Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/cb4621-4710-4c4c-85ba-871cf4097746/1/WvZis_PcgxKxtryRfwrwBiJ3U1U.mft
File:                     WvZis_PcgxKxtryRfwrwBiJ3U1U.mft (raw, json)
Hash identifier:          coWgN8YFTwrxTo5Xolzrc+G3v8TX29Lk4Icoimo6lgI=
Subject key identifier:   CC:72:A5:E4:9D:AD:A5:92:8A:D8:A1:D2:C4:F6:C6:C1:AB:B2:93:DF
Authority key identifier: 5A:F6:62:B3:F3:DC:83:12:B1:B6:BC:91:7F:0A:F0:06:22:77:53:55
Certificate issuer:       /CN=5af662b3f3dc8312b1b6bc917f0af00622775355
Certificate serial:       0197B8FD7584A206F7B0168F161ED557DC5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WvZis_PcgxKxtryRfwrwBiJ3U1U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/cb4621-4710-4c4c-85ba-871cf4097746/1/WvZis_PcgxKxtryRfwrwBiJ3U1U.mft
Manifest number:          15B7
Signing time:             Sun 29 Jun 2025 00:01:47 +0000
Manifest this update:     Sun 29 Jun 2025 00:01:47 +0000
Manifest next update:     Mon 30 Jun 2025 00:01:47 +0000
Files and hashes:         1: 7LnQSFfXaCdtSrN73Q04rTSUR1U.roa (hash: qe1kV18U1ftZ6/1GEB/ILiq/KKpDzYSHRLnRjgpziJY=)
                          2: WvZis_PcgxKxtryRfwrwBiJ3U1U.crl (hash: tAC8chpoKmF5THviMGXAGDl30+g8trVbpsT4dIjAG+A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/cb4621-4710-4c4c-85ba-871cf4097746/1/WvZis_PcgxKxtryRfwrwBiJ3U1U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/cb4621-4710-4c4c-85ba-871cf4097746/1/WvZis_PcgxKxtryRfwrwBiJ3U1U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WvZis_PcgxKxtryRfwrwBiJ3U1U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 19:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:fd:75:84:a2:06:f7:b0:16:8f:16:1e:d5:57:dc:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5af662b3f3dc8312b1b6bc917f0af00622775355
        Validity
            Not Before: Jun 29 00:01:47 2025 GMT
            Not After : Jun 30 00:01:47 2025 GMT
        Subject: CN=cc72a5e49dada5928ad8a1d2c4f6c6c1abb293df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:11:13:17:d0:5d:04:41:35:d0:e0:93:9f:83:
                    61:28:f4:37:96:42:79:26:03:d6:4f:62:0b:37:54:
                    71:d2:f6:90:05:88:cb:1b:a0:55:f7:37:b9:cb:06:
                    03:36:77:e8:c6:06:fd:e3:09:06:a0:c1:dd:4a:9d:
                    d3:f3:e0:34:1e:00:8d:fe:86:98:4e:d2:0a:26:99:
                    09:f9:a3:01:2a:e7:dd:d6:99:37:80:59:ef:34:3f:
                    dd:77:b6:aa:eb:9d:ce:72:0e:2e:1f:8b:4d:93:79:
                    2e:59:b1:d5:1d:19:14:44:c2:c0:55:36:45:b5:47:
                    90:3e:ec:20:ee:13:51:d0:fe:b1:7e:ff:99:0c:9c:
                    c0:32:7d:bd:6f:c9:ae:aa:63:d0:8e:93:48:df:f1:
                    55:46:ec:4d:92:22:59:71:e0:bb:a2:f9:a6:96:cc:
                    60:5c:1f:2d:b9:5e:db:84:ab:30:db:e7:b3:9f:a2:
                    de:7e:2b:f0:1e:c9:fe:68:ff:9c:f3:74:b3:c1:cb:
                    60:69:58:87:0a:6e:33:88:4f:68:50:f4:83:a8:86:
                    f7:6e:c4:d8:ba:01:0b:97:30:a4:01:ba:5f:98:ec:
                    92:f0:62:91:20:bf:1d:51:6c:e6:80:11:47:4f:9d:
                    a0:12:9b:5c:60:42:00:40:69:c2:c9:7f:bb:aa:44:
                    16:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:72:A5:E4:9D:AD:A5:92:8A:D8:A1:D2:C4:F6:C6:C1:AB:B2:93:DF
            X509v3 Authority Key Identifier:
                keyid:5A:F6:62:B3:F3:DC:83:12:B1:B6:BC:91:7F:0A:F0:06:22:77:53:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WvZis_PcgxKxtryRfwrwBiJ3U1U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/cb4621-4710-4c4c-85ba-871cf4097746/1/WvZis_PcgxKxtryRfwrwBiJ3U1U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/cb4621-4710-4c4c-85ba-871cf4097746/1/WvZis_PcgxKxtryRfwrwBiJ3U1U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:3b:3e:8c:ae:48:79:8b:95:2a:18:44:8e:b1:3a:06:d8:82:
         e6:dd:ba:4c:ec:5d:37:81:31:93:ed:6d:11:e5:66:74:30:7b:
         a9:34:d5:01:0e:d0:13:04:a4:e1:7d:fb:5a:43:e6:2e:1a:70:
         3c:04:7d:84:cf:2b:02:eb:35:85:9d:d1:53:a0:fb:7a:73:43:
         4a:92:7d:61:d7:5f:de:d2:2b:5b:df:fe:69:47:59:a6:2d:93:
         32:0e:ed:cd:c1:09:2a:1d:86:3e:3a:32:97:9f:d3:e6:7c:2c:
         ec:8a:77:0a:f3:db:f0:da:d8:40:bf:0f:80:97:84:06:0b:ab:
         3e:1b:8a:30:1d:17:38:56:93:8c:e8:19:24:8c:4c:82:21:94:
         c6:88:0d:b7:93:4e:ef:4f:0a:70:87:35:0d:0f:39:6f:c3:e7:
         aa:ff:59:75:9d:1a:ff:37:ce:c1:fa:80:38:4f:99:24:9c:d8:
         b2:26:b7:9d:76:7a:a5:c3:09:ac:90:e2:df:86:97:37:d1:8c:
         c4:21:13:a8:4e:7e:71:f7:f3:6f:38:73:89:d4:a2:35:ec:64:
         f1:68:ae:be:08:2c:35:2a:c7:85:4b:7f:91:e9:6c:bb:51:47:
         c5:10:ff:5b:a3:f8:6b:ce:21:c7:4d:c1:2d:9e:89:cc:e9:ee:
         12:a3:48:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4/XWEogb3sBaPFh7VV9xeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhZjY2MmIzZjNkYzgzMTJiMWI2YmM5MTdmMGFmMDA2MjI3
NzUzNTUwHhcNMjUwNjI5MDAwMTQ3WhcNMjUwNjMwMDAwMTQ3WjAzMTEwLwYDVQQD
EyhjYzcyYTVlNDlkYWRhNTkyOGFkOGExZDJjNGY2YzZjMWFiYjI5M2RmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxETF9BdBEE10OCTn4NhKPQ3lkJ5
JgPWT2ILN1Rx0vaQBYjLG6BV9ze5ywYDNnfoxgb94wkGoMHdSp3T8+A0HgCN/oaY
TtIKJpkJ+aMBKufd1pk3gFnvND/dd7aq653Ocg4uH4tNk3kuWbHVHRkURMLAVTZF
tUeQPuwg7hNR0P6xfv+ZDJzAMn29b8muqmPQjpNI3/FVRuxNkiJZceC7ovmmlsxg
XB8tuV7bhKsw2+ezn6LefivwHsn+aP+c83SzwctgaViHCm4ziE9oUPSDqIb3bsTY
ugELlzCkAbpfmOyS8GKRIL8dUWzmgBFHT52gEptcYEIAQGnCyX+7qkQWqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMxypeSdraWSitih0sT2xsGrspPfMB8GA1UdIwQY
MBaAFFr2YrPz3IMSsba8kX8K8AYid1NVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3ZaaXNfUGNneEt4dHJ5UmZ3cndCaUozVTFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9jYjQ2MjEtNDcxMC00YzRjLTg1YmEt
ODcxY2Y0MDk3NzQ2LzEvV3ZaaXNfUGNneEt4dHJ5UmZ3cndCaUozVTFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9jYjQ2MjEtNDcxMC00YzRjLTg1YmEtODcxY2Y0MDk3NzQ2
LzEvV3ZaaXNfUGNneEt4dHJ5UmZ3cndCaUozVTFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXzs+jK5I
eYuVKhhEjrE6BtiC5t26TOxdN4Exk+1tEeVmdDB7qTTVAQ7QEwSk4X37WkPmLhpw
PAR9hM8rAus1hZ3RU6D7enNDSpJ9Yddf3tIrW9/+aUdZpi2TMg7tzcEJKh2GPjoy
l5/T5nws7Ip3CvPb8NrYQL8PgJeEBgurPhuKMB0XOFaTjOgZJIxMgiGUxogNt5NO
708KcIc1DQ85b8Pnqv9ZdZ0a/zfOwfqAOE+ZJJzYsia3nXZ6pcMJrJDi34aXN9GM
xCETqE5+cffzbzhzidSiNexk8WiuvggsNSrHhUt/kelsu1FHxRD/W6P4a84hx03B
LZ6JzOnuEqNIaQ==
-----END CERTIFICATE-----
Generated at Sun Jun 29 02:06:58 2025 by rpki-client