Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/WdNqIemzaNdIurjHe-vd4sInxsM.mft
File:                     WdNqIemzaNdIurjHe-vd4sInxsM.mft (raw, json)
Hash identifier:          w1UBu9IVuryrprhpy3fGVmRZ49l3wN3eyVX9lBmmVyU=
Subject key identifier:   3B:D1:90:3F:0B:DD:16:9A:1E:EE:7F:AC:0C:FE:61:45:BD:96:E3:A1
Authority key identifier: 59:D3:6A:21:E9:B3:68:D7:48:BA:B8:C7:7B:EB:DD:E2:C2:27:C6:C3
Certificate issuer:       /CN=59d36a21e9b368d748bab8c77bebdde2c227c6c3
Certificate serial:       01994F64E75B9135999C8EE105CDB4939729
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WdNqIemzaNdIurjHe-vd4sInxsM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/WdNqIemzaNdIurjHe-vd4sInxsM.mft
Manifest number:          0866
Signing time:             Mon 15 Sep 2025 22:00:36 +0000
Manifest this update:     Mon 15 Sep 2025 22:00:36 +0000
Manifest next update:     Tue 16 Sep 2025 22:00:36 +0000
Files and hashes:         1: 2sZdgnxG39Ec4iWQKIqHRPm_-nk.roa (hash: 1XVkgkrwmMauPThY8HLX2JQkAHIe6uakbKzIFrk1NHc=)
                          2: WdNqIemzaNdIurjHe-vd4sInxsM.crl (hash: gN8qhBpb50kn8kTO1jWHogqYuoqhMErLBX2MTJ5yCSM=)
                          3: is_XEdqOSIZdOdAUliJ38zXn5ZE.roa (hash: +WoDzk7VKcG/lDal047Esdi6HVzF1DiurqrDKoqvrhI=)
                          4: k47IkFzsvbAU-luJwFSjcXBgPII.roa (hash: LRzevFO33ciORneOuJWjPwolGOd6frxZBqlkG2Q4ros=)
                          5: skXm2fkwzq64ONGiXwLfUYMzOOo.roa (hash: eZX3z+2+p9WFafZJ1Sv1eq5Rzpet45IDFVeaiO++2eM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/WdNqIemzaNdIurjHe-vd4sInxsM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/WdNqIemzaNdIurjHe-vd4sInxsM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WdNqIemzaNdIurjHe-vd4sInxsM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 16 Sep 2025 22:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:4f:64:e7:5b:91:35:99:9c:8e:e1:05:cd:b4:93:97:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59d36a21e9b368d748bab8c77bebdde2c227c6c3
        Validity
            Not Before: Sep 15 22:00:36 2025 GMT
            Not After : Sep 16 22:00:36 2025 GMT
        Subject: CN=3bd1903f0bdd169a1eee7fac0cfe6145bd96e3a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:eb:ad:1f:6f:9a:e9:4f:48:24:2f:86:9f:7c:
                    bf:47:aa:59:ef:26:e9:9f:2e:da:07:68:98:38:b1:
                    b4:37:e6:e7:3f:44:f3:db:86:52:65:80:e3:4d:f4:
                    a5:89:22:7d:96:b0:e0:25:3b:88:d8:2e:8c:5e:46:
                    5d:49:a2:1e:42:f8:b3:77:80:e0:51:19:50:92:b5:
                    45:d6:b3:fb:9e:fc:64:14:41:b9:01:1f:ea:c3:e9:
                    0c:16:d3:7e:84:58:cd:e4:a9:16:12:87:56:8a:12:
                    d8:0c:5a:5b:90:81:d1:54:75:8a:32:0a:ef:26:f7:
                    dc:13:0f:fe:d7:86:ff:c9:23:5d:b5:17:53:54:a0:
                    44:f6:b4:76:af:ce:36:5a:e1:ac:34:96:c8:c4:13:
                    ef:6b:76:f5:30:70:70:9a:3a:c3:d3:d9:9c:bb:c1:
                    0f:d7:34:42:f8:31:e6:bf:a4:b4:d2:e2:d4:ad:2a:
                    1d:4e:5e:b9:8e:38:de:9a:51:39:08:8a:e9:de:f2:
                    b0:c4:51:4e:52:fb:09:d1:03:26:01:df:0b:8b:8a:
                    b8:a0:03:cf:d3:a8:69:55:8a:79:78:30:cc:5e:e3:
                    ed:f9:28:dc:39:35:a9:da:d9:13:f3:4d:97:79:ff:
