MOJKO7UAkMxeh1LlYc7UXyA9BgVQnSxTc5I=)
                          6: awX-yLV9QhTtYIRH8dzM3NZ-YyE.roa (hash: cUBeWKNk+8N9DHilcnVglMXRUVzQzFqcjW7BKF+It/4=)
                          7: hXz87hx_B-hbL3xb1XWOpeq_ghU.roa (hash: qgegZ0Q4MVtx4Pfhi+QnSP0PfWput13BxQSPM+9zyGM=)
                          8: nGG-OUODAxwLxi6jNHbpt8RGNb8.roa (hash: CE5MyGR9lb1V5N4ocRK2ocMWINjBM6Y8ecSTUiTujPU=)
                          9: wb-PPmCQcoiedN0PtOJ_m6xHs7A.crl (hash: ZyY79m9krdNPmVqFjVB1s0/Rfb32MkQKpcZWMuZfVjk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wb-PPmCQcoiedN0PtOJ_m6xHs7A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 16 Sep 2025 16:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:4e:1b:0e:6b:6c:70:b9:ae:63:62:99:c8:df:fb:aa:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1bf8f3e609072889e74dd0fb4e27f9bac47b3b0
        Validity
            Not Before: Sep 15 16:00:20 2025 GMT
            Not After : Sep 16 16:00:20 2025 GMT
        Subject: CN=bc3eae64e20092858e29cba2fde389ad8a306a58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:1d:f8:bd:d8:f9:dd:75:88:e0:aa:f0:9a:20:
                    98:fb:43:37:66:fd:55:e8:4e:28:b3:fb:2d:3a:80:
                    46:f5:c1:c4:da:65:84:ab:f5:a8:35:2d:72:8d:58:
                    2a:e3:4f:5a:fe:b4:19:cf:3e:a2:e8:2e:77:0a:80:
                    c5:e4:78:6f:f6:8b:84:b4:e4:c3:cb:f1:78:42:a4:
                    39:2f:c0:38:5d:fa:0a:a9:f7:58:b0:bf:0e:da:4d:
                    3c:cd:a1:ec:c5:12:a9:08:9b:2a:9e:f1:a6:4f:25:
                    d8:bd:25:47:15:f9:a1:f8:7d:6d:f3:1f:4d:e5:f7:
                    d4:eb:0e:50:2c:5c:93:38:ab:cf:31:a0:ac:58:b9:
                    b1:f2:95:d4:c9:c8:27:4d:0b:12:61:51:42:bb:60:
                    2e:b6:10:a8:68:b4:5b:17:8d:91:b0:3b:b0:ac:04:
                    51:1d:ca:25:42:50:e4:4a:68:b6:bf:c8:b0:bd:00:
                    77:c8:81:f4:1c:0f:cb:79:9c:ee:c7:4f:0d:fc:62:
                    17:a6:66:c7:4d:90:49:3e:44:89:e3:c2:ff:65:57:
                    22:0e:f3:ff:50:ee:af:02:d9:b5:ba:bd:da:e5:6d:
                    46:be:09:32:94:66:b3:5b:5f:83:b3:6d:84:25:4c:
                    fc:af:f9:95:5b:63:61:21:46:68:54:5b:74:f2:94:
                    33:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:3E:AE:64:E2:00:92:85:8E:29:CB:A2:FD:E3:89:AD:8A:30:6A:58
            X509v3 Authority Key Identifier:
                keyid:C1:BF:8F:3E:60:90:72:88:9E:74:DD:0F:B4:E2:7F:9B:AC:47:B3:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wb-PPmCQcoiedN0PtOJ_m6xHs7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:b1:53:1d:29:52:11:f1:14:d8:f3:d7:1f:ef:4a:42:a1:73:
