Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/3a61cc-7286-4fb0-9508-c135a6edb861/1/wTuQ-qxe_PkxlWGdoW86R-_-mf4.mft
File:                     wTuQ-qxe_PkxlWGdoW86R-_-mf4.mft (raw, json)
Hash identifier:          EwPsLvTBAJBw+T5oJXf2sKwCy7QIqQcSFmWlG+m6yEg=
Subject key identifier:   CF:73:2D:0D:CE:78:0F:56:54:D8:63:C3:A5:1E:CE:3D:E7:10:2C:D8
Authority key identifier: C1:3B:90:FA:AC:5E:FC:F9:31:95:61:9D:A1:6F:3A:47:EF:FE:99:FE
Certificate issuer:       /CN=c13b90faac5efcf93195619da16f3a47effe99fe
Certificate serial:       0198971283ED661F58EB415CD64310DFD41F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wTuQ-qxe_PkxlWGdoW86R-_-mf4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/3a61cc-7286-4fb0-9508-c135a6edb861/1/wTuQ-qxe_PkxlWGdoW86R-_-mf4.mft
Manifest number:          1628
Signing time:             Mon 11 Aug 2025 03:00:29 +0000
Manifest this update:     Mon 11 Aug 2025 03:00:29 +0000
Manifest next update:     Tue 12 Aug 2025 03:00:29 +0000
Files and hashes:         1: iyuy2kmWqZNHXuAfcuh0lwdEN5U.roa (hash: 80r40j4f0TX0nXOpgOJuceIx9IUXe6MHRj3CO+H5lVg=)
                          2: wTuQ-qxe_PkxlWGdoW86R-_-mf4.crl (hash: kPJx36q84DKFHVhLYzQ2yQIFeR8EgZQOdX6cIx1AKBU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a5/3a61cc-7286-4fb0-9508-c135a6edb861/1/wTuQ-qxe_PkxlWGdoW86R-_-mf4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a5/3a61cc-7286-4fb0-9508-c135a6edb861/1/wTuQ-qxe_PkxlWGdoW86R-_-mf4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wTuQ-qxe_PkxlWGdoW86R-_-mf4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 12 Aug 2025 02:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:97:12:83:ed:66:1f:58:eb:41:5c:d6:43:10:df:d4:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c13b90faac5efcf93195619da16f3a47effe99fe
        Validity
            Not Before: Aug 11 03:00:29 2025 GMT
            Not After : Aug 12 03:00:29 2025 GMT
        Subject: CN=cf732d0dce780f5654d863c3a51ece3de7102cd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:5a:3d:78:02:82:c7:d7:dd:29:33:45:27:98:
                    61:4b:65:47:11:02:00:5d:db:07:3c:2a:e3:f3:ea:
                    ab:88:b8:78:3d:d0:c1:71:91:83:ef:16:12:a9:2a:
                    d6:6c:e9:04:cf:5d:97:ce:50:de:11:88:53:ff:45:
                    a7:f5:c0:28:31:79:e9:ae:5c:cc:76:7f:1e:cf:69:
                    5b:17:6d:72:bd:5f:d4:20:22:12:e9:32:83:d7:e1:
                    81:ea:2a:5a:de:34:79:92:52:a7:1a:57:b9:78:34:
                    ab:ad:3c:34:d1:6d:35:f9:67:92:ae:97:48:4c:ce:
                    aa:43:3d:85:0d:b3:c7:ed:11:f2:62:ef:b8:24:71:
                    30:5b:0e:8e:3b:53:d7:c7:41:79:6f:21:f4:ef:55:
                    ab:54:4e:97:d8:ad:dc:82:f6:7c:f5:87:f8:5f:9c:
                    34:65:4f:80:c5:72:79:d8:ef:b3:ce:4e:b2:99:9d:
                    35:a6:21:8c:3f:be:c3:4b:00:c0:02:8f:8e:ba:b1:
                    e6:54:51:45:17:bf:74:62:c6:7d:de:c6:26:0e:20:
                    ab:8e:ea:86:75:87:23:52:37:30:d0:a1:40:fc:9b:
                    f1:5a:d5:50:05:ec:50:0d:7c:fc:48:1b:b1:92:7c:
                    a2:e1:87:00:8e:8d:32:25:c0:32:65:bc:2a:02:8c:
