Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/f5b63b-d0e0-460c-9308-7cef10ade8df/1/w6nl9TVmI-HCjy22k-BfxtYEzIE.mft
File:                     w6nl9TVmI-HCjy22k-BfxtYEzIE.mft (raw, json)
Hash identifier:          WECZNs76RjsOCgzwfyw3yWuFe6Q92tcGifXsTB9nBf0=
Subject key identifier:   B5:72:7A:65:22:1C:96:F7:6A:88:23:26:01:EC:28:BA:38:20:D5:86
Authority key identifier: C3:A9:E5:F5:35:66:23:E1:C2:8F:2D:B6:93:E0:5F:C6:D6:04:CC:81
Certificate issuer:       /CN=c3a9e5f5356623e1c28f2db693e05fc6d604cc81
Certificate serial:       01978056C1F41E30419E0D6B60D92CA056F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w6nl9TVmI-HCjy22k-BfxtYEzIE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/f5b63b-d0e0-460c-9308-7cef10ade8df/1/w6nl9TVmI-HCjy22k-BfxtYEzIE.mft
Manifest number:          26
Signing time:             Wed 18 Jun 2025 00:00:58 +0000
Manifest this update:     Wed 18 Jun 2025 00:00:58 +0000
Manifest next update:     Thu 19 Jun 2025 00:00:58 +0000
Files and hashes:         1: w6nl9TVmI-HCjy22k-BfxtYEzIE.crl (hash: KQPu83dkOOrFSAZT86PSrkC7kmE2qU7yMghvT/Jpaxk=)
                          2: yOFLOKqrASqCbG9H8LDQX86pKIw.roa (hash: XxA6ziYUOm/wMTbCGGt/j2IVpWOap4P3oBr16w5IzVs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/f5b63b-d0e0-460c-9308-7cef10ade8df/1/w6nl9TVmI-HCjy22k-BfxtYEzIE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/f5b63b-d0e0-460c-9308-7cef10ade8df/1/w6nl9TVmI-HCjy22k-BfxtYEzIE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w6nl9TVmI-HCjy22k-BfxtYEzIE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 18 Jun 2025 22:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:80:56:c1:f4:1e:30:41:9e:0d:6b:60:d9:2c:a0:56:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3a9e5f5356623e1c28f2db693e05fc6d604cc81
        Validity
            Not Before: Jun 18 00:00:58 2025 GMT
            Not After : Jun 19 00:00:58 2025 GMT
        Subject: CN=b5727a65221c96f76a88232601ec28ba3820d586
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:64:5a:28:b1:2f:61:f3:de:88:0d:34:5d:4c:
                    ce:e5:b7:72:a2:59:33:76:1a:4a:48:29:b7:27:c5:
                    a0:89:6f:e5:39:ce:b2:b7:d1:a1:56:20:c0:4e:b2:
                    0e:ef:9e:cd:ff:96:65:40:fa:81:20:65:9f:ed:38:
                    7f:52:be:75:e6:5b:21:8a:13:77:2a:74:7f:9c:4a:
                    9c:50:da:4a:57:ea:3f:a5:9f:22:43:27:93:76:3a:
                    33:e2:89:1f:64:79:01:8b:e7:3a:2b:02:94:11:ba:
                    8c:71:ee:8f:0b:37:ef:e7:c6:6b:32:83:2f:c8:54:
                    f3:09:b7:75:08:ea:96:ae:03:db:64:25:2e:de:62:
                    37:97:5a:2a:56:59:5b:45:d6:84:a1:90:7b:48:03:
                    9a:b2:1e:21:fd:77:9e:66:6c:86:eb:eb:e9:18:da:
                    cd:d2:45:ab:f6:17:f3:71:ce:3b:2d:f3:8d:b7:51:
                    b9:4e:7c:7f:62:26:94:b0:36:29:70:cc:0c:ac:37:
                    42:8e:6f:b6:50:6b:cd:7d:05:fe:40:ea:23:50:79:
                    c2:d8:6f:7f:11:1c:55:85:5b:b3:1e:3d:c6:1e:f2:
                    95:42:9a:a6:4e:96:c5:e8:46:72:7d:32:7b:fb:a0:
                    98:36:dc:cc:51:d4:9c:14:e1:6f:6c:a6:e2:27:61:
                    9e:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:72:7A:65:22:1C:96:F7:6A:88:23:26:01:EC:28:BA:38:20:D5:86
            X509v3 Authority Key Identifier:
                keyid:C3:A9:E5:F5:35:66:23:E1:C2:8F:2D:B6:93:E0:5F:C6:D6:04:CC:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w6nl9TVmI-HCjy22k-BfxtYEzIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/f5b63b-d0e0-460c-9308-7cef10ade8df/1/w6nl9TVmI-HCjy22k-BfxtYEzIE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/f5b63b-d0e0-460c-9308-7cef10ade8df/1/w6nl9TVmI-HCjy22k-BfxtYEzIE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:42:cb:a8:3f:0e:c8:0b:4c:aa:65:f5:3a:74:4b:54:75:33:
         16:90:06:35:17:dd:2f:56:8d:b0:03:9f:ab:84:e6:28:93:86:
         b9:e9:27:19:8f:e2:23:b2:8f:b0:31:02:fb:bb:46:fe:a3:45:
         3f:e3:e9:d9:d3:9b:7c:a6:a3:e5:6b:cc:d4:b3:c8:bd:82:7c:
         dd:f4:94:a9:5c:b5:21:6e:d3:2c:6e:48:80:24:23:3b:09:bb:
         99:9d:f4:84:ab:a7:f9:1a:fb:f6:f2:9b:9c:57:c6:d4:f4:f2:
         89:aa:6b:d0:07:32:42:e8:72:f6:14:cd:20:60:32:ef:70:6f:
         f9:f5:e8:21:74:83:7f:9c:05:b8:9b:3a:72:6b:c1:88:6b:b0:
         99:ed:c0:a4:04:7a:17:29:70:11:7c:c7:e2:d4:cc:98:3c:2e:
         0b:85:28:fd:5c:ff:1a:58:02:dc:e5:4c:3e:20:00:0e:34:78:
         18:f3:75:c7:95:91:7c:14:de:a0:e2:3e:67:5d:12:43:6b:15:
         7a:e1:42:98:b5:83:7e:8b:c4:86:66:59:ce:0b:5a:d9:56:83:
         b5:17:1b:31:36:da:9d:2e:29:f8:0d:c9:fa:6e:34:98:e2:97:
         9b:d8:b6:b6:78:7d:7a:f6:4b:6f:1f:ca:b1:bb:d9:e4:d6:97:
         c9:eb:8d:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZeAVsH0HjBBng1rYNksoFbzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzYTllNWY1MzU2NjIzZTFjMjhmMmRiNjkzZTA1ZmM2ZDYw
NGNjODEwHhcNMjUwNjE4MDAwMDU4WhcNMjUwNjE5MDAwMDU4WjAzMTEwLwYDVQQD
EyhiNTcyN2E2NTIyMWM5NmY3NmE4ODIzMjYwMWVjMjhiYTM4MjBkNTg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWRaKLEvYfPeiA00XUzO5bdyolkz
dhpKSCm3J8WgiW/lOc6yt9GhViDATrIO757N/5ZlQPqBIGWf7Th/Ur515lshihN3
KnR/nEqcUNpKV+o/pZ8iQyeTdjoz4okfZHkBi+c6KwKUEbqMce6PCzfv58ZrMoMv
yFTzCbd1COqWrgPbZCUu3mI3l1oqVllbRdaEoZB7SAOash4h/XeeZmyG6+vpGNrN
0kWr9hfzcc47LfONt1G5Tnx/YiaUsDYpcMwMrDdCjm+2UGvNfQX+QOojUHnC2G9/
ERxVhVuzHj3GHvKVQpqmTpbF6EZyfTJ7+6CYNtzMUdScFOFvbKbiJ2GebQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLVyemUiHJb3aogjJgHsKLo4INWGMB8GA1UdIwQY
MBaAFMOp5fU1ZiPhwo8ttpPgX8bWBMyBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzZubDlUVm1JLUhDankyMmstQmZ4dFlFeklFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9mNWI2M2ItZDBlMC00NjBjLTkzMDgt
N2NlZjEwYWRlOGRmLzEvdzZubDlUVm1JLUhDankyMmstQmZ4dFlFeklFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC9mNWI2M2ItZDBlMC00NjBjLTkzMDgtN2NlZjEwYWRlOGRm
LzEvdzZubDlUVm1JLUhDankyMmstQmZ4dFlFeklFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKELLqD8O
yAtMqmX1OnRLVHUzFpAGNRfdL1aNsAOfq4TmKJOGueknGY/iI7KPsDEC+7tG/qNF
P+Pp2dObfKaj5WvM1LPIvYJ83fSUqVy1IW7TLG5IgCQjOwm7mZ30hKun+Rr79vKb
nFfG1PTyiapr0AcyQuhy9hTNIGAy73Bv+fXoIXSDf5wFuJs6cmvBiGuwme3ApAR6
FylwEXzH4tTMmDwuC4Uo/Vz/GlgC3OVMPiAADjR4GPN1x5WRfBTeoOI+Z10SQ2sV
euFCmLWDfovEhmZZzgta2VaDtRcbMTbanS4p+A3J+m40mOKXm9i2tnh9evZLbx/K
sbvZ5NaXyeuNHw==
-----END CERTIFICATE-----
Generated at Wed Jun 18 08:05:52 2025 by rpki-client