Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/2a84e9-68b3-4e3f-b615-a0ad61d194a1/1/wzCs3wQbXcx-XsbPj_i9BkjoZww.mft
File:                     wzCs3wQbXcx-XsbPj_i9BkjoZww.mft (raw, json)
Hash identifier:          YwTHyLDSAdQRYbcK539pHfwZb3miIXJAHOlbH/1pmGE=
Subject key identifier:   60:AA:25:31:17:1B:CA:40:D1:CD:71:29:DF:12:8F:D8:26:A1:67:F5
Authority key identifier: C3:30:AC:DF:04:1B:5D:CC:7E:5E:C6:CF:8F:F8:BD:06:48:E8:67:0C
Certificate issuer:       /CN=c330acdf041b5dcc7e5ec6cf8ff8bd0648e8670c
Certificate serial:       0198D5836F4D46B9A585ADEF09018EF2C2AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wzCs3wQbXcx-XsbPj_i9BkjoZww.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/2a84e9-68b3-4e3f-b615-a0ad61d194a1/1/wzCs3wQbXcx-XsbPj_i9BkjoZww.mft
Manifest number:          12E2
Signing time:             Sat 23 Aug 2025 06:00:17 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:17 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:17 +0000
Files and hashes:         1: NfY8zpyx6EDpP6DxTuquvNoK9sY.roa (hash: mmbOZfwYelbaWl9riAjIdhT8MqPp3t5vAxerApfLsl0=)
                          2: wzCs3wQbXcx-XsbPj_i9BkjoZww.crl (hash: zUqMGLjr8kDU2nO8FWFyZWbPt/gEHUABO6YoNCQJGPQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/2a84e9-68b3-4e3f-b615-a0ad61d194a1/1/wzCs3wQbXcx-XsbPj_i9BkjoZww.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/2a84e9-68b3-4e3f-b615-a0ad61d194a1/1/wzCs3wQbXcx-XsbPj_i9BkjoZww.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wzCs3wQbXcx-XsbPj_i9BkjoZww.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:6f:4d:46:b9:a5:85:ad:ef:09:01:8e:f2:c2:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c330acdf041b5dcc7e5ec6cf8ff8bd0648e8670c
        Validity
            Not Before: Aug 23 06:00:17 2025 GMT
            Not After : Aug 24 06:00:17 2025 GMT
        Subject: CN=60aa2531171bca40d1cd7129df128fd826a167f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d3:ca:39:c5:ee:c9:12:0c:eb:bf:e2:5c:77:
                    94:a6:e8:0b:01:ba:ba:e5:3d:6c:2e:4a:c2:fa:41:
                    32:cc:25:63:6c:da:82:ea:67:2a:4a:8b:e3:3d:d6:
                    92:b8:c1:4e:0b:43:c8:3b:43:71:05:c8:42:4f:bb:
                    1c:d3:fc:04:ac:19:bb:fa:e4:33:1b:78:31:e5:d8:
                    a9:60:6e:aa:87:17:4c:22:d7:fe:e3:36:98:00:f2:
                    9d:8e:e5:b7:a7:40:c3:a2:0d:e2:30:2b:cc:46:0a:
                    c1:0c:47:c1:31:e8:bd:70:45:3b:c9:43:2f:e4:ed:
                    03:bd:67:f2:df:fe:d4:09:65:4e:bf:44:7e:03:77:
                    80:80:8f:3c:63:f3:b9:d7:eb:75:5e:92:e5:a3:f5:
                    bd:6c:03:cf:47:1d:57:fc:d9:0f:a7:dc:42:ba:4c:
                    53:d3:48:14:f7:54:cc:56:1c:76:cc:9a:85:14:74:
                    62:3c:69:d3:4a:66:ae:7a:8d:b6:6f:a0:56:71:8c:
                    c5:91:6e:d1:e4:8d:39:0f:c0:ee:ee:a4:46:32:b9:
                    90:c7:95:83:9d:61:57:ce:fa:61:5d:cd:c8:19:59:
                    c8:03:b2:56:1c:ab:9a:10:03:b8:8f:b9:8b:c8:1f:
                    0d:2f:8d:94:ab:0d:60:8c:fa:ba:55:e6:3d:6f:d2:
                    cd:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:AA:25:31:17:1B:CA:40:D1:CD:71:29:DF:12:8F:D8:26:A1:67:F5
