Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/e81d26-80f4-40f2-bdbd-02cf6b0db63b/1/wArEVewO3ikw6lgQV-4f9Z9b9sc.mft
File:                     wArEVewO3ikw6lgQV-4f9Z9b9sc.mft (raw, json)
Hash identifier:          DL8XRChLcylmVXQfiNJFLkUXLrD2cPU0H1uh8MYoQH4=
Subject key identifier:   B1:0B:83:CE:CD:55:01:42:85:BD:83:B4:13:30:76:C0:D6:44:76:48
Authority key identifier: C0:0A:C4:55:EC:0E:DE:29:30:EA:58:10:57:EE:1F:F5:9F:5B:F6:C7
Certificate issuer:       /CN=c00ac455ec0ede2930ea581057ee1ff59f5bf6c7
Certificate serial:       01988A6A4AB22454C265CFF7B5ADF2A4ACFD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wArEVewO3ikw6lgQV-4f9Z9b9sc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/e81d26-80f4-40f2-bdbd-02cf6b0db63b/1/wArEVewO3ikw6lgQV-4f9Z9b9sc.mft
Manifest number:          10AB
Signing time:             Fri 08 Aug 2025 16:01:18 +0000
Manifest this update:     Fri 08 Aug 2025 16:01:18 +0000
Manifest next update:     Sat 09 Aug 2025 16:01:18 +0000
Files and hashes:         1: IaifUimRjLV0wimYFwuBxS5X-tQ.roa (hash: cmI9raT4lPlOUQCttfe+nau/yhN6VEMOtjQDtEZ8tbk=)
                          2: wArEVewO3ikw6lgQV-4f9Z9b9sc.crl (hash: zfVDKPdVIw+QnZLo8O8dqwdHTYByH/3TyyTE/MaZckk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/e81d26-80f4-40f2-bdbd-02cf6b0db63b/1/wArEVewO3ikw6lgQV-4f9Z9b9sc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/e81d26-80f4-40f2-bdbd-02cf6b0db63b/1/wArEVewO3ikw6lgQV-4f9Z9b9sc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wArEVewO3ikw6lgQV-4f9Z9b9sc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 16:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8a:6a:4a:b2:24:54:c2:65:cf:f7:b5:ad:f2:a4:ac:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c00ac455ec0ede2930ea581057ee1ff59f5bf6c7
        Validity
            Not Before: Aug  8 16:01:18 2025 GMT
            Not After : Aug  9 16:01:18 2025 GMT
        Subject: CN=b10b83cecd55014285bd83b4133076c0d6447648
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:c0:b1:33:50:35:d5:20:32:b9:a8:b7:18:15:
                    89:0c:e3:1d:a0:3b:8b:ad:5a:1f:0e:9b:4e:9b:98:
                    15:0a:15:a7:c2:85:d5:e6:fc:97:72:f5:58:32:ce:
                    f5:15:bf:a4:9c:53:a7:da:41:bb:af:e0:7b:0b:7b:
                    20:c8:a6:3c:87:29:f4:fd:a7:50:92:80:b1:c6:47:
                    25:ea:56:6d:db:78:89:b9:6d:be:1b:c5:a7:14:fc:
                    12:84:a9:40:46:45:78:cf:b4:5b:fe:ba:93:31:e3:
                    9a:56:3c:92:98:af:96:fd:f2:4f:3c:20:48:4a:2e:
                    85:b1:13:9d:a6:79:aa:cf:b1:b5:c9:d6:ef:00:27:
                    da:eb:6f:39:62:c3:f6:99:e4:3d:01:5e:8c:0e:a2:
                    eb:62:4c:29:85:ed:11:c9:1e:e4:00:5f:50:66:cb:
                    63:c2:c1:70:c0:f8:bc:52:fa:c1:35:e0:c4:4c:96:
                    d4:f2:30:c9:a9:fe:65:e0:7d:49:cf:f7:e9:63:eb:
                    1a:94:d1:3c:a7:20:38:4d:33:04:f4:60:f9:8a:26:
                    48:fd:95:43:be:6a:b3:f0:06:f5:d7:52:96:ae:bb:
                    46:00:0f:f7:46:75:17:bf:2d:d8:d4:0c:67:05:09:
                    ab:da:3f:6d:fd:9d:1d:ed:2e:48:84:84:61:2a:c9:
