Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/4e59f2-be7a-42d9-9e60-50e2533fcd4e/1/wuJKnaa-B1Tt3BR41pTm2p4Volg.mft
File:                     wuJKnaa-B1Tt3BR41pTm2p4Volg.mft (raw, json)
Hash identifier:          rwvxIE8HHjqkSRQSVcMbVbBmaSyh3bmnlaGSRcscEAE=
Subject key identifier:   A8:BA:CD:2C:2C:26:C9:D5:16:C2:6E:07:FD:9E:D7:ED:0C:BC:9E:2F
Authority key identifier: C2:E2:4A:9D:A6:BE:07:54:ED:DC:14:78:D6:94:E6:DA:9E:15:A2:58
Certificate issuer:       /CN=c2e24a9da6be0754eddc1478d694e6da9e15a258
Certificate serial:       0198974A2483D8E3932E723C1FA7F20E7300
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wuJKnaa-B1Tt3BR41pTm2p4Volg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/4e59f2-be7a-42d9-9e60-50e2533fcd4e/1/wuJKnaa-B1Tt3BR41pTm2p4Volg.mft
Manifest number:          15B8
Signing time:             Mon 11 Aug 2025 04:01:15 +0000
Manifest this update:     Mon 11 Aug 2025 04:01:15 +0000
Manifest next update:     Tue 12 Aug 2025 04:01:15 +0000
Files and hashes:         1: h69ZP3KGJST0X8t2H0a84vHIE78.roa (hash: J750FBzG47GmCm3WoGWQrJESMcKlRjC1SRSpKQ3Vchw=)
                          2: wuJKnaa-B1Tt3BR41pTm2p4Volg.crl (hash: 7O4LgmeVZUp3GGQtSiGYwqW4Zq1qY+KmLllk+Wa55wM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/4e59f2-be7a-42d9-9e60-50e2533fcd4e/1/wuJKnaa-B1Tt3BR41pTm2p4Volg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/4e59f2-be7a-42d9-9e60-50e2533fcd4e/1/wuJKnaa-B1Tt3BR41pTm2p4Volg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wuJKnaa-B1Tt3BR41pTm2p4Volg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 12 Aug 2025 02:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:97:4a:24:83:d8:e3:93:2e:72:3c:1f:a7:f2:0e:73:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2e24a9da6be0754eddc1478d694e6da9e15a258
        Validity
            Not Before: Aug 11 04:01:15 2025 GMT
            Not After : Aug 12 04:01:15 2025 GMT
        Subject: CN=a8bacd2c2c26c9d516c26e07fd9ed7ed0cbc9e2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:0f:7d:7c:63:94:94:66:6a:f3:50:de:3f:ee:
                    5b:0f:c1:18:ab:fd:55:4f:0e:31:cb:ec:29:2a:db:
                    6b:f8:e8:f4:48:8b:be:f4:1f:f3:13:06:07:4f:12:
                    68:e5:f0:04:10:b0:5c:58:20:0c:31:f2:5e:0f:ea:
                    1f:1d:96:56:c1:c6:25:fb:8f:f5:ef:8d:d6:44:84:
                    3d:5e:4a:6e:b3:14:71:f9:01:cb:ed:85:76:58:7f:
                    f3:63:a9:66:39:c8:45:7f:c1:8c:2d:61:58:43:2b:
                    cf:36:f0:a3:ec:48:2c:a9:65:9a:7e:32:6a:08:2e:
                    83:3c:dd:7c:9a:7c:d0:96:d8:38:4b:30:90:9b:49:
                    4e:a8:f1:84:2c:13:b1:27:83:a4:9e:57:64:c7:99:
                    95:a2:d5:94:fc:f2:74:61:83:cd:c2:a5:a1:2c:32:
                    ce:69:a1:44:4a:f7:12:1f:5d:2c:76:fa:33:15:57:
                    85:65:2a:a9:59:a3:f6:ce:04:ca:0b:9f:40:97:97:
                    42:77:df:38:3d:03:38:21:32:67:ab:94:b6:38:17:
                    99:2c:4e:e1:ea:1f:a3:94:f3:5a:6c:02:0c:b2:7e:
                    34:1e:df:70:01:1c:27:5f:9a:5d:c2:8e:a0:6b:a9:
                    f0:de:e7:e1:97:01:67:fd:aa:14:97:c2:f8:fc:cf:
