Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/wV59e7ae-ssMc5ApcsdNctKb938.mft
File:                     wV59e7ae-ssMc5ApcsdNctKb938.mft (raw, json)
Hash identifier:          iQI5rnisDx6UFMLhvzGzQfHkoA1LH0kUzgu6y3HW5+8=
Subject key identifier:   CA:7C:79:CA:37:BD:EC:99:D5:C4:F4:BB:1D:FC:9B:67:E5:52:42:19
Authority key identifier: C1:5E:7D:7B:B6:9E:FA:CB:0C:73:90:29:72:C7:4D:72:D2:9B:F7:7F
Certificate issuer:       /CN=c15e7d7bb69efacb0c73902972c74d72d29bf77f
Certificate serial:       01992BFD4FF056170382FE7E31210E965C21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wV59e7ae-ssMc5ApcsdNctKb938.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/wV59e7ae-ssMc5ApcsdNctKb938.mft
Manifest number:          0703
Signing time:             Tue 09 Sep 2025 01:00:44 +0000
Manifest this update:     Tue 09 Sep 2025 01:00:44 +0000
Manifest next update:     Wed 10 Sep 2025 01:00:44 +0000
Files and hashes:         1: HKldyiYx0sP4BotQ-G1ccS2afug.roa (hash: S4NVBzYTXH0ZvYQ/TjKg8cdi2I+vo34ebyJooJvff+M=)
                          2: wV59e7ae-ssMc5ApcsdNctKb938.crl (hash: aj6JiyeKO0YXr7W6AqqwRgcHIIkJmCwiShe1etXPCWo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/wV59e7ae-ssMc5ApcsdNctKb938.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/wV59e7ae-ssMc5ApcsdNctKb938.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wV59e7ae-ssMc5ApcsdNctKb938.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 10 Sep 2025 01:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:2b:fd:4f:f0:56:17:03:82:fe:7e:31:21:0e:96:5c:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c15e7d7bb69efacb0c73902972c74d72d29bf77f
        Validity
            Not Before: Sep  9 01:00:44 2025 GMT
            Not After : Sep 10 01:00:44 2025 GMT
        Subject: CN=ca7c79ca37bdec99d5c4f4bb1dfc9b67e5524219
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:6f:01:b6:e4:68:0f:8f:22:45:13:50:03:55:
                    b1:25:09:c9:01:73:01:ba:e7:c8:29:c4:3f:99:1b:
                    c4:d8:87:9d:2a:c4:b9:63:b2:35:48:5c:d9:82:07:
                    17:53:8f:80:e8:ad:76:f9:93:51:23:81:e8:87:d7:
                    c2:97:3a:4d:33:1f:49:6b:01:9e:82:7a:b7:d8:05:
                    d6:a1:de:83:0c:1c:7c:81:ad:2a:9e:ef:db:36:74:
                    d6:70:2f:3d:c2:79:7d:c2:b5:bc:fc:14:93:56:90:
                    81:61:48:f3:d7:fb:70:ef:a9:6f:5b:3f:ae:b9:9e:
                    96:96:f7:0b:72:19:91:4c:da:60:a6:25:3b:31:14:
                    d4:74:48:ef:3a:66:9e:d6:94:d7:0c:ea:e2:a3:e1:
                    0f:2f:e3:b5:96:a4:75:c5:df:15:8e:21:e3:77:e2:
                    98:f0:99:4f:b9:f4:1a:f9:51:21:b6:47:a2:be:c9:
                    3c:e0:9e:d3:1c:23:f6:85:8a:15:2b:7e:59:4f:cb:
                    9a:7c:57:9e:d5:14:f0:d1:68:ce:61:86:a8:9c:0f:
                    d9:9c:73:aa:fd:b0:c1:49:77:4a:22:50:cf:07:49:
                    69:3f:2c:05:67:f8:fc:67:0c:37:2a:4a:29:fd:6c:
                    9c:e3:d6:d7:19:b9:4b:67:1a:09:77:00:db:d5:1d:
                    6b:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:7C:79:CA:37:BD:EC:99:D5:C4:F4:BB:1D:FC:9B:67:E5:52:42:19
