Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/9014c3-1a49-4e62-9243-21335d1063af/1/Pwooe-qSWI_F2uT5P7JWKPMtGW0.mft
File:                     Pwooe-qSWI_F2uT5P7JWKPMtGW0.mft (raw, json)
Hash identifier:          JhLp7q0HmMN5OnPrrbAzWhp80zA/+N2Z+qAdAgdrJY4=
Subject key identifier:   82:72:9C:C9:14:14:C8:77:FC:AA:14:05:C9:98:C5:A8:DB:7C:C2:CC
Authority key identifier: 3F:0A:28:7B:EA:92:58:8F:C5:DA:E4:F9:3F:B2:56:28:F3:2D:19:6D
Certificate issuer:       /CN=3f0a287bea92588fc5dae4f93fb25628f32d196d
Certificate serial:       0198D4E05560F58A1FC750BD322285D04958
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pwooe-qSWI_F2uT5P7JWKPMtGW0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/9014c3-1a49-4e62-9243-21335d1063af/1/Pwooe-qSWI_F2uT5P7JWKPMtGW0.mft
Manifest number:          164A
Signing time:             Sat 23 Aug 2025 03:02:08 +0000
Manifest this update:     Sat 23 Aug 2025 03:02:08 +0000
Manifest next update:     Sun 24 Aug 2025 03:02:08 +0000
Files and hashes:         1: EWY61EBMWvIz95kZvxz3f7Ao8DM.roa (hash: hUfTdT/UdwzPCuJouTIN5MiLU84ihpYE+x77dYeKVgo=)
                          2: Pwooe-qSWI_F2uT5P7JWKPMtGW0.crl (hash: CQ2fYL7jKkRTDZgfSuFcUjuKKo+ceD//6x5VdNoYODw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/9014c3-1a49-4e62-9243-21335d1063af/1/Pwooe-qSWI_F2uT5P7JWKPMtGW0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/9014c3-1a49-4e62-9243-21335d1063af/1/Pwooe-qSWI_F2uT5P7JWKPMtGW0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pwooe-qSWI_F2uT5P7JWKPMtGW0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 03:02:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:e0:55:60:f5:8a:1f:c7:50:bd:32:22:85:d0:49:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f0a287bea92588fc5dae4f93fb25628f32d196d
        Validity
            Not Before: Aug 23 03:02:08 2025 GMT
            Not After : Aug 24 03:02:08 2025 GMT
        Subject: CN=82729cc91414c877fcaa1405c998c5a8db7cc2cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:bb:c8:fa:65:b1:da:66:d2:e6:28:a6:fc:d4:
                    9a:c7:a6:51:0a:c1:bc:67:36:eb:e1:22:30:e9:5c:
                    f0:1a:86:bf:fc:76:76:6b:4f:f7:8c:73:35:f9:5d:
                    05:55:9e:70:59:3a:80:94:87:2d:c0:f3:a4:8a:c5:
                    f0:75:d9:3b:9e:de:ab:9d:93:b8:c1:d9:a1:ab:ae:
                    e4:d1:e8:29:5e:59:ad:a2:dc:a5:e9:69:5d:2d:b8:
                    88:f9:62:43:41:2e:d7:63:a8:96:35:b8:db:9b:c4:
                    a0:a6:39:b7:51:a2:17:3b:fa:d6:24:ae:71:5c:0f:
                    98:78:a5:91:17:b4:95:b1:2e:ec:07:2a:9c:54:62:
                    ab:33:e2:97:c2:5c:f1:1d:90:1f:6b:95:d7:9a:83:
                    24:ad:1d:c6:39:f8:ea:30:0f:17:dd:73:77:a4:18:
                    40:9c:21:e3:f5:ba:ca:42:89:97:79:45:0f:c8:cf:
                    a5:90:62:01:bd:75:6e:88:b9:df:6f:f4:6b:7b:92:
                    3d:ac:62:00:0c:4e:1d:87:d9:30:9a:4d:85:8b:df:
                    2a:ed:bc:72:5b:de:72:4c:bb:eb:3a:c4:32:e7:12:
                    81:ba:d4:08:f8:f4:a0:13:78:42:a6:4a:60:e3:b0:
                    0c:4d:3b:65:e9:69:5a:0b:b7:97:11:aa:f5:8b:0a:
