Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/b7cd45-1f03-4158-8297-a3f61e30b514/1/wz-t0SfmXNkN4-lWjly8-0jJsko.mft
File:                     wz-t0SfmXNkN4-lWjly8-0jJsko.mft (raw, json)
Hash identifier:          tOW0r+8Kp/m9Av1fSgTuaS5SJCRsHTcpwaV5mI62tSY=
Subject key identifier:   C3:3B:0F:1A:75:4D:2F:25:30:CC:E5:3C:83:00:88:3E:36:F9:4C:86
Authority key identifier: C3:3F:AD:D1:27:E6:5C:D9:0D:E3:E9:56:8E:5C:BC:FB:48:C9:B2:4A
Certificate issuer:       /CN=c33fadd127e65cd90de3e9568e5cbcfb48c9b24a
Certificate serial:       0198D54DE40F681A7C408272413BC4D31167
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wz-t0SfmXNkN4-lWjly8-0jJsko.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/b7cd45-1f03-4158-8297-a3f61e30b514/1/wz-t0SfmXNkN4-lWjly8-0jJsko.mft
Manifest number:          064A
Signing time:             Sat 23 Aug 2025 05:01:48 +0000
Manifest this update:     Sat 23 Aug 2025 05:01:48 +0000
Manifest next update:     Sun 24 Aug 2025 05:01:48 +0000
Files and hashes:         1: mRIJhbiYi4_Fn9rbvJxpcE5BqwE.roa (hash: QFNaK1Gy0ycMOCo2B8J3U81MNF8ZnZJf7GULAc5HdJY=)
                          2: wz-t0SfmXNkN4-lWjly8-0jJsko.crl (hash: rkGBM7YOCx4hin2QavvqdfJx7xZNsgoSh6EdajnwVjY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/b7cd45-1f03-4158-8297-a3f61e30b514/1/wz-t0SfmXNkN4-lWjly8-0jJsko.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/b7cd45-1f03-4158-8297-a3f61e30b514/1/wz-t0SfmXNkN4-lWjly8-0jJsko.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wz-t0SfmXNkN4-lWjly8-0jJsko.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:4d:e4:0f:68:1a:7c:40:82:72:41:3b:c4:d3:11:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c33fadd127e65cd90de3e9568e5cbcfb48c9b24a
        Validity
            Not Before: Aug 23 05:01:48 2025 GMT
            Not After : Aug 24 05:01:48 2025 GMT
        Subject: CN=c33b0f1a754d2f2530cce53c8300883e36f94c86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:02:97:31:53:e4:71:f6:12:53:22:3a:e4:b3:
                    1d:65:12:2e:20:d4:3b:06:7e:d4:91:5d:0b:0e:bd:
                    38:42:a6:0d:c9:92:58:98:51:57:38:7f:16:8b:80:
                    96:b2:82:64:c6:37:82:00:71:69:cf:98:08:7a:67:
                    cc:99:a1:92:3a:f1:d2:d8:e5:e1:0e:bb:33:60:f5:
                    3f:85:45:a5:4f:5e:f9:f3:cf:62:29:98:49:61:df:
                    c3:03:51:40:d3:9b:c1:14:d3:e0:dd:30:71:1f:34:
                    b8:bc:6c:24:80:e3:67:ac:6a:7c:75:54:4a:ce:63:
                    ce:95:f7:c6:2b:7a:f2:16:fd:95:f9:21:2f:3a:cb:
                    70:c8:61:a3:9f:51:2d:b2:92:03:b6:bd:c9:b1:d6:
                    d9:01:0a:46:4d:5f:ca:7c:a3:34:5a:81:42:27:f3:
                    cb:49:8b:c8:78:02:8f:b7:1e:18:63:fb:8e:0f:bd:
                    08:20:c2:17:b5:bd:4c:2e:e2:a0:1a:14:34:d0:4e:
                    c3:2f:5d:cf:62:c3:d7:95:7f:cf:df:5e:1a:25:3e:
                    11:eb:8c:c4:2d:b1:23:cd:e1:22:f8:ec:3e:17:ed:
                    a2:3b:70:0f:57:45:a0:b3:cf:d9:b6:59:47:cd:c8:
                    37:fa:49:86:f4:20:c3:d2:23:f5:09:8d:e2:e6:f8:
                    08:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:3B:0F:1A:75:4D:2F:25:30:CC:E5:3C:83:00:88:3E:36:F9:4C:86
            X509v3 Authority Key Identifier:
                keyid:C3:3F:AD:D1:27:E6:5C:D9:0D:E3:E9:56:8E:5C:BC:FB:48:C9:B2:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wz-t0SfmXNkN4-lWjly8-0jJsko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/b7cd45-1f03-4158-8297-a3f61e30b514/1/wz-t0SfmXNkN4-lWjly8-0jJsko.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/b7cd45-1f03-4158-8297-a3f61e30b514/1/wz-t0SfmXNkN4-lWjly8-0jJsko.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:b9:f2:bc:b8:cd:14:e5:97:b0:3d:d1:47:5d:86:9a:26:02:
         ba:fc:8a:d7:4e:8b:d2:47:50:4d:b9:e9:b9:cc:6c:3f:a3:75:
         f3:75:95:e1:93:d4:1b:18:dd:ac:99:10:36:14:fe:69:c0:76:
         d2:31:3f:e8:03:99:7c:4f:7e:45:d5:c7:2e:c6:e2:4e:60:0b:
         70:2d:57:be:7c:18:bb:39:36:38:51:2c:e0:39:a8:20:92:4f:
         c7:e7:df:06:83:2e:0c:7a:7a:f5:34:61:0d:93:fa:38:37:61:
         0d:40:32:d9:2e:0d:84:f2:46:38:b0:0b:b0:69:6a:da:65:71:
         29:39:f1:88:4f:6a:f3:dc:6a:b7:3f:88:39:ef:b5:22:6b:25:
         03:27:c5:66:68:34:ec:ab:e8:f2:ba:18:c0:df:23:69:84:ac:
         cb:3e:40:4c:ed:cf:33:6e:a4:81:1e:3a:c6:5d:42:ed:71:ed:
         e4:f5:05:96:9e:1e:68:4f:4a:24:8c:18:54:8e:7c:20:38:d9:
         a9:ca:cf:69:ed:b6:1d:f9:ea:f8:85:2f:97:6c:25:f5:a9:72:
         6d:f3:4a:c2:71:07:c4:2a:c4:9c:95:4d:3d:50:d5:a9:12:00:
         16:fe:b9:86:2d:70:e6:c6:31:b0:7a:93:91:cc:9e:1a:91:aa:
         18:e3:49:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:17 2025 by rpki-client