Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/wHDujcg3gIaWAYLjMJImcX6D5Ac.mft
File:                     wHDujcg3gIaWAYLjMJImcX6D5Ac.mft (raw, json)
Hash identifier:          i3Jm/ZJuENbPiymrjpUTxrF/d5bm+1XmYjDvAj8N6t8=
Subject key identifier:   18:6C:34:12:79:3B:66:DA:C8:C2:F5:8C:E9:99:4F:33:86:F9:1B:E0
Authority key identifier: C0:70:EE:8D:C8:37:80:86:96:01:82:E3:30:92:26:71:7E:83:E4:07
Certificate issuer:       /CN=c070ee8dc8378086960182e3309226717e83e407
Certificate serial:       019922FA5F4CDE0B8EBDFC7B4D5679635F33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wHDujcg3gIaWAYLjMJImcX6D5Ac.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/wHDujcg3gIaWAYLjMJImcX6D5Ac.mft
Manifest number:          098D
Signing time:             Sun 07 Sep 2025 07:00:57 +0000
Manifest this update:     Sun 07 Sep 2025 07:00:57 +0000
Manifest next update:     Mon 08 Sep 2025 07:00:57 +0000
Files and hashes:         1: lMUiy0iCZc25BIvrjbAT5rY_gaE.roa (hash: os2q3M1axX4RL5z3SNixB1SYiEywK/95oeCFkIddddI=)
                          2: wHDujcg3gIaWAYLjMJImcX6D5Ac.crl (hash: tKguyMV1i7fzSAg2JfCV7R/UXaRuP2J2qYTttfEOf8k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/wHDujcg3gIaWAYLjMJImcX6D5Ac.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/wHDujcg3gIaWAYLjMJImcX6D5Ac.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wHDujcg3gIaWAYLjMJImcX6D5Ac.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:fa:5f:4c:de:0b:8e:bd:fc:7b:4d:56:79:63:5f:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c070ee8dc8378086960182e3309226717e83e407
        Validity
            Not Before: Sep  7 07:00:57 2025 GMT
            Not After : Sep  8 07:00:57 2025 GMT
        Subject: CN=186c3412793b66dac8c2f58ce9994f3386f91be0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:e3:88:d2:74:82:54:74:16:b6:c6:e9:2e:ef:
                    bc:ec:af:a3:5f:19:ad:80:ea:cc:01:20:a4:27:1e:
                    56:62:ac:c3:7f:8d:f8:2d:b4:ad:45:13:eb:b9:a4:
                    90:77:2b:34:c4:5f:24:bf:6f:81:00:31:66:6a:c4:
                    55:89:b5:4f:b2:8e:f3:a0:14:bf:87:f8:48:b1:fc:
                    74:a4:bc:12:92:31:fe:4e:4b:f7:de:3d:97:05:34:
                    c8:a2:30:ca:cb:93:67:8c:94:fd:99:e5:22:98:f0:
                    a2:83:68:d8:c0:2f:c1:17:b8:9c:62:10:28:64:dc:
                    fa:42:e6:fe:62:94:b9:20:0d:60:94:c1:60:ae:ba:
                    b3:b6:19:93:88:6e:54:99:62:9d:13:4d:bc:98:97:
                    ea:7f:42:5f:06:09:bb:6c:9c:f8:c0:98:82:ac:48:
                    96:15:6b:6b:38:71:79:82:af:f4:bf:26:3b:d2:31:
                    98:3d:48:0b:44:12:e2:98:02:b9:b1:5b:16:df:2c:
                    06:0e:3b:c5:d5:36:9b:6d:76:b4:1c:a3:89:1f:a9:
                    e3:1b:2c:f3:7a:4d:aa:50:b2:16:7b:ff:04:1b:5d:
                    ff:3b:25:94:e2:d9:9d:9e:b2:cc:55:cc:36:cb:05:
                    d8:8e:f1:69:40:70:24:78:c2:b0:f2:f8:75:d0:fd:
                    b5:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:6C:34:12:79:3B:66:DA:C8:C2:F5:8C:E9:99:4F:33:86:F9:1B:E0