                    7e:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:72:9C:C9:14:14:C8:77:FC:AA:14:05:C9:98:C5:A8:DB:7C:C2:CC
            X509v3 Authority Key Identifier:
                keyid:3F:0A:28:7B:EA:92:58:8F:C5:DA:E4:F9:3F:B2:56:28:F3:2D:19:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pwooe-qSWI_F2uT5P7JWKPMtGW0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/9014c3-1a49-4e62-9243-21335d1063af/1/Pwooe-qSWI_F2uT5P7JWKPMtGW0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/9014c3-1a49-4e62-9243-21335d1063af/1/Pwooe-qSWI_F2uT5P7JWKPMtGW0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:58:4f:e9:7c:c8:ea:a6:c6:1e:c4:d1:f2:91:58:4a:11:f0:
         5d:05:e6:74:ee:3d:79:7a:3d:32:14:ae:2e:85:8a:33:64:0c:
         b0:bf:0e:19:74:25:dd:11:a1:49:a8:7d:bb:c9:7a:a8:74:cc:
         8c:d6:13:c4:11:51:cf:05:dc:b3:c6:54:19:c3:82:85:71:0e:
         14:30:75:a9:2b:35:eb:81:36:03:f8:39:a7:74:4b:eb:5c:af:
         f8:18:e7:f1:9f:42:03:de:9c:11:11:ae:55:0e:4f:9b:73:86:
         21:2b:9d:89:1c:53:56:68:01:bf:46:41:4c:66:13:a7:ab:d3:
         c1:c3:bb:7b:64:d2:05:62:55:9e:1d:d1:63:df:05:23:95:79:
         21:5e:16:9b:d0:ab:a1:bf:10:f4:e0:fe:67:bc:70:ba:69:39:
         d7:d6:b0:20:ec:c1:de:b0:8f:c0:23:c8:68:c7:44:31:75:5c:
         45:a4:32:7c:ce:ce:6f:65:3a:15:06:34:7c:2e:3d:f2:d7:11:
         2d:ea:d0:fd:7f:63:33:42:fb:a7:1f:9b:4d:b5:9c:a4:29:c3:
         ae:ae:b8:b0:12:47:c8:01:c8:cf:3d:5b:47:ef:b3:cd:bd:cd:
         8c:22:b6:bd:5d:db:8e:3f:4b:10:d2:0b:d3:ce:e6:d1:06:bf:
         1d:f6:18:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU4FVg9Yofx1C9MiKF0ElYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmMGEyODdiZWE5MjU4OGZjNWRhZTRmOTNmYjI1NjI4ZjMy
ZDE5NmQwHhcNMjUwODIzMDMwMjA4WhcNMjUwODI0MDMwMjA4WjAzMTEwLwYDVQQD
Eyg4MjcyOWNjOTE0MTRjODc3ZmNhYTE0MDVjOTk4YzVhOGRiN2NjMmNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLvI+mWx2mbS5iim/NSax6ZRCsG8
Zzbr4SIw6VzwGoa//HZ2a0/3jHM1+V0FVZ5wWTqAlIctwPOkisXwddk7nt6rnZO4
wdmhq67k0egpXlmtotyl6WldLbiI+WJDQS7XY6iWNbjbm8Sgpjm3UaIXO/rWJK5x
XA+YeKWRF7SVsS7sByqcVGKrM+KXwlzxHZAfa5XXmoMkrR3GOfjqMA8X3XN3pBhA
nCHj9brKQomXeUUPyM+lkGIBvXVuiLnfb/Rre5I9rGIADE4dh9kwmk2Fi98q7bxy
W95yTLvrOsQy5xKButQI+PSgE3hCpkpg47AMTTtl6WlaC7eXEar1iwp+ZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIJynMkUFMh3/KoUBcmYxajbfMLMMB8GA1UdIwQY
MBaAFD8KKHvqkliPxdrk+T+yVijzLRltMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHdvb2UtcVNXSV9GMnVUNVA3SldLUE10R1cwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy85MDE0YzMtMWE0OS00ZTYyLTkyNDMt
MjEzMzVkMTA2M2FmLzEvUHdvb2UtcVNXSV9GMnVUNVA3SldLUE10R1cwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy85MDE0YzMtMWE0OS00ZTYyLTkyNDMtMjEzMzVkMTA2M2Fm
LzEvUHdvb2UtcVNXSV9GMnVUNVA3SldLUE10R1cwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQVhP6XzI
6qbGHsTR8pFYShHwXQXmdO49eXo9MhSuLoWKM2QMsL8OGXQl3RGhSah9u8l6qHTM
jNYTxBFRzwXcs8ZUGcOChXEOFDB1qSs164E2A/g5p3RL61yv+Bjn8Z9CA96cERGu
VQ5Pm3OGISudiRxTVmgBv0ZBTGYTp6vTwcO7e2TSBWJVnh3RY98FI5V5IV4Wm9Cr
ob8Q9OD+Z7xwumk519awIOzB3rCPwCPIaMdEMXVcRaQyfM7Ob2U6FQY0fC498tcR
LerQ/X9jM0L7px+bTbWcpCnDrq64sBJHyAHIzz1bR++zzb3NjCK2vV3bjj9LENIL
087m0Qa/HfYYZg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:38:00 2025 by rpki-client