Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/b66ff8-e2ab-483c-a373-4b7f375ecd06/1/wVIzr0ulkRnW_xlNfNhmUISm7nc.mft
File:                     wVIzr0ulkRnW_xlNfNhmUISm7nc.mft (raw, json)
Hash identifier:          I37bbmSiSMpz3dvyRexJVwpQafmc5E/suzfluGHqK7Y=
Subject key identifier:   89:19:D8:87:6C:E1:4A:5D:95:7C:53:0E:F9:02:EC:A0:1F:A5:DF:72
Authority key identifier: C1:52:33:AF:4B:A5:91:19:D6:FF:19:4D:7C:D8:66:50:84:A6:EE:77
Certificate issuer:       /CN=c15233af4ba59119d6ff194d7cd8665084a6ee77
Certificate serial:       0198D51623B5A916B3AD5AD232527C16CF1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wVIzr0ulkRnW_xlNfNhmUISm7nc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/b66ff8-e2ab-483c-a373-4b7f375ecd06/1/wVIzr0ulkRnW_xlNfNhmUISm7nc.mft
Manifest number:          0CCD
Signing time:             Sat 23 Aug 2025 04:00:54 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:54 +0000
Manifest next update:     Sun 24 Aug 2025 04:00:54 +0000
Files and hashes:         1: M-zl6ZmtNK_TSwrT44MkMmFWsWY.roa (hash: 4yxdkDwmfz59LnRbcG6OUavxv8vAR+8hlDkw2Ess8wU=)
                          2: wVIzr0ulkRnW_xlNfNhmUISm7nc.crl (hash: XsQ4vbRc1dTgd/e/NsXIAXzDg9HG30hw3RnM3G8Naac=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/b66ff8-e2ab-483c-a373-4b7f375ecd06/1/wVIzr0ulkRnW_xlNfNhmUISm7nc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/b66ff8-e2ab-483c-a373-4b7f375ecd06/1/wVIzr0ulkRnW_xlNfNhmUISm7nc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wVIzr0ulkRnW_xlNfNhmUISm7nc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:16:23:b5:a9:16:b3:ad:5a:d2:32:52:7c:16:cf:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c15233af4ba59119d6ff194d7cd8665084a6ee77
        Validity
            Not Before: Aug 23 04:00:54 2025 GMT
            Not After : Aug 24 04:00:54 2025 GMT
        Subject: CN=8919d8876ce14a5d957c530ef902eca01fa5df72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:1e:c8:59:58:61:3e:d5:2d:16:39:5d:ee:ce:
                    0d:fb:99:26:a9:55:ab:9a:14:8d:7b:14:b5:ec:dc:
                    64:24:1d:55:42:e7:bd:bc:69:4d:58:1a:ba:e5:d8:
                    d3:3b:fc:be:23:6e:93:7a:8a:28:40:20:7b:17:32:
                    04:b7:99:cd:86:02:36:b3:53:67:ec:ad:60:08:09:
                    6d:be:02:4c:81:84:89:35:31:c5:59:e5:99:31:00:
                    fd:b8:34:49:29:ec:bf:12:20:4e:ea:ff:a8:08:12:
                    9f:e4:15:e8:fa:fa:e9:5d:24:b0:f2:41:61:34:eb:
                    fc:e1:0d:c1:f3:0a:f3:50:af:c0:6a:2c:55:c9:c5:
                    6e:b5:ea:a0:44:69:0f:17:2b:1f:ac:f9:68:d5:8d:
                    1e:9d:cd:d6:bd:a7:41:b2:aa:4b:8b:29:01:48:1b:
                    6e:2a:7e:d2:f1:b0:13:45:5a:85:c7:43:05:5d:a0:
                    c9:45:13:1a:d3:a5:bf:f8:bf:24:49:56:26:ee:ac:
                    e1:bb:56:6d:5d:4f:36:36:1c:c7:cc:d9:be:a2:fb:
                    3c:61:2f:2d:9e:72:74:46:ee:b8:c6:e3:ca:e0:ec:
                    59:79:2e:88:f0:00:e8:a3:27:c0:53:de:63:2d:54:
                    3c:94:d9:69:6e:29:d5:03:42:d4:6e:da:2c:32:5a:
                    4f:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:19:D8:87:6C:E1:4A:5D:95:7C:53:0E:F9:02:EC:A0:1F:A5:DF:72
