Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/3c2676-9245-4b3c-bb7f-8a29120750bf/1/WueVPpRZ3AlIbw3cWfKkBbVmklA.mft
File:                     WueVPpRZ3AlIbw3cWfKkBbVmklA.mft (raw, json)
Hash identifier:          iPDQB6qqFP+qUa85PLsbmLqHMzDbxt/HLe/G6Exb1EM=
Subject key identifier:   E9:14:DE:A1:6D:41:F7:1A:A4:14:4C:7C:62:70:AA:DD:3E:11:21:23
Authority key identifier: 5A:E7:95:3E:94:59:DC:09:48:6F:0D:DC:59:F2:A4:05:B5:66:92:50
Certificate issuer:       /CN=5ae7953e9459dc09486f0ddc59f2a405b5669250
Certificate serial:       019874508D05FD8B530E630294E280701E7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WueVPpRZ3AlIbw3cWfKkBbVmklA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/3c2676-9245-4b3c-bb7f-8a29120750bf/1/WueVPpRZ3AlIbw3cWfKkBbVmklA.mft
Manifest number:          157E
Signing time:             Mon 04 Aug 2025 09:01:32 +0000
Manifest this update:     Mon 04 Aug 2025 09:01:32 +0000
Manifest next update:     Tue 05 Aug 2025 09:01:32 +0000
Files and hashes:         1: DBk26ni3rWAWrcHCnCAPZ2xkK4Q.roa (hash: Qk/2nxHHAgzzRwHK2tRfQQjLdz8MwTUa/j75IBrERBE=)
                          2: WueVPpRZ3AlIbw3cWfKkBbVmklA.crl (hash: 3EVpbDTOvZoAFKA7JxZ+OUzL/jFZfS7ZixNDi1iyTEk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/3c2676-9245-4b3c-bb7f-8a29120750bf/1/WueVPpRZ3AlIbw3cWfKkBbVmklA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/3c2676-9245-4b3c-bb7f-8a29120750bf/1/WueVPpRZ3AlIbw3cWfKkBbVmklA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WueVPpRZ3AlIbw3cWfKkBbVmklA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:74:50:8d:05:fd:8b:53:0e:63:02:94:e2:80:70:1e:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ae7953e9459dc09486f0ddc59f2a405b5669250
        Validity
            Not Before: Aug  4 09:01:32 2025 GMT
            Not After : Aug  5 09:01:32 2025 GMT
        Subject: CN=e914dea16d41f71aa4144c7c6270aadd3e112123
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:49:1b:1e:43:0c:ad:a4:55:86:fb:dc:93:e8:
                    24:95:96:4f:aa:41:98:3d:b0:ae:ae:42:3f:5f:56:
                    f2:08:96:f3:d2:d3:07:98:b2:c0:25:f6:d4:ac:dc:
                    c5:ea:fe:c1:e0:c6:00:2c:39:fa:89:7e:59:f4:c6:
                    c6:cc:25:1f:0d:79:ee:3e:5b:f6:1a:9f:b8:df:cf:
                    70:8a:24:fa:38:6e:a6:8c:9a:43:c0:87:85:44:43:
                    e3:9e:cf:ab:5c:9c:88:73:0d:e8:b5:ad:2b:97:05:
                    f5:06:b8:be:b4:9d:d3:f3:be:58:68:e4:1b:59:6f:
                    41:e8:43:2a:41:37:2d:61:c3:1d:d3:96:fb:1c:c2:
                    d0:f8:a8:b9:3a:f3:0a:7b:bc:fd:5d:3d:65:90:d1:
                    18:e3:b6:5e:cd:fc:05:5a:b1:c3:18:4d:4f:42:02:
                    ba:dd:48:e9:ad:42:0f:f4:49:97:1b:68:16:5e:db:
                    70:bb:4b:45:d1:9b:e1:6e:48:3d:c4:4e:8c:89:6a:
                    b5:d8:30:a6:12:9c:db:68:09:0b:b3:d3:57:7e:31:
                    45:fb:c4:9f:da:55:ed:a4:3e:73:56:6a:67:36:3b:
                    77:7b:63:dd:01:57:86:6e:e4:1b:44:89:76:cb:f0:
                    1b:06:c6:a4:7c:f1:a9:fd:54:59:4b:bc:b9:8f:2b:
                    23:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:14:DE:A1:6D:41:F7:1A:A4:14:4C:7C:62:70:AA:DD:3E:11:21:23
