Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/2c6590-ab29-46b4-a6ae-da388bc34efb/1/wMfxuj-ucTZOkysFYNYCxXJd2o4.mft
File:                     wMfxuj-ucTZOkysFYNYCxXJd2o4.mft (raw, json)
Hash identifier:          cf067MMn8/x+KHBQctaCayiEzm2KRbsTQT8iwzyo8R4=
Subject key identifier:   9C:1B:64:B2:D8:D1:21:F9:67:28:97:9D:53:53:CD:39:CF:54:CD:64
Authority key identifier: C0:C7:F1:BA:3F:AE:71:36:4E:93:2B:05:60:D6:02:C5:72:5D:DA:8E
Certificate issuer:       /CN=c0c7f1ba3fae71364e932b0560d602c5725dda8e
Certificate serial:       0198D583FF4703214780CAD458889BBABF34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wMfxuj-ucTZOkysFYNYCxXJd2o4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/2c6590-ab29-46b4-a6ae-da388bc34efb/1/wMfxuj-ucTZOkysFYNYCxXJd2o4.mft
Manifest number:          0AC2
Signing time:             Sat 23 Aug 2025 06:00:54 +0000
Manifest this update:     Sat 23 Aug 2025 06:00:54 +0000
Manifest next update:     Sun 24 Aug 2025 06:00:54 +0000
Files and hashes:         1: Ts1wD-6dXK6YF6lbWc4Bp6qGGOU.roa (hash: l6AYzjv5b4VOeQIHxSNacHxCFNVxW6gn4dbeXJ7uQKA=)
                          2: wMfxuj-ucTZOkysFYNYCxXJd2o4.crl (hash: jjjNw//Al6b61xEnuFXTXK3ha+TgsrUxDKCVFqheXtw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/2c6590-ab29-46b4-a6ae-da388bc34efb/1/wMfxuj-ucTZOkysFYNYCxXJd2o4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/2c6590-ab29-46b4-a6ae-da388bc34efb/1/wMfxuj-ucTZOkysFYNYCxXJd2o4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wMfxuj-ucTZOkysFYNYCxXJd2o4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:83:ff:47:03:21:47:80:ca:d4:58:88:9b:ba:bf:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0c7f1ba3fae71364e932b0560d602c5725dda8e
        Validity
            Not Before: Aug 23 06:00:54 2025 GMT
            Not After : Aug 24 06:00:54 2025 GMT
        Subject: CN=9c1b64b2d8d121f96728979d5353cd39cf54cd64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:8e:5b:6b:81:b4:30:81:60:ba:cf:8c:b4:88:
                    2a:58:51:47:a3:00:a3:76:a9:38:95:61:e2:2d:59:
                    2c:58:f5:71:92:fc:5b:69:b1:63:60:3c:5b:c4:da:
                    16:f3:be:23:18:3d:34:27:38:b5:a3:21:d8:0d:e0:
                    0a:36:31:dc:39:83:5c:74:b1:dc:6b:62:44:8b:2b:
                    48:21:f4:5e:9d:b2:3a:23:72:e3:c1:3b:fd:9e:5b:
                    d6:a9:17:af:e9:cb:3d:03:f2:e7:13:2c:9f:8f:0e:
                    45:5d:0d:7e:cf:d7:3c:5b:88:92:ea:d5:83:d9:73:
                    94:09:80:b3:e7:6b:05:fa:03:a8:89:40:34:4a:32:
                    1a:b4:70:de:12:f0:0f:57:24:fb:f1:2a:b3:d5:eb:
                    50:07:3b:d8:a9:85:04:67:8d:28:f4:c9:86:cb:af:
                    fe:e5:91:66:06:1b:a3:25:8e:0e:4a:95:5a:4b:9b:
                    3c:fb:1d:09:f4:f3:99:1d:8c:ba:64:f3:3e:b7:80:
                    1b:5e:0e:dc:78:3e:11:2c:4b:4c:2c:fa:b8:73:9c:
                    c5:23:26:f1:8f:ec:fe:5f:b6:3d:0b:19:23:05:68:
                    6b:44:b1:0e:4a:d9:b4:1c:f8:36:ae:c5:3d:89:a2:
                    53:c3:50:ca:a8:f7:b0:bb:73:26:9b:6d:3f:bb:02:
                    d5:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:1B:64:B2:D8:D1:21:F9:67:28:97:9D:53:53:CD:39:CF:54:CD:64
