Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/wnRsy35zqcww7wTt188WzB2UaJQ.mft
File:                     wnRsy35zqcww7wTt188WzB2UaJQ.mft (raw, json)
Hash identifier:          fd4+OR+uZ0mlGHt0DUof2zKvSUDJhlNA4gx6tw5r2Tw=
Subject key identifier:   81:73:FE:AB:70:78:57:8C:A6:6A:82:9A:FF:C7:73:BF:6D:D7:9B:26
Authority key identifier: C2:74:6C:CB:7E:73:A9:CC:30:EF:04:ED:D7:CF:16:CC:1D:94:68:94
Certificate issuer:       /CN=c2746ccb7e73a9cc30ef04edd7cf16cc1d946894
Certificate serial:       0198D660B7B6BC3CA9E1C109613CD4C21A4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wnRsy35zqcww7wTt188WzB2UaJQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/wnRsy35zqcww7wTt188WzB2UaJQ.mft
Manifest number:          10A8
Signing time:             Sat 23 Aug 2025 10:01:59 +0000
Manifest this update:     Sat 23 Aug 2025 10:01:59 +0000
Manifest next update:     Sun 24 Aug 2025 10:01:59 +0000
Files and hashes:         1: MaNg2WPI-q4to7SVp52zO_QNsfw.roa (hash: HsUZQaqhFj/mJrXYPb29143giiHL5X0iJfJWhLhO0VU=)
                          2: wnRsy35zqcww7wTt188WzB2UaJQ.crl (hash: Niu1JRvQQA1KiHOb8IinXRUfGoaSIx05ZTqLo1l18Pc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/wnRsy35zqcww7wTt188WzB2UaJQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/wnRsy35zqcww7wTt188WzB2UaJQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wnRsy35zqcww7wTt188WzB2UaJQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 10:01:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:60:b7:b6:bc:3c:a9:e1:c1:09:61:3c:d4:c2:1a:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2746ccb7e73a9cc30ef04edd7cf16cc1d946894
        Validity
            Not Before: Aug 23 10:01:59 2025 GMT
            Not After : Aug 24 10:01:59 2025 GMT
        Subject: CN=8173feab7078578ca66a829affc773bf6dd79b26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:98:4a:df:25:ec:f0:20:30:a2:2f:1a:85:f6:
                    7c:5e:f6:1c:f6:0f:ec:96:48:4a:12:b7:c1:5c:85:
                    46:36:63:00:75:aa:d6:fc:47:e9:7a:15:6c:33:84:
                    55:3b:ba:0e:9a:8f:25:09:41:d4:33:75:fb:77:b6:
                    7c:79:8c:d0:a6:ac:e6:92:5d:bf:cb:f3:d3:f6:a8:
                    9b:99:55:88:4d:d0:75:ff:8b:3e:89:95:23:27:6f:
                    94:bd:6c:a6:5f:18:e3:01:9e:13:69:26:aa:c2:48:
                    66:2a:91:cf:80:1c:96:4b:8e:8a:5b:1d:d4:9b:01:
                    03:f5:97:41:ba:04:ab:c1:44:e4:d0:33:7c:4f:74:
                    19:b6:29:e2:bd:1d:f5:54:2a:8f:a8:e1:b1:cc:0a:
                    f7:63:98:67:c2:d7:47:d7:ef:dd:87:21:12:32:28:
                    ef:55:a8:9e:26:40:bc:66:a9:a2:24:c9:10:00:61:
                    38:a7:ba:cb:7a:d4:c0:c3:c5:94:ba:e0:0a:6f:83:
                    f1:50:a5:c4:3d:0b:6e:f3:a5:d5:17:54:cf:3e:2f:
                    fd:ff:19:13:40:1e:1f:a3:aa:7d:21:20:6e:ca:aa:
                    e5:ef:d9:bd:15:03:d3:4f:b8:36:63:bb:3d:fd:2f:
                    bd:ce:4a:32:fe:6c:26:22:b4:3f:00:5e:5d:aa:ff:
                    0e:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:73:FE:AB:70:78:57:8C:A6:6A:82:9A:FF:C7:73:BF:6D:D7:9B:26