                    29:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:BA:CD:2C:2C:26:C9:D5:16:C2:6E:07:FD:9E:D7:ED:0C:BC:9E:2F
            X509v3 Authority Key Identifier:
                keyid:C2:E2:4A:9D:A6:BE:07:54:ED:DC:14:78:D6:94:E6:DA:9E:15:A2:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wuJKnaa-B1Tt3BR41pTm2p4Volg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/4e59f2-be7a-42d9-9e60-50e2533fcd4e/1/wuJKnaa-B1Tt3BR41pTm2p4Volg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/4e59f2-be7a-42d9-9e60-50e2533fcd4e/1/wuJKnaa-B1Tt3BR41pTm2p4Volg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:a4:88:23:36:f3:a3:1c:d1:1e:1b:6b:2e:60:a4:f8:7b:2f:
         51:ee:02:d3:1a:41:4e:45:d6:b0:63:5f:5f:32:b4:2c:ed:88:
         4e:52:62:b0:01:08:51:f9:52:39:bf:79:6c:26:de:46:f3:b0:
         33:62:11:61:84:d2:64:bc:f5:72:01:0f:8c:ce:67:e5:7e:50:
         84:34:dc:70:3e:5b:da:ea:21:c7:8c:ae:71:c6:f1:2d:14:98:
         67:e3:d0:a6:b9:ea:3b:9d:73:c2:2c:9a:77:d0:2b:7b:1f:09:
         ad:22:4e:16:70:aa:cd:8a:c5:4c:53:b2:12:90:86:16:03:e9:
         42:4e:5a:65:8d:65:7c:aa:d2:5c:57:86:3f:60:e9:0b:1b:0c:
         ff:bb:56:5e:8a:7a:ea:53:d2:ea:59:d5:bc:8e:2e:c7:11:4e:
         1a:fc:38:2c:33:15:85:3e:ac:c4:30:6c:d6:12:6c:04:35:78:
         63:6c:5b:33:f7:2b:ef:d3:e7:ec:da:0a:f2:7a:fb:df:03:06:
         43:9d:06:94:9d:2e:0f:28:6e:d2:6b:dc:58:83:12:fd:9e:9f:
         ea:eb:07:22:05:42:21:36:0e:0e:84:7a:2f:00:d9:62:27:27:
         d0:17:d2:43:5c:2e:e9:57:3b:72:b8:b2:66:9b:0a:fa:8a:23:
         05:7b:3d:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiXSiSD2OOTLnI8H6fyDnMAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyZTI0YTlkYTZiZTA3NTRlZGRjMTQ3OGQ2OTRlNmRhOWUx
NWEyNTgwHhcNMjUwODExMDQwMTE1WhcNMjUwODEyMDQwMTE1WjAzMTEwLwYDVQQD
EyhhOGJhY2QyYzJjMjZjOWQ1MTZjMjZlMDdmZDllZDdlZDBjYmM5ZTJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqw99fGOUlGZq81DeP+5bD8EYq/1V
Tw4xy+wpKttr+Oj0SIu+9B/zEwYHTxJo5fAEELBcWCAMMfJeD+ofHZZWwcYl+4/1
743WRIQ9XkpusxRx+QHL7YV2WH/zY6lmOchFf8GMLWFYQyvPNvCj7EgsqWWafjJq
CC6DPN18mnzQltg4SzCQm0lOqPGELBOxJ4Oknldkx5mVotWU/PJ0YYPNwqWhLDLO
aaFESvcSH10sdvozFVeFZSqpWaP2zgTKC59Al5dCd984PQM4ITJnq5S2OBeZLE7h
6h+jlPNabAIMsn40Ht9wARwnX5pdwo6ga6nw3ufhlwFn/aoUl8L4/M8pvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKi6zSwsJsnVFsJuB/2e1+0MvJ4vMB8GA1UdIwQY
MBaAFMLiSp2mvgdU7dwUeNaU5tqeFaJYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3VKS25hYS1CMVR0M0JSNDFwVG0ycDRWb2xnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny80ZTU5ZjItYmU3YS00MmQ5LTllNjAt
NTBlMjUzM2ZjZDRlLzEvd3VKS25hYS1CMVR0M0JSNDFwVG0ycDRWb2xnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny80ZTU5ZjItYmU3YS00MmQ5LTllNjAtNTBlMjUzM2ZjZDRl
LzEvd3VKS25hYS1CMVR0M0JSNDFwVG0ycDRWb2xnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlKSIIzbz
oxzRHhtrLmCk+HsvUe4C0xpBTkXWsGNfXzK0LO2ITlJisAEIUflSOb95bCbeRvOw
M2IRYYTSZLz1cgEPjM5n5X5QhDTccD5b2uohx4yuccbxLRSYZ+PQprnqO51zwiya
d9Arex8JrSJOFnCqzYrFTFOyEpCGFgPpQk5aZY1lfKrSXFeGP2DpCxsM/7tWXop6
6lPS6lnVvI4uxxFOGvw4LDMVhT6sxDBs1hJsBDV4Y2xbM/cr79Pn7NoK8nr73wMG
Q50GlJ0uDyhu0mvcWIMS/Z6f6usHIgVCITYODoR6LwDZYicn0BfSQ1wu6Vc7criy
ZpsK+oojBXs9ow==
-----END CERTIFICATE-----
Generated at Mon Aug 11 10:44:15 2025 by rpki-client