Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/ee47de-335a-4999-b613-2690b55f50fd/1/1-WDHqzxLzD_Kg-STMWd7RLt6lG8.mft
File:                     1-WDHqzxLzD_Kg-STMWd7RLt6lG8.mft (raw, json)
Hash identifier:          FXoZ9hi0jIvgc6LNDOdmv2NtbCUTX3HkUiU4NK63Fqw=
Subject key identifier:   BA:59:46:13:0E:D5:4A:AE:85:FA:DD:4D:8B:07:6B:5D:3D:6A:22:00
Authority key identifier: F9:60:C7:AB:3C:4B:CC:3F:CA:83:E4:93:31:67:7B:44:BB:7A:94:6F
Certificate issuer:       /CN=f960c7ab3c4bcc3fca83e49331677b44bb7a946f
Certificate serial:       01988FFE43D7CDA7C7C4AF41F214D3A759C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-WDHqzxLzD_Kg-STMWd7RLt6lG8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/ee47de-335a-4999-b613-2690b55f50fd/1/1-WDHqzxLzD_Kg-STMWd7RLt6lG8.mft
Manifest number:          0133
Signing time:             Sat 09 Aug 2025 18:01:02 +0000
Manifest this update:     Sat 09 Aug 2025 18:01:02 +0000
Manifest next update:     Sun 10 Aug 2025 18:01:02 +0000
Files and hashes:         1: 1-WDHqzxLzD_Kg-STMWd7RLt6lG8.crl (hash: KGUP9xhyDvX6m6FhPd2deJRcU8jQWPjxJn95rZneKZo=)
                          2: 42HdpJSIuZQYNL_T503F7T6tVtg.roa (hash: 2oMCOR0uoZknejKNMlu0g0SgSeLr17Imm1o0mXmKjiE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/ee47de-335a-4999-b613-2690b55f50fd/1/1-WDHqzxLzD_Kg-STMWd7RLt6lG8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/ee47de-335a-4999-b613-2690b55f50fd/1/1-WDHqzxLzD_Kg-STMWd7RLt6lG8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-WDHqzxLzD_Kg-STMWd7RLt6lG8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 18:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8f:fe:43:d7:cd:a7:c7:c4:af:41:f2:14:d3:a7:59:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f960c7ab3c4bcc3fca83e49331677b44bb7a946f
        Validity
            Not Before: Aug  9 18:01:02 2025 GMT
            Not After : Aug 10 18:01:02 2025 GMT
        Subject: CN=ba5946130ed54aae85fadd4d8b076b5d3d6a2200
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:30:4e:5c:d9:a6:b2:5e:f5:5b:f6:1f:e2:e3:
                    e0:23:50:f8:a9:17:56:5a:86:27:ee:04:c7:b3:63:
                    bd:06:79:21:f5:bb:13:d8:c7:90:17:dc:75:9c:8b:
                    8c:c2:81:94:d4:88:09:1b:09:17:4a:fc:74:6c:fc:
                    88:16:35:aa:b4:42:3f:02:a6:23:fb:3f:87:42:98:
                    1f:5d:cc:b7:cf:1d:c1:79:4e:98:1e:01:e4:13:d0:
                    fa:1e:26:3f:71:52:bd:da:c7:3f:5d:56:b3:f9:8f:
                    bd:65:0a:4c:3c:fa:a7:9d:18:56:9a:7e:41:8d:7c:
                    c0:97:99:65:fb:ad:f6:b3:8d:fc:f0:3d:67:37:9f:
                    8c:ff:3e:1a:5c:cb:1e:c2:d0:71:f0:32:12:5b:00:
                    c9:37:4a:70:d6:e9:58:9c:48:1c:59:1a:07:14:1d:
                    20:f9:b3:84:4f:78:30:09:66:6e:67:0c:ad:fb:cb:
                    cf:a5:2e:27:00:27:3f:36:1a:94:4f:2b:06:ec:30:
                    76:24:35:1a:f3:c5:2e:d2:30:db:4e:d4:e4:33:c0:
                    88:3b:d5:0d:23:02:a6:23:2f:fa:c4:21:2e:69:9e:
                    22:e7:3b:8b:b7:6e:96:e8:80:ea:52:7d:ed:87:a5:
                    ce:f6:3d:23:7b:9f:7f:11:b7:4a:5c:b0:f0:07:28:
