Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/0187d6-8bfc-4c59-a6c4-6ad3252a1427/1/WIyr9vUj8m4mfbA7UkNHhBqqpGU.mft
File:                     WIyr9vUj8m4mfbA7UkNHhBqqpGU.mft (raw, json)
Hash identifier:          fO271E2XC8k6f1BoMlbmwuc45+9E9RckL7aQppPBRAw=
Subject key identifier:   8F:DF:36:1B:7B:38:0A:51:45:28:62:08:51:92:EF:1E:83:07:3D:9F
Authority key identifier: 58:8C:AB:F6:F5:23:F2:6E:26:7D:B0:3B:52:43:47:84:1A:AA:A4:65
Certificate issuer:       /CN=588cabf6f523f26e267db03b524347841aaaa465
Certificate serial:       01976C2ACC1F32AA21F9D7F39EDA5A7172B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WIyr9vUj8m4mfbA7UkNHhBqqpGU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/0187d6-8bfc-4c59-a6c4-6ad3252a1427/1/WIyr9vUj8m4mfbA7UkNHhBqqpGU.mft
Manifest number:          0AB2
Signing time:             Sat 14 Jun 2025 02:00:33 +0000
Manifest this update:     Sat 14 Jun 2025 02:00:33 +0000
Manifest next update:     Sun 15 Jun 2025 02:00:33 +0000
Files and hashes:         1: FdWV2F8xywrkJr_ZVSWY8qWRv_A.roa (hash: X0QnMJo/L6uBm6V2nWu9aN26xqXlZf++2BNldb6DVIg=)
                          2: THjGQAeNJPBtPCUTy4-J94YQkPc.roa (hash: F+YBL5AUhg2W6omBaT2Kp3w7xlj8utNYDQNQuh7FdXU=)
                          3: WIyr9vUj8m4mfbA7UkNHhBqqpGU.crl (hash: 3RuvJQsIaVamtId9+TRGN6vj0NbMpKPfEPOQ9fGnzOQ=)
                          4: bHWPrUheTISW_XZwqIKxaRaFivE.roa (hash: ek7H7pyvxLeP4/K0w5pzvcUQRE5xOhHM0k+4ZCxv0OA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/0187d6-8bfc-4c59-a6c4-6ad3252a1427/1/WIyr9vUj8m4mfbA7UkNHhBqqpGU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/0187d6-8bfc-4c59-a6c4-6ad3252a1427/1/WIyr9vUj8m4mfbA7UkNHhBqqpGU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WIyr9vUj8m4mfbA7UkNHhBqqpGU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:2a:cc:1f:32:aa:21:f9:d7:f3:9e:da:5a:71:72:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=588cabf6f523f26e267db03b524347841aaaa465
        Validity
            Not Before: Jun 14 02:00:33 2025 GMT
            Not After : Jun 15 02:00:33 2025 GMT
        Subject: CN=8fdf361b7b380a51452862085192ef1e83073d9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:0b:ac:4f:26:e0:f6:a8:36:fb:aa:9c:cf:36:
                    e3:00:df:e9:15:a5:f5:ad:b6:20:51:55:dc:bd:a3:
                    48:98:d8:28:c7:c3:ac:18:13:6a:6b:b7:9b:c0:df:
                    1d:f8:7a:c9:da:2a:e8:e4:2a:f0:68:18:b8:80:db:
                    70:7d:cd:e8:df:71:a2:38:eb:d6:d1:2f:d9:b4:fb:
                    a2:7a:26:a4:50:c7:77:b9:1e:3e:e6:e0:5a:8b:4c:
                    29:48:d8:b2:91:f8:a1:0f:37:3f:cb:c9:3e:e8:2e:
                    b3:3d:58:fc:82:de:9f:a3:a3:0e:c6:df:42:d5:cb:
                    27:7d:8f:01:4b:74:ad:e6:ed:27:06:5f:9d:3a:9b:
                    2d:09:bb:4e:e8:91:5a:61:e5:26:1d:1a:df:2b:dd:
                    7a:48:eb:61:7b:79:a5:cd:80:ca:76:78:e0:c4:06:
                    ac:ce:57:bb:2e:5c:e1:64:19:88:3b:fd:a0:ac:1f:
                    79:b2:9f:64:e9:6b:da:78:71:0a:73:8e:e6:f1:63:
                    ee:17:0a:25:86:e7:7f:ba:30:0d:9a:68:dc:e5:f1:
                    e3:5f:21:03:48:cb:a5:f6:7b:5e:29:3c:32:c3:f2:
                    17:ea:fa:fa:2a:25:81:d3:8a:b8:5e:32:7e:2e:80:
                    b8:e2:93:f4:20:06:ec:09:48:31:39:ed:4f:87:b3:
                    8f:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:DF:36:1B:7B:38:0A:51:45:28:62:08:51:92:EF:1E:83:07:3D:9F
            X509v3 Authority Key Identifier:
                keyid:58:8C:AB:F6:F5:23:F2:6E:26:7D:B0:3B:52:43:47:84:1A:AA:A4:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIyr9vUj8m4mfbA7UkNHhBqqpGU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0187d6-8bfc-4c59-a6c4-6ad3252a1427/1/WIyr9vUj8m4mfbA7UkNHhBqqpGU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0187d6-8bfc-4c59-a6c4-6ad3252a1427/1/WIyr9vUj8m4mfbA7UkNHhBqqpGU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:87:67:bd:bf:74:b1:6f:c2:c0:95:0c:19:21:8f:12:6d:3a:
         7b:8d:85:88:8a:d8:cb:c8:05:7a:ae:e7:21:c6:2b:11:ea:3d:
         8e:6e:ed:77:b5:a3:a6:10:5c:6c:d9:cc:5a:a7:a9:21:05:f9:
         d5:70:34:76:a1:45:27:99:0d:90:93:27:c5:cb:db:dd:1e:93:
         09:df:83:da:dc:4e:c1:6b:e6:bc:29:74:83:4a:9b:12:6a:f4:
         a9:f3:17:b3:9c:74:f0:70:82:21:a9:28:18:b0:ac:7a:93:20:
         22:97:25:77:09:2a:ac:16:ae:7d:3f:f7:e7:7b:a6:38:4b:be:
         55:57:c0:6a:a1:b7:eb:aa:a1:42:de:c3:ab:3c:3c:99:f0:48:
         4b:56:a8:12:ed:1a:ce:96:d7:6c:a5:1e:87:5f:54:c8:03:e3:
         2f:6b:16:24:0b:e0:17:b1:9a:c4:09:23:3d:d2:93:55:1f:b5:
         14:93:38:1d:b0:a6:34:1e:44:a0:8f:2b:2e:7f:2b:28:a9:47:
         36:47:02:0b:c5:02:f9:e4:42:ce:a4:c5:6a:eb:f4:fb:95:fa:
         90:1c:62:c2:31:5f:cd:7e:a7:1b:ad:03:25:22:f3:5f:4f:83:
         9e:b0:b4:9c:ce:c5:eb:e2:ee:0e:57:7c:96:2c:8a:53:35:70:
         b5:be:07:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsKswfMqoh+dfzntpacXKxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4OGNhYmY2ZjUyM2YyNmUyNjdkYjAzYjUyNDM0Nzg0MWFh
YWE0NjUwHhcNMjUwNjE0MDIwMDMzWhcNMjUwNjE1MDIwMDMzWjAzMTEwLwYDVQQD
Eyg4ZmRmMzYxYjdiMzgwYTUxNDUyODYyMDg1MTkyZWYxZTgzMDczZDlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAusTybg9qg2+6qczzbjAN/pFaX1
rbYgUVXcvaNImNgox8OsGBNqa7ebwN8d+HrJ2iro5CrwaBi4gNtwfc3o33GiOOvW
0S/ZtPuieiakUMd3uR4+5uBai0wpSNiykfihDzc/y8k+6C6zPVj8gt6fo6MOxt9C
1csnfY8BS3St5u0nBl+dOpstCbtO6JFaYeUmHRrfK916SOthe3mlzYDKdnjgxAas
zle7LlzhZBmIO/2grB95sp9k6WvaeHEKc47m8WPuFwolhud/ujANmmjc5fHjXyED
SMul9nteKTwyw/IX6vr6KiWB04q4XjJ+LoC44pP0IAbsCUgxOe1Ph7OPgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI/fNht7OApRRShiCFGS7x6DBz2fMB8GA1UdIwQY
MBaAFFiMq/b1I/JuJn2wO1JDR4QaqqRlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0l5cjl2VWo4bTRtZmJBN1VrTkhoQnFxcEdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy8wMTg3ZDYtOGJmYy00YzU5LWE2YzQt
NmFkMzI1MmExNDI3LzEvV0l5cjl2VWo4bTRtZmJBN1VrTkhoQnFxcEdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy8wMTg3ZDYtOGJmYy00YzU5LWE2YzQtNmFkMzI1MmExNDI3
LzEvV0l5cjl2VWo4bTRtZmJBN1VrTkhoQnFxcEdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd4dnvb90
sW/CwJUMGSGPEm06e42FiIrYy8gFeq7nIcYrEeo9jm7td7WjphBcbNnMWqepIQX5
1XA0dqFFJ5kNkJMnxcvb3R6TCd+D2txOwWvmvCl0g0qbEmr0qfMXs5x08HCCIako
GLCsepMgIpcldwkqrBaufT/353umOEu+VVfAaqG366qhQt7Dqzw8mfBIS1aoEu0a
zpbXbKUeh19UyAPjL2sWJAvgF7GaxAkjPdKTVR+1FJM4HbCmNB5EoI8rLn8rKKlH
NkcCC8UC+eRCzqTFauv0+5X6kBxiwjFfzX6nG60DJSLzX0+DnrC0nM7F6+LuDld8
liyKUzVwtb4HtQ==
-----END CERTIFICATE-----
Generated at Sat Jun 14 09:10:44 2025 by rpki-client