Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/0bdca3-283a-4942-8592-c394541f770e/1/wRxYM3zU10zZIZ2HeN7lsp8IpGE.mft
File:                     wRxYM3zU10zZIZ2HeN7lsp8IpGE.mft (raw, json)
Hash identifier:          U8G1ky1ZRRPNlBj966zw4x6vi3l4Vxe7YcINeIAUynw=
Subject key identifier:   D3:3E:DE:E1:44:86:28:8F:8B:94:C5:44:21:77:CF:A0:C3:50:DF:DC
Authority key identifier: C1:1C:58:33:7C:D4:D7:4C:D9:21:9D:87:78:DE:E5:B2:9F:08:A4:61
Certificate issuer:       /CN=c11c58337cd4d74cd9219d8778dee5b29f08a461
Certificate serial:       01987C77709F5251D8AB456FDCF5390CFFC4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wRxYM3zU10zZIZ2HeN7lsp8IpGE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/0bdca3-283a-4942-8592-c394541f770e/1/wRxYM3zU10zZIZ2HeN7lsp8IpGE.mft
Manifest number:          161D
Signing time:             Tue 05 Aug 2025 23:00:58 +0000
Manifest this update:     Tue 05 Aug 2025 23:00:58 +0000
Manifest next update:     Wed 06 Aug 2025 23:00:58 +0000
Files and hashes:         1: E0oPYTANwX4SVfmo4G4Bb_Ffflc.roa (hash: POCopGH4Sf5gshG/ai7EpgPCh9X9MivwqlQ7wpM8V2Q=)
                          2: wRxYM3zU10zZIZ2HeN7lsp8IpGE.crl (hash: hEGVzSVGdvMB15eGOKwQRhwjAw2RfQHmAJibXWb7mYY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/0bdca3-283a-4942-8592-c394541f770e/1/wRxYM3zU10zZIZ2HeN7lsp8IpGE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/0bdca3-283a-4942-8592-c394541f770e/1/wRxYM3zU10zZIZ2HeN7lsp8IpGE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wRxYM3zU10zZIZ2HeN7lsp8IpGE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 Aug 2025 23:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7c:77:70:9f:52:51:d8:ab:45:6f:dc:f5:39:0c:ff:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c11c58337cd4d74cd9219d8778dee5b29f08a461
        Validity
            Not Before: Aug  5 23:00:58 2025 GMT
            Not After : Aug  6 23:00:58 2025 GMT
        Subject: CN=d33edee14486288f8b94c5442177cfa0c350dfdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:4a:5d:23:df:3b:80:90:c6:e5:9d:32:58:6c:
                    a3:28:51:ad:7a:32:bb:6b:f1:4e:27:23:1e:6f:57:
                    02:87:81:ea:83:cb:bf:64:d2:d7:a2:e2:33:ba:b3:
                    bf:04:2c:ca:aa:65:a3:96:81:65:d8:a7:b4:f0:72:
                    74:75:aa:21:79:a8:1a:5d:75:d9:73:83:a0:5f:ae:
                    ad:f6:80:06:ec:25:3d:5f:64:a8:b3:f6:ef:5d:41:
                    89:bc:da:07:76:82:97:f1:fa:cc:2e:a2:d7:f7:be:
                    ab:8a:3d:1d:5a:1d:2c:31:9a:ca:7c:1a:b9:e5:d0:
                    9c:07:e0:b1:67:64:30:59:40:8f:22:ba:1f:40:64:
                    6b:24:72:ea:e0:f0:d6:d5:ee:87:32:c5:c5:ea:c4:
                    02:46:1f:a2:f0:8f:45:31:da:ab:fe:8f:0d:f9:1f:
                    62:c5:31:1d:89:8f:b8:48:b2:d6:c6:18:7c:2b:b4:
                    9a:e4:47:14:16:6b:60:44:0d:aa:a2:41:4e:7a:88:
                    da:c8:9a:61:89:79:97:ae:a6:80:55:b6:d9:33:9b:
                    9c:f2:21:7f:bf:c8:0e:7f:28:a6:42:9e:46:e6:26:
                    32:98:12:68:cd:66:4f:7c:1a:b4:77:e8:00:3b:4b:
                    92:97:aa:42:d4:82:6a:0c:a1:1b:08:0d:b4:23:52:
