Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/422a4c-8394-46b4-aa18-d1fbe5a91d70/1/wLpQ_KM7GA1oQ25-8Mv2kEuvRdQ.mft
File:                     wLpQ_KM7GA1oQ25-8Mv2kEuvRdQ.mft (raw, json)
Hash identifier:          OerwTixreL/w259CJgspjDtUG9V3LEvBcPVhUZaaIic=
Subject key identifier:   22:5B:C9:EB:E2:58:B6:0B:8C:B9:AA:48:8A:D7:5B:9E:9B:BC:47:25
Authority key identifier: C0:BA:50:FC:A3:3B:18:0D:68:43:6E:7E:F0:CB:F6:90:4B:AF:45:D4
Certificate issuer:       /CN=c0ba50fca33b180d68436e7ef0cbf6904baf45d4
Certificate serial:       0199356EC413D6FF6B21CA79B371373B76B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wLpQ_KM7GA1oQ25-8Mv2kEuvRdQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/422a4c-8394-46b4-aa18-d1fbe5a91d70/1/wLpQ_KM7GA1oQ25-8Mv2kEuvRdQ.mft
Manifest number:          0640
Signing time:             Wed 10 Sep 2025 21:01:15 +0000
Manifest this update:     Wed 10 Sep 2025 21:01:15 +0000
Manifest next update:     Thu 11 Sep 2025 21:01:15 +0000
Files and hashes:         1: RpRW6TZvmlJBGznF3-hnJMYz2K4.roa (hash: xykvfoJNE09ErVanuSOIuIu5xVg3V0n12SrhzPJXXrg=)
                          2: wLpQ_KM7GA1oQ25-8Mv2kEuvRdQ.crl (hash: RlxlQ1DAMaqKNW/16WUqXZ/h1DQgoC3k3LPZ+GBgh34=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/422a4c-8394-46b4-aa18-d1fbe5a91d70/1/wLpQ_KM7GA1oQ25-8Mv2kEuvRdQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/422a4c-8394-46b4-aa18-d1fbe5a91d70/1/wLpQ_KM7GA1oQ25-8Mv2kEuvRdQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wLpQ_KM7GA1oQ25-8Mv2kEuvRdQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 11 Sep 2025 20:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:35:6e:c4:13:d6:ff:6b:21:ca:79:b3:71:37:3b:76:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0ba50fca33b180d68436e7ef0cbf6904baf45d4
        Validity
            Not Before: Sep 10 21:01:15 2025 GMT
            Not After : Sep 11 21:01:15 2025 GMT
        Subject: CN=225bc9ebe258b60b8cb9aa488ad75b9e9bbc4725
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d9:7e:e3:53:98:4b:48:2d:d7:97:8f:a6:ec:
                    29:8f:45:21:ee:21:4b:c6:16:fa:0e:95:0c:e5:e6:
                    c8:21:3b:b9:e8:ee:ef:60:aa:37:73:04:16:7c:85:
                    bd:b5:fb:ab:67:5d:c9:3c:3d:ce:fc:99:b7:d9:ee:
                    ba:fb:5a:af:12:da:79:6b:8a:46:e4:b8:69:88:28:
                    ca:7d:fa:6c:8d:38:90:b4:dd:a1:d0:65:93:12:0f:
                    02:75:1c:7f:44:3e:cc:3d:0d:21:f9:ae:b5:a8:d2:
                    a4:a3:00:1b:62:41:9e:f6:94:9d:75:c5:b2:22:cd:
                    34:d4:6a:e1:65:ab:08:d9:ed:95:1a:c5:55:ba:79:
                    13:48:e4:b5:a4:d0:7b:0f:65:50:4b:fb:12:e6:0e:
                    ac:78:08:54:14:2c:16:a8:ac:b6:72:c3:f2:f1:9e:
                    b3:44:42:a0:3c:2e:cb:39:18:27:6f:5e:ce:e0:dd:
                    f5:05:39:8d:ac:21:43:4e:69:66:81:91:c3:34:1e:
                    b5:8e:05:e1:9f:72:c5:1c:2b:52:ea:fb:d4:5e:a6:
                    75:3f:fa:ee:3d:db:70:1f:c4:75:93:75:61:7b:78:
                    3e:db:bb:a8:dc:e5:22:07:5f:49:21:88:0b:d6:71:
                    dc:16:78:ea:e8:4c:d5:96:8d:35:7f:ae:21:a8:57:
                    ef:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:5B:C9:EB:E2:58:B6:0B:8C:B9:AA:48:8A:D7:5B:9E:9B:BC:47:25
            X509v3 Authority Key Identifier:
                keyid:C0:BA:50:FC:A3:3B:18:0D:68:43:6E:7E:F0:CB:F6:90:4B:AF:45:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wLpQ_KM7GA1oQ25-8Mv2kEuvRdQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/422a4c-8394-46b4-aa18-d1fbe5a91d70/1/wLpQ_KM7GA1oQ25-8Mv2kEuvRdQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/422a4c-8394-46b4-aa18-d1fbe5a91d70/1/wLpQ_KM7GA1oQ25-8Mv2kEuvRdQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:3e:9c:6d:c1:85:76:ae:00:ab:c0:92:d7:82:1f:44:e6:30:
         03:f6:cf:40:96:ec:b3:33:4e:8f:65:ce:41:c7:1e:8d:8f:9b:
         e3:a7:73:73:5b:ec:91:ff:22:ba:8d:4b:2a:b9:8b:34:10:04:
         51:0f:a0:48:88:9e:c0:a8:27:da:81:20:7e:44:52:b7:40:c3:
         a9:80:d6:bf:37:94:3f:55:bf:91:33:a3:b3:a0:96:30:14:82:
         9c:68:9a:26:39:c5:1c:51:29:77:e0:03:8c:27:58:87:47:60:
         09:85:74:43:54:23:2e:cb:7a:a5:94:27:f2:1d:19:4d:cf:81:
         d6:34:c9:9c:b2:1b:69:b5:8e:85:ee:83:f6:67:5c:ec:50:9d:
         2b:ea:6d:6d:2d:e5:42:59:3f:5d:bb:64:3e:95:0c:96:45:a7:
         1b:91:c1:3a:f4:57:f9:29:4d:67:36:37:dd:74:a3:7b:71:e8:
         5d:43:08:4d:95:0d:6f:9f:df:99:07:32:14:6b:da:cd:20:95:
         69:ff:0e:e4:df:2a:4c:42:01:36:63:ba:1c:65:58:aa:b9:4b:
         b3:ac:6c:d0:0c:d2:39:9d:24:b3:eb:32:c9:42:9f:5f:b3:3f:
         aa:6a:af:6b:37:ee:05:44:31:71:2b:c1:c4:53:79:90:26:ee:
         25:fa:c3:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZk1bsQT1v9rIcp5s3E3O3awMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwYmE1MGZjYTMzYjE4MGQ2ODQzNmU3ZWYwY2JmNjkwNGJh
ZjQ1ZDQwHhcNMjUwOTEwMjEwMTE1WhcNMjUwOTExMjEwMTE1WjAzMTEwLwYDVQQD
EygyMjViYzllYmUyNThiNjBiOGNiOWFhNDg4YWQ3NWI5ZTliYmM0NzI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9l+41OYS0gt15ePpuwpj0Uh7iFL
xhb6DpUM5ebIITu56O7vYKo3cwQWfIW9tfurZ13JPD3O/Jm32e66+1qvEtp5a4pG
5LhpiCjKffpsjTiQtN2h0GWTEg8CdRx/RD7MPQ0h+a61qNKkowAbYkGe9pSddcWy
Is001GrhZasI2e2VGsVVunkTSOS1pNB7D2VQS/sS5g6seAhUFCwWqKy2csPy8Z6z
REKgPC7LORgnb17O4N31BTmNrCFDTmlmgZHDNB61jgXhn3LFHCtS6vvUXqZ1P/ru
PdtwH8R1k3Vhe3g+27uo3OUiB19JIYgL1nHcFnjq6EzVlo01f64hqFfvFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCJbyeviWLYLjLmqSIrXW56bvEclMB8GA1UdIwQY
MBaAFMC6UPyjOxgNaENufvDL9pBLr0XUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0xwUV9LTTdHQTFvUTI1LThNdjJrRXV2UmRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC80MjJhNGMtODM5NC00NmI0LWFhMTgt
ZDFmYmU1YTkxZDcwLzEvd0xwUV9LTTdHQTFvUTI1LThNdjJrRXV2UmRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC80MjJhNGMtODM5NC00NmI0LWFhMTgtZDFmYmU1YTkxZDcw
LzEvd0xwUV9LTTdHQTFvUTI1LThNdjJrRXV2UmRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnT6cbcGF
dq4Aq8CS14IfROYwA/bPQJbsszNOj2XOQccejY+b46dzc1vskf8iuo1LKrmLNBAE
UQ+gSIiewKgn2oEgfkRSt0DDqYDWvzeUP1W/kTOjs6CWMBSCnGiaJjnFHFEpd+AD
jCdYh0dgCYV0Q1QjLst6pZQn8h0ZTc+B1jTJnLIbabWOhe6D9mdc7FCdK+ptbS3l
Qlk/XbtkPpUMlkWnG5HBOvRX+SlNZzY33XSje3HoXUMITZUNb5/fmQcyFGvazSCV
af8O5N8qTEIBNmO6HGVYqrlLs6xs0AzSOZ0ks+syyUKfX7M/qmqvazfuBUQxcSvB
xFN5kCbuJfrDWw==
-----END CERTIFICATE-----
Generated at Thu Sep 11 01:05:29 2025 by rpki-client