Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/WsRmzIn5204xxUANKueiv_2yJUc.mft
File:                     WsRmzIn5204xxUANKueiv_2yJUc.mft (raw, json)
Hash identifier:          WN5g2Cu8sds0hkMOJmeFDLPDSB6rEiK+hdzKcHPCSzs=
Subject key identifier:   1A:10:E5:B3:E2:AA:AC:9A:B3:D0:69:03:E5:54:94:A2:6D:F3:03:59
Authority key identifier: 5A:C4:66:CC:89:F9:DB:4E:31:C5:40:0D:2A:E7:A2:BF:FD:B2:25:47
Certificate issuer:       /CN=5ac466cc89f9db4e31c5400d2ae7a2bffdb22547
Certificate serial:       0198D47305BB1CD23C11677BDB3BF41C2CC5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WsRmzIn5204xxUANKueiv_2yJUc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/WsRmzIn5204xxUANKueiv_2yJUc.mft
Manifest number:          164B
Signing time:             Sat 23 Aug 2025 01:02:44 +0000
Manifest this update:     Sat 23 Aug 2025 01:02:44 +0000
Manifest next update:     Sun 24 Aug 2025 01:02:44 +0000
Files and hashes:         1: CWjWI1KElycGegFoxqel6BzyPu8.roa (hash: x51MkWgMWV9H4yeCpFeKV1piMOfEzcOof7b5UghQrtY=)
                          2: TIXlkFRgn5qDeTU5GPtZw50sFgg.roa (hash: StUjGKW5A9Vqz9JKMfVvVB0iqJDXj37ZwmT9ma7BuAQ=)
                          3: Udak3yr2UP3kErzFOUD6ejk40jQ.roa (hash: 0WEzkUde+4+TTVujXlHKRM8FF/Cn6zrziqOLiHqb9kc=)
                          4: WsRmzIn5204xxUANKueiv_2yJUc.crl (hash: /xHe7qAXvvGnPUoVALVqIBvMvmk90UYdQ1iNdlfrDEI=)
                          5: j3Johs7tWdOjWP-RSLyuZS9QCYA.roa (hash: 73D0mNtTe5ysnKB7nrHua4L+6aN6MBQCZz1gs+mdS6U=)
                          6: nCwgDurwC06Anta3aqc5wbxK3GY.roa (hash: 6I1/PwDUPqtalY+y7tNas0+iP9HsSsWLUFXwql/UFbs=)
                          7: wW0am_Aqxc8qtKWqJuBRkTx7-vg.roa (hash: 3MA88INLD4dCx0oFXNeXIYeavG1gLlOTW77Nx0t2APU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/WsRmzIn5204xxUANKueiv_2yJUc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/WsRmzIn5204xxUANKueiv_2yJUc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WsRmzIn5204xxUANKueiv_2yJUc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 01:02:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:73:05:bb:1c:d2:3c:11:67:7b:db:3b:f4:1c:2c:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ac466cc89f9db4e31c5400d2ae7a2bffdb22547
        Validity
            Not Before: Aug 23 01:02:44 2025 GMT
            Not After : Aug 24 01:02:44 2025 GMT
        Subject: CN=1a10e5b3e2aaac9ab3d06903e55494a26df30359
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:29:5c:b8:a4:c6:33:3a:a5:7a:fc:fd:63:a2:
                    b9:5f:f1:0d:23:af:0a:73:61:39:59:8b:4f:bf:ad:
                    e0:9a:6f:73:ce:b8:f7:27:a0:3d:29:65:c5:64:e6:
                    80:81:10:8f:1e:a2:9c:9d:5b:1c:b3:c8:c1:23:f5:
                    4f:95:14:89:10:ee:78:cb:f7:61:68:8c:3d:3c:ff:
                    3e:d9:4f:1a:ac:4a:2d:50:60:a4:57:c4:09:db:30:
                    78:f7:ee:69:e2:ab:6b:a7:1d:16:c1:c9:c0:6c:89:
                    af:c7:0c:e8:fe:e0:c6:39:b9:c1:26:a9:14:49:0e:
                    ab:bd:4e:28:aa:a0:33:7f:4d:e1:7a:8a:93:5f:5d:
                    95:9b:3f:6e:e9:84:a8:16:e7:4e:36:98:20:59:a7:
                    1c:17:fc:e4:28:3d:8a:82:52:5b:29:d4:af:94:49:
                    62:c2:d4:3b:8c:31:87:3f:12:a8:47:ae:5a:52:e4:
                    9b:a8:7f:50:68:37:5a:ec:b6:e5:b9:d5:8c:39:e4:
                    ec:36:71:f2:28:fd:81:bc:c1:d5:ec:bc:ae:38:06:
                    2d:f7:a4:1d:85:eb:16:39:a5:80:d7:e4:7e:a7:c3:
                    3f:47:60:6f:15:6c:fe:91:0c:d2:80:3e:f7:03:90:
                    7e:35:d9:47:c8:8f:28:6b:f7:e2:00:29:c1:c8:4f:
                    95:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:10:E5:B3:E2:AA:AC:9A:B3:D0:69:03:E5:54:94:A2:6D:F3:03:59
            X509v3 Authority Key Identifier:
                keyid:5A:C4:66:CC:89:F9:DB:4E:31:C5:40:0D:2A:E7:A2:BF:FD:B2:25:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WsRmzIn5204xxUANKueiv_2yJUc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/WsRmzIn5204xxUANKueiv_2yJUc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e29c87-4683-443e-883f-9abd1aa64be1/1/WsRmzIn5204xxUANKueiv_2yJUc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:45:fc:10:1e:b4:31:f3:d2:bb:cb:7f:ab:ce:ce:57:5f:dc:
         14:28:f1:4f:ca:73:49:08:1a:24:49:01:4b:84:bc:a5:8a:c6:
         eb:8b:21:2a:14:32:19:af:21:d5:90:6d:da:09:51:0b:51:6b:
         72:39:40:ab:ab:e5:11:9d:0f:eb:71:c6:d8:46:9c:e5:a4:3e:
         be:6f:99:ee:ce:7e:44:54:39:8d:e2:3e:c2:e1:ea:ba:6e:40:
         2f:38:91:d1:f2:ca:46:80:ab:a8:fd:c8:c2:82:fc:89:8c:70:
         71:a5:9a:89:6b:16:50:cc:0f:7d:15:2d:e9:64:ca:7e:eb:a4:
         14:84:57:f7:0c:78:d4:a0:1b:46:60:9e:d4:a7:2d:df:9f:e1:
         5b:2b:64:33:e4:10:d6:8a:40:4f:8d:6f:97:82:45:40:02:01:
         fd:95:71:47:e3:56:d2:66:36:b5:ee:7d:bd:6d:07:60:27:90:
         55:9f:5a:14:2e:b7:41:c5:27:94:23:63:2c:13:bd:a9:3c:2b:
         55:24:1d:d8:ec:ff:86:c7:25:33:8c:64:7b:b1:f6:9c:a5:a8:
         07:f6:c2:fa:a6:72:f6:fa:f7:b0:7e:68:47:9a:65:98:c3:f3:
         83:e6:ba:a0:81:ca:48:91:db:da:2d:1b:77:2a:08:f2:fe:f5:
         90:bf:9a:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUcwW7HNI8EWd72zv0HCzFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhYzQ2NmNjODlmOWRiNGUzMWM1NDAwZDJhZTdhMmJmZmRi
MjI1NDcwHhcNMjUwODIzMDEwMjQ0WhcNMjUwODI0MDEwMjQ0WjAzMTEwLwYDVQQD
EygxYTEwZTViM2UyYWFhYzlhYjNkMDY5MDNlNTU0OTRhMjZkZjMwMzU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ylcuKTGMzqlevz9Y6K5X/ENI68K
c2E5WYtPv63gmm9zzrj3J6A9KWXFZOaAgRCPHqKcnVscs8jBI/VPlRSJEO54y/dh
aIw9PP8+2U8arEotUGCkV8QJ2zB49+5p4qtrpx0WwcnAbImvxwzo/uDGObnBJqkU
SQ6rvU4oqqAzf03heoqTX12Vmz9u6YSoFudONpggWaccF/zkKD2KglJbKdSvlEli
wtQ7jDGHPxKoR65aUuSbqH9QaDda7LbludWMOeTsNnHyKP2BvMHV7LyuOAYt96Qd
hesWOaWA1+R+p8M/R2BvFWz+kQzSgD73A5B+NdlHyI8oa/fiACnByE+VEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBoQ5bPiqqyas9BpA+VUlKJt8wNZMB8GA1UdIwQY
MBaAFFrEZsyJ+dtOMcVADSrnor/9siVHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3NSbXpJbjUyMDR4eFVBTkt1ZWl2XzJ5SlVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9lMjljODctNDY4My00NDNlLTg4M2Yt
OWFiZDFhYTY0YmUxLzEvV3NSbXpJbjUyMDR4eFVBTkt1ZWl2XzJ5SlVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC9lMjljODctNDY4My00NDNlLTg4M2YtOWFiZDFhYTY0YmUx
LzEvV3NSbXpJbjUyMDR4eFVBTkt1ZWl2XzJ5SlVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM0X8EB60
MfPSu8t/q87OV1/cFCjxT8pzSQgaJEkBS4S8pYrG64shKhQyGa8h1ZBt2glRC1Fr
cjlAq6vlEZ0P63HG2Eac5aQ+vm+Z7s5+RFQ5jeI+wuHqum5ALziR0fLKRoCrqP3I
woL8iYxwcaWaiWsWUMwPfRUt6WTKfuukFIRX9wx41KAbRmCe1Kct35/hWytkM+QQ
1opAT41vl4JFQAIB/ZVxR+NW0mY2te59vW0HYCeQVZ9aFC63QcUnlCNjLBO9qTwr
VSQd2Oz/hsclM4xke7H2nKWoB/bC+qZy9vr3sH5oR5plmMPzg+a6oIHKSJHb2i0b
dyoI8v71kL+aQQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:28:07 2025 by rpki-client