Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/6d09ad-af5e-4bf0-9ff2-a9522b2d048b/1/WZPv3Qoo_Tq2a3oFubjXfFZmY1Y.mft
File:                     WZPv3Qoo_Tq2a3oFubjXfFZmY1Y.mft (raw, json)
Hash identifier:          +39cFeMXNPdbyzjHQB0vxRxxlD2IFyxuin4kfvfCdrA=
Subject key identifier:   B7:F0:63:71:2A:26:EC:BE:57:99:00:28:EC:AD:9D:46:82:69:16:95
Authority key identifier: 59:93:EF:DD:0A:28:FD:3A:B6:6B:7A:05:B9:B8:D7:7C:56:66:63:56
Certificate issuer:       /CN=5993efdd0a28fd3ab66b7a05b9b8d77c56666356
Certificate serial:       019A22F7D5E69568D00F34711B8928537886
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WZPv3Qoo_Tq2a3oFubjXfFZmY1Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/6d09ad-af5e-4bf0-9ff2-a9522b2d048b/1/WZPv3Qoo_Tq2a3oFubjXfFZmY1Y.mft
Manifest number:          0744
Signing time:             Mon 27 Oct 2025 00:00:58 +0000
Manifest this update:     Mon 27 Oct 2025 00:00:58 +0000
Manifest next update:     Tue 28 Oct 2025 00:00:58 +0000
Files and hashes:         1: GqbACIHpXheHhq0oe01LtYC6Cs8.roa (hash: 1QDs0/2NoNbNsd7ad8m6jQQ5pnMmhaUanNisyPMXmxQ=)
                          2: WZPv3Qoo_Tq2a3oFubjXfFZmY1Y.crl (hash: prqtqjK3m/+R4CMBLF2LtAvVwZ/tS113Z6X9hOlD6RE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/6d09ad-af5e-4bf0-9ff2-a9522b2d048b/1/WZPv3Qoo_Tq2a3oFubjXfFZmY1Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/6d09ad-af5e-4bf0-9ff2-a9522b2d048b/1/WZPv3Qoo_Tq2a3oFubjXfFZmY1Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WZPv3Qoo_Tq2a3oFubjXfFZmY1Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Oct 2025 23:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:22:f7:d5:e6:95:68:d0:0f:34:71:1b:89:28:53:78:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5993efdd0a28fd3ab66b7a05b9b8d77c56666356
        Validity
            Not Before: Oct 27 00:00:58 2025 GMT
            Not After : Oct 28 00:00:58 2025 GMT
        Subject: CN=b7f063712a26ecbe57990028ecad9d4682691695
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:9f:79:e6:b4:47:fa:52:73:e1:6f:4c:44:ef:
                    05:01:52:d5:78:ae:ab:02:09:0f:e6:49:95:6f:b4:
                    67:9d:46:76:d2:36:14:75:4d:b6:07:69:8b:68:04:
                    7e:fd:34:40:97:a2:58:3f:0b:e5:eb:77:9e:61:97:
                    f1:8d:63:64:d9:26:b5:69:45:a6:51:77:64:31:36:
                    f9:14:c0:79:16:88:df:45:31:91:89:4c:84:44:76:
                    23:b4:10:cf:6d:f7:1c:f0:68:e5:44:92:c0:6e:1f:
                    23:c2:b2:b7:1a:6e:11:05:43:fc:ed:ec:0f:3b:6e:
                    c7:48:48:8d:b1:85:18:5c:e3:86:e3:41:d3:11:49:
                    db:82:44:42:cd:5f:e2:b5:d7:30:23:a5:09:7c:37:
                    11:f2:26:6a:9e:60:67:3e:ef:3e:18:97:98:f3:58:
                    19:ba:fa:f9:8b:ce:e7:49:c6:f9:74:63:56:d0:13:
                    19:f6:b3:c1:af:04:0e:3c:ee:69:f3:95:98:9f:ba:
                    b8:42:e9:7d:1d:c9:97:1d:a3:1b:db:14:6e:97:02:
                    0f:6c:4b:3b:11:84:e1:a5:11:9e:ff:43:bb:91:b0:
                    ae:2d:40:2c:31:f8:54:16:ef:56:4d:74:33:ab:8e:
                    3a:1e:14:a7:f6:af:4e:4e:36:4b:f9:8f:36:11:31:
