Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/WwZtuK4WVfw9ikqpnrvZOj_g4-Q.mft
File:                     WwZtuK4WVfw9ikqpnrvZOj_g4-Q.mft (raw, json)
Hash identifier:          7V2Qc7+47Q5bUk5ob94qJu6wopVKWvFZ8EDJz11EZFQ=
Subject key identifier:   97:0C:5C:04:AA:D2:E7:13:4F:7C:B9:90:76:EB:F4:B3:69:25:7C:CA
Authority key identifier: 5B:06:6D:B8:AE:16:55:FC:3D:8A:4A:A9:9E:BB:D9:3A:3F:E0:E3:E4
Certificate issuer:       /CN=5b066db8ae1655fc3d8a4aa99ebbd93a3fe0e3e4
Certificate serial:       0198D4E00FF36424760EBCBB52A09E20A375
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WwZtuK4WVfw9ikqpnrvZOj_g4-Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/WwZtuK4WVfw9ikqpnrvZOj_g4-Q.mft
Manifest number:          14E7
Signing time:             Sat 23 Aug 2025 03:01:50 +0000
Manifest this update:     Sat 23 Aug 2025 03:01:50 +0000
Manifest next update:     Sun 24 Aug 2025 03:01:50 +0000
Files and hashes:         1: 52gpXjI8Kd7Tv-YmaRlcfsM4RAk.roa (hash: mEm534ZT6ZgaZ/3v86vVc5+tMaW3MbmkjCPIio5FpX8=)
                          2: WwZtuK4WVfw9ikqpnrvZOj_g4-Q.crl (hash: PIyMoYiX2o1SUEDthncMYbxYvaWAOaFmor3bfclu6YQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/WwZtuK4WVfw9ikqpnrvZOj_g4-Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/WwZtuK4WVfw9ikqpnrvZOj_g4-Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WwZtuK4WVfw9ikqpnrvZOj_g4-Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:e0:0f:f3:64:24:76:0e:bc:bb:52:a0:9e:20:a3:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b066db8ae1655fc3d8a4aa99ebbd93a3fe0e3e4
        Validity
            Not Before: Aug 23 03:01:50 2025 GMT
            Not After : Aug 24 03:01:50 2025 GMT
        Subject: CN=970c5c04aad2e7134f7cb99076ebf4b369257cca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:95:b7:a9:66:d6:49:d8:02:d2:d7:a8:10:ef:
                    b4:24:3e:b6:38:25:50:7c:1d:9f:f6:68:cc:b9:f5:
                    fd:3b:ae:8a:56:7b:c9:39:03:0a:9f:1b:ea:11:e2:
                    85:00:fa:e1:51:21:93:2d:1a:66:b7:b5:1b:b5:5d:
                    3a:9e:20:0a:2f:76:b2:d3:72:6d:7a:65:af:04:cf:
                    80:d5:21:6c:ca:c9:d9:19:3f:42:ed:2d:78:b1:ed:
                    83:39:fa:8a:2f:71:5b:f3:d6:64:da:ad:a8:08:cb:
                    58:7a:90:61:6c:82:42:7f:c6:ce:bc:84:02:0a:f4:
                    f4:06:18:8e:5f:44:bd:e5:62:3f:4e:18:ab:36:7d:
                    ec:c7:ed:25:ed:44:11:6b:05:8d:9a:72:a0:2f:c4:
                    4b:bf:8c:c7:8a:95:76:7e:73:81:f1:da:59:7b:ee:
                    c1:32:1f:8b:c9:84:cc:2e:60:a1:7e:5b:ff:6c:05:
                    b7:3b:61:19:93:2a:f2:02:4e:22:11:27:dd:71:98:
                    db:3d:81:65:da:da:d2:4d:90:1b:b5:46:55:23:b7:
                    3a:01:45:34:30:a9:f3:cb:a4:b6:61:e4:a8:c5:40:
                    b7:bd:66:3e:7a:90:9a:16:61:f5:71:32:df:13:9c:
                    8a:2b:ca:5d:14:75:6c:e9:d3:f8:ca:33:87:b0:b5:
                    f2:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:0C:5C:04:AA:D2:E7:13:4F:7C:B9:90:76:EB:F4:B3:69:25:7C:CA
