Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/32f3bb-2594-4b37-94aa-941244f5dded/1/wnz1VgIH7OhILDL8tplfd9f3MMs.mft
File:                     wnz1VgIH7OhILDL8tplfd9f3MMs.mft (raw, json)
Hash identifier:          vmPHQcokz8XSvS/1IrjvahjQLxn56NnL/bMXptU9fGU=
Subject key identifier:   16:EE:C7:29:3D:49:82:38:A8:7E:25:3D:FF:C1:2D:DD:2A:09:CC:4F
Authority key identifier: C2:7C:F5:56:02:07:EC:E8:48:2C:32:FC:B6:99:5F:77:D7:F7:30:CB
Certificate issuer:       /CN=c27cf5560207ece8482c32fcb6995f77d7f730cb
Certificate serial:       01988EED1506EB945966D3F7BB29679459A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wnz1VgIH7OhILDL8tplfd9f3MMs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/32f3bb-2594-4b37-94aa-941244f5dded/1/wnz1VgIH7OhILDL8tplfd9f3MMs.mft
Manifest number:          030B
Signing time:             Sat 09 Aug 2025 13:02:38 +0000
Manifest this update:     Sat 09 Aug 2025 13:02:38 +0000
Manifest next update:     Sun 10 Aug 2025 13:02:38 +0000
Files and hashes:         1: f45K-_tztLGikN2V1uWSCFuY_68.roa (hash: xJe3gW2GTPkOmGgSxCeDd1gAbtFU96D/eKs9HOKj+Eo=)
                          2: wnz1VgIH7OhILDL8tplfd9f3MMs.crl (hash: jj2tui7GaJeRCYPh5RWLdh95iwdNOSDBpl+nQ8Au+qI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/32f3bb-2594-4b37-94aa-941244f5dded/1/wnz1VgIH7OhILDL8tplfd9f3MMs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/32f3bb-2594-4b37-94aa-941244f5dded/1/wnz1VgIH7OhILDL8tplfd9f3MMs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wnz1VgIH7OhILDL8tplfd9f3MMs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 Aug 2025 05:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8e:ed:15:06:eb:94:59:66:d3:f7:bb:29:67:94:59:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c27cf5560207ece8482c32fcb6995f77d7f730cb
        Validity
            Not Before: Aug  9 13:02:38 2025 GMT
            Not After : Aug 10 13:02:38 2025 GMT
        Subject: CN=16eec7293d498238a87e253dffc12ddd2a09cc4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:9e:3b:70:f4:4f:39:9a:3d:9a:b4:1f:a3:b5:
                    9e:af:b1:d1:51:3b:c2:d8:c6:fb:37:e9:67:03:3e:
                    23:a9:ae:15:72:df:32:80:3d:b1:b3:a8:37:7d:35:
                    54:08:66:7c:1f:ad:85:16:3b:62:ee:8b:21:91:84:
                    d0:e4:7c:49:5c:c5:c0:58:48:b5:7f:a6:89:50:0e:
                    18:02:81:b8:0c:d5:07:5a:8b:7d:56:05:40:0d:e1:
                    45:49:38:eb:32:e7:76:a6:b3:51:04:c3:0e:1e:b8:
                    20:4f:9e:ea:1a:68:5f:28:73:e5:a2:41:13:24:f0:
                    48:87:3f:61:c7:b1:30:a2:bd:d4:fb:f0:9d:4e:b3:
                    2f:01:37:ff:fa:de:b4:55:3d:54:9b:b9:e8:29:6f:
                    31:29:c7:37:b2:c4:37:90:d2:d4:c4:84:16:47:e1:
                    cb:c5:1d:3b:a5:3c:6c:54:9e:27:55:73:01:33:26:
                    1e:df:29:05:90:45:96:cd:66:5c:98:9b:1f:91:80:
                    8f:81:7b:84:99:cc:77:6c:99:d1:f0:5f:38:44:53:
                    f2:03:12:b6:ba:33:d1:3f:3f:97:7f:2e:ec:ad:ec:
                    82:94:88:0e:a2:25:b0:0c:10:fc:f0:b3:db:12:06:
                    f1:c1:ef:b5:f7:34:de:e9:cd:f4:b3:d8:9d:6b:92:
                    ef:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:EE:C7:29:3D:49:82:38:A8:7E:25:3D:FF:C1:2D:DD:2A:09:CC:4F
            X509v3 Authority Key Identifier:
                keyid:C2:7C:F5:56:02:07:EC:E8:48:2C:32:FC:B6:99:5F:77:D7:F7:30:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wnz1VgIH7OhILDL8tplfd9f3MMs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/32f3bb-2594-4b37-94aa-941244f5dded/1/wnz1VgIH7OhILDL8tplfd9f3MMs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/32f3bb-2594-4b37-94aa-941244f5dded/1/wnz1VgIH7OhILDL8tplfd9f3MMs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:3a:95:1d:78:91:a3:04:8c:92:e4:c6:9c:c4:cd:d2:1d:42:
         62:ed:2d:3f:e9:fb:a0:b5:88:dd:32:1d:85:39:e4:ea:58:07:
         42:c9:cd:ed:bf:61:20:86:c4:47:79:68:af:07:cb:b4:77:a2:
         b3:14:52:10:13:dc:a0:8d:8a:13:2c:4d:ad:f0:85:eb:79:6c:
         5a:8a:5d:72:0b:7c:6b:83:2f:14:a8:7a:79:20:63:70:6b:be:
         74:63:ee:fe:cf:8c:4a:d9:ec:68:06:3a:c5:dc:3d:a3:6d:19:
         99:03:29:29:94:a5:88:fd:ac:04:e5:15:b9:1b:ac:f9:24:d1:
         e3:fe:63:21:99:50:8f:ef:14:12:7b:01:ef:31:72:88:50:0b:
         36:c3:38:14:a0:8e:39:f2:a2:0f:14:dd:4e:d8:63:5b:be:73:
         1e:f6:f8:33:34:58:f4:08:fc:e3:3f:13:e1:31:09:c2:6e:74:
         d3:0d:0c:b3:93:fd:74:72:52:66:87:d9:27:04:d8:19:13:92:
         27:85:3c:cb:2d:40:69:d9:c1:28:31:0d:77:10:97:71:8b:88:
         a5:0a:e1:c0:6c:3d:95:65:54:fb:b2:65:5b:94:7d:75:77:2d:
         b4:b8:6e:e9:a6:47:2f:01:66:31:fb:bb:af:a3:94:0e:bb:07:
         1c:dd:b5:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 15:06:45 2025 by rpki-client