            X509v3 Authority Key Identifier:
                keyid:C1:52:33:AF:4B:A5:91:19:D6:FF:19:4D:7C:D8:66:50:84:A6:EE:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wVIzr0ulkRnW_xlNfNhmUISm7nc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/b66ff8-e2ab-483c-a373-4b7f375ecd06/1/wVIzr0ulkRnW_xlNfNhmUISm7nc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/b66ff8-e2ab-483c-a373-4b7f375ecd06/1/wVIzr0ulkRnW_xlNfNhmUISm7nc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:15:b6:07:65:ba:ec:88:27:af:7a:11:5b:a1:ed:97:94:5e:
         14:8d:55:0a:71:8b:64:a3:8d:43:ea:57:0b:d8:9e:42:ab:ed:
         48:a5:61:f2:5b:71:f2:9d:c6:14:94:3e:12:3a:ab:0f:51:cf:
         d5:c2:67:ce:d2:06:8d:65:19:90:1f:5c:b8:df:f4:eb:b4:95:
         f0:9f:9e:05:5a:d1:05:b4:49:51:85:5d:bd:14:a5:51:db:ef:
         cd:60:81:5f:2d:72:73:78:63:46:93:72:96:27:1c:cd:e5:07:
         49:34:31:86:47:bf:c6:51:3f:db:5a:eb:d9:fc:6b:ca:55:b2:
         79:c8:b2:e2:ee:ce:17:0d:b1:c3:3c:41:12:e7:93:14:a3:28:
         69:eb:b5:a0:65:2e:cf:92:cb:82:1f:83:fe:ad:c2:3e:d6:44:
         ee:74:50:af:be:2b:72:c4:79:29:88:87:ea:25:ae:8f:56:3e:
         49:be:30:a2:33:01:fe:c3:42:05:ee:1d:00:24:7d:e2:97:c2:
         b4:60:e7:ae:a0:95:dc:a0:07:d7:74:2a:53:6e:79:b0:82:91:
         e6:7d:2a:00:49:9b:fe:1e:87:ff:a2:39:6c:34:77:0b:9a:0f:
         9c:87:0d:a1:82:72:10:49:60:af:28:1c:f2:e6:a9:c9:aa:cb:
         c8:ce:1e:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFiO1qRazrVrSMlJ8Fs8aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxNTIzM2FmNGJhNTkxMTlkNmZmMTk0ZDdjZDg2NjUwODRh
NmVlNzcwHhcNMjUwODIzMDQwMDU0WhcNMjUwODI0MDQwMDU0WjAzMTEwLwYDVQQD
Eyg4OTE5ZDg4NzZjZTE0YTVkOTU3YzUzMGVmOTAyZWNhMDFmYTVkZjcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoh7IWVhhPtUtFjld7s4N+5kmqVWr
mhSNexS17NxkJB1VQue9vGlNWBq65djTO/y+I26TeoooQCB7FzIEt5nNhgI2s1Nn
7K1gCAltvgJMgYSJNTHFWeWZMQD9uDRJKey/EiBO6v+oCBKf5BXo+vrpXSSw8kFh
NOv84Q3B8wrzUK/AaixVycVuteqgRGkPFysfrPlo1Y0enc3WvadBsqpLiykBSBtu
Kn7S8bATRVqFx0MFXaDJRRMa06W/+L8kSVYm7qzhu1ZtXU82NhzHzNm+ovs8YS8t
nnJ0Ru64xuPK4OxZeS6I8ADooyfAU95jLVQ8lNlpbinVA0LUbtosMlpPiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIkZ2Ids4UpdlXxTDvkC7KAfpd9yMB8GA1UdIwQY
MBaAFMFSM69LpZEZ1v8ZTXzYZlCEpu53MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1ZJenIwdWxrUm5XX3hsTmZOaG1VSVNtN25jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC9iNjZmZjgtZTJhYi00ODNjLWEzNzMt
NGI3ZjM3NWVjZDA2LzEvd1ZJenIwdWxrUm5XX3hsTmZOaG1VSVNtN25jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC9iNjZmZjgtZTJhYi00ODNjLWEzNzMtNGI3ZjM3NWVjZDA2
LzEvd1ZJenIwdWxrUm5XX3hsTmZOaG1VSVNtN25jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlRW2B2W6
7Ignr3oRW6Htl5ReFI1VCnGLZKONQ+pXC9ieQqvtSKVh8ltx8p3GFJQ+EjqrD1HP
1cJnztIGjWUZkB9cuN/067SV8J+eBVrRBbRJUYVdvRSlUdvvzWCBXy1yc3hjRpNy
licczeUHSTQxhke/xlE/21rr2fxrylWyeciy4u7OFw2xwzxBEueTFKMoaeu1oGUu
z5LLgh+D/q3CPtZE7nRQr74rcsR5KYiH6iWuj1Y+Sb4wojMB/sNCBe4dACR94pfC
tGDnrqCV3KAH13QqU255sIKR5n0qAEmb/h6H/6I5bDR3C5oPnIcNoYJyEElgrygc
8uapyarLyM4eZg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:24:58 2025 by rpki-client