Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/9be856-0e32-400f-8e89-369cd8be25fe/1/wBHuBmZBdQpRFH2NyZobEFZY0gM.mft
File:                     wBHuBmZBdQpRFH2NyZobEFZY0gM.mft (raw, json)
Hash identifier:          +5TI8bVtTt13lArcJtc4HZ7h/IzjrsUA9c2VvoYuME4=
Subject key identifier:   5B:60:9B:78:89:06:03:23:39:96:06:48:30:7C:DE:05:45:4F:77:F5
Authority key identifier: C0:11:EE:06:66:41:75:0A:51:14:7D:8D:C9:9A:1B:10:56:58:D2:03
Certificate issuer:       /CN=c011ee066641750a51147d8dc99a1b105658d203
Certificate serial:       0198D6CCDF4639145F1743C95328CC3705BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wBHuBmZBdQpRFH2NyZobEFZY0gM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/9be856-0e32-400f-8e89-369cd8be25fe/1/wBHuBmZBdQpRFH2NyZobEFZY0gM.mft
Manifest number:          164A
Signing time:             Sat 23 Aug 2025 12:00:07 +0000
Manifest this update:     Sat 23 Aug 2025 12:00:07 +0000
Manifest next update:     Sun 24 Aug 2025 12:00:07 +0000
Files and hashes:         1: 1-HSWsiWM-hDl2O_5CedvBQ55YQ8.roa (hash: le2bdDjj8eJvjQqLPVAV9ifpc64QyRhmisD9ayP5j2w=)
                          2: WfTKVc2urWFHINs-H7ByO8d8wxU.roa (hash: vrGq1fPxckNV2umjKEkVDvs5jt8ww7idFEdo+nD8HaU=)
                          3: tq6G4XKwLkPscmGDzl0ViLLGYc0.roa (hash: gCrgWGNDXJJp5RhoxWhID/tfHWwjzd875gYTpw7zJGg=)
                          4: wBHuBmZBdQpRFH2NyZobEFZY0gM.crl (hash: QhpObAZwgECaXMXfd1gDacYAa82QrNl9oDXctJVSG/Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/9be856-0e32-400f-8e89-369cd8be25fe/1/wBHuBmZBdQpRFH2NyZobEFZY0gM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/9be856-0e32-400f-8e89-369cd8be25fe/1/wBHuBmZBdQpRFH2NyZobEFZY0gM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wBHuBmZBdQpRFH2NyZobEFZY0gM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:cc:df:46:39:14:5f:17:43:c9:53:28:cc:37:05:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c011ee066641750a51147d8dc99a1b105658d203
        Validity
            Not Before: Aug 23 12:00:07 2025 GMT
            Not After : Aug 24 12:00:07 2025 GMT
        Subject: CN=5b609b788906032339960648307cde05454f77f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:47:7c:c7:fc:af:08:b0:4f:62:d0:44:0a:49:
                    67:72:55:36:8d:bd:f7:6a:e9:8b:36:f1:86:ae:53:
                    96:a9:d9:8b:88:f5:0a:8e:d7:65:a5:37:cd:e2:9a:
                    19:a5:a2:32:e3:33:56:e5:b3:47:86:6e:4c:d1:78:
                    d5:6a:ba:70:59:b0:85:85:2b:48:36:1f:ab:91:0e:
                    40:52:14:31:24:cf:0f:7f:15:0e:17:5b:59:3e:f4:
                    84:1f:2d:e0:1f:7c:35:f1:df:a5:8b:9c:d1:2c:84:
                    81:f1:48:fe:c8:36:1e:0d:ca:3c:71:9d:10:26:64:
                    59:00:5f:f9:4a:06:76:ba:e5:47:b3:c3:23:30:06:
                    a4:3c:5d:6b:26:ee:b1:97:bf:31:4b:57:ab:aa:a0:
                    94:46:b8:71:85:fb:2b:bd:37:8c:03:d9:23:96:0c:
                    6a:32:19:90:77:7d:9b:7c:88:9b:3f:ad:96:f0:b9:
                    0f:b9:e9:f6:cd:eb:4e:99:8b:70:02:ce:c7:ef:a3:
                    03:ae:5b:55:23:92:9d:52:fa:be:b2:ae:9d:08:97:
                    cf:3c:2d:15:18:d4:57:87:71:c0:b9:a4:70:ac:6d:
                    84:23:8d:14:cc:60:15:25:6a:99:c0:71:ca:d9:41:
                    b7:63:e3:df:4b:7f:b8:d1:64:fb:d2:72:12:04:50:
                    10:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:60:9B:78:89:06:03:23:39:96:06:48:30:7C:DE:05:45:4F:77:F5
            X509v3 Authority Key Identifier:
                keyid:C0:11:EE:06:66:41:75:0A:51:14:7D:8D:C9:9A:1B:10:56:58:D2:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBHuBmZBdQpRFH2NyZobEFZY0gM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/9be856-0e32-400f-8e89-369cd8be25fe/1/wBHuBmZBdQpRFH2NyZobEFZY0gM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/9be856-0e32-400f-8e89-369cd8be25fe/1/wBHuBmZBdQpRFH2NyZobEFZY0gM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:66:95:3b:ad:35:52:60:a0:d4:ce:1e:79:42:00:2e:db:0a:
         de:76:bb:3c:09:93:d4:21:2b:aa:1e:cc:d9:2b:c0:2b:8c:78:
         ad:6d:10:3e:65:c3:7a:8f:7b:3a:95:20:bf:75:e9:1f:78:d8:
         87:d8:55:19:c0:cd:91:43:04:b8:93:f1:84:00:1d:d9:2e:f1:
         cc:9c:b3:0b:61:31:77:e2:44:bd:d0:03:6d:6e:40:a5:36:e1:
         b5:de:f1:7e:b6:77:5d:2a:42:d2:03:45:c7:c7:72:80:24:be:
         c3:7b:0b:cb:1a:46:49:39:f2:0f:ef:cd:f1:ff:0e:eb:b6:0b:
         9d:b5:16:ce:1a:0a:32:64:4d:22:ca:06:18:07:fb:55:34:bd:
         89:95:46:a4:24:b4:8b:89:58:d0:d5:b9:1b:e3:94:f5:a8:04:
         cf:b5:4a:d9:53:bc:1e:3e:21:1c:4e:15:16:20:36:2b:3b:43:
         7a:fa:35:cb:26:71:1f:ae:7a:c7:7f:0b:72:46:c9:6e:65:91:
         17:60:bf:d4:2f:35:41:81:7a:f0:ae:99:23:f5:50:1e:52:0a:
         8e:96:c3:8b:8e:a7:ea:1c:94:3e:9e:63:46:f2:85:7d:4f:e6:
         ac:6d:68:19:28:e5:e7:0c:ec:7d:40:6f:ac:9d:f7:e1:f3:b6:
         9d:29:95:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWzN9GORRfF0PJUyjMNwW/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwMTFlZTA2NjY0MTc1MGE1MTE0N2Q4ZGM5OWExYjEwNTY1
OGQyMDMwHhcNMjUwODIzMTIwMDA3WhcNMjUwODI0MTIwMDA3WjAzMTEwLwYDVQQD
Eyg1YjYwOWI3ODg5MDYwMzIzMzk5NjA2NDgzMDdjZGUwNTQ1NGY3N2Y1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwEd8x/yvCLBPYtBECklnclU2jb33
aumLNvGGrlOWqdmLiPUKjtdlpTfN4poZpaIy4zNW5bNHhm5M0XjVarpwWbCFhStI
Nh+rkQ5AUhQxJM8PfxUOF1tZPvSEHy3gH3w18d+li5zRLISB8Uj+yDYeDco8cZ0Q
JmRZAF/5SgZ2uuVHs8MjMAakPF1rJu6xl78xS1erqqCURrhxhfsrvTeMA9kjlgxq
MhmQd32bfIibP62W8LkPuen2zetOmYtwAs7H76MDrltVI5KdUvq+sq6dCJfPPC0V
GNRXh3HAuaRwrG2EI40UzGAVJWqZwHHK2UG3Y+PfS3+40WT70nISBFAQqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFtgm3iJBgMjOZYGSDB83gVFT3f1MB8GA1UdIwQY
MBaAFMAR7gZmQXUKURR9jcmaGxBWWNIDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0JIdUJtWkJkUXBSRkgyTnlab2JFRlpZMGdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi85YmU4NTYtMGUzMi00MDBmLThlODkt
MzY5Y2Q4YmUyNWZlLzEvd0JIdUJtWkJkUXBSRkgyTnlab2JFRlpZMGdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi85YmU4NTYtMGUzMi00MDBmLThlODktMzY5Y2Q4YmUyNWZl
LzEvd0JIdUJtWkJkUXBSRkgyTnlab2JFRlpZMGdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgmaVO601
UmCg1M4eeUIALtsK3na7PAmT1CErqh7M2SvAK4x4rW0QPmXDeo97OpUgv3XpH3jY
h9hVGcDNkUMEuJPxhAAd2S7xzJyzC2Exd+JEvdADbW5ApTbhtd7xfrZ3XSpC0gNF
x8dygCS+w3sLyxpGSTnyD+/N8f8O67YLnbUWzhoKMmRNIsoGGAf7VTS9iZVGpCS0
i4lY0NW5G+OU9agEz7VK2VO8Hj4hHE4VFiA2KztDevo1yyZxH656x38LckbJbmWR
F2C/1C81QYF68K6ZI/VQHlIKjpbDi46n6hyUPp5jRvKFfU/mrG1oGSjl5wzsfUBv
rJ334fO2nSmVsA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:00:22 2025 by rpki-client