                    f4:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:3E:DE:E1:44:86:28:8F:8B:94:C5:44:21:77:CF:A0:C3:50:DF:DC
            X509v3 Authority Key Identifier:
                keyid:C1:1C:58:33:7C:D4:D7:4C:D9:21:9D:87:78:DE:E5:B2:9F:08:A4:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wRxYM3zU10zZIZ2HeN7lsp8IpGE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0bdca3-283a-4942-8592-c394541f770e/1/wRxYM3zU10zZIZ2HeN7lsp8IpGE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0bdca3-283a-4942-8592-c394541f770e/1/wRxYM3zU10zZIZ2HeN7lsp8IpGE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:53:00:ec:c5:b7:2f:58:b7:8a:d3:c2:e3:62:db:3c:de:b1:
         75:54:50:14:cc:e6:eb:6c:a8:43:7d:6b:99:45:5b:51:a7:93:
         07:9c:60:e7:fd:44:4e:81:5f:70:ae:46:b6:9d:00:d1:3e:ee:
         c1:0a:78:bf:9e:ad:8c:b3:7b:00:42:f2:6e:87:79:40:3c:3d:
         eb:66:de:e2:a7:a0:c0:12:01:a6:50:dc:bc:6f:db:0f:97:55:
         80:76:26:e7:db:26:d9:e6:15:96:62:36:d7:36:b3:60:21:89:
         bf:2d:d8:03:d7:29:96:71:c9:b3:a1:ff:c3:4b:87:a3:2e:d8:
         8f:19:ed:4d:b1:29:33:57:d0:41:54:a0:97:1f:f5:37:e0:77:
         5b:38:dc:64:38:6d:38:5d:4d:38:df:08:9c:8c:9b:7f:b3:76:
         1f:d4:2b:f4:d4:b3:7a:08:39:0a:d0:83:53:7a:77:48:db:ce:
         8c:90:fe:da:80:d9:e8:13:d3:0f:ad:86:00:f1:c0:19:59:e0:
         17:f6:3a:b0:46:b6:9a:7c:bf:5a:3a:be:aa:79:66:7b:2e:e8:
         c3:3e:22:55:f9:f7:34:89:2e:f3:8d:31:cf:fe:6a:45:81:f9:
         6a:11:7d:61:9e:77:09:f9:e7:dd:84:88:44:67:6a:ef:31:ae:
         34:5b:80:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh8d3CfUlHYq0Vv3PU5DP/EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxMWM1ODMzN2NkNGQ3NGNkOTIxOWQ4Nzc4ZGVlNWIyOWYw
OGE0NjEwHhcNMjUwODA1MjMwMDU4WhcNMjUwODA2MjMwMDU4WjAzMTEwLwYDVQQD
EyhkMzNlZGVlMTQ0ODYyODhmOGI5NGM1NDQyMTc3Y2ZhMGMzNTBkZmRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA30pdI987gJDG5Z0yWGyjKFGtejK7
a/FOJyMeb1cCh4Hqg8u/ZNLXouIzurO/BCzKqmWjloFl2Ke08HJ0daoheagaXXXZ
c4OgX66t9oAG7CU9X2Sos/bvXUGJvNoHdoKX8frMLqLX976rij0dWh0sMZrKfBq5
5dCcB+CxZ2QwWUCPIrofQGRrJHLq4PDW1e6HMsXF6sQCRh+i8I9FMdqr/o8N+R9i
xTEdiY+4SLLWxhh8K7Sa5EcUFmtgRA2qokFOeojayJphiXmXrqaAVbbZM5uc8iF/
v8gOfyimQp5G5iYymBJozWZPfBq0d+gAO0uSl6pC1IJqDKEbCA20I1L0yQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNM+3uFEhiiPi5TFRCF3z6DDUN/cMB8GA1UdIwQY
MBaAFMEcWDN81NdM2SGdh3je5bKfCKRhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1J4WU0zelUxMHpaSVoySGVON2xzcDhJcEdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8wYmRjYTMtMjgzYS00OTQyLTg1OTIt
YzM5NDU0MWY3NzBlLzEvd1J4WU0zelUxMHpaSVoySGVON2xzcDhJcEdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi8wYmRjYTMtMjgzYS00OTQyLTg1OTItYzM5NDU0MWY3NzBl
LzEvd1J4WU0zelUxMHpaSVoySGVON2xzcDhJcEdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAclMA7MW3
L1i3itPC42LbPN6xdVRQFMzm62yoQ31rmUVbUaeTB5xg5/1EToFfcK5Gtp0A0T7u
wQp4v56tjLN7AELybod5QDw962be4qegwBIBplDcvG/bD5dVgHYm59sm2eYVlmI2
1zazYCGJvy3YA9cplnHJs6H/w0uHoy7YjxntTbEpM1fQQVSglx/1N+B3WzjcZDht
OF1NON8InIybf7N2H9Qr9NSzegg5CtCDU3p3SNvOjJD+2oDZ6BPTD62GAPHAGVng
F/Y6sEa2mny/Wjq+qnlmey7owz4iVfn3NIku840xz/5qRYH5ahF9YZ53Cfnn3YSI
RGdq7zGuNFuA/A==
-----END CERTIFICATE-----
Generated at Wed Aug 6 07:50:40 2025 by rpki-client