            X509v3 Authority Key Identifier:
                keyid:5B:06:6D:B8:AE:16:55:FC:3D:8A:4A:A9:9E:BB:D9:3A:3F:E0:E3:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WwZtuK4WVfw9ikqpnrvZOj_g4-Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/WwZtuK4WVfw9ikqpnrvZOj_g4-Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/0ff9e5-fbbe-4b3b-b938-9ceaa1b7a116/1/WwZtuK4WVfw9ikqpnrvZOj_g4-Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:d7:35:39:ca:19:e0:cb:64:11:a7:fa:20:7b:78:e0:aa:d6:
         16:40:7a:17:cb:00:3d:a6:12:41:98:52:4b:2b:d2:61:39:b2:
         4a:5e:2f:f7:31:39:6a:5d:ce:0b:31:56:87:e3:5e:4d:6d:4f:
         74:23:46:86:b6:8a:dd:cf:2a:d5:76:e7:68:fb:fa:53:e1:9d:
         82:e3:26:0f:19:a6:ed:8b:63:b0:c4:07:22:80:52:9a:91:de:
         58:e0:4b:8d:d9:87:55:ce:2c:44:f4:76:eb:ed:22:37:f5:ee:
         40:2a:f5:e5:66:bc:e1:98:fb:f0:8a:97:6c:08:d6:45:63:e4:
         4a:8d:0e:ea:1b:22:2c:9d:64:24:f9:a0:20:fc:ab:51:83:37:
         15:25:d5:6f:2e:23:b4:5c:57:2f:30:d9:4c:7c:c5:64:7d:95:
         dc:dd:d8:4c:7a:4a:ce:ad:61:e1:42:2d:8f:71:85:2d:5c:e4:
         93:80:c7:a1:99:6b:ab:d2:7b:0b:f8:b4:83:55:d5:f9:49:94:
         b2:36:f6:5e:5b:16:65:43:3e:18:50:ae:23:61:0d:5a:40:2d:
         52:02:54:78:ae:3a:b8:55:bd:6b:78:72:05:ca:1c:b8:a7:7b:
         8f:be:ce:c7:0d:db:d8:b5:42:f5:df:64:9c:e0:20:51:1f:d5:
         96:87:c2:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU4A/zZCR2Dry7UqCeIKN1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViMDY2ZGI4YWUxNjU1ZmMzZDhhNGFhOTllYmJkOTNhM2Zl
MGUzZTQwHhcNMjUwODIzMDMwMTUwWhcNMjUwODI0MDMwMTUwWjAzMTEwLwYDVQQD
Eyg5NzBjNWMwNGFhZDJlNzEzNGY3Y2I5OTA3NmViZjRiMzY5MjU3Y2NhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5W3qWbWSdgC0teoEO+0JD62OCVQ
fB2f9mjMufX9O66KVnvJOQMKnxvqEeKFAPrhUSGTLRpmt7UbtV06niAKL3ay03Jt
emWvBM+A1SFsysnZGT9C7S14se2DOfqKL3Fb89Zk2q2oCMtYepBhbIJCf8bOvIQC
CvT0BhiOX0S95WI/ThirNn3sx+0l7UQRawWNmnKgL8RLv4zHipV2fnOB8dpZe+7B
Mh+LyYTMLmChflv/bAW3O2EZkyryAk4iESfdcZjbPYFl2trSTZAbtUZVI7c6AUU0
MKnzy6S2YeSoxUC3vWY+epCaFmH1cTLfE5yKK8pdFHVs6dP4yjOHsLXy4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJcMXASq0ucTT3y5kHbr9LNpJXzKMB8GA1UdIwQY
MBaAFFsGbbiuFlX8PYpKqZ672To/4OPkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3dadHVLNFdWZnc5aWtxcG5ydlpPal9nNC1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8wZmY5ZTUtZmJiZS00YjNiLWI5Mzgt
OWNlYWExYjdhMTE2LzEvV3dadHVLNFdWZnc5aWtxcG5ydlpPal9nNC1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC8wZmY5ZTUtZmJiZS00YjNiLWI5MzgtOWNlYWExYjdhMTE2
LzEvV3dadHVLNFdWZnc5aWtxcG5ydlpPal9nNC1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGtc1OcoZ
4MtkEaf6IHt44KrWFkB6F8sAPaYSQZhSSyvSYTmySl4v9zE5al3OCzFWh+NeTW1P
dCNGhraK3c8q1XbnaPv6U+GdguMmDxmm7YtjsMQHIoBSmpHeWOBLjdmHVc4sRPR2
6+0iN/XuQCr15Wa84Zj78IqXbAjWRWPkSo0O6hsiLJ1kJPmgIPyrUYM3FSXVby4j
tFxXLzDZTHzFZH2V3N3YTHpKzq1h4UItj3GFLVzkk4DHoZlrq9J7C/i0g1XV+UmU
sjb2XlsWZUM+GFCuI2ENWkAtUgJUeK46uFW9a3hyBcocuKd7j77Oxw3b2LVC9d9k
nOAgUR/VlofC4w==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:32:50 2025 by rpki-client