Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/b33e14-b3eb-4de5-a519-9adaa4b2b196/1/Wva8LaPCxkKxSuEpwb__JnhS1vw.mft
File:                     Wva8LaPCxkKxSuEpwb__JnhS1vw.mft (raw, json)
Hash identifier:          9ET83ZvvpeHO7DSjTn80sY7cb3gRjt2beJ8DfZjuKaM=
Subject key identifier:   0D:65:CB:5F:F8:AA:92:F5:00:5A:E5:41:D7:1A:FE:FC:4A:69:8B:CE
Authority key identifier: 5A:F6:BC:2D:A3:C2:C6:42:B1:4A:E1:29:C1:BF:FF:26:78:52:D6:FC
Certificate issuer:       /CN=5af6bc2da3c2c642b14ae129c1bfff267852d6fc
Certificate serial:       0198D4A84CE9C0A728B0AB88306CD07D535C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wva8LaPCxkKxSuEpwb__JnhS1vw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/b33e14-b3eb-4de5-a519-9adaa4b2b196/1/Wva8LaPCxkKxSuEpwb__JnhS1vw.mft
Manifest number:          6E
Signing time:             Sat 23 Aug 2025 02:00:56 +0000
Manifest this update:     Sat 23 Aug 2025 02:00:56 +0000
Manifest next update:     Sun 24 Aug 2025 02:00:56 +0000
Files and hashes:         1: 6kuYBzw429hTfcmzLy4TgFrJKDQ.roa (hash: v8D/cGNdDOxEWcCfZs7ngYEeBNL4fY/mcOnmBbmdr7k=)
                          2: Wva8LaPCxkKxSuEpwb__JnhS1vw.crl (hash: 2Ij8JEmVBKRTDASOASY/6YaxcWRVFO1vV3mQ8Qzk0aU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/b33e14-b3eb-4de5-a519-9adaa4b2b196/1/Wva8LaPCxkKxSuEpwb__JnhS1vw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/b33e14-b3eb-4de5-a519-9adaa4b2b196/1/Wva8LaPCxkKxSuEpwb__JnhS1vw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Wva8LaPCxkKxSuEpwb__JnhS1vw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 02:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:a8:4c:e9:c0:a7:28:b0:ab:88:30:6c:d0:7d:53:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5af6bc2da3c2c642b14ae129c1bfff267852d6fc
        Validity
            Not Before: Aug 23 02:00:56 2025 GMT
            Not After : Aug 24 02:00:56 2025 GMT
        Subject: CN=0d65cb5ff8aa92f5005ae541d71afefc4a698bce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:18:ad:3c:82:67:9d:3b:95:8a:50:36:ea:6c:
                    01:66:1e:37:21:60:08:57:a1:5a:6e:ae:f8:b0:5e:
                    d2:45:7d:69:61:5c:ba:07:72:72:a3:2c:c8:18:c3:
                    49:0f:91:98:a2:41:96:cf:71:30:7c:fc:31:ad:d8:
                    b0:8c:42:61:6b:ca:d9:51:b4:ed:03:00:34:8e:e8:
                    10:ea:4f:2c:ef:1a:20:70:ef:eb:10:3b:36:e9:cc:
                    a5:41:93:28:01:37:74:7f:65:11:a5:fe:c8:66:f9:
                    4b:18:92:78:57:73:47:88:53:64:58:cf:1b:4e:5f:
                    83:1f:5b:ee:0e:5c:ca:40:23:2e:16:ee:1d:45:45:
                    88:a2:3c:e6:03:88:ab:ca:ec:7a:0e:b1:2e:eb:bc:
                    af:ee:4e:52:00:31:af:ab:ce:41:21:b2:07:b6:45:
                    6b:f1:bd:b0:08:2b:7a:e9:13:12:e2:cf:7d:e3:5d:
                    dc:a2:cc:5d:5e:5d:1a:cd:50:f7:98:74:dd:6d:75:
                    db:70:f1:db:ab:da:e9:f8:85:a6:ca:c6:ae:90:d3:
                    23:08:32:23:bb:92:b6:ab:0a:67:10:31:1f:72:c5:
                    25:0f:4c:83:18:f3:82:66:97:59:73:85:cb:4c:7d:
                    4c:33:ac:c1:da:dc:be:a7:40:a5:3c:e2:f3:ce:8f:
                    99:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:65:CB:5F:F8:AA:92:F5:00:5A:E5:41:D7:1A:FE:FC:4A:69:8B:CE
            X509v3 Authority Key Identifier:
                keyid:5A:F6:BC:2D:A3:C2:C6:42:B1:4A:E1:29:C1:BF:FF:26:78:52:D6:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wva8LaPCxkKxSuEpwb__JnhS1vw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/b33e14-b3eb-4de5-a519-9adaa4b2b196/1/Wva8LaPCxkKxSuEpwb__JnhS1vw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/b33e14-b3eb-4de5-a519-9adaa4b2b196/1/Wva8LaPCxkKxSuEpwb__JnhS1vw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:75:44:12:98:5a:d0:2b:6e:06:5c:10:c2:63:ce:11:da:3b:
         4c:55:fe:a5:1f:ee:c4:05:93:f3:dc:9c:12:1d:6e:f4:99:ae:
         45:8c:9d:10:60:ee:2c:8c:5c:d6:89:8c:2f:95:ce:04:c6:c9:
         21:4c:28:f5:d0:6b:13:f9:c2:14:b5:6c:0a:94:b0:1f:7e:6f:
         41:4d:7f:bc:9b:c5:28:af:53:e5:25:92:a3:e4:c1:cf:8d:df:
         6c:45:9e:0c:8d:54:69:f6:8f:9d:97:9c:93:f8:03:92:30:7e:
         8c:9a:15:3b:65:d7:e4:19:2b:1e:bb:ee:a4:94:ac:60:f6:a3:
         c0:16:b0:72:2a:19:c1:eb:2a:f3:ef:04:c1:3a:52:6f:91:9c:
         e7:d3:2c:fc:f8:04:ea:5a:ab:b4:7d:f9:57:51:a6:c5:be:6d:
         ad:d9:ce:e3:f2:8b:b9:59:89:a4:89:a6:32:8e:89:d0:61:77:
         9a:87:18:bb:66:87:3b:40:59:04:14:27:09:7a:5a:e1:12:0b:
         15:0d:3d:8f:f5:d2:d7:69:56:30:a2:a1:91:fd:22:db:b2:9f:
         8c:a4:c6:06:8f:9f:79:95:df:71:5f:81:f5:9c:58:d2:51:7e:
         c2:b4:bb:bd:9b:59:dd:4c:7c:fd:dc:93:5a:ec:4e:7b:ae:2b:
         db:55:33:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUqEzpwKcosKuIMGzQfVNcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhZjZiYzJkYTNjMmM2NDJiMTRhZTEyOWMxYmZmZjI2Nzg1
MmQ2ZmMwHhcNMjUwODIzMDIwMDU2WhcNMjUwODI0MDIwMDU2WjAzMTEwLwYDVQQD
EygwZDY1Y2I1ZmY4YWE5MmY1MDA1YWU1NDFkNzFhZmVmYzRhNjk4YmNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBitPIJnnTuVilA26mwBZh43IWAI
V6Fabq74sF7SRX1pYVy6B3JyoyzIGMNJD5GYokGWz3EwfPwxrdiwjEJha8rZUbTt
AwA0jugQ6k8s7xogcO/rEDs26cylQZMoATd0f2URpf7IZvlLGJJ4V3NHiFNkWM8b
Tl+DH1vuDlzKQCMuFu4dRUWIojzmA4iryux6DrEu67yv7k5SADGvq85BIbIHtkVr
8b2wCCt66RMS4s99413cosxdXl0azVD3mHTdbXXbcPHbq9rp+IWmysaukNMjCDIj
u5K2qwpnEDEfcsUlD0yDGPOCZpdZc4XLTH1MM6zB2ty+p0ClPOLzzo+ZuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA1ly1/4qpL1AFrlQdca/vxKaYvOMB8GA1UdIwQY
MBaAFFr2vC2jwsZCsUrhKcG//yZ4Utb8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3ZhOExhUEN4a0t4U3VFcHdiX19KbmhTMXZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9iMzNlMTQtYjNlYi00ZGU1LWE1MTkt
OWFkYWE0YjJiMTk2LzEvV3ZhOExhUEN4a0t4U3VFcHdiX19KbmhTMXZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS9iMzNlMTQtYjNlYi00ZGU1LWE1MTktOWFkYWE0YjJiMTk2
LzEvV3ZhOExhUEN4a0t4U3VFcHdiX19KbmhTMXZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjHVEEpha
0CtuBlwQwmPOEdo7TFX+pR/uxAWT89ycEh1u9JmuRYydEGDuLIxc1omML5XOBMbJ
IUwo9dBrE/nCFLVsCpSwH35vQU1/vJvFKK9T5SWSo+TBz43fbEWeDI1UafaPnZec
k/gDkjB+jJoVO2XX5BkrHrvupJSsYPajwBawcioZwesq8+8EwTpSb5Gc59Ms/PgE
6lqrtH35V1Gmxb5trdnO4/KLuVmJpImmMo6J0GF3mocYu2aHO0BZBBQnCXpa4RIL
FQ09j/XS12lWMKKhkf0i27KfjKTGBo+feZXfcV+B9ZxY0lF+wrS7vZtZ3Ux8/dyT
WuxOe64r21UzuA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:49:14 2025 by rpki-client