            X509v3 Authority Key Identifier:
                keyid:C0:70:EE:8D:C8:37:80:86:96:01:82:E3:30:92:26:71:7E:83:E4:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wHDujcg3gIaWAYLjMJImcX6D5Ac.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/wHDujcg3gIaWAYLjMJImcX6D5Ac.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2a3655-941b-46d8-8789-45a7b6978493/1/wHDujcg3gIaWAYLjMJImcX6D5Ac.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:36:62:32:21:f8:42:8b:98:d2:67:0f:8d:bc:53:76:58:18:
         f3:10:89:cc:a9:87:ed:10:9a:0b:45:33:c0:d3:80:81:7e:51:
         18:10:75:28:4d:67:e2:79:95:2e:da:6e:e9:87:7e:79:25:17:
         e3:3b:8f:99:8b:9f:79:92:55:65:11:f6:e9:d7:b2:9e:df:f3:
         09:20:6e:91:45:4f:b4:ab:3a:eb:18:36:23:60:40:0d:15:35:
         8d:1c:3e:11:72:d5:9e:da:c8:ff:68:a6:11:64:85:ff:f7:7c:
         ab:cf:cc:e2:34:de:16:97:90:7d:f7:88:84:b9:15:38:1a:a6:
         e0:b0:a5:db:14:b0:b1:47:96:ad:a9:d5:31:87:5b:7c:16:ff:
         ae:69:6d:a7:9e:c2:ce:19:67:c2:9f:72:95:dd:91:b6:cf:26:
         db:b7:1d:fe:76:65:ee:92:b6:ec:da:46:d6:2f:e5:c9:d6:ff:
         1d:f7:5f:0c:b0:89:44:81:df:f6:7f:31:7c:52:a7:37:08:3d:
         25:e4:19:78:55:9f:23:b1:15:f4:c8:56:76:93:1c:83:e1:34:
         ea:bf:d7:53:f9:6b:81:c6:92:99:8d:bc:90:1c:bc:fb:6f:84:
         85:f2:db:32:77:f5:82:0c:81:d4:be:0e:ec:74:8e:50:f1:d3:
         05:24:53:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZki+l9M3guOvfx7TVZ5Y18zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwNzBlZThkYzgzNzgwODY5NjAxODJlMzMwOTIyNjcxN2U4
M2U0MDcwHhcNMjUwOTA3MDcwMDU3WhcNMjUwOTA4MDcwMDU3WjAzMTEwLwYDVQQD
EygxODZjMzQxMjc5M2I2NmRhYzhjMmY1OGNlOTk5NGYzMzg2ZjkxYmUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiuOI0nSCVHQWtsbpLu+87K+jXxmt
gOrMASCkJx5WYqzDf434LbStRRPruaSQdys0xF8kv2+BADFmasRVibVPso7zoBS/
h/hIsfx0pLwSkjH+Tkv33j2XBTTIojDKy5NnjJT9meUimPCig2jYwC/BF7icYhAo
ZNz6Qub+YpS5IA1glMFgrrqzthmTiG5UmWKdE028mJfqf0JfBgm7bJz4wJiCrEiW
FWtrOHF5gq/0vyY70jGYPUgLRBLimAK5sVsW3ywGDjvF1TabbXa0HKOJH6njGyzz
ek2qULIWe/8EG13/OyWU4tmdnrLMVcw2ywXYjvFpQHAkeMKw8vh10P21qwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBhsNBJ5O2bayML1jOmZTzOG+RvgMB8GA1UdIwQY
MBaAFMBw7o3IN4CGlgGC4zCSJnF+g+QHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0hEdWpjZzNnSWFXQVlMak1KSW1jWDZENUFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8yYTM2NTUtOTQxYi00NmQ4LTg3ODkt
NDVhN2I2OTc4NDkzLzEvd0hEdWpjZzNnSWFXQVlMak1KSW1jWDZENUFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS8yYTM2NTUtOTQxYi00NmQ4LTg3ODktNDVhN2I2OTc4NDkz
LzEvd0hEdWpjZzNnSWFXQVlMak1KSW1jWDZENUFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdjZiMiH4
QouY0mcPjbxTdlgY8xCJzKmH7RCaC0UzwNOAgX5RGBB1KE1n4nmVLtpu6Yd+eSUX
4zuPmYufeZJVZRH26deynt/zCSBukUVPtKs66xg2I2BADRU1jRw+EXLVntrI/2im
EWSF//d8q8/M4jTeFpeQffeIhLkVOBqm4LCl2xSwsUeWranVMYdbfBb/rmltp57C
zhlnwp9yld2Rts8m27cd/nZl7pK27NpG1i/lydb/HfdfDLCJRIHf9n8xfFKnNwg9
JeQZeFWfI7EV9MhWdpMcg+E06r/XU/lrgcaSmY28kBy8+2+EhfLbMnf1ggyB1L4O
7HSOUPHTBSRTpQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:24:48 2025 by rpki-client