Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/f86007-a964-4d1f-835d-70602756cc8d/1/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.mft
File:                     cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.mft (raw, json)
Hash identifier:          LhySQrEMTGY3lNU1Nw2g85fViex8y6FXxSMTfdoWgsM=
Subject key identifier:   AF:B7:B3:95:29:DA:DF:59:E5:8B:67:AF:CA:AC:5F:4C:4C:F7:C7:45
Authority key identifier: 71:68:42:DC:43:98:36:63:5A:5C:9E:D6:C0:A4:95:B3:E6:34:4A:03
Certificate issuer:       /CN=716842dc439836635a5c9ed6c0a495b3e6344a03
Certificate serial:       0198D5BC3466CE44F5DCCE4803B6832D07AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/f86007-a964-4d1f-835d-70602756cc8d/1/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.mft
Manifest number:          062E
Signing time:             Sat 23 Aug 2025 07:02:17 +0000
Manifest this update:     Sat 23 Aug 2025 07:02:17 +0000
Manifest next update:     Sun 24 Aug 2025 07:02:17 +0000
Files and hashes:         1: 2eV3LLHue0F4_ix9uAQjG0RjeyM.roa (hash: voDescMFunJFQQ5TLKb+tVFSLAofvJuHvYtHn/Yjp+c=)
                          2: cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.crl (hash: Uiqs5cwoCahhASEQGcBi/4SgHcfqrrB2y5B9M4LJt8Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a6/f86007-a964-4d1f-835d-70602756cc8d/1/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a6/f86007-a964-4d1f-835d-70602756cc8d/1/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bc:34:66:ce:44:f5:dc:ce:48:03:b6:83:2d:07:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=716842dc439836635a5c9ed6c0a495b3e6344a03
        Validity
            Not Before: Aug 23 07:02:17 2025 GMT
            Not After : Aug 24 07:02:17 2025 GMT
        Subject: CN=afb7b39529dadf59e58b67afcaac5f4c4cf7c745
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:c1:04:38:1b:c4:1c:a5:b6:e4:95:ff:35:d6:
                    73:61:98:da:cd:74:68:2d:d4:35:6b:11:87:c4:70:
                    6b:c9:74:00:ac:5d:e5:ba:fe:cd:f7:1a:a9:56:f3:
                    f7:f9:f8:51:01:a2:c0:84:68:01:ca:5a:16:c7:58:
                    a3:4f:da:45:e4:7d:e6:da:08:bd:42:7d:51:eb:b3:
                    b3:3c:32:1a:57:4e:17:76:33:74:cf:e6:ae:04:ea:
                    90:28:1c:6e:69:58:71:8d:07:61:eb:9d:17:da:f1:
                    3f:92:2f:48:fb:39:b0:1d:37:53:8e:b0:fb:eb:c3:
                    0c:d1:eb:d2:93:32:9e:12:7b:e6:82:95:13:65:97:
                    e2:7f:bd:22:23:69:33:bf:ac:d5:c7:70:31:9d:c2:
                    f4:f8:a5:59:35:78:23:21:52:7e:19:d5:8d:cd:4f:
                    97:2d:48:15:f3:00:c4:ed:1c:a2:f0:d8:69:1e:1f:
                    b5:d7:a7:ae:c2:2a:b8:07:59:b0:90:0d:c5:b5:90:
                    a7:5f:78:7d:00:a3:ad:ec:b0:68:15:98:46:15:1b:
                    5f:7b:6d:93:fb:b5:b5:78:d8:81:b8:8e:54:f2:5d:
                    c9:9d:65:f9:02:59:23:cd:24:9f:bf:28:ce:60:29:
                    0b:61:1b:e8:12:8d:1b:9d:30:98:eb:aa:c0:35:ef:
                    9e:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:B7:B3:95:29:DA:DF:59:E5:8B:67:AF:CA:AC:5F:4C:4C:F7:C7:45