            X509v3 Authority Key Identifier:
                keyid:C1:5E:7D:7B:B6:9E:FA:CB:0C:73:90:29:72:C7:4D:72:D2:9B:F7:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wV59e7ae-ssMc5ApcsdNctKb938.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/wV59e7ae-ssMc5ApcsdNctKb938.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/wV59e7ae-ssMc5ApcsdNctKb938.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:87:50:4c:f1:49:92:d6:11:b6:e5:07:43:44:a8:e7:19:c7:
         ed:db:b6:04:86:53:b9:3d:28:3d:5a:38:13:87:e1:d7:d0:99:
         0a:f7:e5:06:4d:b3:44:4d:4d:e3:be:c8:b9:d1:d0:ed:02:84:
         1f:44:70:3c:28:84:1c:4e:7e:be:36:a2:9f:1d:11:15:84:fb:
         53:90:dc:31:8a:73:10:a2:f2:a4:eb:68:52:c0:d1:8b:90:7d:
         98:4d:97:c2:86:11:e8:32:a5:3d:8b:87:8c:04:fe:89:9f:26:
         6c:8c:f2:24:b1:cd:4a:ae:7a:8a:ac:47:b5:4f:84:93:51:a0:
         99:de:01:0c:52:06:e9:44:ed:cd:4f:8c:59:64:e1:f8:b0:91:
         a0:1a:83:35:a2:e8:0e:08:1f:d2:f0:9a:1f:f5:be:80:ee:07:
         67:8b:f6:c8:64:28:e3:ac:ae:32:be:33:55:0a:e9:c8:78:d5:
         04:5b:76:fa:1b:db:08:80:2c:d7:85:68:a4:87:ee:de:13:9d:
         44:09:bd:8c:10:64:ad:6f:58:70:81:e0:ce:6d:48:83:eb:ab:
         b0:9d:1e:41:2f:33:c9:fd:1d:10:4c:bc:19:c6:ba:cc:d6:a3:
         f5:44:93:ea:3d:44:45:f5:1a:22:6f:db:ae:5c:63:b7:95:34:
         95:45:57:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkr/U/wVhcDgv5+MSEOllwhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxNWU3ZDdiYjY5ZWZhY2IwYzczOTAyOTcyYzc0ZDcyZDI5
YmY3N2YwHhcNMjUwOTA5MDEwMDQ0WhcNMjUwOTEwMDEwMDQ0WjAzMTEwLwYDVQQD
EyhjYTdjNzljYTM3YmRlYzk5ZDVjNGY0YmIxZGZjOWI2N2U1NTI0MjE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA128BtuRoD48iRRNQA1WxJQnJAXMB
uufIKcQ/mRvE2IedKsS5Y7I1SFzZggcXU4+A6K12+ZNRI4Hoh9fClzpNMx9JawGe
gnq32AXWod6DDBx8ga0qnu/bNnTWcC89wnl9wrW8/BSTVpCBYUjz1/tw76lvWz+u
uZ6WlvcLchmRTNpgpiU7MRTUdEjvOmae1pTXDOrio+EPL+O1lqR1xd8VjiHjd+KY
8JlPufQa+VEhtkeivsk84J7THCP2hYoVK35ZT8uafFee1RTw0WjOYYaonA/ZnHOq
/bDBSXdKIlDPB0lpPywFZ/j8Zww3Kkop/Wyc49bXGblLZxoJdwDb1R1rUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMp8eco3veyZ1cT0ux38m2flUkIZMB8GA1UdIwQY
MBaAFMFefXu2nvrLDHOQKXLHTXLSm/d/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1Y1OWU3YWUtc3NNYzVBcGNzZE5jdEtiOTM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9lYTQwMmEtMGZmNi00N2Q5LTljZDAt
MzQ3YTBmN2M1YjA4LzEvd1Y1OWU3YWUtc3NNYzVBcGNzZE5jdEtiOTM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC9lYTQwMmEtMGZmNi00N2Q5LTljZDAtMzQ3YTBmN2M1YjA4
LzEvd1Y1OWU3YWUtc3NNYzVBcGNzZE5jdEtiOTM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkIdQTPFJ
ktYRtuUHQ0So5xnH7du2BIZTuT0oPVo4E4fh19CZCvflBk2zRE1N477IudHQ7QKE
H0RwPCiEHE5+vjainx0RFYT7U5DcMYpzEKLypOtoUsDRi5B9mE2XwoYR6DKlPYuH
jAT+iZ8mbIzyJLHNSq56iqxHtU+Ek1Ggmd4BDFIG6UTtzU+MWWTh+LCRoBqDNaLo
Dggf0vCaH/W+gO4HZ4v2yGQo46yuMr4zVQrpyHjVBFt2+hvbCIAs14VopIfu3hOd
RAm9jBBkrW9YcIHgzm1Ig+ursJ0eQS8zyf0dEEy8Gca6zNaj9UST6j1ERfUaIm/b
rlxjt5U0lUVXQQ==
-----END CERTIFICATE-----
Generated at Tue Sep 9 10:33:08 2025 by rpki-client