Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/b7cd45-1f03-4158-8297-a3f61e30b514/1/wz-t0SfmXNkN4-lWjly8-0jJsko.mft
File:                     wz-t0SfmXNkN4-lWjly8-0jJsko.mft (raw, json)
Hash identifier:          IH5mi/OAWG86QRjE1aDWPc4z9BLsu3pyu6NeGgc9vFs=
Subject key identifier:   7D:53:2B:21:5B:50:14:93:81:22:9D:91:0B:0E:65:09:A8:4E:EC:00
Authority key identifier: C3:3F:AD:D1:27:E6:5C:D9:0D:E3:E9:56:8E:5C:BC:FB:48:C9:B2:4A
Certificate issuer:       /CN=c33fadd127e65cd90de3e9568e5cbcfb48c9b24a
Certificate serial:       01987E661A4A0220742D6ACEEAC0D9024E14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wz-t0SfmXNkN4-lWjly8-0jJsko.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/b7cd45-1f03-4158-8297-a3f61e30b514/1/wz-t0SfmXNkN4-lWjly8-0jJsko.mft
Manifest number:          061D
Signing time:             Wed 06 Aug 2025 08:01:17 +0000
Manifest this update:     Wed 06 Aug 2025 08:01:17 +0000
Manifest next update:     Thu 07 Aug 2025 08:01:17 +0000
Files and hashes:         1: mRIJhbiYi4_Fn9rbvJxpcE5BqwE.roa (hash: QFNaK1Gy0ycMOCo2B8J3U81MNF8ZnZJf7GULAc5HdJY=)
                          2: wz-t0SfmXNkN4-lWjly8-0jJsko.crl (hash: dBjFbtjUxl933AF9AVmz8H8gZIa1ngQ/EW7AGk3VNFA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/b7cd45-1f03-4158-8297-a3f61e30b514/1/wz-t0SfmXNkN4-lWjly8-0jJsko.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/b7cd45-1f03-4158-8297-a3f61e30b514/1/wz-t0SfmXNkN4-lWjly8-0jJsko.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wz-t0SfmXNkN4-lWjly8-0jJsko.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 08:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7e:66:1a:4a:02:20:74:2d:6a:ce:ea:c0:d9:02:4e:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c33fadd127e65cd90de3e9568e5cbcfb48c9b24a
        Validity
            Not Before: Aug  6 08:01:17 2025 GMT
            Not After : Aug  7 08:01:17 2025 GMT
        Subject: CN=7d532b215b50149381229d910b0e6509a84eec00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:9f:15:c1:ae:39:82:a1:96:75:cd:03:e1:79:
                    6c:d6:f0:34:3d:76:d4:50:a6:96:58:2e:e0:64:3d:
                    18:92:bc:41:1f:91:9b:7d:29:1f:dc:7f:56:4b:96:
                    21:d2:79:da:c3:82:67:12:ed:75:37:65:be:0a:ec:
                    45:81:dc:af:34:d6:c7:59:71:ed:4c:6b:1e:fc:1d:
                    94:a6:c4:8e:9a:f7:9d:a8:dd:d0:9f:af:d6:00:de:
                    58:b1:36:27:7b:b0:e7:f8:f1:0c:7f:ab:a3:a1:51:
                    32:11:1e:86:3c:9b:af:e0:78:63:da:52:0f:37:89:
                    6b:45:f3:1e:6a:98:b0:23:e9:5b:67:c6:36:30:12:
                    a1:3b:07:b2:90:e4:84:74:75:c5:4c:33:ce:d1:69:
                    02:12:be:00:e2:bc:3c:52:85:1f:a2:b7:77:b7:93:
                    50:d7:b3:b9:7d:04:87:3a:9d:0f:cc:a6:2d:c5:2f:
                    5c:40:c1:6f:c4:e9:74:aa:9b:85:3a:83:d0:e0:d8:
                    da:02:ff:eb:af:8b:92:6b:b0:ce:e3:f0:7b:1e:c1:
                    ff:46:54:7b:43:5c:a2:17:32:eb:7e:aa:65:49:9e:
                    8d:c3:ff:8e:38:43:f9:9b:cd:9d:da:61:98:48:8e:
                    d6:ba:4a:fe:44:1c:cb:7d:69:62:91:ce:e2:f4:e7:
                    72:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:53:2B:21:5B:50:14:93:81:22:9D:91:0B:0E:65:09:A8:4E:EC:00
            X509v3 Authority Key Identifier:
                keyid:C3:3F:AD:D1:27:E6:5C:D9:0D:E3:E9:56:8E:5C:BC:FB:48:C9:B2:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wz-t0SfmXNkN4-lWjly8-0jJsko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/b7cd45-1f03-4158-8297-a3f61e30b514/1/wz-t0SfmXNkN4-lWjly8-0jJsko.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/b7cd45-1f03-4158-8297-a3f61e30b514/1/wz-t0SfmXNkN4-lWjly8-0jJsko.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:12:70:8e:32:17:61:3c:9f:5f:6b:aa:d2:af:8c:a1:0b:2d:
         b4:51:5d:ec:dc:8a:f9:f6:7d:e3:9c:a7:7e:7d:c6:50:ba:de:
         15:8c:cd:49:21:36:2e:8d:6a:59:49:f6:95:b2:c8:d7:cc:36:
         f8:03:cd:9b:59:49:ad:d3:9d:a6:64:42:79:ca:57:5f:9a:a3:
         51:27:ed:d2:bf:a8:9d:b7:6a:e6:0f:f9:7c:59:06:b9:32:6d:
         21:58:7b:79:fd:ec:bf:b6:86:2b:16:77:41:e9:a7:1b:a5:db:
         ca:b9:94:c0:ee:7b:d9:07:77:a0:3e:5b:d1:ab:c2:48:91:de:
         7d:f3:49:46:c3:5c:5c:70:7c:67:85:9c:47:73:df:d0:8b:c0:
         36:0e:ad:61:94:97:e1:99:15:7e:7c:e4:67:e1:4e:f1:87:c9:
         3f:10:51:c8:e5:bf:ec:af:b6:7d:b8:af:bd:dd:a2:d8:55:e2:
         60:eb:c1:ce:a5:4a:ab:a1:f8:b9:a5:df:58:72:6e:dc:77:5a:
         04:2f:b8:69:76:29:34:cb:e9:c2:74:ad:6f:53:13:34:df:d6:
         16:90:58:b2:29:e9:a1:a3:06:52:7e:c3:4b:83:e3:8b:6b:20:
         dc:1b:e0:0b:f8:cd:c1:44:6a:be:9b:64:f9:f3:d1:ea:e3:3b:
         b4:15:6a:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:12:51 2025 by rpki-client