                    2a:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:73:2D:0D:CE:78:0F:56:54:D8:63:C3:A5:1E:CE:3D:E7:10:2C:D8
            X509v3 Authority Key Identifier:
                keyid:C1:3B:90:FA:AC:5E:FC:F9:31:95:61:9D:A1:6F:3A:47:EF:FE:99:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wTuQ-qxe_PkxlWGdoW86R-_-mf4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3a61cc-7286-4fb0-9508-c135a6edb861/1/wTuQ-qxe_PkxlWGdoW86R-_-mf4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3a61cc-7286-4fb0-9508-c135a6edb861/1/wTuQ-qxe_PkxlWGdoW86R-_-mf4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:20:7c:92:82:c0:bf:b7:c4:98:6b:48:1c:bd:d2:b7:2f:2a:
         80:7b:3d:eb:fe:f2:05:40:bc:93:d5:94:88:44:47:2d:17:be:
         40:08:d6:0a:cb:1a:a2:a4:1e:ac:5e:0c:b1:ac:94:ad:c5:49:
         1c:7a:e4:bb:9b:2e:44:58:99:21:7c:64:af:28:17:49:51:7f:
         97:43:eb:52:dc:33:60:31:31:ed:60:a3:b5:a3:03:88:d5:8c:
         8b:4a:36:4e:db:b8:b4:e4:8a:ac:0f:81:af:f1:a5:2f:55:f0:
         86:29:4b:40:d8:7c:84:bb:43:20:d9:6e:1c:a3:e4:e6:6d:46:
         0a:49:46:7d:c5:ed:ab:c6:20:3f:98:58:43:13:65:a9:16:33:
         e1:52:d0:31:db:1c:e4:a6:11:43:32:2b:6c:88:3f:90:f1:91:
         57:f4:fc:87:05:68:22:14:ce:d3:5b:7f:be:66:f4:b6:db:b0:
         d1:53:06:33:10:e9:f4:90:51:3b:de:b1:6f:1e:6b:83:b4:51:
         10:9b:c8:d5:13:af:1b:ac:33:5c:0b:f0:33:f6:a5:83:f3:27:
         ad:3d:d2:a0:0c:d6:b7:88:ab:7e:1b:7c:61:28:b2:b1:6b:d8:
         20:43:b0:94:26:db:39:e3:d0:a2:41:dd:e7:dc:ba:10:f0:1f:
         e4:b4:3f:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiXEoPtZh9Y60Fc1kMQ39QfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxM2I5MGZhYWM1ZWZjZjkzMTk1NjE5ZGExNmYzYTQ3ZWZm
ZTk5ZmUwHhcNMjUwODExMDMwMDI5WhcNMjUwODEyMDMwMDI5WjAzMTEwLwYDVQQD
EyhjZjczMmQwZGNlNzgwZjU2NTRkODYzYzNhNTFlY2UzZGU3MTAyY2Q4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1o9eAKCx9fdKTNFJ5hhS2VHEQIA
XdsHPCrj8+qriLh4PdDBcZGD7xYSqSrWbOkEz12XzlDeEYhT/0Wn9cAoMXnprlzM
dn8ez2lbF21yvV/UICIS6TKD1+GB6ipa3jR5klKnGle5eDSrrTw00W01+WeSrpdI
TM6qQz2FDbPH7RHyYu+4JHEwWw6OO1PXx0F5byH071WrVE6X2K3cgvZ89Yf4X5w0
ZU+AxXJ52O+zzk6ymZ01piGMP77DSwDAAo+OurHmVFFFF790YsZ93sYmDiCrjuqG
dYcjUjcw0KFA/JvxWtVQBexQDXz8SBuxknyi4YcAjo0yJcAyZbwqAowqNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM9zLQ3OeA9WVNhjw6Uezj3nECzYMB8GA1UdIwQY
MBaAFME7kPqsXvz5MZVhnaFvOkfv/pn+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1R1US1xeGVfUGt4bFdHZG9XODZSLV8tbWY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8zYTYxY2MtNzI4Ni00ZmIwLTk1MDgt
YzEzNWE2ZWRiODYxLzEvd1R1US1xeGVfUGt4bFdHZG9XODZSLV8tbWY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS8zYTYxY2MtNzI4Ni00ZmIwLTk1MDgtYzEzNWE2ZWRiODYx
LzEvd1R1US1xeGVfUGt4bFdHZG9XODZSLV8tbWY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARSB8koLA
v7fEmGtIHL3Sty8qgHs96/7yBUC8k9WUiERHLRe+QAjWCssaoqQerF4MsayUrcVJ
HHrku5suRFiZIXxkrygXSVF/l0PrUtwzYDEx7WCjtaMDiNWMi0o2Ttu4tOSKrA+B
r/GlL1XwhilLQNh8hLtDINluHKPk5m1GCklGfcXtq8YgP5hYQxNlqRYz4VLQMdsc
5KYRQzIrbIg/kPGRV/T8hwVoIhTO01t/vmb0ttuw0VMGMxDp9JBRO96xbx5rg7RR
EJvI1ROvG6wzXAvwM/alg/MnrT3SoAzWt4irfht8YSiysWvYIEOwlCbbOePQokHd
59y6EPAf5LQ/9g==
-----END CERTIFICATE-----
Generated at Mon Aug 11 07:47:00 2025 by rpki-client