                    a1:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:0B:83:CE:CD:55:01:42:85:BD:83:B4:13:30:76:C0:D6:44:76:48
            X509v3 Authority Key Identifier:
                keyid:C0:0A:C4:55:EC:0E:DE:29:30:EA:58:10:57:EE:1F:F5:9F:5B:F6:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wArEVewO3ikw6lgQV-4f9Z9b9sc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/e81d26-80f4-40f2-bdbd-02cf6b0db63b/1/wArEVewO3ikw6lgQV-4f9Z9b9sc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/e81d26-80f4-40f2-bdbd-02cf6b0db63b/1/wArEVewO3ikw6lgQV-4f9Z9b9sc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:09:b8:76:5f:72:af:88:70:e8:95:7f:56:00:37:24:7e:5b:
         9e:23:b0:3e:ad:9c:7d:07:79:1e:8c:76:d0:cb:cf:ec:d0:cc:
         14:f3:67:a9:06:07:88:1d:29:60:d5:6b:bb:95:62:2b:f4:15:
         61:8c:22:8c:9d:d6:c6:29:21:fa:89:f2:ef:07:c1:f8:90:59:
         b1:79:d9:fe:1f:77:d0:56:ef:c2:67:2b:73:7d:ac:c3:f2:23:
         50:8e:1f:dc:78:ed:d8:9a:18:50:fc:6f:e6:54:03:af:8e:3b:
         25:e1:e1:e4:30:9f:d9:f3:9c:9f:37:31:a4:e1:33:65:fe:a4:
         9e:fc:d9:4e:c4:d3:ec:1f:c6:fb:4a:33:de:5f:00:ae:eb:d9:
         ea:fa:14:03:71:fd:18:ad:35:11:8a:84:d7:1b:ac:88:69:3b:
         fd:9f:13:d2:fb:ba:65:c3:2b:65:aa:4b:3f:12:83:8e:c6:48:
         1f:7a:c3:af:e1:c5:de:69:f0:e5:07:76:38:e9:00:6c:63:f5:
         71:a3:40:cc:e1:e0:a3:e2:79:38:c1:e7:11:7f:31:fc:97:be:
         d5:d7:a0:0b:34:39:50:62:03:5e:5d:c6:98:dd:2f:76:31:3c:
         10:47:8d:3c:db:38:8b:06:ad:d1:7b:8a:93:27:9c:10:98:ad:
         02:cb:62:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiKakqyJFTCZc/3ta3ypKz9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwMGFjNDU1ZWMwZWRlMjkzMGVhNTgxMDU3ZWUxZmY1OWY1
YmY2YzcwHhcNMjUwODA4MTYwMTE4WhcNMjUwODA5MTYwMTE4WjAzMTEwLwYDVQQD
EyhiMTBiODNjZWNkNTUwMTQyODViZDgzYjQxMzMwNzZjMGQ2NDQ3NjQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7MCxM1A11SAyuai3GBWJDOMdoDuL
rVofDptOm5gVChWnwoXV5vyXcvVYMs71Fb+knFOn2kG7r+B7C3sgyKY8hyn0/adQ
koCxxkcl6lZt23iJuW2+G8WnFPwShKlARkV4z7Rb/rqTMeOaVjySmK+W/fJPPCBI
Si6FsROdpnmqz7G1ydbvACfa6285YsP2meQ9AV6MDqLrYkwphe0RyR7kAF9QZstj
wsFwwPi8UvrBNeDETJbU8jDJqf5l4H1Jz/fpY+salNE8pyA4TTME9GD5iiZI/ZVD
vmqz8Ab111KWrrtGAA/3RnUXvy3Y1AxnBQmr2j9t/Z0d7S5IhIRhKsmhcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLELg87NVQFChb2DtBMwdsDWRHZIMB8GA1UdIwQY
MBaAFMAKxFXsDt4pMOpYEFfuH/WfW/bHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0FyRVZld08zaWt3NmxnUVYtNGY5WjliOXNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9lODFkMjYtODBmNC00MGYyLWJkYmQt
MDJjZjZiMGRiNjNiLzEvd0FyRVZld08zaWt3NmxnUVYtNGY5WjliOXNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS9lODFkMjYtODBmNC00MGYyLWJkYmQtMDJjZjZiMGRiNjNi
LzEvd0FyRVZld08zaWt3NmxnUVYtNGY5WjliOXNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMQm4dl9y
r4hw6JV/VgA3JH5bniOwPq2cfQd5Hox20MvP7NDMFPNnqQYHiB0pYNVru5ViK/QV
YYwijJ3Wxikh+ony7wfB+JBZsXnZ/h930Fbvwmcrc32sw/IjUI4f3Hjt2JoYUPxv
5lQDr447JeHh5DCf2fOcnzcxpOEzZf6knvzZTsTT7B/G+0oz3l8AruvZ6voUA3H9
GK01EYqE1xusiGk7/Z8T0vu6ZcMrZapLPxKDjsZIH3rDr+HF3mnw5Qd2OOkAbGP1
caNAzOHgo+J5OMHnEX8x/Je+1degCzQ5UGIDXl3GmN0vdjE8EEeNPNs4iwat0XuK
kyecEJitAsti7Q==
-----END CERTIFICATE-----
Generated at Sat Aug 9 01:00:56 2025 by rpki-client