         e1:4b:d5:db:de:61:1c:84:1f:50:d6:9f:f5:96:97:97:9c:c6:
         08:9e:3b:c1:c3:b7:cf:ab:a9:dd:8a:35:14:13:06:9b:08:70:
         60:9f:6b:dc:dc:ec:ac:fb:92:a4:fb:5c:f3:e2:70:6a:5b:b7:
         68:0c:f2:9c:21:2f:de:ef:ef:ea:27:be:b9:58:07:50:7e:b1:
         85:3e:2b:77:ae:da:8d:f0:6c:33:19:ec:b3:25:70:9d:fc:c8:
         1a:c1:78:3e:3d:11:6f:38:83:44:aa:16:38:f0:7d:05:92:39:
         da:11:98:48:30:cf:c0:76:4b:6b:6d:d2:61:63:ab:a5:75:20:
         8f:1d:46:e6:93:6e:20:1b:5b:1b:96:ba:f5:3c:78:6e:b7:1a:
         f4:06:8b:b5:6c:a7:50:10:1d:ce:1a:e5:4b:a3:e9:e5:45:5c:
         25:8c:3f:1c:88:2d:60:8d:0f:d8:91:87:5a:40:dc:d5:e8:33:
         19:84:2a:9d:2c:e0:ef:5f:4d:14:ee:b4:41:cd:b4:3e:1d:bd:
         a9:ef:89:b3:5e:d2:c6:78:7e:2c:37:15:d9:d0:af:ac:ba:23:
         bf:55:7c:db:26:19:25:05:ce:bc:bb:81:dc:ae:45:ac:d7:a7:
         d7:f6:59:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZlOGw5rbHC5rmNimcjf+6qIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxYmY4ZjNlNjA5MDcyODg5ZTc0ZGQwZmI0ZTI3ZjliYWM0
N2IzYjAwHhcNMjUwOTE1MTYwMDIwWhcNMjUwOTE2MTYwMDIwWjAzMTEwLwYDVQQD
EyhiYzNlYWU2NGUyMDA5Mjg1OGUyOWNiYTJmZGUzODlhZDhhMzA2YTU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiR34vdj53XWI4KrwmiCY+0M3Zv1V
6E4os/stOoBG9cHE2mWEq/WoNS1yjVgq409a/rQZzz6i6C53CoDF5Hhv9ouEtOTD
y/F4QqQ5L8A4XfoKqfdYsL8O2k08zaHsxRKpCJsqnvGmTyXYvSVHFfmh+H1t8x9N
5ffU6w5QLFyTOKvPMaCsWLmx8pXUycgnTQsSYVFCu2AuthCoaLRbF42RsDuwrARR
HcolQlDkSmi2v8iwvQB3yIH0HA/LeZzux08N/GIXpmbHTZBJPkSJ48L/ZVciDvP/
UO6vAtm1ur3a5W1GvgkylGazW1+Ds22EJUz8r/mVW2NhIUZoVFt08pQzzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLw+rmTiAJKFjinLov3jia2KMGpYMB8GA1UdIwQY
MBaAFMG/jz5gkHKInnTdD7Tif5usR7OwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2ItUFBtQ1Fjb2llZE4wUHRPSl9tNnhIczdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9hMWM2YzAtZTc1NC00NzllLTg1MWQt
MGQwZGEwZDEwNDMyLzEvd2ItUFBtQ1Fjb2llZE4wUHRPSl9tNnhIczdBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS9hMWM2YzAtZTc1NC00NzllLTg1MWQtMGQwZGEwZDEwNDMy
LzEvd2ItUFBtQ1Fjb2llZE4wUHRPSl9tNnhIczdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXLFTHSlS
EfEU2PPXH+9KQqFz4UvV295hHIQfUNaf9ZaXl5zGCJ47wcO3z6up3Yo1FBMGmwhw
YJ9r3NzsrPuSpPtc8+Jwalu3aAzynCEv3u/v6ie+uVgHUH6xhT4rd67ajfBsMxns
syVwnfzIGsF4Pj0RbziDRKoWOPB9BZI52hGYSDDPwHZLa23SYWOrpXUgjx1G5pNu
IBtbG5a69Tx4brca9AaLtWynUBAdzhrlS6Pp5UVcJYw/HIgtYI0P2JGHWkDc1egz
GYQqnSzg719NFO60Qc20Ph29qe+Js17Sxnh+LDcV2dCvrLojv1V82yYZJQXOvLuB
3K5FrNen1/ZZZA==
-----END CERTIFICATE-----
Generated at Tue Sep 16 00:23:56 2025 by rpki-client