Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8fcbe9-9b9b-4987-95be-25904ba9a355/1/wPadL0dEdNu1f2vsjC1l1eDClmE.mft
File:                     wPadL0dEdNu1f2vsjC1l1eDClmE.mft (raw, json)
Hash identifier:          3ZzDnC7+JPV9HEIvfYhpoFGHm6enXgdUCQDa/H0DLY4=
Subject key identifier:   94:56:8B:4E:30:32:D3:BF:14:A9:8F:1D:C4:5D:33:1E:72:0F:E2:29
Authority key identifier: C0:F6:9D:2F:47:44:74:DB:B5:7F:6B:EC:8C:2D:65:D5:E0:C2:96:61
Certificate issuer:       /CN=c0f69d2f474474dbb57f6bec8c2d65d5e0c29661
Certificate serial:       0197C6B8A8EBF51F12AB4EC65AF6FDA1DF41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wPadL0dEdNu1f2vsjC1l1eDClmE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/8fcbe9-9b9b-4987-95be-25904ba9a355/1/wPadL0dEdNu1f2vsjC1l1eDClmE.mft
Manifest number:          100C
Signing time:             Tue 01 Jul 2025 16:01:19 +0000
Manifest this update:     Tue 01 Jul 2025 16:01:19 +0000
Manifest next update:     Wed 02 Jul 2025 16:01:19 +0000
Files and hashes:         1: 1-f9PBVCsqBgm5V29oKXRRYWkevY.roa (hash: 7Ql3JH1RgsBJ7ZK4VNDw9mOs8UhnRqnrPre6nqQT+h0=)
                          2: wPadL0dEdNu1f2vsjC1l1eDClmE.crl (hash: h5JxG5Ksh3T2m0PaUz/xuN6L24Z3M+o/bJOUQBd1CGY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/8fcbe9-9b9b-4987-95be-25904ba9a355/1/wPadL0dEdNu1f2vsjC1l1eDClmE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/8fcbe9-9b9b-4987-95be-25904ba9a355/1/wPadL0dEdNu1f2vsjC1l1eDClmE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wPadL0dEdNu1f2vsjC1l1eDClmE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 02 Jul 2025 16:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:c6:b8:a8:eb:f5:1f:12:ab:4e:c6:5a:f6:fd:a1:df:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0f69d2f474474dbb57f6bec8c2d65d5e0c29661
        Validity
            Not Before: Jul  1 16:01:19 2025 GMT
            Not After : Jul  2 16:01:19 2025 GMT
        Subject: CN=94568b4e3032d3bf14a98f1dc45d331e720fe229
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f1:08:3e:85:e2:bc:92:ea:c3:0b:e2:17:f3:
                    2d:2b:f5:c6:5f:40:02:b1:1b:02:44:67:1d:00:6f:
                    c0:fc:5c:2b:89:a1:f4:42:17:16:c5:64:61:5c:0b:
                    88:11:1e:2b:5a:03:47:89:84:d7:ca:63:80:18:68:
                    ff:7d:d7:2f:22:73:f1:89:51:84:f6:d1:b4:7d:71:
                    94:c7:0a:84:10:df:2f:20:cd:bb:86:2c:bb:a3:ae:
                    13:69:dd:93:b5:3c:6e:9e:f8:9c:3a:16:89:e9:06:
                    e4:c7:7d:5d:56:42:e5:90:ab:b2:d6:33:ce:38:88:
                    d8:04:fc:30:c0:c9:a0:33:3c:e2:1d:ba:20:61:74:
                    6e:fa:31:d9:9f:68:eb:3c:61:11:e1:3e:1d:5b:4a:
                    22:70:7e:ee:b5:a0:f8:b0:e8:ca:8b:a3:12:d3:05:
                    23:f5:3a:57:f8:b5:5c:0f:61:a2:03:a3:bc:82:b7:
                    f7:db:d0:48:cd:6d:61:74:f2:f5:f2:1a:f1:dd:77:
                    e6:91:96:31:20:09:75:39:ac:d6:c5:fa:49:09:a4:
                    c5:70:17:0d:88:e0:a0:87:64:7c:fb:48:0e:45:45:
                    8e:66:83:52:0c:74:1b:1f:7a:46:6f:de:a2:f5:5d:
                    7c:46:d9:46:98:e2:63:36:5c:a5:3d:99:79:7b:ac:
                    13:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:56:8B:4E:30:32:D3:BF:14:A9:8F:1D:C4:5D:33:1E:72:0F:E2:29
            X509v3 Authority Key Identifier:
                keyid:C0:F6:9D:2F:47:44:74:DB:B5:7F:6B:EC:8C:2D:65:D5:E0:C2:96:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wPadL0dEdNu1f2vsjC1l1eDClmE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8fcbe9-9b9b-4987-95be-25904ba9a355/1/wPadL0dEdNu1f2vsjC1l1eDClmE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8fcbe9-9b9b-4987-95be-25904ba9a355/1/wPadL0dEdNu1f2vsjC1l1eDClmE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:c3:cf:f1:27:da:07:48:90:cd:2a:7a:ee:4d:e6:90:eb:1a:
         8d:ce:7d:ae:f2:7a:2a:53:bd:a2:69:cd:d4:92:0b:ab:8b:69:
         73:27:a1:b3:b4:ec:ff:db:06:07:89:8f:e3:c8:e4:66:21:68:
         8a:f9:9c:7c:6d:1e:4d:4b:de:89:da:c2:5c:88:7f:99:d9:ac:
         50:69:b6:bb:bf:71:63:ec:d7:fd:bb:e0:07:3c:14:3b:41:31:
         8a:92:58:18:77:9a:78:9d:3a:6e:22:76:1d:15:66:e2:5f:5a:
         fa:0b:8a:61:93:40:7c:0a:ea:20:22:12:c7:f4:27:8f:16:58:
         37:33:f0:17:9b:f5:5e:eb:10:ab:29:f9:b9:12:73:10:c7:09:
         31:55:74:04:31:5f:56:e2:25:73:92:75:64:df:8d:f8:da:88:
         e8:8d:55:a5:c7:f2:31:61:aa:fc:a4:69:c1:d2:3a:7f:94:d1:
         ab:c6:64:13:da:74:2e:4b:f8:81:24:a4:2b:86:21:ca:16:08:
         75:e1:70:8b:d2:34:44:21:2f:33:e9:34:a8:38:3f:42:58:f0:
         a6:c9:90:43:57:1c:83:f2:b1:8d:59:4d:e9:9c:97:76:ba:3f:
         3e:5e:6f:ca:93:20:63:dd:83:28:60:24:47:a6:f1:04:8f:ca:
         f2:00:a9:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfGuKjr9R8Sq07GWvb9od9BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwZjY5ZDJmNDc0NDc0ZGJiNTdmNmJlYzhjMmQ2NWQ1ZTBj
Mjk2NjEwHhcNMjUwNzAxMTYwMTE5WhcNMjUwNzAyMTYwMTE5WjAzMTEwLwYDVQQD
Eyg5NDU2OGI0ZTMwMzJkM2JmMTRhOThmMWRjNDVkMzMxZTcyMGZlMjI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/EIPoXivJLqwwviF/MtK/XGX0AC
sRsCRGcdAG/A/FwriaH0QhcWxWRhXAuIER4rWgNHiYTXymOAGGj/fdcvInPxiVGE
9tG0fXGUxwqEEN8vIM27hiy7o64Tad2TtTxunvicOhaJ6Qbkx31dVkLlkKuy1jPO
OIjYBPwwwMmgMzziHbogYXRu+jHZn2jrPGER4T4dW0oicH7utaD4sOjKi6MS0wUj
9TpX+LVcD2GiA6O8grf329BIzW1hdPL18hrx3XfmkZYxIAl1OazWxfpJCaTFcBcN
iOCgh2R8+0gORUWOZoNSDHQbH3pGb96i9V18RtlGmOJjNlylPZl5e6wTvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJRWi04wMtO/FKmPHcRdMx5yD+IpMB8GA1UdIwQY
MBaAFMD2nS9HRHTbtX9r7IwtZdXgwpZhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1BhZEwwZEVkTnUxZjJ2c2pDMWwxZURDbG1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy84ZmNiZTktOWI5Yi00OTg3LTk1YmUt
MjU5MDRiYTlhMzU1LzEvd1BhZEwwZEVkTnUxZjJ2c2pDMWwxZURDbG1FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy84ZmNiZTktOWI5Yi00OTg3LTk1YmUtMjU5MDRiYTlhMzU1
LzEvd1BhZEwwZEVkTnUxZjJ2c2pDMWwxZURDbG1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAacPP8Sfa
B0iQzSp67k3mkOsajc59rvJ6KlO9omnN1JILq4tpcyehs7Ts/9sGB4mP48jkZiFo
ivmcfG0eTUveidrCXIh/mdmsUGm2u79xY+zX/bvgBzwUO0ExipJYGHeaeJ06biJ2
HRVm4l9a+guKYZNAfArqICISx/QnjxZYNzPwF5v1XusQqyn5uRJzEMcJMVV0BDFf
VuIlc5J1ZN+N+NqI6I1VpcfyMWGq/KRpwdI6f5TRq8ZkE9p0Lkv4gSSkK4YhyhYI
deFwi9I0RCEvM+k0qDg/QljwpsmQQ1ccg/KxjVlN6ZyXdro/Pl5vypMgY92DKGAk
R6bxBI/K8gCpxw==
-----END CERTIFICATE-----
Generated at Tue Jul 1 22:47:01 2025 by rpki-client