Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.mft
File:                     wtIegEq3cTrXh33eYDqngksxmDw.mft (raw, json)
Hash identifier:          bQ1f0XmX+totJRHz7A0SWrw+QGx+V9+vu83s/nF4HwY=
Subject key identifier:   2E:AE:07:78:A2:41:D5:69:69:05:E6:8D:5E:57:A7:67:90:98:CE:3C
Authority key identifier: C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C
Certificate issuer:       /CN=c2d21e804ab7713ad7877dde603aa7824b31983c
Certificate serial:       01988844368D22037C3F4C3A5E4663376E62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.mft
Manifest number:          0F94
Signing time:             Fri 08 Aug 2025 06:00:28 +0000
Manifest this update:     Fri 08 Aug 2025 06:00:28 +0000
Manifest next update:     Sat 09 Aug 2025 06:00:28 +0000
Files and hashes:         1: 6npNfqw9ft3wFBb5k5d8Au1GyrU.roa (hash: Ypl6gLmfJjGNPDL8Gk8ZFTBrn9giPszXF7Ziq9N8zCY=)
                          2: CEHno33Cl7h0GLAM4p0jfcTuU2k.roa (hash: VzZMvgTQCr8mQ/IevQojqSyjWV0o3WsjpJkJUVzQ2fo=)
                          3: F0e-LrOaO1fC5d8GXQ9bEeDZ160.roa (hash: cofTGB9X2CyIcikGAWppFcO24T6sgvWIjXIVxAl57xQ=)
                          4: GB4vtqTXSwKp7zeWzOQndrqFgF8.roa (hash: rdiyJfrKTAJ+PqJC+r6+QSHIQKbyvYvJTxSXGGM5e8w=)
                          5: GeAJ1HW4BIewoLPfGbb-SsL5NGw.roa (hash: srwRADwGDIIx52WT+/n/TTLrhpUiRbeWdmuzYXw/VCw=)
                          6: HGLfNFEmq1zoGMYRZBEFVC-KI2E.roa (hash: FKMG8ZBG6AFoA3ZFzEjcDqb09W6tPLhjGkfNe7kPOX4=)
                          7: JN30kUlZb2UdsgE-OutzbLQiERo.roa (hash: B/Z1tvVR2z8KZUGUWDKLU3ou6I+OjR3sN2Q9pxieTbk=)
                          8: biJknYRjE5L_jTv2KpvNG71JuZs.roa (hash: HCdhdiyjdtaidQONiCaAjw0Va1l2ztmngnp9upg/BOo=)
                          9: cMyuoWOy66eDKnjdJCEfhSkyz1E.roa (hash: LOQsteLks/Yul4nf8jy2hWFak5manC4iYDuO7o5PTtg=)
                          10: dxFo2JNSLNyFjO0-WsCs0C6Hof0.roa (hash: NmFePRA7yHk29wTet83LObHlNy/GZGPfuri37nzr9Xk=)
                          11: hdNNHQIFwnpnxNggYxU1p6Z-XGk.roa (hash: tOBVPWHOBl8156ZGKWKuty1/zjQtgPwsgL3f1n3MYGU=)
                          12: nq9QkGdX68nm-XUKViIxXutv5p0.roa (hash: LYeY4Ewyqeshu3FPO2U3xARlcYpAxYT/ihB3h+fhL+8=)
                          13: o0w1bPk9yQkEzOmquHjyTCzVPsc.roa (hash: m8T06/6PXu8/epS4UvU7PZ+M0wtlNs/1xaD5zm6hoAE=)
                          14: uZxgwvEf9WeuGM60Zi1VK8Mj4UI.roa (hash: 33y4OizHoHywglDgbvg5deRkLMeifLFTIVE+wULlWa4=)
                          15: vxkpUFyY_pV46Dy2vccW_kFg3Xg.roa (hash: qhf8yhleIujtWTxbbg63MczcaiHWwXzoRrg7MjpLcgQ=)
                          16: wtIegEq3cTrXh33eYDqngksxmDw.crl (hash: proO1/vusHfn8GsUyrhCz0fmlUZpQ+DyFFqzorjASDI=)
                          17: wwFX4PAqfUeMNXpGS3KNseh4ppg.roa (hash: OLlfS0/X+1Yl71pRy+nk3a/H1A/qBK8IAfXsmm/hZsc=)
                          18: z9W-SXWXNvPf50hBoKJTZsS-x88.roa (hash: Pj96ONEJXoTrBWw/wBWoBoF3HEpksk4ZBOjXYOlm2eQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 06:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:88:44:36:8d:22:03:7c:3f:4c:3a:5e:46:63:37:6e:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2d21e804ab7713ad7877dde603aa7824b31983c
        Validity
            Not Before: Aug  8 06:00:28 2025 GMT
            Not After : Aug  9 06:00:28 2025 GMT
        Subject: CN=2eae0778a241d5696905e68d5e57a7679098ce3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:07:b5:58:13:0d:1a:aa:43:29:19:26:df:15:
                    d6:f8:aa:96:97:bf:07:10:b6:d0:e3:ee:a9:97:14:
                    62:8a:4b:b9:d0:9d:47:ae:d6:c8:0d:72:5e:99:1b:
                    32:32:e1:48:03:6c:06:05:3d:d5:21:52:cb:50:22:
                    ab:fb:5f:ed:32:b1:b6:12:f4:1c:b6:4e:3d:c8:e1:
                    6e:ed:c1:37:eb:e3:84:8a:4e:3d:6f:8c:bf:4f:89:
                    d2:8f:67:fc:c8:76:9a:08:8d:01:89:b6:04:d9:6d:
                    dc:e0:cc:f5:ff:aa:94:c7:62:0a:57:fe:c2:ca:c8:
                    78:e4:be:a8:37:be:0b:3d:bb:9c:6e:c9:3e:20:fb:
                    33:66:7c:4e:0e:06:f9:36:11:4d:ff:23:e9:4d:79:
                    9c:6a:40:65:93:6e:6b:e3:da:20:59:5b:fa:82:7c:
                    7d:10:55:85:ac:74:0e:b4:e9:49:16:49:54:dc:d9:
                    c5:42:fc:6e:8b:a0:f1:72:e4:09:6a:4b:8f:a1:0a:
                    8f:16:02:8d:0d:90:0b:7c:11:a0:36:40:b4:bb:ca:
                    70:19:f7:83:ce:cf:29:2a:31:6d:f1:31:66:24:9a:
                    18:75:7d:fc:49:88:78:8d:31:aa:e7:e9:bd:c7:d7:
                    18:33:32:ab:85:0d:cf:38:e1:f9:93:fa:c5:ac:64:
                    e7:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:AE:07:78:A2:41:D5:69:69:05:E6:8D:5E:57:A7:67:90:98:CE:3C
            X509v3 Authority Key Identifier:
                keyid:C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:92:67:92:4f:ce:1e:17:70:87:ea:ce:29:c7:c6:53:02:ea:
         a4:c5:a9:9e:63:9d:26:53:21:ff:ba:51:dc:59:66:a1:b4:8b:
         4c:65:6a:01:63:cc:c1:1b:41:fa:3e:28:f5:b2:44:1c:e4:c6:
         1d:79:05:94:69:37:5f:8a:c2:da:de:7b:b7:43:50:26:fa:f9:
         48:1e:bb:d3:34:80:70:f6:f3:a2:90:c9:94:2c:81:44:d5:ee:
         d6:9e:fc:0c:00:17:fd:ff:9a:28:6d:90:4d:6d:a3:33:e7:3b:
         29:25:59:45:e1:17:8c:36:2a:16:54:c1:51:36:d4:f7:68:78:
         b9:ab:c7:99:c5:0b:5e:41:bc:a8:15:b3:ef:e8:15:16:03:5f:
         b9:ce:76:3f:4a:37:3a:73:5e:1e:31:76:f3:08:7a:87:6c:78:
         6b:e4:34:a5:2b:6e:8d:f4:59:e8:22:33:04:67:1c:79:bb:e8:
         8c:46:9f:00:88:d5:66:84:3f:c8:b6:9e:f4:91:07:72:d0:63:
         f7:f2:f2:b9:89:7c:19:cf:88:50:36:0f:db:1c:73:e9:df:1c:
         04:85:54:67:4e:22:e9:a7:c1:19:a1:5a:8e:3b:2e:89:f0:3e:
         06:ce:22:bd:47:cb:24:6c:1c:e7:65:ec:e1:79:9a:69:a1:bf:
         50:d3:b9:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiIRDaNIgN8P0w6XkZjN25iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyZDIxZTgwNGFiNzcxM2FkNzg3N2RkZTYwM2FhNzgyNGIz
MTk4M2MwHhcNMjUwODA4MDYwMDI4WhcNMjUwODA5MDYwMDI4WjAzMTEwLwYDVQQD
EygyZWFlMDc3OGEyNDFkNTY5NjkwNWU2OGQ1ZTU3YTc2NzkwOThjZTNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQe1WBMNGqpDKRkm3xXW+KqWl78H
ELbQ4+6plxRiiku50J1HrtbIDXJemRsyMuFIA2wGBT3VIVLLUCKr+1/tMrG2EvQc
tk49yOFu7cE36+OEik49b4y/T4nSj2f8yHaaCI0BibYE2W3c4Mz1/6qUx2IKV/7C
ysh45L6oN74LPbucbsk+IPszZnxODgb5NhFN/yPpTXmcakBlk25r49ogWVv6gnx9
EFWFrHQOtOlJFklU3NnFQvxui6DxcuQJakuPoQqPFgKNDZALfBGgNkC0u8pwGfeD
zs8pKjFt8TFmJJoYdX38SYh4jTGq5+m9x9cYMzKrhQ3POOH5k/rFrGTn0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC6uB3iiQdVpaQXmjV5Xp2eQmM48MB8GA1UdIwQY
MBaAFMLSHoBKt3E614d93mA6p4JLMZg8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3RJZWdFcTNjVHJYaDMzZVlEcW5na3N4bUR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wNGI0NDYtNGFlMS00ZmU1LWI2NDYt
NTlhZTA5ZWRiZWI5LzEvd3RJZWdFcTNjVHJYaDMzZVlEcW5na3N4bUR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wNGI0NDYtNGFlMS00ZmU1LWI2NDYtNTlhZTA5ZWRiZWI5
LzEvd3RJZWdFcTNjVHJYaDMzZVlEcW5na3N4bUR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOJJnkk/O
Hhdwh+rOKcfGUwLqpMWpnmOdJlMh/7pR3FlmobSLTGVqAWPMwRtB+j4o9bJEHOTG
HXkFlGk3X4rC2t57t0NQJvr5SB670zSAcPbzopDJlCyBRNXu1p78DAAX/f+aKG2Q
TW2jM+c7KSVZReEXjDYqFlTBUTbU92h4uavHmcULXkG8qBWz7+gVFgNfuc52P0o3
OnNeHjF28wh6h2x4a+Q0pStujfRZ6CIzBGccebvojEafAIjVZoQ/yLae9JEHctBj
9/LyuYl8Gc+IUDYP2xxz6d8cBIVUZ04i6afBGaFajjsuifA+Bs4ivUfLJGwc52Xs
4XmaaaG/UNO56A==
-----END CERTIFICATE-----
Generated at Fri Aug 8 13:12:08 2025 by rpki-client