Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/0b8373-0c2c-4b06-bf69-afbf4ecf2b50/1/wWFXjOD_N_BsJjYuosY1e5hjO3A.mft
File:                     wWFXjOD_N_BsJjYuosY1e5hjO3A.mft (raw, json)
Hash identifier:          fSzqU5RKKnPW+TCgbIsYcTPnTUBH4sk8XZTCnRnd05I=
Subject key identifier:   FB:D8:32:16:D0:63:4C:D7:81:30:10:00:70:AB:18:5D:91:99:63:A1
Authority key identifier: C1:61:57:8C:E0:FF:37:F0:6C:26:36:2E:A2:C6:35:7B:98:63:3B:70
Certificate issuer:       /CN=c161578ce0ff37f06c26362ea2c6357b98633b70
Certificate serial:       019921B1000C47E92984BE4E007D264561B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wWFXjOD_N_BsJjYuosY1e5hjO3A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/0b8373-0c2c-4b06-bf69-afbf4ecf2b50/1/wWFXjOD_N_BsJjYuosY1e5hjO3A.mft
Manifest number:          0E21
Signing time:             Sun 07 Sep 2025 01:01:11 +0000
Manifest this update:     Sun 07 Sep 2025 01:01:11 +0000
Manifest next update:     Mon 08 Sep 2025 01:01:11 +0000
Files and hashes:         1: VaQFkBkaVYjwzbk-d1HfVSqGj30.roa (hash: mgqfVOInqFPvEjCxJre+1kdiyjEUS8UusvaHKwVL6Uo=)
                          2: wWFXjOD_N_BsJjYuosY1e5hjO3A.crl (hash: VLI7jdMuwrXK1MLOBpLqHnx6NbHcG3c7LgjnQ52NCMA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/0b8373-0c2c-4b06-bf69-afbf4ecf2b50/1/wWFXjOD_N_BsJjYuosY1e5hjO3A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/0b8373-0c2c-4b06-bf69-afbf4ecf2b50/1/wWFXjOD_N_BsJjYuosY1e5hjO3A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wWFXjOD_N_BsJjYuosY1e5hjO3A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 01:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:21:b1:00:0c:47:e9:29:84:be:4e:00:7d:26:45:61:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c161578ce0ff37f06c26362ea2c6357b98633b70
        Validity
            Not Before: Sep  7 01:01:11 2025 GMT
            Not After : Sep  8 01:01:11 2025 GMT
        Subject: CN=fbd83216d0634cd78130100070ab185d919963a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:26:77:ad:2c:25:eb:b7:84:76:2e:38:6f:d2:
                    49:2f:29:24:5f:08:40:66:0a:62:25:7c:53:de:37:
                    4d:1b:17:6a:dd:76:0a:15:6a:2b:66:da:df:a1:b0:
                    1d:30:60:68:08:78:5a:33:c2:b3:41:82:c9:e0:3f:
                    32:3b:60:58:a7:e0:97:d7:27:60:54:00:2e:20:b6:
                    c6:c1:d5:66:d8:55:41:01:42:bd:76:0e:8c:a8:8f:
                    d6:db:a1:9a:bb:01:83:3a:f3:3a:c7:44:a2:6e:f9:
                    35:8c:39:c8:c5:4d:cd:f0:0a:0f:ce:65:ad:2d:94:
                    a6:c2:75:a8:7b:6b:61:00:7e:a9:44:8c:5d:e7:cb:
                    c9:40:9f:37:62:9e:80:1e:0f:d3:97:dc:3e:d3:5e:
                    da:64:5e:b1:64:f7:83:f9:44:05:56:72:43:db:6a:
                    a0:cb:90:f8:fe:b2:34:78:ef:f7:57:05:8d:8e:1e:
                    17:a8:30:3d:fd:95:c2:39:72:5c:21:0c:7b:4a:6a:
                    d8:0b:6b:13:6b:50:54:d6:23:88:87:d8:66:9f:cb:
                    4f:53:82:c5:ac:cd:e5:80:4a:5d:34:ef:56:31:d5:
                    7c:4c:98:e6:d0:03:95:34:01:94:b5:c3:3c:01:c2:
                    5f:93:53:50:e8:69:09:34:07:61:e0:78:81:90:5d:
