Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b08eef-a34a-4572-a9f8-690a88586870/1/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.mft
File:                     2WAe-z8M_aoilRh9KwRWSUEQ4Vc.mft (raw, json)
Hash identifier:          Vcg2gxylt4Ptjo9fQymn6THyOYZk28Y8KIDWpGB9OI4=
Subject key identifier:   42:5D:15:A7:3E:AC:A4:31:AF:27:55:3F:87:9F:36:C7:4D:80:78:44
Authority key identifier: D9:60:1E:FB:3F:0C:FD:AA:22:95:18:7D:2B:04:56:49:41:10:E1:57
Certificate issuer:       /CN=d9601efb3f0cfdaa2295187d2b0456494110e157
Certificate serial:       01976E86D91971458649203197F9D73BF135
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/b08eef-a34a-4572-a9f8-690a88586870/1/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.mft
Manifest number:          158F
Signing time:             Sat 14 Jun 2025 13:00:20 +0000
Manifest this update:     Sat 14 Jun 2025 13:00:20 +0000
Manifest next update:     Sun 15 Jun 2025 13:00:20 +0000
Files and hashes:         1: 2WAe-z8M_aoilRh9KwRWSUEQ4Vc.crl (hash: Yur1HP4bCFbO1o6DFRJS9K3MvQ5jHygx/2XW+OT6uUo=)
                          2: x87acQDfo7zGs3qirjlrzwnM_hA.roa (hash: U4EKqslx/+4i2YtDzAzEmDv7ojb2iGPFBdKGnVtkCzE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/b08eef-a34a-4572-a9f8-690a88586870/1/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/b08eef-a34a-4572-a9f8-690a88586870/1/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 13:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6e:86:d9:19:71:45:86:49:20:31:97:f9:d7:3b:f1:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9601efb3f0cfdaa2295187d2b0456494110e157
        Validity
            Not Before: Jun 14 13:00:20 2025 GMT
            Not After : Jun 15 13:00:20 2025 GMT
        Subject: CN=425d15a73eaca431af27553f879f36c74d807844
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:42:02:65:e8:50:56:47:9d:0b:fe:5c:93:b1:
                    e0:d4:a8:fa:fb:64:1c:b2:b6:9c:5b:91:74:ae:4e:
                    1f:d2:64:31:6f:98:04:84:de:0d:38:18:b7:8b:e8:
                    21:a3:3d:57:6a:27:59:c0:49:9a:43:35:ab:8d:b8:
                    09:2a:5c:30:0e:c7:15:bb:30:f8:e4:05:ab:23:98:
                    d6:43:46:64:f0:d0:fd:39:e3:89:cc:b4:23:e3:f9:
                    69:86:13:c1:46:c3:1e:58:83:01:45:a4:f7:3b:22:
                    71:78:ea:76:5d:64:e1:6f:fe:c9:c5:99:4f:f0:2e:
                    20:0f:0b:55:2d:0b:77:e8:65:8a:bf:90:45:63:60:
                    fa:e6:23:d9:4f:ab:d0:bc:9c:99:16:d4:ef:38:8e:
                    66:b4:fe:fa:20:18:64:d4:5c:7e:87:45:17:9e:57:
                    a7:d4:a0:ae:61:72:eb:f5:e6:50:e0:f5:a1:39:37:
                    3c:f0:c8:a9:b5:f8:4f:6b:df:a7:a3:68:c0:40:9e:
                    d3:b3:3c:2a:f7:7c:93:ea:f0:08:93:af:1e:b7:c7:
                    ca:02:15:c0:b6:0b:a0:dc:45:cf:9a:7d:42:0a:fa:
                    62:fb:bb:a0:a8:45:15:e5:0c:33:8f:47:c2:21:7e:
                    75:05:3d:29:1e:4e:48:e2:b0:9e:76:b2:9f:65:5c:
                    47:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:5D:15:A7:3E:AC:A4:31:AF:27:55:3F:87:9F:36:C7:4D:80:78:44
