Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/e7c762-d79e-46dc-af19-d7f78ac20707/1/wyzHqWT083CSkpHhn_995T8ZvkQ.mft
File:                     wyzHqWT083CSkpHhn_995T8ZvkQ.mft (raw, json)
Hash identifier:          3TzJONcltE7KEtro6YSmpr0tc7S3OF+HN1zSd9bI+cM=
Subject key identifier:   AF:A4:8A:7B:1E:20:15:80:1C:B1:DF:3D:40:C6:43:67:8C:5E:14:CC
Authority key identifier: C3:2C:C7:A9:64:F4:F3:70:92:92:91:E1:9F:FF:7D:E5:3F:19:BE:44
Certificate issuer:       /CN=c32cc7a964f4f370929291e19fff7de53f19be44
Certificate serial:       019893A3DC410033533A02AEAACE134416F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wyzHqWT083CSkpHhn_995T8ZvkQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/e7c762-d79e-46dc-af19-d7f78ac20707/1/wyzHqWT083CSkpHhn_995T8ZvkQ.mft
Manifest number:          115D
Signing time:             Sun 10 Aug 2025 11:00:46 +0000
Manifest this update:     Sun 10 Aug 2025 11:00:46 +0000
Manifest next update:     Mon 11 Aug 2025 11:00:46 +0000
Files and hashes:         1: RPcZgGGV6x_O2v93PF_KdiXOCls.roa (hash: zudz6ArhADUJ+zH91d1CGuKo9XvGzdpHdTulI/kePX0=)
                          2: wyzHqWT083CSkpHhn_995T8ZvkQ.crl (hash: 1nPqbPKccxcy4Tyx7CEQ7bjUSwY1UgJIQWBKxqO5Whc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/e7c762-d79e-46dc-af19-d7f78ac20707/1/wyzHqWT083CSkpHhn_995T8ZvkQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/e7c762-d79e-46dc-af19-d7f78ac20707/1/wyzHqWT083CSkpHhn_995T8ZvkQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wyzHqWT083CSkpHhn_995T8ZvkQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 08:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:93:a3:dc:41:00:33:53:3a:02:ae:aa:ce:13:44:16:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c32cc7a964f4f370929291e19fff7de53f19be44
        Validity
            Not Before: Aug 10 11:00:46 2025 GMT
            Not After : Aug 11 11:00:46 2025 GMT
        Subject: CN=afa48a7b1e2015801cb1df3d40c643678c5e14cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:9d:89:31:a3:aa:ed:0e:c9:57:07:56:14:13:
                    db:63:06:36:25:15:55:b2:43:5e:4e:04:1b:ec:9b:
                    52:39:a8:9f:6a:e8:46:48:cd:04:9f:7f:23:75:e2:
                    f4:f2:56:f6:db:3e:d5:98:af:49:e3:21:a4:b7:63:
                    a4:a7:99:46:55:7d:b7:fd:04:20:60:ac:8b:43:1d:
                    ba:f6:4e:3c:96:d9:4a:58:fa:51:11:58:d2:29:12:
                    31:ba:22:70:49:a4:7b:c0:5e:a8:4a:47:a5:2f:c4:
                    5f:fe:79:da:51:f0:f6:04:a4:f5:40:54:50:54:63:
                    10:97:45:a9:15:d2:55:d8:f1:c6:48:31:7b:37:a2:
                    bb:9e:d3:1f:a5:8c:48:f4:35:82:47:0f:1d:1c:9d:
                    06:f6:42:09:de:8c:6e:81:ab:24:c9:e3:26:a6:c8:
                    32:21:a7:70:9e:3b:76:7a:8a:3f:17:a7:77:aa:e3:
                    fb:58:bc:8a:97:4f:ec:75:e9:70:02:af:c5:83:d5:
                    fd:25:98:b8:94:40:2d:10:40:5d:55:cf:dd:6d:80:
                    3a:6d:ae:74:9d:34:2a:8f:f7:d8:82:a4:fe:bf:38:
                    fd:d3:ca:0f:e8:75:4d:ce:97:69:9c:98:dc:e5:6f:
                    c2:e1:cc:07:9e:26:b0:9c:66:c5:f2:07:d8:82:dc:
                    25:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:A4:8A:7B:1E:20:15:80:1C:B1:DF:3D:40:C6:43:67:8C:5E:14:CC
            X509v3 Authority Key Identifier:
                keyid:C3:2C:C7:A9:64:F4:F3:70:92:92:91:E1:9F:FF:7D:E5:3F:19:BE:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wyzHqWT083CSkpHhn_995T8ZvkQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e7c762-d79e-46dc-af19-d7f78ac20707/1/wyzHqWT083CSkpHhn_995T8ZvkQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e7c762-d79e-46dc-af19-d7f78ac20707/1/wyzHqWT083CSkpHhn_995T8ZvkQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:23:24:66:53:98:ea:03:57:a9:d0:88:ea:94:80:30:e5:a4:
         89:eb:06:6b:3a:70:c2:ce:fd:8c:9d:14:18:cb:ba:c5:5c:41:
         76:ef:bd:2d:4b:39:32:e4:3a:c5:70:24:e5:36:c1:4f:01:1e:
         68:8a:3b:4d:85:46:dd:4f:e0:89:32:66:5e:ce:a8:be:b3:51:
         43:44:2f:f1:67:f0:81:44:68:08:33:b2:7b:f8:7c:62:e3:24:
         c8:13:c8:79:91:8e:d2:77:8e:5a:9d:c4:4e:3c:f5:33:a3:76:
         68:b0:26:41:b4:5b:88:5e:57:bd:bf:98:59:ec:e5:1b:d4:ab:
         b8:0e:1b:24:56:fc:13:d1:34:dc:ae:ec:5a:3d:66:d5:20:58:
         dd:de:f5:44:4c:3b:4f:c6:88:2f:f1:94:55:2d:42:dd:b4:f0:
         0a:8b:96:9c:02:96:c6:d8:8d:cb:c5:34:5b:2e:87:c9:e0:cf:
         f8:d4:a2:f7:b5:42:0c:02:97:a3:a6:24:0b:08:60:5e:31:d3:
         e3:bc:ce:ff:51:42:ce:e1:58:b1:e1:00:bd:a0:3d:dc:2d:d1:
         b4:09:c0:d2:fa:51:aa:da:ab:c9:bb:06:fa:16:3f:c8:a8:70:
         34:54:18:a5:0c:1c:85:34:de:5a:3f:d1:e4:d8:d8:26:df:a3:
         6f:7a:33:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:45:20 2025 by rpki-client