                    ac:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:D8:32:16:D0:63:4C:D7:81:30:10:00:70:AB:18:5D:91:99:63:A1
            X509v3 Authority Key Identifier:
                keyid:C1:61:57:8C:E0:FF:37:F0:6C:26:36:2E:A2:C6:35:7B:98:63:3B:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wWFXjOD_N_BsJjYuosY1e5hjO3A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0b8373-0c2c-4b06-bf69-afbf4ecf2b50/1/wWFXjOD_N_BsJjYuosY1e5hjO3A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0b8373-0c2c-4b06-bf69-afbf4ecf2b50/1/wWFXjOD_N_BsJjYuosY1e5hjO3A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:ca:ab:9f:88:f7:ff:4a:38:83:f9:c2:1b:b7:ca:f8:2f:b5:
         6c:f8:f5:0a:06:d4:cd:c6:1e:f6:a8:2b:19:e7:28:09:d6:44:
         54:84:52:84:c7:18:91:51:48:67:5e:9f:28:41:47:88:95:3f:
         61:84:5b:94:cb:36:1b:36:52:c1:6b:11:04:ed:7a:48:ae:47:
         25:e1:b6:2e:ae:9f:0b:d1:5d:3d:18:05:c1:8a:a9:e4:80:13:
         33:19:dc:b9:87:18:77:24:f4:16:24:3c:19:ec:ba:bd:b1:41:
         b9:4a:ed:c6:20:b5:89:32:40:f9:39:e1:49:57:6d:75:87:de:
         d0:41:5e:e4:55:ef:11:22:ea:ed:fd:94:05:67:20:e2:ad:0b:
         34:05:bb:69:eb:9b:6c:11:cd:fa:8b:4b:23:92:2d:e2:b6:0d:
         4d:82:a3:00:6e:f2:d3:06:bc:d3:5f:bb:3c:f6:9e:c8:1c:94:
         53:2c:bf:64:4d:c2:a8:9f:61:e7:8a:26:64:b9:21:da:54:93:
         0b:9a:fe:96:de:04:a1:19:09:21:1b:03:8d:60:76:76:75:f6:
         12:2b:6a:66:1a:61:33:68:81:8c:11:1e:5e:91:66:08:40:70:
         56:9f:96:b3:10:c7:12:bb:ee:b3:fd:6e:9b:75:31:47:10:dd:
         a9:c9:99:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkhsQAMR+kphL5OAH0mRWG1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxNjE1NzhjZTBmZjM3ZjA2YzI2MzYyZWEyYzYzNTdiOTg2
MzNiNzAwHhcNMjUwOTA3MDEwMTExWhcNMjUwOTA4MDEwMTExWjAzMTEwLwYDVQQD
EyhmYmQ4MzIxNmQwNjM0Y2Q3ODEzMDEwMDA3MGFiMTg1ZDkxOTk2M2ExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuiZ3rSwl67eEdi44b9JJLykkXwhA
ZgpiJXxT3jdNGxdq3XYKFWorZtrfobAdMGBoCHhaM8KzQYLJ4D8yO2BYp+CX1ydg
VAAuILbGwdVm2FVBAUK9dg6MqI/W26GauwGDOvM6x0Sibvk1jDnIxU3N8AoPzmWt
LZSmwnWoe2thAH6pRIxd58vJQJ83Yp6AHg/Tl9w+017aZF6xZPeD+UQFVnJD22qg
y5D4/rI0eO/3VwWNjh4XqDA9/ZXCOXJcIQx7SmrYC2sTa1BU1iOIh9hmn8tPU4LF
rM3lgEpdNO9WMdV8TJjm0AOVNAGUtcM8AcJfk1NQ6GkJNAdh4HiBkF2s1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPvYMhbQY0zXgTAQAHCrGF2RmWOhMB8GA1UdIwQY
MBaAFMFhV4zg/zfwbCY2LqLGNXuYYztwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1dGWGpPRF9OX0JzSmpZdW9zWTFlNWhqTzNBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8wYjgzNzMtMGMyYy00YjA2LWJmNjkt
YWZiZjRlY2YyYjUwLzEvd1dGWGpPRF9OX0JzSmpZdW9zWTFlNWhqTzNBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC8wYjgzNzMtMGMyYy00YjA2LWJmNjktYWZiZjRlY2YyYjUw
LzEvd1dGWGpPRF9OX0JzSmpZdW9zWTFlNWhqTzNBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW8qrn4j3
/0o4g/nCG7fK+C+1bPj1CgbUzcYe9qgrGecoCdZEVIRShMcYkVFIZ16fKEFHiJU/
YYRblMs2GzZSwWsRBO16SK5HJeG2Lq6fC9FdPRgFwYqp5IATMxncuYcYdyT0FiQ8
Gey6vbFBuUrtxiC1iTJA+TnhSVdtdYfe0EFe5FXvESLq7f2UBWcg4q0LNAW7aeub
bBHN+otLI5It4rYNTYKjAG7y0wa801+7PPaeyByUUyy/ZE3CqJ9h54omZLkh2lST
C5r+lt4EoRkJIRsDjWB2dnX2EitqZhphM2iBjBEeXpFmCEBwVp+WsxDHErvus/1u
m3UxRxDdqcmZ3g==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:04:46 2025 by rpki-client