Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/101696-83dd-436f-b47c-3e1b8432fc70/1/v1WZwmdV9KTU9UDi_9e3SjkFPaM.mft
File:                     v1WZwmdV9KTU9UDi_9e3SjkFPaM.mft (raw, json)
Hash identifier:          1mJfJvvWUU2uzqzpELOKHR1/dFkOopWl+SUCao80nQ4=
Subject key identifier:   87:70:9D:4C:0E:EF:2F:33:F3:46:D0:DD:E3:06:39:F5:B6:50:87:0C
Authority key identifier: BF:55:99:C2:67:55:F4:A4:D4:F5:40:E2:FF:D7:B7:4A:39:05:3D:A3
Certificate issuer:       /CN=bf5599c26755f4a4d4f540e2ffd7b74a39053da3
Certificate serial:       01976C98D5619CE5B75BC4B8B2DFE88B3FFA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v1WZwmdV9KTU9UDi_9e3SjkFPaM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/101696-83dd-436f-b47c-3e1b8432fc70/1/v1WZwmdV9KTU9UDi_9e3SjkFPaM.mft
Manifest number:          0CEA
Signing time:             Sat 14 Jun 2025 04:00:44 +0000
Manifest this update:     Sat 14 Jun 2025 04:00:44 +0000
Manifest next update:     Sun 15 Jun 2025 04:00:44 +0000
Files and hashes:         1: Fuwpc4A-TRfgVPSV8ewciJSWczY.roa (hash: Y0uk9yq3kYnde4ofaqo2ePCwnF8vYGybwjzGM4J+Glo=)
                          2: v1WZwmdV9KTU9UDi_9e3SjkFPaM.crl (hash: MuZYIA4tULQ1cFdjsQtE5BaAU4WnAJly3Z5HySul/Eo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/101696-83dd-436f-b47c-3e1b8432fc70/1/v1WZwmdV9KTU9UDi_9e3SjkFPaM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/101696-83dd-436f-b47c-3e1b8432fc70/1/v1WZwmdV9KTU9UDi_9e3SjkFPaM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v1WZwmdV9KTU9UDi_9e3SjkFPaM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:98:d5:61:9c:e5:b7:5b:c4:b8:b2:df:e8:8b:3f:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf5599c26755f4a4d4f540e2ffd7b74a39053da3
        Validity
            Not Before: Jun 14 04:00:44 2025 GMT
            Not After : Jun 15 04:00:44 2025 GMT
        Subject: CN=87709d4c0eef2f33f346d0dde30639f5b650870c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:5a:eb:c6:60:fc:5f:86:8a:bc:1b:53:61:f1:
                    b4:55:83:5a:21:98:ad:75:c3:16:67:1b:5e:10:53:
                    cc:14:a0:cb:4f:ef:9d:03:70:88:a4:67:2d:b8:a6:
                    94:e9:9f:c9:6b:19:87:cb:f1:2a:8c:cb:2f:3c:6a:
                    57:e7:93:bc:5b:c2:2f:c4:2d:19:fa:8b:ad:46:4f:
                    18:8c:10:5f:13:7b:0f:0d:b5:dd:43:32:6f:ae:39:
                    c9:71:89:ef:e2:f6:89:12:35:8d:f3:29:e4:d9:2f:
                    da:aa:88:25:31:20:7e:2e:4b:6c:06:84:d0:5d:f1:
                    dd:0d:bb:02:24:c8:f3:68:78:d6:41:83:81:92:cc:
                    2a:d7:c2:cc:c2:fd:6c:c9:f5:19:b5:fa:b4:c9:67:
                    db:87:5b:ce:f4:59:22:2a:ec:7e:6b:72:48:ee:7c:
                    86:20:4d:ae:5b:86:42:62:75:d1:3e:9a:5a:45:b3:
                    02:5c:f7:77:e5:32:8a:18:ce:52:a2:35:a8:8e:ff:
                    cb:c0:e0:06:b5:ab:87:17:87:c7:c5:fe:f0:b7:ad:
                    b7:14:bf:65:01:5a:24:4f:5f:0e:91:5a:b9:99:8e:
                    6d:67:5c:f4:3b:ce:1a:10:20:52:29:85:c5:2b:cd:
                    41:5a:ae:89:94:bd:72:18:78:76:65:31:ea:fe:60:
                    f9:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:70:9D:4C:0E:EF:2F:33:F3:46:D0:DD:E3:06:39:F5:B6:50:87:0C
