Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.mft
File:                     w5gGDxvyLwmZywcbG0JpbbxD4Qw.mft (raw, json)
Hash identifier:          nYj8E7O0UOkt0E8PB517p0Q71eqFjm+uoo5QkuIsfig=
Subject key identifier:   CA:95:43:8D:DA:99:CB:83:F1:B9:5F:1F:12:4C:07:65:0B:BE:C4:8E
Authority key identifier: C3:98:06:0F:1B:F2:2F:09:99:CB:07:1B:1B:42:69:6D:BC:43:E1:0C
Certificate issuer:       /CN=c398060f1bf22f0999cb071b1b42696dbc43e10c
Certificate serial:       0199183FF9B34E57840F18D20E2C8BD4A2AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.mft
Manifest number:          1695
Signing time:             Fri 05 Sep 2025 05:01:09 +0000
Manifest this update:     Fri 05 Sep 2025 05:01:09 +0000
Manifest next update:     Sat 06 Sep 2025 05:01:09 +0000
Files and hashes:         1: 2JhXptnvhueVQmeHn25cz0kurHI.roa (hash: 8SozpyusIiaDiWUG+p4VEYgVUXO18QzNYiLErT92LEQ=)
                          2: 4UNuayKJ9SKFMuYEY-BWSB61PDo.roa (hash: VdmvXseDtE+yEFHvon3CqWBkcnp2a6Fyr5Xk6vQjKrA=)
                          3: 95EMcqjIsM9QeVWiI1F103-6l7Y.roa (hash: gu1FSS8hVzJF6G+fxoX4QZ/buhSiBu7AZC9ypB19V18=)
                          4: AOHo_zNkn17jUlogxpO30pi4vZk.roa (hash: +QPjJA3N7ss0yCIwrgcDQ/5UO7ASRz1q9sJuFdAbQnM=)
                          5: FC18L6lC5yaJe6exeGTUDqFYlIo.roa (hash: GydOuNkxodWdIUJZgEfyA03NGxGVxZmhiSQz6U5MpVU=)
                          6: R7hZWRZrAnJei2iE6wt7eIe4FZk.roa (hash: t2Z1XiCtqv1iQqmj18uapS137l9O9IhR3Vr8NcgP36M=)
                          7: TjCkJR8qj6olugjRfD8NHtt3pZQ.roa (hash: qhX3u+/8KbHWKUW3NatWO53LfU8WF9QKEMeAjJDe1Jc=)
                          8: WpLLn3RjoLbyjipUUgV3MfV5sX8.roa (hash: PYHwQtVcmnqDQtX16D1WqJb0WgKnZrAZ19ITOPvDgZc=)
                          9: YVr0AF2c3KiDV-SjuPftS3CnSqY.roa (hash: ArqLxgm2U8vUhD9/kr3eJUcwEOkYGBgAWgDslpkJKrw=)
                          10: _j08j-2FDwC68rueaFbBqi1fpuA.roa (hash: qxS+XcpGtA2PtYARd7lBLLnmeCdljjuwyVVXC8rvxSU=)
                          11: hOu0RIEKB2ppqE90CKomzj_fPaU.roa (hash: 5puJ0YRx40NGpD/EpFU4mHjPixkjg4PxMixsFx+pf6M=)
                          12: jyuHoIpvGivbz5mzbJp3o-Fm4XE.roa (hash: L8QWmw7gSLTV6VDNnAdLsuvANJDNKaAv8M2I7z7lbPU=)
                          13: o5ELM4xYmad2C_2xxSWlwJhmr5o.roa (hash: DRFJi1VatiJUae8GoAxelcGEqzT42Z4nJl4HxitHaE8=)
                          14: qs9auAFh2pBR3JizXaVl9ahPIZw.roa (hash: rWVPduWCAoKm2gglbIKEXbvoDR4rX+//s9Ke5NqI9jo=)