            X509v3 Authority Key Identifier:
                keyid:5A:E7:95:3E:94:59:DC:09:48:6F:0D:DC:59:F2:A4:05:B5:66:92:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WueVPpRZ3AlIbw3cWfKkBbVmklA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/3c2676-9245-4b3c-bb7f-8a29120750bf/1/WueVPpRZ3AlIbw3cWfKkBbVmklA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/3c2676-9245-4b3c-bb7f-8a29120750bf/1/WueVPpRZ3AlIbw3cWfKkBbVmklA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:f6:cc:b1:7e:cc:63:77:2c:b3:1e:e7:23:0f:2e:e5:55:6b:
         cf:51:d0:ec:27:4f:bc:41:c3:36:cf:c4:b8:9f:02:24:61:e6:
         65:c7:f3:23:4c:a3:cb:c5:fd:78:af:ab:e6:cd:c2:e1:99:e4:
         c4:ac:b2:9d:fb:7d:96:b1:98:c0:8c:d0:0a:84:1e:4a:93:44:
         10:e1:c6:3b:10:01:14:96:8c:f1:01:a0:f5:bb:93:64:e1:b2:
         12:e2:8d:66:bd:ae:42:5a:7d:11:b6:6c:13:0f:0c:56:0a:02:
         a6:d2:ac:98:bb:b3:29:95:bb:45:c3:eb:59:54:76:d2:74:9f:
         ae:f5:a3:01:72:4e:d1:4b:7a:eb:9b:66:db:dc:53:59:da:a1:
         3e:f9:8a:36:36:18:53:8f:04:5e:94:e8:00:57:b1:68:0b:d7:
         3e:71:5a:b0:fc:33:a4:f0:06:97:3b:64:7f:52:bd:ff:a2:9f:
         63:70:f5:0b:e6:2a:6c:0e:9f:a5:d9:0b:e4:62:49:5d:92:90:
         b1:e9:8f:c6:c6:66:a7:0a:bf:2a:fc:73:21:e4:b6:85:a4:da:
         df:0c:0f:a0:96:22:29:03:99:40:b2:a4:0a:14:68:a8:c5:28:
         b9:fb:18:2c:a6:5b:e3:b4:ee:c4:37:05:ef:a9:4b:15:9d:1c:
         c6:47:e2:09
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0UI0F/YtTDmMClOKAcB58MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhZTc5NTNlOTQ1OWRjMDk0ODZmMGRkYzU5ZjJhNDA1YjU2
NjkyNTAwHhcNMjUwODA0MDkwMTMyWhcNMjUwODA1MDkwMTMyWjAzMTEwLwYDVQQD
EyhlOTE0ZGVhMTZkNDFmNzFhYTQxNDRjN2M2MjcwYWFkZDNlMTEyMTIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUkbHkMMraRVhvvck+gklZZPqkGY
PbCurkI/X1byCJbz0tMHmLLAJfbUrNzF6v7B4MYALDn6iX5Z9MbGzCUfDXnuPlv2
Gp+4389wiiT6OG6mjJpDwIeFREPjns+rXJyIcw3ota0rlwX1Bri+tJ3T875YaOQb
WW9B6EMqQTctYcMd05b7HMLQ+Ki5OvMKe7z9XT1lkNEY47ZezfwFWrHDGE1PQgK6
3UjprUIP9EmXG2gWXttwu0tF0Zvhbkg9xE6MiWq12DCmEpzbaAkLs9NXfjFF+8Sf
2lXtpD5zVmpnNjt3e2PdAVeGbuQbRIl2y/AbBsakfPGp/VRZS7y5jysjXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOkU3qFtQfcapBRMfGJwqt0+ESEjMB8GA1UdIwQY
MBaAFFrnlT6UWdwJSG8N3FnypAW1ZpJQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3VlVlBwUlozQWxJYnczY1dmS2tCYlZta2xBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8zYzI2NzYtOTI0NS00YjNjLWJiN2Yt
OGEyOTEyMDc1MGJmLzEvV3VlVlBwUlozQWxJYnczY1dmS2tCYlZta2xBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS8zYzI2NzYtOTI0NS00YjNjLWJiN2YtOGEyOTEyMDc1MGJm
LzEvV3VlVlBwUlozQWxJYnczY1dmS2tCYlZta2xBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkvbMsX7M
Y3cssx7nIw8u5VVrz1HQ7CdPvEHDNs/EuJ8CJGHmZcfzI0yjy8X9eK+r5s3C4Znk
xKyynft9lrGYwIzQCoQeSpNEEOHGOxABFJaM8QGg9buTZOGyEuKNZr2uQlp9EbZs
Ew8MVgoCptKsmLuzKZW7RcPrWVR20nSfrvWjAXJO0Ut665tm29xTWdqhPvmKNjYY
U48EXpToAFexaAvXPnFasPwzpPAGlztkf1K9/6KfY3D1C+YqbA6fpdkL5GJJXZKQ
semPxsZmpwq/KvxzIeS2haTa3wwPoJYiKQOZQLKkChRoqMUoufsYLKZb47TuxDcF
76lLFZ0cxkfiCQ==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:10:15 2025 by rpki-client