            X509v3 Authority Key Identifier:
                keyid:C2:74:6C:CB:7E:73:A9:CC:30:EF:04:ED:D7:CF:16:CC:1D:94:68:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wnRsy35zqcww7wTt188WzB2UaJQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/wnRsy35zqcww7wTt188WzB2UaJQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/59703f-f003-4845-983a-93e918d10ec5/1/wnRsy35zqcww7wTt188WzB2UaJQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:0f:b9:c7:48:06:cf:ee:57:bd:89:60:b3:ce:0d:17:ae:b0:
         3d:79:6c:e7:80:de:b2:f3:cd:4d:8e:35:82:b0:65:f8:b4:0f:
         39:4e:5c:8e:3b:71:d8:f1:56:27:fd:0a:04:0b:9f:31:4a:fe:
         e4:e1:fd:4b:58:96:59:7c:e1:63:fd:ab:e5:8a:d4:8e:1a:85:
         1c:e3:1a:53:a1:c9:c1:e8:6a:61:6a:48:8f:15:10:b0:13:1b:
         c6:df:22:05:13:01:c4:2f:65:57:d6:ed:8b:df:9b:44:65:08:
         4a:e8:ea:14:14:30:ab:89:56:22:97:3b:16:f5:d5:b8:c5:bf:
         4b:f9:6d:2a:3c:4f:63:3c:8f:f7:a4:40:f6:bd:25:84:55:0b:
         00:24:ba:95:29:cd:e8:26:24:44:7b:aa:63:d5:38:c2:2f:c3:
         c7:3f:30:94:b6:7b:5b:9e:7d:51:73:ff:cf:17:ae:57:fd:4a:
         90:f3:88:aa:a7:50:6c:27:3c:31:61:c9:2e:a8:e0:b6:03:f8:
         57:34:90:51:4a:cb:07:4c:c8:e0:81:b5:fc:27:3d:87:22:46:
         aa:dd:b6:e4:df:ac:80:9e:d1:b3:00:01:5c:a5:a3:a4:bf:02:
         e3:31:68:88:db:e1:31:52:c5:0b:1f:d7:5e:f6:01:f0:8c:d3:
         a1:4b:73:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYLe2vDyp4cEJYTzUwhpMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyNzQ2Y2NiN2U3M2E5Y2MzMGVmMDRlZGQ3Y2YxNmNjMWQ5
NDY4OTQwHhcNMjUwODIzMTAwMTU5WhcNMjUwODI0MTAwMTU5WjAzMTEwLwYDVQQD
Eyg4MTczZmVhYjcwNzg1NzhjYTY2YTgyOWFmZmM3NzNiZjZkZDc5YjI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5hK3yXs8CAwoi8ahfZ8XvYc9g/s
lkhKErfBXIVGNmMAdarW/EfpehVsM4RVO7oOmo8lCUHUM3X7d7Z8eYzQpqzmkl2/
y/PT9qibmVWITdB1/4s+iZUjJ2+UvWymXxjjAZ4TaSaqwkhmKpHPgByWS46KWx3U
mwED9ZdBugSrwUTk0DN8T3QZtinivR31VCqPqOGxzAr3Y5hnwtdH1+/dhyESMijv
VaieJkC8ZqmiJMkQAGE4p7rLetTAw8WUuuAKb4PxUKXEPQtu86XVF1TPPi/9/xkT
QB4fo6p9ISBuyqrl79m9FQPTT7g2Y7s9/S+9zkoy/mwmIrQ/AF5dqv8OzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIFz/qtweFeMpmqCmv/Hc79t15smMB8GA1UdIwQY
MBaAFMJ0bMt+c6nMMO8E7dfPFswdlGiUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd25Sc3kzNXpxY3d3N3dUdDE4OFd6QjJVYUpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS81OTcwM2YtZjAwMy00ODQ1LTk4M2Et
OTNlOTE4ZDEwZWM1LzEvd25Sc3kzNXpxY3d3N3dUdDE4OFd6QjJVYUpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS81OTcwM2YtZjAwMy00ODQ1LTk4M2EtOTNlOTE4ZDEwZWM1
LzEvd25Sc3kzNXpxY3d3N3dUdDE4OFd6QjJVYUpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIA+5x0gG
z+5XvYlgs84NF66wPXls54DesvPNTY41grBl+LQPOU5cjjtx2PFWJ/0KBAufMUr+
5OH9S1iWWXzhY/2r5YrUjhqFHOMaU6HJwehqYWpIjxUQsBMbxt8iBRMBxC9lV9bt
i9+bRGUISujqFBQwq4lWIpc7FvXVuMW/S/ltKjxPYzyP96RA9r0lhFULACS6lSnN
6CYkRHuqY9U4wi/Dxz8wlLZ7W559UXP/zxeuV/1KkPOIqqdQbCc8MWHJLqjgtgP4
VzSQUUrLB0zI4IG1/Cc9hyJGqt225N+sgJ7RswABXKWjpL8C4zFoiNvhMVLFCx/X
XvYB8IzToUtzMg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 21:34:50 2025 by rpki-client