Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/f75d16-4039-46ca-8b1e-adb300f7225a/1/wQohI_VJJk58u5-iHSxRN3IUhuQ.mft
File:                     wQohI_VJJk58u5-iHSxRN3IUhuQ.mft (raw, json)
Hash identifier:          7rNjdlPj4XGF0f+/R90fpB1ruPraY2ztAcqwsw6aLlY=
Subject key identifier:   20:B4:45:5C:A2:B1:B4:50:0F:D9:BC:28:2D:BD:D2:CB:BD:77:3C:6F
Authority key identifier: C1:0A:21:23:F5:49:26:4E:7C:BB:9F:A2:1D:2C:51:37:72:14:86:E4
Certificate issuer:       /CN=c10a2123f549264e7cbb9fa21d2c5137721486e4
Certificate serial:       019684DA86DE8CC18B421A4DADF087E8CE38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wQohI_VJJk58u5-iHSxRN3IUhuQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/f75d16-4039-46ca-8b1e-adb300f7225a/1/wQohI_VJJk58u5-iHSxRN3IUhuQ.mft
Manifest number:          1516
Signing time:             Wed 30 Apr 2025 04:00:35 +0000
Manifest this update:     Wed 30 Apr 2025 04:00:35 +0000
Manifest next update:     Thu 01 May 2025 04:00:35 +0000
Files and hashes:         1: XEsqeKOf3nUKp6N27Tk-w17zShA.roa (hash: k+ZjcSbWsbCQX+BZ6yWaMdK9CN57/SVKpUlCaIxWc4g=)
                          2: wQohI_VJJk58u5-iHSxRN3IUhuQ.crl (hash: Qm/wPxTO6nS87MLfE5v5iLb+sOBsbX04zRElHjfQrOY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/f75d16-4039-46ca-8b1e-adb300f7225a/1/wQohI_VJJk58u5-iHSxRN3IUhuQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/f75d16-4039-46ca-8b1e-adb300f7225a/1/wQohI_VJJk58u5-iHSxRN3IUhuQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wQohI_VJJk58u5-iHSxRN3IUhuQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 May 2025 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:84:da:86:de:8c:c1:8b:42:1a:4d:ad:f0:87:e8:ce:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c10a2123f549264e7cbb9fa21d2c5137721486e4
        Validity
            Not Before: Apr 30 04:00:35 2025 GMT
            Not After : May  1 04:00:35 2025 GMT
        Subject: CN=20b4455ca2b1b4500fd9bc282dbdd2cbbd773c6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:15:f1:2c:3b:2d:de:35:67:a1:f4:dc:a2:91:
                    31:81:ca:60:7f:2e:f1:8b:62:d6:ba:50:15:32:6f:
                    85:89:41:51:1d:7c:8e:b0:2c:3a:8f:95:62:57:c6:
                    58:1f:81:ec:52:bd:db:0c:3d:c9:4a:93:cb:48:e2:
                    c8:cf:18:42:d7:65:9a:1e:fb:c8:12:0e:5f:91:40:
                    94:af:94:7e:3a:f5:42:f6:24:12:a3:3a:42:de:ba:
                    7c:d7:64:3b:88:a1:72:9e:71:2d:60:81:0b:99:0f:
                    20:3d:62:3a:dc:9c:e8:1f:d3:51:2a:90:8f:89:83:
                    55:1b:6c:de:04:1d:86:22:b0:46:34:21:36:3e:11:
                    f0:ed:3e:72:82:88:d6:13:53:68:45:b9:57:b1:46:
                    2e:6a:1d:27:a1:5c:7d:dc:f3:af:49:b4:83:34:01:
                    64:37:ee:96:ad:f1:99:06:f3:ed:0e:fd:fc:c9:32:
                    6c:25:f6:7e:eb:ff:98:86:60:a0:97:93:2c:a9:eb:
                    14:8e:cd:5c:f2:88:53:9b:78:dc:74:6b:89:58:00:
                    17:50:12:ee:ff:8f:73:67:54:d7:7c:62:e1:0b:d0:
                    28:b4:25:b4:cb:f1:a6:87:a5:cd:9f:54:9b:43:32:
                    3d:c0:76:e1:95:bc:36:1e:28:94:3f:c5:1b:86:ab:
                    a8:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:B4:45:5C:A2:B1:B4:50:0F:D9:BC:28:2D:BD:D2:CB:BD:77:3C:6F
            X509v3 Authority Key Identifier:
                keyid:C1:0A:21:23:F5:49:26:4E:7C:BB:9F:A2:1D:2C:51:37:72:14:86:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQohI_VJJk58u5-iHSxRN3IUhuQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f75d16-4039-46ca-8b1e-adb300f7225a/1/wQohI_VJJk58u5-iHSxRN3IUhuQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f75d16-4039-46ca-8b1e-adb300f7225a/1/wQohI_VJJk58u5-iHSxRN3IUhuQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:80:84:63:9c:6d:e2:9b:19:eb:c6:14:2d:5c:bc:c0:ff:46:
         5d:6a:9c:7f:1d:b1:46:6e:5b:a5:be:a2:17:24:e9:1e:aa:38:
         6b:10:10:fe:25:6e:71:a2:7f:a8:e2:6f:a6:23:53:ac:66:33:
         67:46:28:82:81:76:7e:aa:12:64:03:ec:18:00:9e:b5:98:25:
         fc:1d:56:86:9a:70:86:f3:a3:c9:b1:b4:40:7a:9d:d6:d0:9b:
         c1:34:a2:00:3c:14:36:5d:fd:3a:55:db:be:5d:89:bd:ac:7d:
         8b:96:c8:6b:6d:ff:19:b3:6a:20:5c:b6:5e:1b:91:98:a4:93:
         da:f4:2f:be:19:29:d2:f0:6b:92:27:54:23:07:1f:32:12:a3:
         04:07:49:aa:51:43:57:c5:47:0a:61:1f:1e:14:85:5e:ba:e9:
         37:e1:60:18:2b:5b:76:1b:55:46:07:f8:6e:cf:d7:79:a6:8c:
         d6:e9:2f:1c:23:c7:b8:31:d8:8a:bf:95:01:52:77:b2:8d:96:
         d7:49:fe:36:d7:68:fa:e5:dd:77:fd:36:3e:a5:7a:32:c8:9c:
         33:07:b9:8b:d8:87:a9:9e:06:ac:b5:7d:6d:be:a4:bb:a1:3e:
         6a:4c:83:f1:83:93:5f:84:8c:85:98:67:17:cb:cd:d0:f2:07:
         5b:b1:58:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaE2obejMGLQhpNrfCH6M44MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxMGEyMTIzZjU0OTI2NGU3Y2JiOWZhMjFkMmM1MTM3NzIx
NDg2ZTQwHhcNMjUwNDMwMDQwMDM1WhcNMjUwNTAxMDQwMDM1WjAzMTEwLwYDVQQD
EygyMGI0NDU1Y2EyYjFiNDUwMGZkOWJjMjgyZGJkZDJjYmJkNzczYzZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphXxLDst3jVnofTcopExgcpgfy7x
i2LWulAVMm+FiUFRHXyOsCw6j5ViV8ZYH4HsUr3bDD3JSpPLSOLIzxhC12WaHvvI
Eg5fkUCUr5R+OvVC9iQSozpC3rp812Q7iKFynnEtYIELmQ8gPWI63JzoH9NRKpCP
iYNVG2zeBB2GIrBGNCE2PhHw7T5ygojWE1NoRblXsUYuah0noVx93POvSbSDNAFk
N+6WrfGZBvPtDv38yTJsJfZ+6/+YhmCgl5MsqesUjs1c8ohTm3jcdGuJWAAXUBLu
/49zZ1TXfGLhC9AotCW0y/Gmh6XNn1SbQzI9wHbhlbw2HiiUP8UbhquojQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCC0RVyisbRQD9m8KC290su9dzxvMB8GA1UdIwQY
MBaAFMEKISP1SSZOfLufoh0sUTdyFIbkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1FvaElfVkpKazU4dTUtaUhTeFJOM0lVaHVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9mNzVkMTYtNDAzOS00NmNhLThiMWUt
YWRiMzAwZjcyMjVhLzEvd1FvaElfVkpKazU4dTUtaUhTeFJOM0lVaHVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS9mNzVkMTYtNDAzOS00NmNhLThiMWUtYWRiMzAwZjcyMjVh
LzEvd1FvaElfVkpKazU4dTUtaUhTeFJOM0lVaHVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWYCEY5xt
4psZ68YULVy8wP9GXWqcfx2xRm5bpb6iFyTpHqo4axAQ/iVucaJ/qOJvpiNTrGYz
Z0YogoF2fqoSZAPsGACetZgl/B1WhppwhvOjybG0QHqd1tCbwTSiADwUNl39OlXb
vl2Jvax9i5bIa23/GbNqIFy2XhuRmKST2vQvvhkp0vBrkidUIwcfMhKjBAdJqlFD
V8VHCmEfHhSFXrrpN+FgGCtbdhtVRgf4bs/XeaaM1ukvHCPHuDHYir+VAVJ3so2W
10n+Ntdo+uXdd/02PqV6MsicMwe5i9iHqZ4GrLV9bb6ku6E+akyD8YOTX4SMhZhn
F8vN0PIHW7FYVA==
-----END CERTIFICATE-----
Generated at Wed Apr 30 10:47:45 2025 by rpki-client