Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.mft
File:                     Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.mft (raw, json)
Hash identifier:          0KwYFdCBMmBBv80LZk+9YPF//5LJ+G8k5tv8dk3INRA=
Subject key identifier:   FE:BC:7C:78:AA:5D:1D:BA:05:F1:4D:AB:4F:20:90:39:03:FD:DE:2A
Authority key identifier: 59:DD:54:27:81:85:1C:0B:CE:5A:3E:A5:CC:38:76:50:FF:C8:27:7E
Certificate issuer:       /CN=59dd542781851c0bce5a3ea5cc387650ffc8277e
Certificate serial:       0198D5BBC7542A2B78096986029D19C7D133
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.mft
Manifest number:          1374
Signing time:             Sat 23 Aug 2025 07:01:49 +0000
Manifest this update:     Sat 23 Aug 2025 07:01:49 +0000
Manifest next update:     Sun 24 Aug 2025 07:01:49 +0000
Files and hashes:         1: 0T4kYsm4csSjL8VboPiv6-n-j0A.roa (hash: aDj2+cGm+6rFRblQlBX3W4oDpuhRvKm1wzGVwZCxKxo=)
                          2: 0kdqhMgoXMqa2bGg6WCouazRWoA.roa (hash: m8tqnKE1kxATVgNxV4xo3K5SETCSivJyawzzyZu0T8M=)
                          3: Bdn1DcMJLsTBh2Q12ScTlfextfA.roa (hash: 5aLKJErELEuvOisnhFo7YC5MNb/X65d9eCU26oCY0QQ=)
                          4: CwkL85UqoIRe6_M2Y8-_-N4dRZg.roa (hash: IuDgpmoqQyZe/QgfNMc3PyivvmiOvLYcwJyNp9apwNQ=)
                          5: Ka0pjuU2eliSF6kAA4oHaZoEvsA.roa (hash: 62kAAv2Hh6q7YMgpvoYSR/SU5a88o0FYbuA/sB0zQYU=)
                          6: MgxF_7heYMD80wktONtKXy_JUjw.roa (hash: VSasJsU9l5n4BfJqqcCZXt2bux9xLXSz0Hlw9ESwmwY=)
                          7: P-3m5q4qPQ2SNeiAs_GOekqcfjs.roa (hash: eKfLN+GcqqNwEJXEtNi5qdZ/kBOqEtfUu7tt1fh/R9c=)
                          8: VkosI65EihkcngTWaTJkG6-9m2I.roa (hash: fX35nzHhBNIcEWDRVnVwrt3ML71QDkHBtpojCYaD+w8=)
                          9: Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.crl (hash: ofp0F0Ifm5n/gIE3DaStMCiViDKmBWuGOkcrlarRrvc=)
                          10: m04fb-jUHyOTXhh_z_q3Hd-LAMY.roa (hash: bXlmxzbFdTP+0jnQtSP1HnYWBUd9rItj9AvW7vkRDls=)
                          11: pgAR_DhucAVso-7iUGVc2v72k-k.roa (hash: 9hxBN+TWA9N4uVVJ3lzI0bLTHIAllmoH+jSnFMWRgCU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bb:c7:54:2a:2b:78:09:69:86:02:9d:19:c7:d1:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59dd542781851c0bce5a3ea5cc387650ffc8277e
        Validity
            Not Before: Aug 23 07:01:49 2025 GMT
            Not After : Aug 24 07:01:49 2025 GMT
        Subject: CN=febc7c78aa5d1dba05f14dab4f20903903fdde2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:0e:c1:47:87:5e:16:14:d5:f5:05:7f:58:37:
                    46:23:c3:89:6f:86:55:25:98:23:b9:9a:7d:3c:42:
                    fd:6f:6a:53:fe:df:f1:8e:3a:5e:7e:26:64:23:00:
                    5a:9a:d4:e7:c8:9a:f8:be:5a:e9:d5:97:f6:53:99:
                    86:df:a0:55:67:d0:16:fe:3e:81:cc:64:52:e4:c2:
                    09:11:e3:78:b9:2a:89:f3:a8:6a:7d:15:1b:d0:01:
                    37:83:85:bb:81:ae:ba:06:f9:87:bc:17:45:fb:2c:
                    2e:a4:3d:c8:38:31:20:18:1d:b2:25:b7:f4:5b:a9:
                    73:32:d1:08:4a:32:b0:cd:70:80:e9:6e:68:3e:54:
                    ed:af:37:bd:b3:85:75:90:72:13:a7:79:f6:71:ad:
                    8d:5a:d9:1e:66:29:58:96:ca:fd:29:13:15:b1:41:
                    61:33:77:03:13:f6:08:de:45:31:81:30:59:8a:3e:
                    6e:0d:ca:6d:71:28:2a:b3:0b:76:eb:06:41:6e:df:
                    f8:de:eb:b0:79:6e:9f:34:e5:3b:37:6c:a7:f2:43:
                    50:6a:11:90:77:b3:74:b7:bb:62:4c:9c:ab:7c:29:
                    ad:07:61:27:3a:93:a2:83:27:cd:ce:97:2c:ca:12:
                    13:ed:f6:af:ec:1b:d6:54:20:ff:99:46:23:f8:d5:
                    a9:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:BC:7C:78:AA:5D:1D:BA:05:F1:4D:AB:4F:20:90:39:03:FD:DE:2A
            X509v3 Authority Key Identifier:
                keyid:59:DD:54:27:81:85:1C:0B:CE:5A:3E:A5:CC:38:76:50:FF:C8:27:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:c7:12:59:d1:3d:dc:07:f5:ba:ba:dc:4b:d2:44:c8:59:04:
         26:ef:9d:7d:5d:17:b9:cc:23:5c:66:b7:45:ea:5b:3c:78:80:
         07:99:8d:f6:53:da:1e:be:ec:fd:bd:80:77:55:33:32:8b:12:
         7c:cc:d0:13:5e:59:83:e1:c7:5c:ee:8f:3e:a7:a3:d3:97:fc:
         85:f5:4d:db:bd:72:ff:c0:1f:b9:c7:63:db:a5:11:30:e6:3e:
         68:fe:52:ae:e7:20:e2:46:17:22:12:c9:ea:cb:4e:ab:0d:40:
         c1:6a:ee:2f:a9:0e:ea:bb:3c:33:6e:e7:50:1c:da:12:b9:6f:
         4b:47:4d:2f:24:b0:98:96:65:cb:00:d7:75:d7:be:07:d3:7c:
         7e:aa:4f:38:9b:35:03:dd:9d:0b:03:a2:b5:9f:b1:8e:fc:43:
         3c:cc:d6:36:b7:d1:15:da:de:a1:cf:ce:df:9a:4e:83:cc:72:
         50:0c:2d:15:59:db:b4:be:29:04:95:76:95:6e:65:d2:94:cb:
         d8:7f:ae:40:85:5a:0d:fc:a0:a9:de:44:a2:81:de:ea:19:eb:
         f7:1a:de:48:bc:69:8f:ae:54:65:bf:d8:e3:dc:a0:d1:58:2e:
         85:9a:69:a1:23:bf:46:a4:be:41:4d:f6:de:ad:43:74:88:55:
         0d:fc:71:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVu8dUKit4CWmGAp0Zx9EzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5ZGQ1NDI3ODE4NTFjMGJjZTVhM2VhNWNjMzg3NjUwZmZj
ODI3N2UwHhcNMjUwODIzMDcwMTQ5WhcNMjUwODI0MDcwMTQ5WjAzMTEwLwYDVQQD
EyhmZWJjN2M3OGFhNWQxZGJhMDVmMTRkYWI0ZjIwOTAzOTAzZmRkZTJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQ7BR4deFhTV9QV/WDdGI8OJb4ZV
JZgjuZp9PEL9b2pT/t/xjjpefiZkIwBamtTnyJr4vlrp1Zf2U5mG36BVZ9AW/j6B
zGRS5MIJEeN4uSqJ86hqfRUb0AE3g4W7ga66BvmHvBdF+ywupD3IODEgGB2yJbf0
W6lzMtEISjKwzXCA6W5oPlTtrze9s4V1kHITp3n2ca2NWtkeZilYlsr9KRMVsUFh
M3cDE/YI3kUxgTBZij5uDcptcSgqswt26wZBbt/43uuweW6fNOU7N2yn8kNQahGQ
d7N0t7tiTJyrfCmtB2EnOpOigyfNzpcsyhIT7fav7BvWVCD/mUYj+NWpAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP68fHiqXR26BfFNq08gkDkD/d4qMB8GA1UdIwQY
MBaAFFndVCeBhRwLzlo+pcw4dlD/yCd+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2QxVUo0R0ZIQXZPV2o2bHpEaDJVUF9JSjM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi83OWM0YmEtMzhlMi00ZjVhLTk1OWYt
NDdlMDkzNzk4OWE4LzEvV2QxVUo0R0ZIQXZPV2o2bHpEaDJVUF9JSjM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi83OWM0YmEtMzhlMi00ZjVhLTk1OWYtNDdlMDkzNzk4OWE4
LzEvV2QxVUo0R0ZIQXZPV2o2bHpEaDJVUF9JSjM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACscSWdE9
3Af1urrcS9JEyFkEJu+dfV0XucwjXGa3RepbPHiAB5mN9lPaHr7s/b2Ad1UzMosS
fMzQE15Zg+HHXO6PPqej05f8hfVN271y/8Afucdj26URMOY+aP5Srucg4kYXIhLJ
6stOqw1AwWruL6kO6rs8M27nUBzaErlvS0dNLySwmJZlywDXdde+B9N8fqpPOJs1
A92dCwOitZ+xjvxDPMzWNrfRFdreoc/O35pOg8xyUAwtFVnbtL4pBJV2lW5l0pTL
2H+uQIVaDfygqd5EooHe6hnr9xreSLxpj65UZb/Y49yg0VguhZppoSO/RqS+QU32
3q1DdIhVDfxxmg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:13:31 2025 by rpki-client