            X509v3 Authority Key Identifier:
                keyid:C0:C7:F1:BA:3F:AE:71:36:4E:93:2B:05:60:D6:02:C5:72:5D:DA:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wMfxuj-ucTZOkysFYNYCxXJd2o4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2c6590-ab29-46b4-a6ae-da388bc34efb/1/wMfxuj-ucTZOkysFYNYCxXJd2o4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2c6590-ab29-46b4-a6ae-da388bc34efb/1/wMfxuj-ucTZOkysFYNYCxXJd2o4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:b9:c3:1f:11:60:c6:6c:e0:b0:22:ff:2a:fc:71:75:08:48:
         9d:84:84:b3:81:85:01:86:24:7d:74:3d:03:6e:e7:0f:4f:38:
         74:60:dd:3b:17:41:d3:6e:c8:a4:f9:96:53:bf:7e:6e:f1:a8:
         2c:2d:0a:7c:96:80:18:d1:c5:02:3e:81:15:5e:c8:dc:4b:7f:
         69:10:2b:b3:ab:f0:9b:08:6d:b0:72:76:2b:bd:ff:d9:0d:65:
         18:bf:f8:8a:a8:ae:74:c9:e3:ee:10:2f:c0:cd:96:da:24:41:
         b2:31:cf:ef:fe:77:4c:49:ce:2e:f5:9c:26:05:92:9f:61:86:
         88:51:4d:21:8d:f3:76:7e:e2:2c:5c:2b:f9:24:ec:c2:7c:12:
         24:4d:f3:37:31:a0:91:f4:f0:a3:47:30:23:5b:26:45:c2:81:
         55:d7:17:49:0c:fb:3d:ae:93:3e:83:81:a8:21:25:cc:7c:cb:
         11:ca:59:d6:56:bf:f1:64:48:6e:cb:87:1f:48:de:c1:e1:a3:
         ad:71:b3:32:94:71:ad:8c:f9:8e:0b:45:9b:1c:11:6f:6a:11:
         99:ba:fa:fd:83:f2:ed:ac:2b:4d:fe:af:ae:6b:4f:f3:00:bd:
         07:7b:7f:3b:98:a9:5b:3f:20:88:92:09:31:43:76:ef:66:ea:
         3b:be:af:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVg/9HAyFHgMrUWIibur80MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwYzdmMWJhM2ZhZTcxMzY0ZTkzMmIwNTYwZDYwMmM1NzI1
ZGRhOGUwHhcNMjUwODIzMDYwMDU0WhcNMjUwODI0MDYwMDU0WjAzMTEwLwYDVQQD
Eyg5YzFiNjRiMmQ4ZDEyMWY5NjcyODk3OWQ1MzUzY2QzOWNmNTRjZDY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5I5ba4G0MIFgus+MtIgqWFFHowCj
dqk4lWHiLVksWPVxkvxbabFjYDxbxNoW874jGD00Jzi1oyHYDeAKNjHcOYNcdLHc
a2JEiytIIfRenbI6I3LjwTv9nlvWqRev6cs9A/LnEyyfjw5FXQ1+z9c8W4iS6tWD
2XOUCYCz52sF+gOoiUA0SjIatHDeEvAPVyT78Sqz1etQBzvYqYUEZ40o9MmGy6/+
5ZFmBhujJY4OSpVaS5s8+x0J9POZHYy6ZPM+t4AbXg7ceD4RLEtMLPq4c5zFIybx
j+z+X7Y9CxkjBWhrRLEOStm0HPg2rsU9iaJTw1DKqPewu3Mmm20/uwLVuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJwbZLLY0SH5ZyiXnVNTzTnPVM1kMB8GA1UdIwQY
MBaAFMDH8bo/rnE2TpMrBWDWAsVyXdqOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd01meHVqLXVjVFpPa3lzRllOWUN4WEpkMm80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8yYzY1OTAtYWIyOS00NmI0LWE2YWUt
ZGEzODhiYzM0ZWZiLzEvd01meHVqLXVjVFpPa3lzRllOWUN4WEpkMm80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8yYzY1OTAtYWIyOS00NmI0LWE2YWUtZGEzODhiYzM0ZWZi
LzEvd01meHVqLXVjVFpPa3lzRllOWUN4WEpkMm80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOLnDHxFg
xmzgsCL/KvxxdQhInYSEs4GFAYYkfXQ9A27nD084dGDdOxdB027IpPmWU79+bvGo
LC0KfJaAGNHFAj6BFV7I3Et/aRArs6vwmwhtsHJ2K73/2Q1lGL/4iqiudMnj7hAv
wM2W2iRBsjHP7/53TEnOLvWcJgWSn2GGiFFNIY3zdn7iLFwr+STswnwSJE3zNzGg
kfTwo0cwI1smRcKBVdcXSQz7Pa6TPoOBqCElzHzLEcpZ1la/8WRIbsuHH0jeweGj
rXGzMpRxrYz5jgtFmxwRb2oRmbr6/YPy7awrTf6vrmtP8wC9B3t/O5ipWz8giJIJ
MUN272bqO76v2Q==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:23:23 2025 by rpki-client