Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/e7c762-d79e-46dc-af19-d7f78ac20707/1/wyzHqWT083CSkpHhn_995T8ZvkQ.mft
File:                     wyzHqWT083CSkpHhn_995T8ZvkQ.mft (raw, json)
Hash identifier:          MFZowF4rU9gdJqHOc+2niIpRMdLevvnX1fJzDH6/kUA=
Subject key identifier:   91:2F:82:B5:DF:34:4B:3A:69:5C:EF:7F:E8:50:87:FB:CB:56:A7:1E
Authority key identifier: C3:2C:C7:A9:64:F4:F3:70:92:92:91:E1:9F:FF:7D:E5:3F:19:BE:44
Certificate issuer:       /CN=c32cc7a964f4f370929291e19fff7de53f19be44
Certificate serial:       019A4DE1CD83C8E814FA8F7F87A183E9A1A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wyzHqWT083CSkpHhn_995T8ZvkQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/e7c762-d79e-46dc-af19-d7f78ac20707/1/wyzHqWT083CSkpHhn_995T8ZvkQ.mft
Manifest number:          1242
Signing time:             Tue 04 Nov 2025 08:00:35 +0000
Manifest this update:     Tue 04 Nov 2025 08:00:35 +0000
Manifest next update:     Wed 05 Nov 2025 08:00:35 +0000
Files and hashes:         1: RPcZgGGV6x_O2v93PF_KdiXOCls.roa (hash: zudz6ArhADUJ+zH91d1CGuKo9XvGzdpHdTulI/kePX0=)
                          2: wyzHqWT083CSkpHhn_995T8ZvkQ.crl (hash: +NLrN/tvPzGF4QT+iRwhHkWVGEhaOnr/3P1JwDs94rk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/e7c762-d79e-46dc-af19-d7f78ac20707/1/wyzHqWT083CSkpHhn_995T8ZvkQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/e7c762-d79e-46dc-af19-d7f78ac20707/1/wyzHqWT083CSkpHhn_995T8ZvkQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wyzHqWT083CSkpHhn_995T8ZvkQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 08:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4d:e1:cd:83:c8:e8:14:fa:8f:7f:87:a1:83:e9:a1:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c32cc7a964f4f370929291e19fff7de53f19be44
        Validity
            Not Before: Nov  4 08:00:35 2025 GMT
            Not After : Nov  5 08:00:35 2025 GMT
        Subject: CN=912f82b5df344b3a695cef7fe85087fbcb56a71e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:0c:8c:b0:0a:0b:eb:f9:c2:cc:66:93:b0:0c:
                    e9:95:26:16:45:f2:5a:4a:7a:bc:8a:32:3c:88:90:
                    72:9e:51:79:a4:b5:4b:61:0e:b3:a6:e2:3b:18:e5:
                    40:71:ee:aa:fd:cf:a6:8b:36:05:94:ba:14:ac:06:
                    33:13:7a:e4:7f:b0:4d:00:e2:8e:8f:0c:6f:fa:3d:
                    5d:c1:f6:13:54:cd:b9:b2:8c:ed:c4:1e:48:b3:94:
                    27:0e:c0:8e:9d:06:fa:03:c7:d0:8d:da:cb:7b:cb:
                    f7:d1:6f:8f:04:5a:aa:28:7c:1a:e3:9e:be:c9:54:
                    61:ba:43:82:08:ec:01:ca:ec:fd:0a:e7:6e:bb:7a:
                    6f:58:94:bd:17:64:15:ad:dc:08:b8:67:d8:3a:93:
                    62:32:98:72:b9:84:d0:e6:15:7e:79:46:4f:5e:b8:
                    dd:fa:91:08:c3:00:d0:32:9c:f7:4f:05:45:25:bb:
                    b2:75:75:2c:bf:ec:ab:3d:5a:7c:f3:19:7b:9a:51:
                    2e:1e:1d:0f:99:c7:c0:1c:e8:0e:20:20:f3:ed:8d:
                    bc:64:eb:29:4d:f2:82:e4:a3:cb:21:90:5f:7f:b4:
                    68:bd:9e:4f:4d:d1:cb:d7:34:50:8b:a0:ec:5f:f8:
                    37:38:d3:b2:95:5a:cb:59:4f:eb:4f:31:e1:31:1a:
                    c4:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:2F:82:B5:DF:34:4B:3A:69:5C:EF:7F:E8:50:87:FB:CB:56:A7:1E
            X509v3 Authority Key Identifier:
                keyid:C3:2C:C7:A9:64:F4:F3:70:92:92:91:E1:9F:FF:7D:E5:3F:19:BE:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wyzHqWT083CSkpHhn_995T8ZvkQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e7c762-d79e-46dc-af19-d7f78ac20707/1/wyzHqWT083CSkpHhn_995T8ZvkQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e7c762-d79e-46dc-af19-d7f78ac20707/1/wyzHqWT083CSkpHhn_995T8ZvkQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:46:57:2e:4d:e4:09:52:04:cf:e3:e7:30:28:f1:12:54:9d:
         f5:80:d8:c8:5d:ce:99:1d:06:d5:f2:47:7c:2b:a9:fe:14:54:
         cb:78:0e:b3:51:33:4f:dd:b5:a1:61:d7:35:19:58:46:73:3c:
         23:f9:70:41:fc:5e:5e:94:e7:4b:9a:f5:06:06:66:e7:b3:91:
         5b:d2:c4:d4:d0:34:7f:74:b8:cf:f0:b5:5d:d8:a3:c3:3f:eb:
         12:f5:63:20:71:35:3e:0d:48:6b:96:fe:c9:f9:d9:e5:13:b2:
         1d:bb:e8:f0:e4:a5:e6:18:6f:fe:ad:65:14:f6:94:8c:9a:8b:
         e2:84:44:0e:3b:f7:ad:7b:2c:e3:61:83:e9:ed:7e:5e:bc:3d:
         9f:5a:1d:13:8c:77:58:da:a0:8f:88:ec:60:d7:ef:c9:16:7c:
         cb:7f:1b:12:c6:7e:cc:ff:7e:d4:d9:82:8d:6a:2e:c7:44:ef:
         6f:74:c0:8b:aa:46:5b:a7:f3:67:37:02:a5:89:06:cd:d7:f1:
         cd:58:58:d5:78:37:7c:a4:12:c8:ac:f3:7a:7f:28:4c:cf:42:
         90:dd:a1:c9:6a:59:8b:62:60:c9:2a:d4:58:4f:d3:96:c9:f6:
         be:1f:bd:00:e1:bb:af:03:9e:6d:82:dc:c0:84:e3:40:bf:ad:
         d4:15:79:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpN4c2DyOgU+o9/h6GD6aGkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzMmNjN2E5NjRmNGYzNzA5MjkyOTFlMTlmZmY3ZGU1M2Yx
OWJlNDQwHhcNMjUxMTA0MDgwMDM1WhcNMjUxMTA1MDgwMDM1WjAzMTEwLwYDVQQD
Eyg5MTJmODJiNWRmMzQ0YjNhNjk1Y2VmN2ZlODUwODdmYmNiNTZhNzFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmAyMsAoL6/nCzGaTsAzplSYWRfJa
Snq8ijI8iJBynlF5pLVLYQ6zpuI7GOVAce6q/c+mizYFlLoUrAYzE3rkf7BNAOKO
jwxv+j1dwfYTVM25soztxB5Is5QnDsCOnQb6A8fQjdrLe8v30W+PBFqqKHwa456+
yVRhukOCCOwByuz9Cuduu3pvWJS9F2QVrdwIuGfYOpNiMphyuYTQ5hV+eUZPXrjd
+pEIwwDQMpz3TwVFJbuydXUsv+yrPVp88xl7mlEuHh0PmcfAHOgOICDz7Y28ZOsp
TfKC5KPLIZBff7RovZ5PTdHL1zRQi6DsX/g3ONOylVrLWU/rTzHhMRrEnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJEvgrXfNEs6aVzvf+hQh/vLVqceMB8GA1UdIwQY
MBaAFMMsx6lk9PNwkpKR4Z//feU/Gb5EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3l6SHFXVDA4M0NTa3BIaG5fOTk1VDhadmtRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9lN2M3NjItZDc5ZS00NmRjLWFmMTkt
ZDdmNzhhYzIwNzA3LzEvd3l6SHFXVDA4M0NTa3BIaG5fOTk1VDhadmtRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS9lN2M3NjItZDc5ZS00NmRjLWFmMTktZDdmNzhhYzIwNzA3
LzEvd3l6SHFXVDA4M0NTa3BIaG5fOTk1VDhadmtRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkkZXLk3k
CVIEz+PnMCjxElSd9YDYyF3OmR0G1fJHfCup/hRUy3gOs1EzT921oWHXNRlYRnM8
I/lwQfxeXpTnS5r1BgZm57ORW9LE1NA0f3S4z/C1Xdijwz/rEvVjIHE1Pg1Ia5b+
yfnZ5ROyHbvo8OSl5hhv/q1lFPaUjJqL4oREDjv3rXss42GD6e1+Xrw9n1odE4x3
WNqgj4jsYNfvyRZ8y38bEsZ+zP9+1NmCjWoux0Tvb3TAi6pGW6fzZzcCpYkGzdfx
zVhY1Xg3fKQSyKzzen8oTM9CkN2hyWpZi2JgySrUWE/Tlsn2vh+9AOG7rwOebYLc
wITjQL+t1BV5cQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:18:16 2025 by rpki-client