Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/1f5a4d-f5f2-4173-b690-06b9ca2f60c7/1/wpzJ08SW-KkiBNQKZl7fU4GQ1Tk.mft
File:                     wpzJ08SW-KkiBNQKZl7fU4GQ1Tk.mft (raw, json)
Hash identifier:          /48ucWoqG3MU3rNvfWMIwOwHd3BJHGp8mFJLOzsHM3Y=
Subject key identifier:   F3:E1:0D:B3:F4:37:AD:06:CB:0B:F5:72:46:C7:BC:4B:F8:89:FF:F1
Authority key identifier: C2:9C:C9:D3:C4:96:F8:A9:22:04:D4:0A:66:5E:DF:53:81:90:D5:39
Certificate issuer:       /CN=c29cc9d3c496f8a92204d40a665edf538190d539
Certificate serial:       01974A439EB2E1E6BEE6FC67A9F4456219E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wpzJ08SW-KkiBNQKZl7fU4GQ1Tk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/1f5a4d-f5f2-4173-b690-06b9ca2f60c7/1/wpzJ08SW-KkiBNQKZl7fU4GQ1Tk.mft
Manifest number:          02B5
Signing time:             Sat 07 Jun 2025 12:00:34 +0000
Manifest this update:     Sat 07 Jun 2025 12:00:34 +0000
Manifest next update:     Sun 08 Jun 2025 12:00:34 +0000
Files and hashes:         1: c3GX2BFKDEhmANmZ86G-emEKbTk.roa (hash: mk77AQBdXW18vflWaTb98uk+eKpn+5cvtwdROZ1ovY0=)
                          2: wpzJ08SW-KkiBNQKZl7fU4GQ1Tk.crl (hash: 3wNFa4wLwqFbMz6XzCCo1z+jGlNncNcDDI/wPL+K4E4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/1f5a4d-f5f2-4173-b690-06b9ca2f60c7/1/wpzJ08SW-KkiBNQKZl7fU4GQ1Tk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/1f5a4d-f5f2-4173-b690-06b9ca2f60c7/1/wpzJ08SW-KkiBNQKZl7fU4GQ1Tk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wpzJ08SW-KkiBNQKZl7fU4GQ1Tk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:43:9e:b2:e1:e6:be:e6:fc:67:a9:f4:45:62:19:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c29cc9d3c496f8a92204d40a665edf538190d539
        Validity
            Not Before: Jun  7 12:00:34 2025 GMT
            Not After : Jun  8 12:00:34 2025 GMT
        Subject: CN=f3e10db3f437ad06cb0bf57246c7bc4bf889fff1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:e7:45:d3:a4:ad:eb:0a:f2:5d:d9:ae:fd:74:
                    48:f4:1f:31:9c:c2:bf:e5:3b:38:21:c3:e1:47:49:
                    25:01:66:9e:ba:a8:8a:f2:71:ab:2e:db:01:53:17:
                    fe:4f:9d:03:13:be:f4:9a:7a:e5:01:25:ea:34:91:
                    0f:a9:be:84:b7:c6:f3:9d:20:1b:08:e6:0a:75:2a:
                    80:f4:bc:22:ec:6c:a3:2d:a1:d1:b1:84:52:a1:1e:
                    90:aa:81:ae:d3:ec:65:da:00:0d:46:b2:c6:59:76:
                    79:c6:3a:82:04:b1:c9:d3:b6:51:f1:fc:12:1c:6b:
                    6c:f1:4c:b3:51:bd:4d:a4:23:a6:59:63:97:26:c6:
                    49:1a:4f:a3:54:0e:d1:92:75:fe:9f:0d:0a:87:05:
                    09:67:a9:f6:e2:14:dd:8a:70:dd:4b:48:6c:b6:fa:
                    cb:fe:b3:a0:2e:74:84:db:49:65:10:68:89:35:54:
                    a0:22:99:11:3a:d6:fb:5c:4f:69:21:d7:2d:aa:9b:
                    86:25:5e:2d:7c:5b:6a:57:a5:e3:5c:16:d2:20:f7:
                    b3:01:de:22:a7:26:f1:8f:e2:4c:8d:19:a5:00:3c:
                    67:23:76:20:4f:d9:09:cc:cd:f4:d3:a0:0b:a6:45:
                    f2:9e:91:93:9e:43:f3:d9:42:1f:80:46:79:82:22:
                    07:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:E1:0D:B3:F4:37:AD:06:CB:0B:F5:72:46:C7:BC:4B:F8:89:FF:F1