                    69:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:59:46:13:0E:D5:4A:AE:85:FA:DD:4D:8B:07:6B:5D:3D:6A:22:00
            X509v3 Authority Key Identifier:
                keyid:F9:60:C7:AB:3C:4B:CC:3F:CA:83:E4:93:31:67:7B:44:BB:7A:94:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-WDHqzxLzD_Kg-STMWd7RLt6lG8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ee47de-335a-4999-b613-2690b55f50fd/1/1-WDHqzxLzD_Kg-STMWd7RLt6lG8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/ee47de-335a-4999-b613-2690b55f50fd/1/1-WDHqzxLzD_Kg-STMWd7RLt6lG8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:a9:c0:12:dd:40:9f:1b:d5:6b:86:9b:84:15:62:6c:02:1a:
         7a:aa:04:44:54:24:41:6e:d4:11:c0:6c:97:92:59:97:ed:d8:
         94:8b:9a:81:c0:e1:cc:72:86:76:ce:61:7a:c3:76:b8:cb:d5:
         92:c1:d1:75:95:7d:6e:ea:63:ea:23:72:bb:94:72:d2:0b:ba:
         da:d9:06:56:66:a8:5d:67:39:2d:4f:15:6a:47:c4:78:b9:00:
         09:1b:53:a4:24:b3:7b:2d:1a:6c:58:13:27:c1:8f:6d:e5:8f:
         c1:f6:04:f4:8d:f2:75:8d:92:44:f8:fb:6b:f0:43:86:1c:59:
         26:09:a4:75:e0:1d:f6:2c:db:45:60:3c:40:f0:58:12:12:29:
         78:81:25:4f:a7:7c:e5:a1:5b:42:34:53:ac:d2:6d:cf:f9:9f:
         dd:32:a1:99:89:14:72:44:d0:fe:45:0a:49:c9:dd:3c:1d:9d:
         cf:1c:94:e1:aa:60:51:06:24:57:76:98:1f:89:76:c3:3b:4b:
         67:50:f7:73:d5:3b:6c:69:46:f3:c7:ce:e7:ec:58:e3:2d:7e:
         4c:d6:63:4d:84:7f:de:6a:1d:61:d5:b1:d8:8a:88:9a:ee:f4:
         4c:a5:b6:ff:93:3c:fc:ad:a9:21:de:71:68:52:f2:1e:d7:17:
         74:6c:59:a5
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZiP/kPXzafHxK9B8hTTp1nAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5NjBjN2FiM2M0YmNjM2ZjYTgzZTQ5MzMxNjc3YjQ0YmI3
YTk0NmYwHhcNMjUwODA5MTgwMTAyWhcNMjUwODEwMTgwMTAyWjAzMTEwLwYDVQQD
EyhiYTU5NDYxMzBlZDU0YWFlODVmYWRkNGQ4YjA3NmI1ZDNkNmEyMjAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszBOXNmmsl71W/Yf4uPgI1D4qRdW
WoYn7gTHs2O9Bnkh9bsT2MeQF9x1nIuMwoGU1IgJGwkXSvx0bPyIFjWqtEI/AqYj
+z+HQpgfXcy3zx3BeU6YHgHkE9D6HiY/cVK92sc/XVaz+Y+9ZQpMPPqnnRhWmn5B
jXzAl5ll+632s4388D1nN5+M/z4aXMsewtBx8DISWwDJN0pw1ulYnEgcWRoHFB0g
+bOET3gwCWZuZwyt+8vPpS4nACc/NhqUTysG7DB2JDUa88Uu0jDbTtTkM8CIO9UN
IwKmIy/6xCEuaZ4i5zuLt26W6IDqUn3th6XO9j0je59/EbdKXLDwByhpmQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFLpZRhMO1UquhfrdTYsHa109aiIAMB8GA1UdIwQY
MBaAFPlgx6s8S8w/yoPkkzFne0S7epRvMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1XREhxenhMekRfS2ctU1RNV2Q3Ukx0NmxHOC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjIvZWU0N2RlLTMzNWEtNDk5OS1iNjEz
LTI2OTBiNTVmNTBmZC8xLzEtV0RIcXp4THpEX0tnLVNUTVdkN1JMdDZsRzgubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzYyL2VlNDdkZS0zMzVhLTQ5OTktYjYxMy0yNjkwYjU1ZjUw
ZmQvMS8xLVdESHF6eEx6RF9LZy1TVE1XZDdSTHQ2bEc4LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAianA
Et1AnxvVa4abhBVibAIaeqoERFQkQW7UEcBsl5JZl+3YlIuagcDhzHKGds5hesN2
uMvVksHRdZV9bupj6iNyu5Ry0gu62tkGVmaoXWc5LU8VakfEeLkACRtTpCSzey0a
bFgTJ8GPbeWPwfYE9I3ydY2SRPj7a/BDhhxZJgmkdeAd9izbRWA8QPBYEhIpeIEl
T6d85aFbQjRTrNJtz/mf3TKhmYkUckTQ/kUKScndPB2dzxyU4apgUQYkV3aYH4l2
wztLZ1D3c9U7bGlG88fO5+xY4y1+TNZjTYR/3modYdWx2IqImu70TKW2/5M8/K2p
Id5xaFLyHtcXdGxZpQ==
-----END CERTIFICATE-----
Generated at Sun Aug 10 03:57:18 2025 by rpki-client