                          15: rC_bTep_k2W1swG7Jm4biitFHA4.roa (hash: Sbe+qsJH965cmbXMZY6OWU+P7tgNGwOdhieuhSBvccc=)
                          16: v8zUsRBNwECEAu2aOUDthF32Ldc.roa (hash: EgwEm0mHHZuzyt4EgzWtyJchZ9xyGDbUPpYJISyJCnY=)
                          17: w5gGDxvyLwmZywcbG0JpbbxD4Qw.crl (hash: c4gdSqsoYT3jWunmKwCJYhKyQfDSLf+j6tOX64UX8ro=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Sep 2025 01:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:18:3f:f9:b3:4e:57:84:0f:18:d2:0e:2c:8b:d4:a2:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c398060f1bf22f0999cb071b1b42696dbc43e10c
        Validity
            Not Before: Sep  5 05:01:09 2025 GMT
            Not After : Sep  6 05:01:09 2025 GMT
        Subject: CN=ca95438dda99cb83f1b95f1f124c07650bbec48e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:48:fb:d0:b0:e0:d1:a5:42:a2:55:bc:72:7c:
                    6d:b7:4e:18:7e:4d:5d:2a:1f:82:50:a7:4d:81:fc:
                    42:31:19:bd:b8:16:a0:0c:45:ad:3c:4c:f9:ea:78:
                    31:a2:ac:14:28:8f:51:6a:0d:8c:05:e2:80:da:b9:
                    cd:dc:39:13:5a:a1:f9:9a:ea:28:9f:61:79:cb:1c:
                    4a:c7:f9:b2:1e:83:34:79:51:58:8d:2c:22:13:dd:
                    41:a3:d4:9d:15:17:3f:55:a2:fa:bb:31:1f:b2:c5:
                    42:90:97:0a:6a:77:cf:b9:1f:b9:28:e9:92:0e:f7:
                    2e:5b:ca:49:39:56:0f:9f:d5:1c:91:24:5c:93:a5:
                    51:5f:57:eb:f6:d6:0b:45:f1:46:6f:6d:c8:12:0c:
                    e2:b7:2b:85:da:32:28:cb:18:56:ff:96:58:85:4c:
                    d0:18:ef:f6:f3:42:7f:b0:76:96:f4:99:d7:3f:1b:
                    1f:03:de:87:a3:c9:43:30:93:e2:3e:be:35:14:40:
                    d7:ea:4c:85:39:f8:5e:b9:52:bf:b5:88:46:24:21:
                    1c:e1:03:8a:a0:77:f3:97:3a:bc:dc:fa:dd:e0:75:
                    7d:41:07:2c:97:f8:c5:b6:81:7b:f5:74:0a:e1:8f:
                    84:8f:05:d6:fc:6c:02:fa:8f:f3:e7:39:73:ea:63:
                    13:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:95:43:8D:DA:99:CB:83:F1:B9:5F:1F:12:4C:07:65:0B:BE:C4:8E
            X509v3 Authority Key Identifier:
                keyid:C3:98:06:0F:1B:F2:2F:09:99:CB:07:1B:1B:42:69:6D:BC:43:E1:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:f3:77:28:d2:08:18:d7:f9:7f:b5:c8:ee:68:e3:da:73:d1:
         ee:46:98:40:fb:aa:f0:3b:f0:2c:48:6f:a8:0d:3f:af:86:b0:
         1a:31:37:24:77:48:59:ba:e9:20:6d:68:bf:99:6d:4a:6a:c1:
         5c:e0:6a:4b:41:cc:58:95:f2:ee:46:f9:da:0f:7d:e3:8a:0b:
         eb:cc:99:f1:81:9f:f1:4a:a7:92:03:19:0b:ce:ac:51:e3:77:
         f8:48:8b:b8:ca:e0:e5:f3:ef:06:ee:38:4d:95:22:3d:bb:55:
         ba:a1:4d:e5:cd:7b:cc:78:bb:3f:3b:af:95:e7:50:25:cb:8d:
         75:38:22:a9:a0:97:d8:bb:70:ad:ae:90:68:ef:e6:90:f8:f9:
         aa:f8:a8:4d:8a:32:8c:ba:eb:64:ad:8a:a1:31:a7:2a:42:f9:
         68:ca:ae:b7:3e:a6:eb:0d:06:14:3f:0a:5b:8e:f9:4a:72:36:
         ae:c7:42:cd:cd:2a:df:43:f2:27:bb:53:91:67:28:dd:e1:66:
         94:7b:0c:ba:5e:d1:bb:7e:4c:e0:ca:b0:66:a2:e2:d2:87:18:
         cd:63:a2:0d:30:72:7c:b3:69:f1:3f:a3:d5:5d:3f:f6:7b:af:
         18:e7:86:95:5a:33:48:bc:4f:a5:5d:fe:5d:f9:1a:d9:8f:08:
         d1:cc:4e:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkYP/mzTleEDxjSDiyL1KKuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzOTgwNjBmMWJmMjJmMDk5OWNiMDcxYjFiNDI2OTZkYmM0
M2UxMGMwHhcNMjUwOTA1MDUwMTA5WhcNMjUwOTA2MDUwMTA5WjAzMTEwLwYDVQQD
EyhjYTk1NDM4ZGRhOTljYjgzZjFiOTVmMWYxMjRjMDc2NTBiYmVjNDhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Ej70LDg0aVColW8cnxtt04Yfk1d
Kh+CUKdNgfxCMRm9uBagDEWtPEz56ngxoqwUKI9Rag2MBeKA2rnN3DkTWqH5muoo
n2F5yxxKx/myHoM0eVFYjSwiE91Bo9SdFRc/VaL6uzEfssVCkJcKanfPuR+5KOmS
DvcuW8pJOVYPn9UckSRck6VRX1fr9tYLRfFGb23IEgzityuF2jIoyxhW/5ZYhUzQ
GO/280J/sHaW9JnXPxsfA96Ho8lDMJPiPr41FEDX6kyFOfheuVK/tYhGJCEc4QOK
oHfzlzq83Prd4HV9QQcsl/jFtoF79XQK4Y+EjwXW/GwC+o/z5zlz6mMTsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMqVQ43amcuD8blfHxJMB2ULvsSOMB8GA1UdIwQY
MBaAFMOYBg8b8i8JmcsHGxtCaW28Q+EMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzVnR0R4dnlMd21aeXdjYkcwSnBiYnhENFF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8zYmZjMzEtZGMzMi00NTQxLTg0NjAt
YzkyN2I4YzJjN2M0LzEvdzVnR0R4dnlMd21aeXdjYkcwSnBiYnhENFF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC8zYmZjMzEtZGMzMi00NTQxLTg0NjAtYzkyN2I4YzJjN2M0
LzEvdzVnR0R4dnlMd21aeXdjYkcwSnBiYnhENFF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWvN3KNII
GNf5f7XI7mjj2nPR7kaYQPuq8DvwLEhvqA0/r4awGjE3JHdIWbrpIG1ov5ltSmrB
XOBqS0HMWJXy7kb52g9944oL68yZ8YGf8UqnkgMZC86sUeN3+EiLuMrg5fPvBu44
TZUiPbtVuqFN5c17zHi7PzuvledQJcuNdTgiqaCX2Ltwra6QaO/mkPj5qvioTYoy
jLrrZK2KoTGnKkL5aMqutz6m6w0GFD8KW475SnI2rsdCzc0q30PyJ7tTkWco3eFm
lHsMul7Ru35M4MqwZqLi0ocYzWOiDTByfLNp8T+j1V0/9nuvGOeGlVozSLxPpV3+
Xfka2Y8I0cxOmw==
-----END CERTIFICATE-----
Generated at Fri Sep 5 11:33:10 2025 by rpki-client