            X509v3 Authority Key Identifier:
                keyid:C2:9C:C9:D3:C4:96:F8:A9:22:04:D4:0A:66:5E:DF:53:81:90:D5:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wpzJ08SW-KkiBNQKZl7fU4GQ1Tk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/1f5a4d-f5f2-4173-b690-06b9ca2f60c7/1/wpzJ08SW-KkiBNQKZl7fU4GQ1Tk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/1f5a4d-f5f2-4173-b690-06b9ca2f60c7/1/wpzJ08SW-KkiBNQKZl7fU4GQ1Tk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:82:eb:de:cd:cc:41:37:7b:6c:81:b7:dc:dd:52:a6:c1:e9:
         80:6e:71:d5:18:da:20:9d:22:dd:e2:4f:23:72:ac:63:77:fa:
         ed:52:03:49:a8:53:f3:4e:c7:45:91:dc:69:79:12:27:d4:2b:
         0d:a5:6d:74:eb:ed:e9:66:4d:c6:91:78:81:11:2f:55:83:b3:
         af:9b:61:54:19:9e:96:d2:a1:0c:0c:86:04:a1:94:5e:12:39:
         b8:c3:ef:25:3b:c9:ba:f2:af:53:a3:59:39:49:27:df:f8:ab:
         40:4c:8b:6b:35:8b:62:87:1b:f9:0f:50:f3:a1:00:54:67:7d:
         20:99:6a:4a:51:a2:c1:fd:ef:55:0c:ea:69:d0:14:0f:78:e5:
         56:d6:14:2c:b5:d2:f0:18:bb:53:c2:9b:19:2d:62:89:ed:ae:
         8f:0e:47:a4:94:2a:e5:99:77:df:78:cd:3e:27:76:c5:c3:39:
         b4:7d:bc:2b:72:eb:f1:ab:eb:bf:f3:9c:6a:f9:e8:f2:1d:a5:
         93:6a:f6:20:b0:c1:7c:e8:7d:b4:3b:e6:89:5b:e1:2b:e9:7d:
         cf:d4:f2:e0:be:d9:8f:73:c5:a4:96:b5:d4:81:27:a8:2a:e9:
         01:78:a8:a2:11:24:d4:dc:f3:40:fa:5a:66:01:8c:2a:0c:61:
         fe:c0:7b:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKQ56y4ea+5vxnqfRFYhnmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyOWNjOWQzYzQ5NmY4YTkyMjA0ZDQwYTY2NWVkZjUzODE5
MGQ1MzkwHhcNMjUwNjA3MTIwMDM0WhcNMjUwNjA4MTIwMDM0WjAzMTEwLwYDVQQD
EyhmM2UxMGRiM2Y0MzdhZDA2Y2IwYmY1NzI0NmM3YmM0YmY4ODlmZmYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2OdF06St6wryXdmu/XRI9B8xnMK/
5Ts4IcPhR0klAWaeuqiK8nGrLtsBUxf+T50DE770mnrlASXqNJEPqb6Et8bznSAb
COYKdSqA9Lwi7GyjLaHRsYRSoR6QqoGu0+xl2gANRrLGWXZ5xjqCBLHJ07ZR8fwS
HGts8UyzUb1NpCOmWWOXJsZJGk+jVA7RknX+nw0KhwUJZ6n24hTdinDdS0hstvrL
/rOgLnSE20llEGiJNVSgIpkROtb7XE9pIdctqpuGJV4tfFtqV6XjXBbSIPezAd4i
pybxj+JMjRmlADxnI3YgT9kJzM3006ALpkXynpGTnkPz2UIfgEZ5giIHYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPPhDbP0N60Gywv1ckbHvEv4if/xMB8GA1UdIwQY
MBaAFMKcydPElvipIgTUCmZe31OBkNU5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3B6SjA4U1ctS2tpQk5RS1psN2ZVNEdRMVRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy8xZjVhNGQtZjVmMi00MTczLWI2OTAt
MDZiOWNhMmY2MGM3LzEvd3B6SjA4U1ctS2tpQk5RS1psN2ZVNEdRMVRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy8xZjVhNGQtZjVmMi00MTczLWI2OTAtMDZiOWNhMmY2MGM3
LzEvd3B6SjA4U1ctS2tpQk5RS1psN2ZVNEdRMVRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGoLr3s3M
QTd7bIG33N1SpsHpgG5x1RjaIJ0i3eJPI3KsY3f67VIDSahT807HRZHcaXkSJ9Qr
DaVtdOvt6WZNxpF4gREvVYOzr5thVBmeltKhDAyGBKGUXhI5uMPvJTvJuvKvU6NZ
OUkn3/irQEyLazWLYocb+Q9Q86EAVGd9IJlqSlGiwf3vVQzqadAUD3jlVtYULLXS
8Bi7U8KbGS1iie2ujw5HpJQq5Zl333jNPid2xcM5tH28K3Lr8avrv/Ocavno8h2l
k2r2ILDBfOh9tDvmiVvhK+l9z9Ty4L7Zj3PFpJa11IEnqCrpAXioohEk1NzzQPpa
ZgGMKgxh/sB7WQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 13:46:27 2025 by rpki-client