            X509v3 Authority Key Identifier:
                keyid:71:68:42:DC:43:98:36:63:5A:5C:9E:D6:C0:A4:95:B3:E6:34:4A:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/f86007-a964-4d1f-835d-70602756cc8d/1/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/f86007-a964-4d1f-835d-70602756cc8d/1/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:f1:03:d2:2a:bc:3b:f6:cd:69:0f:2a:50:e5:ac:73:dd:91:
         c2:2e:93:f3:34:18:f3:da:cf:86:0e:d0:84:de:8e:0d:b1:5e:
         28:70:f0:42:82:79:f9:ec:44:35:8c:25:42:26:1d:a0:62:15:
         c6:03:27:ef:2d:7f:c8:3c:68:4f:af:dc:41:e8:ab:ef:d0:b5:
         9e:2c:df:27:68:07:ad:2a:3f:01:5b:f1:9a:ea:fb:33:fd:5f:
         67:bd:eb:11:f0:b7:f3:de:df:fb:1b:71:71:96:e0:a4:be:37:
         4e:20:c9:c3:74:c9:5b:f3:58:b1:7c:52:cf:a7:60:85:5b:cb:
         bc:4e:9c:dd:7a:e2:b9:18:2f:28:57:9f:e0:7b:89:19:c6:47:
         f1:26:da:e6:31:53:5f:62:14:93:b6:0a:40:8b:bd:eb:e9:ed:
         82:c1:97:0c:59:63:7a:4a:30:2d:da:2c:b0:c7:ee:86:37:6d:
         c7:7b:b5:00:8f:4f:01:e3:b8:97:fc:76:37:6a:f2:63:f9:1b:
         f9:96:4d:09:07:cc:97:f2:89:d9:5d:2d:db:55:04:0d:6f:d6:
         58:c4:d9:94:8b:50:0c:5a:9d:21:81:fb:08:fd:68:fc:8a:9b:
         cd:68:38:7f:06:7d:30:0f:23:79:df:53:33:b4:46:e1:56:5d:
         c9:be:39:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVvDRmzkT13M5IA7aDLQevMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxNjg0MmRjNDM5ODM2NjM1YTVjOWVkNmMwYTQ5NWIzZTYz
NDRhMDMwHhcNMjUwODIzMDcwMjE3WhcNMjUwODI0MDcwMjE3WjAzMTEwLwYDVQQD
EyhhZmI3YjM5NTI5ZGFkZjU5ZTU4YjY3YWZjYWFjNWY0YzRjZjdjNzQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAncEEOBvEHKW25JX/NdZzYZjazXRo
LdQ1axGHxHBryXQArF3luv7N9xqpVvP3+fhRAaLAhGgByloWx1ijT9pF5H3m2gi9
Qn1R67OzPDIaV04XdjN0z+auBOqQKBxuaVhxjQdh650X2vE/ki9I+zmwHTdTjrD7
68MM0evSkzKeEnvmgpUTZZfif70iI2kzv6zVx3AxncL0+KVZNXgjIVJ+GdWNzU+X
LUgV8wDE7Ryi8NhpHh+116euwiq4B1mwkA3FtZCnX3h9AKOt7LBoFZhGFRtfe22T
+7W1eNiBuI5U8l3JnWX5AlkjzSSfvyjOYCkLYRvoEo0bnTCY66rANe+eYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK+3s5Up2t9Z5Ytnr8qsX0xM98dFMB8GA1UdIwQY
MBaAFHFoQtxDmDZjWlye1sCklbPmNEoDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1doQzNFT1lObU5hWEo3V3dLU1ZzLVkwU2dNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9mODYwMDctYTk2NC00ZDFmLTgzNWQt
NzA2MDI3NTZjYzhkLzEvY1doQzNFT1lObU5hWEo3V3dLU1ZzLVkwU2dNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi9mODYwMDctYTk2NC00ZDFmLTgzNWQtNzA2MDI3NTZjYzhk
LzEvY1doQzNFT1lObU5hWEo3V3dLU1ZzLVkwU2dNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABvED0iq8
O/bNaQ8qUOWsc92Rwi6T8zQY89rPhg7QhN6ODbFeKHDwQoJ5+exENYwlQiYdoGIV
xgMn7y1/yDxoT6/cQeir79C1nizfJ2gHrSo/AVvxmur7M/1fZ73rEfC3897f+xtx
cZbgpL43TiDJw3TJW/NYsXxSz6dghVvLvE6c3XriuRgvKFef4HuJGcZH8Sba5jFT
X2IUk7YKQIu96+ntgsGXDFljekowLdossMfuhjdtx3u1AI9PAeO4l/x2N2ryY/kb
+ZZNCQfMl/KJ2V0t21UEDW/WWMTZlItQDFqdIYH7CP1o/IqbzWg4fwZ9MA8jed9T
M7RG4VZdyb45+w==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:21:42 2025 by rpki-client