            X509v3 Authority Key Identifier:
                keyid:D9:60:1E:FB:3F:0C:FD:AA:22:95:18:7D:2B:04:56:49:41:10:E1:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b08eef-a34a-4572-a9f8-690a88586870/1/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b08eef-a34a-4572-a9f8-690a88586870/1/2WAe-z8M_aoilRh9KwRWSUEQ4Vc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         dd:1e:27:41:31:a3:de:69:f3:b8:f8:fc:fd:a3:d8:7b:4d:f4:
         5a:f6:af:48:66:3e:50:14:be:37:23:d4:f7:64:53:2a:33:62:
         9a:dc:b3:b2:a0:97:51:1f:66:ca:06:1e:35:e1:8a:fb:ea:fc:
         cc:84:9a:d9:97:db:ed:07:41:a6:01:df:bb:43:02:2e:5c:6f:
         24:29:4b:b6:85:99:37:f3:1a:a4:c9:db:9e:51:04:67:f6:e0:
         af:a0:b5:d3:cf:95:68:9e:f7:40:65:c6:e8:d3:ff:6b:8b:65:
         59:33:23:8b:9d:71:b2:73:13:b0:76:d2:d2:bc:e9:a3:e1:d6:
         ff:35:fe:e1:24:3f:2b:b6:a0:9b:a2:33:b1:92:fa:c8:32:b5:
         76:27:8f:bf:31:cf:df:f7:39:5b:03:8a:1b:f1:d9:73:6c:25:
         db:20:b4:c6:df:47:3c:1a:b0:58:57:89:cd:4d:f8:83:5a:48:
         2b:2e:0d:18:fa:55:e8:40:a3:68:b2:7d:6c:40:1e:88:fb:f5:
         3e:85:5b:fe:13:5c:e6:38:61:52:e4:79:ff:20:23:f6:41:da:
         fd:95:52:15:6c:f6:d4:b8:58:13:92:f9:33:f3:ed:9c:73:ca:
         dd:e2:ad:9c:74:aa:9e:da:36:dc:04:49:6e:a9:97:ca:ef:0c:
         99:55:47:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZduhtkZcUWGSSAxl/nXO/E1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5NjAxZWZiM2YwY2ZkYWEyMjk1MTg3ZDJiMDQ1NjQ5NDEx
MGUxNTcwHhcNMjUwNjE0MTMwMDIwWhcNMjUwNjE1MTMwMDIwWjAzMTEwLwYDVQQD
Eyg0MjVkMTVhNzNlYWNhNDMxYWYyNzU1M2Y4NzlmMzZjNzRkODA3ODQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0ICZehQVkedC/5ck7Hg1Kj6+2Qc
sracW5F0rk4f0mQxb5gEhN4NOBi3i+ghoz1XaidZwEmaQzWrjbgJKlwwDscVuzD4
5AWrI5jWQ0Zk8ND9OeOJzLQj4/lphhPBRsMeWIMBRaT3OyJxeOp2XWThb/7JxZlP
8C4gDwtVLQt36GWKv5BFY2D65iPZT6vQvJyZFtTvOI5mtP76IBhk1Fx+h0UXnlen
1KCuYXLr9eZQ4PWhOTc88MiptfhPa9+no2jAQJ7Tszwq93yT6vAIk68et8fKAhXA
tgug3EXPmn1CCvpi+7ugqEUV5Qwzj0fCIX51BT0pHk5I4rCedrKfZVxHdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEJdFac+rKQxrydVP4efNsdNgHhEMB8GA1UdIwQY
MBaAFNlgHvs/DP2qIpUYfSsEVklBEOFXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMldBZS16OE1fYW9pbFJoOUt3UldTVUVRNFZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9iMDhlZWYtYTM0YS00NTcyLWE5Zjgt
NjkwYTg4NTg2ODcwLzEvMldBZS16OE1fYW9pbFJoOUt3UldTVUVRNFZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS9iMDhlZWYtYTM0YS00NTcyLWE5ZjgtNjkwYTg4NTg2ODcw
LzEvMldBZS16OE1fYW9pbFJoOUt3UldTVUVRNFZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3R4nQTGj
3mnzuPj8/aPYe030WvavSGY+UBS+NyPU92RTKjNimtyzsqCXUR9mygYeNeGK++r8
zISa2Zfb7QdBpgHfu0MCLlxvJClLtoWZN/MapMnbnlEEZ/bgr6C108+VaJ73QGXG
6NP/a4tlWTMji51xsnMTsHbS0rzpo+HW/zX+4SQ/K7agm6IzsZL6yDK1diePvzHP
3/c5WwOKG/HZc2wl2yC0xt9HPBqwWFeJzU34g1pIKy4NGPpV6ECjaLJ9bEAeiPv1
PoVb/hNc5jhhUuR5/yAj9kHa/ZVSFWz21LhYE5L5M/PtnHPK3eKtnHSqnto23ARJ
bqmXyu8MmVVHBg==
-----END CERTIFICATE-----
Generated at Sat Jun 14 23:52:44 2025 by rpki-client