            X509v3 Authority Key Identifier:
                keyid:BF:55:99:C2:67:55:F4:A4:D4:F5:40:E2:FF:D7:B7:4A:39:05:3D:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v1WZwmdV9KTU9UDi_9e3SjkFPaM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/101696-83dd-436f-b47c-3e1b8432fc70/1/v1WZwmdV9KTU9UDi_9e3SjkFPaM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/101696-83dd-436f-b47c-3e1b8432fc70/1/v1WZwmdV9KTU9UDi_9e3SjkFPaM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:7f:be:14:1d:17:a8:f2:fc:5f:54:b7:a0:ed:d4:46:97:c3:
         f0:c7:05:3e:ba:a5:ef:c0:ee:1c:c8:2c:fb:5a:34:5c:65:6e:
         bc:5e:99:66:4d:47:07:ea:4e:06:a3:77:40:41:9d:c1:9a:a3:
         97:90:a5:c2:af:6e:eb:8b:8b:74:cc:6f:5b:20:0c:41:02:d7:
         53:1f:9d:c2:dc:99:78:26:13:b4:09:93:5b:a8:28:48:49:31:
         9d:a8:a1:76:eb:41:b1:ad:c3:b8:be:38:2c:88:c6:97:7f:57:
         0d:65:20:a0:f0:57:71:19:79:c6:09:18:71:24:1b:b0:16:0c:
         4e:d0:fe:c5:39:eb:9c:ef:3e:80:30:44:56:b6:8c:87:6b:13:
         14:c9:12:38:fb:3d:67:f5:56:9f:3d:0d:8b:f0:e7:52:dd:79:
         e4:c0:1b:5d:4d:5b:9b:4c:06:8f:b2:57:fc:35:68:b4:89:13:
         fb:9d:06:2b:d8:35:4e:24:3e:4a:76:ca:a9:a9:21:b4:6f:d1:
         a5:44:bc:ed:5f:73:48:9b:7e:ad:cf:38:95:43:c8:ac:eb:3d:
         5d:81:41:46:e3:c0:90:bc:3b:cb:0a:6b:b1:e1:c2:87:2f:68:
         c4:33:d3:82:c6:b6:cf:92:c8:ab:c1:f9:ed:34:5d:4a:6f:53:
         6e:6b:02:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsmNVhnOW3W8S4st/oiz/6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmNTU5OWMyNjc1NWY0YTRkNGY1NDBlMmZmZDdiNzRhMzkw
NTNkYTMwHhcNMjUwNjE0MDQwMDQ0WhcNMjUwNjE1MDQwMDQ0WjAzMTEwLwYDVQQD
Eyg4NzcwOWQ0YzBlZWYyZjMzZjM0NmQwZGRlMzA2MzlmNWI2NTA4NzBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllrrxmD8X4aKvBtTYfG0VYNaIZit
dcMWZxteEFPMFKDLT++dA3CIpGctuKaU6Z/JaxmHy/EqjMsvPGpX55O8W8IvxC0Z
+outRk8YjBBfE3sPDbXdQzJvrjnJcYnv4vaJEjWN8ynk2S/aqoglMSB+LktsBoTQ
XfHdDbsCJMjzaHjWQYOBkswq18LMwv1syfUZtfq0yWfbh1vO9FkiKux+a3JI7nyG
IE2uW4ZCYnXRPppaRbMCXPd35TKKGM5SojWojv/LwOAGtauHF4fHxf7wt623FL9l
AVokT18OkVq5mY5tZ1z0O84aECBSKYXFK81BWq6JlL1yGHh2ZTHq/mD5ZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIdwnUwO7y8z80bQ3eMGOfW2UIcMMB8GA1UdIwQY
MBaAFL9VmcJnVfSk1PVA4v/Xt0o5BT2jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjFXWndtZFY5S1RVOVVEaV85ZTNTamtGUGFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS8xMDE2OTYtODNkZC00MzZmLWI0N2Mt
M2UxYjg0MzJmYzcwLzEvdjFXWndtZFY5S1RVOVVEaV85ZTNTamtGUGFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS8xMDE2OTYtODNkZC00MzZmLWI0N2MtM2UxYjg0MzJmYzcw
LzEvdjFXWndtZFY5S1RVOVVEaV85ZTNTamtGUGFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiX++FB0X
qPL8X1S3oO3URpfD8McFPrql78DuHMgs+1o0XGVuvF6ZZk1HB+pOBqN3QEGdwZqj
l5Clwq9u64uLdMxvWyAMQQLXUx+dwtyZeCYTtAmTW6goSEkxnaihdutBsa3DuL44
LIjGl39XDWUgoPBXcRl5xgkYcSQbsBYMTtD+xTnrnO8+gDBEVraMh2sTFMkSOPs9
Z/VWnz0Ni/DnUt155MAbXU1bm0wGj7JX/DVotIkT+50GK9g1TiQ+SnbKqakhtG/R
pUS87V9zSJt+rc84lUPIrOs9XYFBRuPAkLw7ywprseHChy9oxDPTgsa2z5LIq8H5
7TRdSm9TbmsCGQ==
-----END CERTIFICATE-----
Generated at Sat Jun 14 11:50:22 2025 by rpki-client