                    81:5e:ae:26:f9:11:f5:74:3d:99:81:9f:76:0c:2a:
                    83:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:D1:90:3F:0B:DD:16:9A:1E:EE:7F:AC:0C:FE:61:45:BD:96:E3:A1
            X509v3 Authority Key Identifier:
                keyid:59:D3:6A:21:E9:B3:68:D7:48:BA:B8:C7:7B:EB:DD:E2:C2:27:C6:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WdNqIemzaNdIurjHe-vd4sInxsM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/WdNqIemzaNdIurjHe-vd4sInxsM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/WdNqIemzaNdIurjHe-vd4sInxsM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:6b:ad:d2:8e:3e:98:55:4c:84:08:cb:f6:67:bc:07:75:7a:
         0c:79:24:70:f2:2e:48:28:10:19:42:67:19:5e:1a:84:21:7f:
         62:57:c7:8f:27:7e:b6:75:36:3b:70:93:0a:5b:d6:6e:f5:42:
         39:4a:ce:4a:7b:00:35:21:5f:0c:5f:d1:6b:a6:7f:aa:ae:b5:
         c5:5b:b6:3d:14:63:e6:22:81:27:c0:69:16:62:6b:f6:9e:9a:
         e7:50:d3:07:f1:bc:e8:41:f2:80:c0:a0:c9:c3:a8:e0:5f:b5:
         10:e7:e4:8a:34:24:11:8c:5d:81:2a:75:9d:d7:2a:7e:97:16:
         ea:e2:d3:f9:4d:6a:13:9a:df:25:dc:a4:dc:35:5d:8e:6b:4b:
         2e:07:ce:23:04:c6:32:19:dc:37:59:b1:da:3c:29:d0:62:c4:
         32:42:ff:bd:ca:47:01:08:c5:d2:32:84:85:9c:70:36:a5:bb:
         55:dd:1f:bd:15:64:1a:ef:98:e4:62:52:ef:1f:76:bf:8c:13:
         d3:56:76:69:78:5b:4b:08:27:a1:df:02:9a:70:d4:d3:54:1d:
         55:a5:4b:06:a7:ff:93:b0:3e:16:d9:42:87:86:9d:be:82:05:
         04:24:e3:44:7b:db:68:ee:50:04:2f:5c:ad:86:da:db:6d:1e:
         3d:ee:39:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZlPZOdbkTWZnI7hBc20k5cpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5ZDM2YTIxZTliMzY4ZDc0OGJhYjhjNzdiZWJkZGUyYzIy
N2M2YzMwHhcNMjUwOTE1MjIwMDM2WhcNMjUwOTE2MjIwMDM2WjAzMTEwLwYDVQQD
EygzYmQxOTAzZjBiZGQxNjlhMWVlZTdmYWMwY2ZlNjE0NWJkOTZlM2ExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzOutH2+a6U9IJC+Gn3y/R6pZ7ybp
ny7aB2iYOLG0N+bnP0Tz24ZSZYDjTfSliSJ9lrDgJTuI2C6MXkZdSaIeQvizd4Dg
URlQkrVF1rP7nvxkFEG5AR/qw+kMFtN+hFjN5KkWEodWihLYDFpbkIHRVHWKMgrv
JvfcEw/+14b/ySNdtRdTVKBE9rR2r842WuGsNJbIxBPva3b1MHBwmjrD09mcu8EP
1zRC+DHmv6S00uLUrSodTl65jjjemlE5CIrp3vKwxFFOUvsJ0QMmAd8Li4q4oAPP
06hpVYp5eDDMXuPt+SjcOTWp2tkT802Xef+BXq4m+RH1dD2ZgZ92DCqDFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDvRkD8L3RaaHu5/rAz+YUW9luOhMB8GA1UdIwQY
MBaAFFnTaiHps2jXSLq4x3vr3eLCJ8bDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2ROcUllbXphTmRJdXJqSGUtdmQ0c0lueHNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS83YTdkYzEtZTE2OC00ZDQ3LWI0NmQt
NDBlYTgwODkyZjAzLzEvV2ROcUllbXphTmRJdXJqSGUtdmQ0c0lueHNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS83YTdkYzEtZTE2OC00ZDQ3LWI0NmQtNDBlYTgwODkyZjAz
LzEvV2ROcUllbXphTmRJdXJqSGUtdmQ0c0lueHNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaGut0o4+
mFVMhAjL9me8B3V6DHkkcPIuSCgQGUJnGV4ahCF/YlfHjyd+tnU2O3CTClvWbvVC
OUrOSnsANSFfDF/Ra6Z/qq61xVu2PRRj5iKBJ8BpFmJr9p6a51DTB/G86EHygMCg
ycOo4F+1EOfkijQkEYxdgSp1ndcqfpcW6uLT+U1qE5rfJdyk3DVdjmtLLgfOIwTG
MhncN1mx2jwp0GLEMkL/vcpHAQjF0jKEhZxwNqW7Vd0fvRVkGu+Y5GJS7x92v4wT
01Z2aXhbSwgnod8CmnDU01QdVaVLBqf/k7A+FtlCh4advoIFBCTjRHvbaO5QBC9c
rYba220ePe45KQ==
-----END CERTIFICATE-----
Generated at Tue Sep 16 04:22:10 2025 by rpki-client