            X509v3 Authority Key Identifier:
                keyid:C3:30:AC:DF:04:1B:5D:CC:7E:5E:C6:CF:8F:F8:BD:06:48:E8:67:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wzCs3wQbXcx-XsbPj_i9BkjoZww.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2a84e9-68b3-4e3f-b615-a0ad61d194a1/1/wzCs3wQbXcx-XsbPj_i9BkjoZww.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2a84e9-68b3-4e3f-b615-a0ad61d194a1/1/wzCs3wQbXcx-XsbPj_i9BkjoZww.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:7e:a3:03:38:b8:82:2a:95:a7:10:44:8b:bc:89:d3:61:64:
         17:ed:45:df:7c:06:74:ec:c0:0a:46:5f:e3:04:8f:0d:9c:08:
         9b:33:98:b6:15:fd:8f:7f:4a:c6:f5:56:65:e4:67:bf:33:ec:
         b0:1d:21:61:4b:b8:81:1f:b2:06:65:89:f8:36:6d:97:28:7f:
         c2:3e:8f:89:91:cf:bc:0c:d7:43:1c:36:4e:3d:52:04:3f:84:
         e9:90:b4:ef:ac:62:05:9c:a1:61:1e:cc:82:29:9c:78:09:a2:
         ff:1b:dc:d5:d6:b8:ff:46:68:62:6b:cb:36:3b:d3:21:f4:3f:
         d7:39:8d:d8:01:1e:25:6b:cc:ec:a0:1a:cc:fe:3c:5e:64:6f:
         ce:0a:8c:65:b8:01:07:7a:cb:1f:70:ca:0c:c9:01:07:ea:a4:
         4a:a2:6b:97:eb:c5:66:dd:3c:5a:d9:4e:a6:e2:90:e1:ea:df:
         2e:eb:3a:f0:94:7e:21:65:8b:73:f8:59:68:01:f0:c2:de:db:
         ca:7c:5b:30:28:3b:eb:dd:93:f8:84:9b:35:a2:73:c0:76:32:
         02:5d:b0:85:30:bd:5f:a8:69:c5:ce:a7:0b:06:6c:0c:b5:83:
         17:a0:9a:fc:87:92:79:5f:9e:49:c4:13:d3:a6:13:9a:e0:b8:
         83:b8:7a:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVg29NRrmlha3vCQGO8sKsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzMzBhY2RmMDQxYjVkY2M3ZTVlYzZjZjhmZjhiZDA2NDhl
ODY3MGMwHhcNMjUwODIzMDYwMDE3WhcNMjUwODI0MDYwMDE3WjAzMTEwLwYDVQQD
Eyg2MGFhMjUzMTE3MWJjYTQwZDFjZDcxMjlkZjEyOGZkODI2YTE2N2Y1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtPKOcXuyRIM67/iXHeUpugLAbq6
5T1sLkrC+kEyzCVjbNqC6mcqSovjPdaSuMFOC0PIO0NxBchCT7sc0/wErBm7+uQz
G3gx5dipYG6qhxdMItf+4zaYAPKdjuW3p0DDog3iMCvMRgrBDEfBMei9cEU7yUMv
5O0DvWfy3/7UCWVOv0R+A3eAgI88Y/O51+t1XpLlo/W9bAPPRx1X/NkPp9xCukxT
00gU91TMVhx2zJqFFHRiPGnTSmaueo22b6BWcYzFkW7R5I05D8Du7qRGMrmQx5WD
nWFXzvphXc3IGVnIA7JWHKuaEAO4j7mLyB8NL42Uqw1gjPq6VeY9b9LNXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGCqJTEXG8pA0c1xKd8Sj9gmoWf1MB8GA1UdIwQY
MBaAFMMwrN8EG13Mfl7Gz4/4vQZI6GcMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3pDczN3UWJYY3gtWHNiUGpfaTlCa2pvWnd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy8yYTg0ZTktNjhiMy00ZTNmLWI2MTUt
YTBhZDYxZDE5NGExLzEvd3pDczN3UWJYY3gtWHNiUGpfaTlCa2pvWnd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy8yYTg0ZTktNjhiMy00ZTNmLWI2MTUtYTBhZDYxZDE5NGEx
LzEvd3pDczN3UWJYY3gtWHNiUGpfaTlCa2pvWnd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiH6jAzi4
giqVpxBEi7yJ02FkF+1F33wGdOzACkZf4wSPDZwImzOYthX9j39KxvVWZeRnvzPs
sB0hYUu4gR+yBmWJ+DZtlyh/wj6PiZHPvAzXQxw2Tj1SBD+E6ZC076xiBZyhYR7M
gimceAmi/xvc1da4/0ZoYmvLNjvTIfQ/1zmN2AEeJWvM7KAazP48XmRvzgqMZbgB
B3rLH3DKDMkBB+qkSqJrl+vFZt08WtlOpuKQ4erfLus68JR+IWWLc/hZaAHwwt7b
ynxbMCg7692T+ISbNaJzwHYyAl2whTC9X6hpxc6nCwZsDLWDF6Ca/IeSeV+eScQT
06YTmuC4g7h6bw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:16:08 2025 by rpki-client