Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/9014c3-1a49-4e62-9243-21335d1063af/1/Pwooe-qSWI_F2uT5P7JWKPMtGW0.mft
File:                     Pwooe-qSWI_F2uT5P7JWKPMtGW0.mft (raw, json)
Hash identifier:          +9s/XM/ECL/DABLL5ONPDjtqxhSa1mVgPMO9qjCFshc=
Subject key identifier:   A7:10:EA:6B:07:29:93:1E:CD:54:F9:1E:A5:1B:03:FC:14:7E:07:93
Authority key identifier: 3F:0A:28:7B:EA:92:58:8F:C5:DA:E4:F9:3F:B2:56:28:F3:2D:19:6D
Certificate issuer:       /CN=3f0a287bea92588fc5dae4f93fb25628f32d196d
Certificate serial:       0198745021761B83A8425211F9BC5BA02EAD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pwooe-qSWI_F2uT5P7JWKPMtGW0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/9014c3-1a49-4e62-9243-21335d1063af/1/Pwooe-qSWI_F2uT5P7JWKPMtGW0.mft
Manifest number:          1618
Signing time:             Mon 04 Aug 2025 09:01:05 +0000
Manifest this update:     Mon 04 Aug 2025 09:01:05 +0000
Manifest next update:     Tue 05 Aug 2025 09:01:05 +0000
Files and hashes:         1: EWY61EBMWvIz95kZvxz3f7Ao8DM.roa (hash: hUfTdT/UdwzPCuJouTIN5MiLU84ihpYE+x77dYeKVgo=)
                          2: Pwooe-qSWI_F2uT5P7JWKPMtGW0.crl (hash: AT9kCa0OH2MiVYaa5bObIcBMJZr/GfeWZO2Htvl0JIU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/9014c3-1a49-4e62-9243-21335d1063af/1/Pwooe-qSWI_F2uT5P7JWKPMtGW0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/9014c3-1a49-4e62-9243-21335d1063af/1/Pwooe-qSWI_F2uT5P7JWKPMtGW0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pwooe-qSWI_F2uT5P7JWKPMtGW0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 09:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:50:21:76:1b:83:a8:42:52:11:f9:bc:5b:a0:2e:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f0a287bea92588fc5dae4f93fb25628f32d196d
        Validity
            Not Before: Aug  4 09:01:05 2025 GMT
            Not After : Aug  5 09:01:05 2025 GMT
        Subject: CN=a710ea6b0729931ecd54f91ea51b03fc147e0793
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:0d:c2:f8:87:28:83:31:ed:b1:ee:17:6a:e9:
                    af:00:65:61:2e:9b:7b:75:f0:5d:3d:b6:13:cd:5f:
                    49:c7:3d:65:9a:ea:3b:d8:65:23:66:52:3f:4d:7f:
                    da:32:a6:7d:0d:bc:91:8a:e5:53:cb:40:34:11:35:
                    04:6f:72:07:0b:5a:80:2e:95:9d:9c:4f:e0:7e:d7:
                    5a:64:39:f8:80:f6:3c:be:44:5b:d4:33:66:b0:f0:
                    45:e0:25:dc:93:25:90:41:aa:9a:d3:cd:18:3e:69:
                    f3:bf:1c:42:eb:d4:21:f4:59:08:da:30:98:26:97:
                    15:66:ce:32:50:4b:46:1c:59:32:9a:1e:75:84:3e:
                    7c:0c:8a:e7:d2:81:e0:e5:3e:6d:45:e3:e2:5a:de:
                    21:8c:ea:22:8e:bc:71:b9:15:60:d6:43:cc:1c:da:
                    e0:00:19:21:a9:af:73:f1:f7:13:57:3b:d1:d1:59:
                    1e:eb:8f:7f:ee:44:b6:0a:92:63:f1:ab:67:c9:a0:
                    6a:06:c5:f0:c7:17:98:9d:a9:15:ab:b0:e1:2c:da:
                    bd:dd:55:fd:b4:0b:9f:5f:aa:30:60:87:d9:33:5b:
                    c2:dc:d8:d5:67:af:74:63:8a:75:e5:4c:c2:bd:98:
                    34:40:ff:1a:28:5f:25:10:a1:c0:68:b1:8d:44:7b:
                    f5:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:10:EA:6B:07:29:93:1E:CD:54:F9:1E:A5:1B:03:FC:14:7E:07:93
            X509v3 Authority Key Identifier:
                keyid:3F:0A:28:7B:EA:92:58:8F:C5:DA:E4:F9:3F:B2:56:28:F3:2D:19:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pwooe-qSWI_F2uT5P7JWKPMtGW0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/9014c3-1a49-4e62-9243-21335d1063af/1/Pwooe-qSWI_F2uT5P7JWKPMtGW0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/9014c3-1a49-4e62-9243-21335d1063af/1/Pwooe-qSWI_F2uT5P7JWKPMtGW0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:34:1b:95:65:f5:3e:ee:86:80:f5:7a:94:ca:a0:4e:ac:16:
         7c:eb:3d:3a:66:1a:b8:1f:1d:6f:f4:69:09:40:d8:9e:1c:66:
         58:b0:f7:b0:9c:5c:c8:fc:41:f5:df:d9:06:49:9b:8d:b8:c0:
         f9:f5:eb:93:34:f5:fa:77:cd:0c:5b:61:99:30:20:ed:bd:83:
         ac:bc:61:7d:09:27:dc:68:28:29:2e:6b:51:fb:34:c1:bb:ef:
         f8:a1:de:cd:e1:d6:6e:08:20:b0:a8:b1:eb:54:c5:3f:16:f5:
         2f:68:bc:59:56:e2:a3:f1:76:9e:b0:00:42:29:b0:8d:31:f5:
         3f:5b:4a:da:20:33:a3:a7:d2:c8:88:e8:8b:e2:ad:5c:2d:38:
         f3:7c:14:8a:0d:fc:17:a5:63:bc:a6:49:62:e4:00:81:cf:20:
         67:15:77:b1:00:c6:a4:4a:f7:a5:ed:d7:78:1b:f4:b2:a5:92:
         4f:0c:65:dc:22:ee:e7:92:fa:72:88:85:1d:ec:c0:1c:b8:5a:
         de:57:85:f5:3a:7c:f0:92:ea:8d:49:3b:3e:7a:bf:09:ff:ea:
         ed:d4:5c:64:8a:ad:da:ad:dd:cf:0a:42:dd:52:0e:5a:8c:b4:
         4a:61:1a:61:0b:c3:2f:8c:88:2d:81:f1:b4:c2:39:99:71:2a:
         25:a6:6d:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0UCF2G4OoQlIR+bxboC6tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmMGEyODdiZWE5MjU4OGZjNWRhZTRmOTNmYjI1NjI4ZjMy
ZDE5NmQwHhcNMjUwODA0MDkwMTA1WhcNMjUwODA1MDkwMTA1WjAzMTEwLwYDVQQD
EyhhNzEwZWE2YjA3Mjk5MzFlY2Q1NGY5MWVhNTFiMDNmYzE0N2UwNzkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnA3C+IcogzHtse4XaumvAGVhLpt7
dfBdPbYTzV9Jxz1lmuo72GUjZlI/TX/aMqZ9DbyRiuVTy0A0ETUEb3IHC1qALpWd
nE/gftdaZDn4gPY8vkRb1DNmsPBF4CXckyWQQaqa080YPmnzvxxC69Qh9FkI2jCY
JpcVZs4yUEtGHFkymh51hD58DIrn0oHg5T5tRePiWt4hjOoijrxxuRVg1kPMHNrg
ABkhqa9z8fcTVzvR0Vke649/7kS2CpJj8atnyaBqBsXwxxeYnakVq7DhLNq93VX9
tAufX6owYIfZM1vC3NjVZ690Y4p15UzCvZg0QP8aKF8lEKHAaLGNRHv1RQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKcQ6msHKZMezVT5HqUbA/wUfgeTMB8GA1UdIwQY
MBaAFD8KKHvqkliPxdrk+T+yVijzLRltMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHdvb2UtcVNXSV9GMnVUNVA3SldLUE10R1cwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy85MDE0YzMtMWE0OS00ZTYyLTkyNDMt
MjEzMzVkMTA2M2FmLzEvUHdvb2UtcVNXSV9GMnVUNVA3SldLUE10R1cwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy85MDE0YzMtMWE0OS00ZTYyLTkyNDMtMjEzMzVkMTA2M2Fm
LzEvUHdvb2UtcVNXSV9GMnVUNVA3SldLUE10R1cwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPjQblWX1
Pu6GgPV6lMqgTqwWfOs9OmYauB8db/RpCUDYnhxmWLD3sJxcyPxB9d/ZBkmbjbjA
+fXrkzT1+nfNDFthmTAg7b2DrLxhfQkn3GgoKS5rUfs0wbvv+KHezeHWbgggsKix
61TFPxb1L2i8WVbio/F2nrAAQimwjTH1P1tK2iAzo6fSyIjoi+KtXC0483wUig38
F6VjvKZJYuQAgc8gZxV3sQDGpEr3pe3XeBv0sqWSTwxl3CLu55L6coiFHezAHLha
3leF9Tp88JLqjUk7Pnq/Cf/q7dRcZIqt2q3dzwpC3VIOWoy0SmEaYQvDL4yILYHx
tMI5mXEqJaZt/w==
-----END CERTIFICATE-----
Generated at Mon Aug 4 16:14:58 2025 by rpki-client