Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/34b48f-70c0-4004-ba0f-de3c8d953ec5/1/wAqI1-WlZepxnPxA2Ltj7hZxhWo.mft
File:                     wAqI1-WlZepxnPxA2Ltj7hZxhWo.mft (raw, json)
Hash identifier:          0lSOaHSBe70/sSed0xifIbwtQA4wi2oQ1zYTOVLcDi0=
Subject key identifier:   33:C7:4D:5C:87:F5:4C:7A:A6:B4:B3:AC:8E:6A:95:22:14:91:97:E8
Authority key identifier: C0:0A:88:D7:E5:A5:65:EA:71:9C:FC:40:D8:BB:63:EE:16:71:85:6A
Certificate issuer:       /CN=c00a88d7e5a565ea719cfc40d8bb63ee1671856a
Certificate serial:       0198A083B074857627F07B3D5CCFE9022B81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wAqI1-WlZepxnPxA2Ltj7hZxhWo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/34b48f-70c0-4004-ba0f-de3c8d953ec5/1/wAqI1-WlZepxnPxA2Ltj7hZxhWo.mft
Manifest number:          0531
Signing time:             Tue 12 Aug 2025 23:00:41 +0000
Manifest this update:     Tue 12 Aug 2025 23:00:41 +0000
Manifest next update:     Wed 13 Aug 2025 23:00:41 +0000
Files and hashes:         1: KG9HkmRGaF_sHhDWjx3vp73PeIA.roa (hash: xtQ/Bf0q+zKX28vYl4yuK/JzcH8nDzNW75ipUDIj1iY=)
                          2: wAqI1-WlZepxnPxA2Ltj7hZxhWo.crl (hash: F2cwmIkJQq47zavfuo53BoZJNDp6BsCF0LS//Oc/n+I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/34b48f-70c0-4004-ba0f-de3c8d953ec5/1/wAqI1-WlZepxnPxA2Ltj7hZxhWo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/34b48f-70c0-4004-ba0f-de3c8d953ec5/1/wAqI1-WlZepxnPxA2Ltj7hZxhWo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wAqI1-WlZepxnPxA2Ltj7hZxhWo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 Aug 2025 22:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:a0:83:b0:74:85:76:27:f0:7b:3d:5c:cf:e9:02:2b:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c00a88d7e5a565ea719cfc40d8bb63ee1671856a
        Validity
            Not Before: Aug 12 23:00:41 2025 GMT
            Not After : Aug 13 23:00:41 2025 GMT
        Subject: CN=33c74d5c87f54c7aa6b4b3ac8e6a9522149197e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e4:49:1e:28:5e:3d:48:c1:7e:e5:18:7b:16:
                    bd:3c:a5:9f:37:89:3a:ca:75:c9:00:63:ce:a7:f7:
                    a7:ab:a1:93:eb:3b:2b:40:89:51:68:3a:61:46:e6:
                    8b:1f:dd:35:82:ad:99:63:dd:c9:47:3c:f9:bd:7a:
                    6c:f7:b5:90:58:36:b7:d5:e6:e9:a6:bf:28:42:42:
                    b5:ed:1d:d8:4d:d8:b9:2b:17:f4:60:13:a1:f7:bf:
                    48:72:4e:3a:6c:22:13:21:18:58:74:83:e7:26:e6:
                    71:70:ec:fb:f7:9b:e3:79:72:63:3c:64:61:83:f6:
                    6e:f7:73:c9:8a:d7:5b:0b:b6:b0:7a:52:0a:80:e4:
                    2a:3d:95:a1:84:36:75:95:f9:15:5a:79:37:97:ad:
                    db:e6:2b:32:be:84:73:03:2f:e2:6f:4f:1a:09:da:
                    2a:0f:9a:90:c9:24:b2:89:c9:35:47:90:a6:55:ed:
                    4d:2a:80:14:f8:77:91:b0:d5:90:5e:26:01:cd:58:
                    94:6a:dc:30:9e:80:aa:be:69:19:26:e7:1d:ab:3d:
                    39:63:0c:8d:04:69:83:d3:28:34:18:a5:0c:23:ca:
                    77:3a:6c:69:be:55:cc:3f:4b:28:86:4f:b8:cb:02:
                    42:28:9f:16:69:18:6e:e5:5e:9f:34:9f:b9:5a:7c:
                    bb:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:C7:4D:5C:87:F5:4C:7A:A6:B4:B3:AC:8E:6A:95:22:14:91:97:E8
            X509v3 Authority Key Identifier:
                keyid:C0:0A:88:D7:E5:A5:65:EA:71:9C:FC:40:D8:BB:63:EE:16:71:85:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wAqI1-WlZepxnPxA2Ltj7hZxhWo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/34b48f-70c0-4004-ba0f-de3c8d953ec5/1/wAqI1-WlZepxnPxA2Ltj7hZxhWo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/34b48f-70c0-4004-ba0f-de3c8d953ec5/1/wAqI1-WlZepxnPxA2Ltj7hZxhWo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:06:fe:0d:98:17:78:d2:fe:0c:97:cf:23:85:b0:f9:a7:e8:
         b9:8d:26:37:45:75:a8:bd:46:a4:0f:02:cf:3a:60:de:e6:8b:
         e6:ac:ee:db:a0:76:6f:6d:b9:14:e9:26:bd:d9:1a:88:60:fb:
         a6:fd:7d:64:73:7d:64:0b:56:4b:5b:4b:95:e4:28:6f:4c:c5:
         cf:a9:b6:36:ce:f8:ac:5d:31:ed:a0:51:0b:60:c8:f1:9e:b6:
         07:aa:f6:ef:9a:d8:b1:c1:3a:91:8d:ef:ca:20:d6:bb:3b:26:
         90:f3:1b:a3:82:6e:f9:d2:ac:f1:0a:8c:4a:7c:57:eb:f5:6b:
         91:15:a4:42:18:c2:d4:db:45:2d:26:38:a6:e9:5c:aa:17:bf:
         54:ed:6c:55:88:3b:1d:e5:76:31:79:a5:a1:c2:7e:98:79:5a:
         c5:90:4f:45:da:36:56:b4:d8:29:06:d3:2b:e8:3e:8a:fc:57:
         9c:3d:03:c3:d9:43:39:ea:73:fc:8c:94:12:e2:27:06:bd:95:
         37:80:f5:c4:fd:56:5a:ce:db:ea:89:7e:20:86:80:6a:2a:03:
         0e:6a:93:a4:69:ca:2a:95:2b:1c:6e:9f:bf:fd:e9:c4:53:01:
         b1:88:e3:2a:74:f6:fa:42:b3:0d:a1:e7:a4:c6:06:12:bb:ea:
         ec:75:77:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZigg7B0hXYn8Hs9XM/pAiuBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwMGE4OGQ3ZTVhNTY1ZWE3MTljZmM0MGQ4YmI2M2VlMTY3
MTg1NmEwHhcNMjUwODEyMjMwMDQxWhcNMjUwODEzMjMwMDQxWjAzMTEwLwYDVQQD
EygzM2M3NGQ1Yzg3ZjU0YzdhYTZiNGIzYWM4ZTZhOTUyMjE0OTE5N2U4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvORJHihePUjBfuUYexa9PKWfN4k6
ynXJAGPOp/enq6GT6zsrQIlRaDphRuaLH901gq2ZY93JRzz5vXps97WQWDa31ebp
pr8oQkK17R3YTdi5Kxf0YBOh979Ick46bCITIRhYdIPnJuZxcOz795vjeXJjPGRh
g/Zu93PJitdbC7awelIKgOQqPZWhhDZ1lfkVWnk3l63b5isyvoRzAy/ib08aCdoq
D5qQySSyick1R5CmVe1NKoAU+HeRsNWQXiYBzViUatwwnoCqvmkZJucdqz05YwyN
BGmD0yg0GKUMI8p3OmxpvlXMP0sohk+4ywJCKJ8WaRhu5V6fNJ+5Wny7YQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDPHTVyH9Ux6prSzrI5qlSIUkZfoMB8GA1UdIwQY
MBaAFMAKiNflpWXqcZz8QNi7Y+4WcYVqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0FxSTEtV2xaZXB4blB4QTJMdGo3aFp4aFdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8zNGI0OGYtNzBjMC00MDA0LWJhMGYt
ZGUzYzhkOTUzZWM1LzEvd0FxSTEtV2xaZXB4blB4QTJMdGo3aFp4aFdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy8zNGI0OGYtNzBjMC00MDA0LWJhMGYtZGUzYzhkOTUzZWM1
LzEvd0FxSTEtV2xaZXB4blB4QTJMdGo3aFp4aFdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhAb+DZgX
eNL+DJfPI4Ww+afouY0mN0V1qL1GpA8Czzpg3uaL5qzu26B2b225FOkmvdkaiGD7
pv19ZHN9ZAtWS1tLleQob0zFz6m2Ns74rF0x7aBRC2DI8Z62B6r275rYscE6kY3v
yiDWuzsmkPMbo4Ju+dKs8QqMSnxX6/VrkRWkQhjC1NtFLSY4pulcqhe/VO1sVYg7
HeV2MXmlocJ+mHlaxZBPRdo2VrTYKQbTK+g+ivxXnD0Dw9lDOepz/IyUEuInBr2V
N4D1xP1WWs7b6ol+IIaAaioDDmqTpGnKKpUrHG6fv/3pxFMBsYjjKnT2+kKzDaHn
pMYGErvq7HV3VA==
-----END CERTIFICATE-----
Generated at Wed Aug 13 05:29:10 2025 by rpki-client