                    c3:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:F0:63:71:2A:26:EC:BE:57:99:00:28:EC:AD:9D:46:82:69:16:95
            X509v3 Authority Key Identifier:
                keyid:59:93:EF:DD:0A:28:FD:3A:B6:6B:7A:05:B9:B8:D7:7C:56:66:63:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WZPv3Qoo_Tq2a3oFubjXfFZmY1Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/6d09ad-af5e-4bf0-9ff2-a9522b2d048b/1/WZPv3Qoo_Tq2a3oFubjXfFZmY1Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/6d09ad-af5e-4bf0-9ff2-a9522b2d048b/1/WZPv3Qoo_Tq2a3oFubjXfFZmY1Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:92:c2:b7:b9:f6:71:ff:96:61:73:4f:1b:03:90:d5:57:f8:
         44:69:8f:6e:a9:15:4e:75:18:62:5b:60:3a:bc:12:e0:4d:81:
         1d:6c:0f:af:e3:d4:22:5d:f7:2e:a7:c8:a7:5f:03:80:b3:76:
         08:f8:57:1e:08:fc:77:0f:6c:b7:04:c8:f5:f7:e7:12:88:a1:
         e9:d0:de:9f:d2:fb:07:37:22:18:82:e4:e0:ed:e5:aa:f2:6c:
         b7:2e:76:e8:92:1b:58:95:6d:63:3f:40:3b:81:55:9f:23:04:
         c4:9e:61:d2:63:ec:47:dc:db:a5:ac:23:44:49:91:84:82:ac:
         a5:ab:7b:d2:4a:db:1e:50:a5:ef:a6:d5:75:1e:74:ad:1c:0a:
         d0:2c:aa:02:b1:cf:19:d8:02:0f:c8:d8:db:f8:6b:ed:5c:75:
         ac:8e:2d:43:43:cc:d9:cc:db:d6:5b:e4:71:93:a9:41:1d:9a:
         86:7c:dc:90:5a:c5:f4:6f:75:ab:e0:01:ae:e9:fa:e4:8e:42:
         18:42:b3:7b:fc:b5:ab:c7:9c:4f:30:0a:99:de:61:72:1a:05:
         f8:bd:11:32:a1:b0:9b:8f:6a:ff:64:a3:d7:77:aa:7d:b8:de:
         d8:53:2b:4c:65:b3:1f:51:e7:af:f8:f0:4e:c3:77:d7:c2:82:
         cb:e8:c1:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoi99XmlWjQDzRxG4koU3iGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5OTNlZmRkMGEyOGZkM2FiNjZiN2EwNWI5YjhkNzdjNTY2
NjYzNTYwHhcNMjUxMDI3MDAwMDU4WhcNMjUxMDI4MDAwMDU4WjAzMTEwLwYDVQQD
EyhiN2YwNjM3MTJhMjZlY2JlNTc5OTAwMjhlY2FkOWQ0NjgyNjkxNjk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Z955rRH+lJz4W9MRO8FAVLVeK6r
AgkP5kmVb7RnnUZ20jYUdU22B2mLaAR+/TRAl6JYPwvl63eeYZfxjWNk2Sa1aUWm
UXdkMTb5FMB5FojfRTGRiUyERHYjtBDPbfcc8GjlRJLAbh8jwrK3Gm4RBUP87ewP
O27HSEiNsYUYXOOG40HTEUnbgkRCzV/itdcwI6UJfDcR8iZqnmBnPu8+GJeY81gZ
uvr5i87nScb5dGNW0BMZ9rPBrwQOPO5p85WYn7q4Qul9HcmXHaMb2xRulwIPbEs7
EYThpRGe/0O7kbCuLUAsMfhUFu9WTXQzq446HhSn9q9OTjZL+Y82ETHDMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLfwY3EqJuy+V5kAKOytnUaCaRaVMB8GA1UdIwQY
MBaAFFmT790KKP06tmt6Bbm413xWZmNWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1pQdjNRb29fVHEyYTNvRnVialhmRlptWTFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi82ZDA5YWQtYWY1ZS00YmYwLTlmZjIt
YTk1MjJiMmQwNDhiLzEvV1pQdjNRb29fVHEyYTNvRnVialhmRlptWTFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi82ZDA5YWQtYWY1ZS00YmYwLTlmZjItYTk1MjJiMmQwNDhi
LzEvV1pQdjNRb29fVHEyYTNvRnVialhmRlptWTFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYZLCt7n2
cf+WYXNPGwOQ1Vf4RGmPbqkVTnUYYltgOrwS4E2BHWwPr+PUIl33LqfIp18DgLN2
CPhXHgj8dw9stwTI9ffnEoih6dDen9L7BzciGILk4O3lqvJsty526JIbWJVtYz9A
O4FVnyMExJ5h0mPsR9zbpawjREmRhIKspat70krbHlCl76bVdR50rRwK0CyqArHP
GdgCD8jY2/hr7Vx1rI4tQ0PM2czb1lvkcZOpQR2ahnzckFrF9G91q+ABrun65I5C
GEKze/y1q8ecTzAKmd5hchoF+L0RMqGwm49q/2Sj13eqfbje2FMrTGWzH1Hnr/jw
TsN318KCy+jBPQ==
-----END CERTIFICATE-----
Generated at Mon Oct 27 07:08:56 2025 by rpki-client