Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/566938-e2a8-48b3-816b-27b113cff53b/1/waskfGNq04m_n4xQdMgiAjDo7cw.mft
File:                     waskfGNq04m_n4xQdMgiAjDo7cw.mft (raw, json)
Hash identifier:          EsSyWu2L1Ksffj95XuqeP6+iWgRS/x1H/FkZN/6Bi1g=
Subject key identifier:   F2:FC:82:B2:E5:05:82:65:CA:24:1F:A1:62:9C:18:38:61:E6:EA:A3
Authority key identifier: C1:AB:24:7C:63:6A:D3:89:BF:9F:8C:50:74:C8:22:02:30:E8:ED:CC
Certificate issuer:       /CN=c1ab247c636ad389bf9f8c5074c8220230e8edcc
Certificate serial:       019872CFCF225968E706A07D229C313517A2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/waskfGNq04m_n4xQdMgiAjDo7cw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/566938-e2a8-48b3-816b-27b113cff53b/1/waskfGNq04m_n4xQdMgiAjDo7cw.mft
Manifest number:          161B
Signing time:             Mon 04 Aug 2025 02:01:18 +0000
Manifest this update:     Mon 04 Aug 2025 02:01:18 +0000
Manifest next update:     Tue 05 Aug 2025 02:01:18 +0000
Files and hashes:         1: YhlJJJSXn0316GXMCt3evKM4RRA.roa (hash: GoRGuSI9MFxsC15qVirr/MrX3xBRfDPgJUjig6NxAVs=)
                          2: l9EgD7Cv7e532Hlt9LLUu3z8_dw.roa (hash: 4Xh0ogOpmmD0jHDBdjnr8Hc05bJosT/Z9VheuQZJvIw=)
                          3: ux1IC1yxeTUgRbCsz7aKGJRUxDA.roa (hash: Cbk3gKO+GYUzaeJI/vrLpgkHk9pkTZFjphWYEpQbc/Y=)
                          4: waskfGNq04m_n4xQdMgiAjDo7cw.crl (hash: CJsDKaifY+Wx8Fus2Gtvlh3I30siqC1SNP5SDyNlIKo=)
                          5: xPSDuA4Q8aGWwP6K3N_nyK74gDo.roa (hash: UU3ufwB67xN9A6E6STJlvefFGKYdsphPt8rIQ8rp99U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/566938-e2a8-48b3-816b-27b113cff53b/1/waskfGNq04m_n4xQdMgiAjDo7cw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/566938-e2a8-48b3-816b-27b113cff53b/1/waskfGNq04m_n4xQdMgiAjDo7cw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/waskfGNq04m_n4xQdMgiAjDo7cw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 02:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:72:cf:cf:22:59:68:e7:06:a0:7d:22:9c:31:35:17:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1ab247c636ad389bf9f8c5074c8220230e8edcc
        Validity
            Not Before: Aug  4 02:01:18 2025 GMT
            Not After : Aug  5 02:01:18 2025 GMT
        Subject: CN=f2fc82b2e5058265ca241fa1629c183861e6eaa3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:37:1c:fe:00:0d:39:4f:a2:27:89:05:a3:8f:
                    a6:f5:9a:34:3f:0e:ea:d5:73:da:92:ea:45:0b:97:
                    69:f6:f5:50:25:d7:81:0d:8e:0c:a0:8d:44:b5:50:
                    a8:40:0b:29:e1:d8:05:6f:7c:85:70:21:81:26:d5:
                    e4:ff:6f:b5:d1:b8:2d:fc:85:77:02:0e:a4:64:9e:
                    03:50:cf:b8:dd:4f:a7:59:8f:75:02:3c:43:0d:b8:
                    56:53:b1:23:44:f8:0e:39:4c:e1:a6:01:82:6b:12:
                    c0:8d:14:e6:1c:f0:db:61:48:2a:3c:c0:73:fb:f1:
                    7d:de:e8:00:57:54:9f:fd:7c:dc:81:80:c5:13:51:
                    ca:d6:ed:39:13:4f:44:21:95:ac:5a:c5:7d:42:d8:
                    ee:a8:3e:bf:d6:7b:e6:44:6d:21:cc:15:21:41:ef:
                    da:ff:36:b3:38:03:7b:02:e1:50:be:e7:d2:37:d4:
                    02:a8:a9:2c:7c:3c:9a:1d:dd:3a:22:99:98:de:14:
                    b0:d9:98:0f:02:ce:fa:18:06:56:fa:5c:04:46:cc:
                    37:8a:59:72:ad:b4:2a:c0:e0:dc:e6:f0:2b:76:8f:
                    39:5b:7f:4f:fe:83:48:e2:5e:d5:6f:00:66:43:3a:
                    5c:88:a2:7b:a5:e9:e7:d7:4a:6c:3a:96:85:ef:49:
                    2c:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:FC:82:B2:E5:05:82:65:CA:24:1F:A1:62:9C:18:38:61:E6:EA:A3
            X509v3 Authority Key Identifier:
                keyid:C1:AB:24:7C:63:6A:D3:89:BF:9F:8C:50:74:C8:22:02:30:E8:ED:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/waskfGNq04m_n4xQdMgiAjDo7cw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/566938-e2a8-48b3-816b-27b113cff53b/1/waskfGNq04m_n4xQdMgiAjDo7cw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/566938-e2a8-48b3-816b-27b113cff53b/1/waskfGNq04m_n4xQdMgiAjDo7cw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:31:4c:6c:eb:f5:10:6b:f8:d3:41:d7:eb:a0:de:c5:7a:82:
         d1:62:89:e0:1a:8e:fc:37:e6:ae:b1:09:a7:91:31:34:6f:83:
         62:6d:6e:ef:a7:83:d8:56:57:e6:d3:d3:b3:3a:d5:00:bf:a0:
         5e:10:a5:2f:b8:29:3a:ce:90:16:ff:42:d3:0a:90:24:5d:0a:
         62:fc:eb:12:27:2a:86:12:3a:65:ca:c8:77:16:d2:8e:56:95:
         10:16:e7:2b:2d:ab:8e:74:84:88:e5:57:2c:f7:bd:5b:4c:9f:
         01:b9:85:c0:0b:44:40:2e:c1:2a:83:87:50:ac:61:72:94:3b:
         b6:22:62:67:e4:f2:8c:9f:24:28:85:96:a8:bb:63:1a:18:0b:
         ab:3d:70:43:c2:97:dd:68:a5:68:b0:1a:df:1f:7f:93:01:f8:
         41:2f:df:4a:5d:7a:e5:bd:f4:ff:ac:6b:c0:de:2c:16:ce:a9:
         54:1f:d1:8a:e7:de:a7:4d:cd:74:c9:0c:71:3d:74:13:2e:e5:
         17:c2:13:07:4e:74:93:15:3d:e2:d7:9a:87:bd:5c:7e:ec:74:
         fb:10:04:60:b8:99:5e:a0:cc:1b:ff:7d:b5:71:82:99:03:90:
         92:e8:ef:7e:29:88:1c:5a:cd:6f:49:30:44:49:07:a4:6a:9f:
         d5:ce:8c:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhyz88iWWjnBqB9IpwxNReiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxYWIyNDdjNjM2YWQzODliZjlmOGM1MDc0YzgyMjAyMzBl
OGVkY2MwHhcNMjUwODA0MDIwMTE4WhcNMjUwODA1MDIwMTE4WjAzMTEwLwYDVQQD
EyhmMmZjODJiMmU1MDU4MjY1Y2EyNDFmYTE2MjljMTgzODYxZTZlYWEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzcc/gANOU+iJ4kFo4+m9Zo0Pw7q
1XPakupFC5dp9vVQJdeBDY4MoI1EtVCoQAsp4dgFb3yFcCGBJtXk/2+10bgt/IV3
Ag6kZJ4DUM+43U+nWY91AjxDDbhWU7EjRPgOOUzhpgGCaxLAjRTmHPDbYUgqPMBz
+/F93ugAV1Sf/XzcgYDFE1HK1u05E09EIZWsWsV9QtjuqD6/1nvmRG0hzBUhQe/a
/zazOAN7AuFQvufSN9QCqKksfDyaHd06IpmY3hSw2ZgPAs76GAZW+lwERsw3illy
rbQqwODc5vArdo85W39P/oNI4l7VbwBmQzpciKJ7penn10psOpaF70ks0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPL8grLlBYJlyiQfoWKcGDhh5uqjMB8GA1UdIwQY
MBaAFMGrJHxjatOJv5+MUHTIIgIw6O3MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2Fza2ZHTnEwNG1fbjR4UWRNZ2lBakRvN2N3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS81NjY5MzgtZTJhOC00OGIzLTgxNmIt
MjdiMTEzY2ZmNTNiLzEvd2Fza2ZHTnEwNG1fbjR4UWRNZ2lBakRvN2N3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS81NjY5MzgtZTJhOC00OGIzLTgxNmItMjdiMTEzY2ZmNTNi
LzEvd2Fza2ZHTnEwNG1fbjR4UWRNZ2lBakRvN2N3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnTFMbOv1
EGv400HX66DexXqC0WKJ4BqO/DfmrrEJp5ExNG+DYm1u76eD2FZX5tPTszrVAL+g
XhClL7gpOs6QFv9C0wqQJF0KYvzrEicqhhI6ZcrIdxbSjlaVEBbnKy2rjnSEiOVX
LPe9W0yfAbmFwAtEQC7BKoOHUKxhcpQ7tiJiZ+TyjJ8kKIWWqLtjGhgLqz1wQ8KX
3WilaLAa3x9/kwH4QS/fSl165b30/6xrwN4sFs6pVB/Riufep03NdMkMcT10Ey7l
F8ITB050kxU94teah71cfux0+xAEYLiZXqDMG/99tXGCmQOQkujvfimIHFrNb0kw
REkHpGqf1c6MNw==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:00:12 2025 by rpki-client