Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9c0278-542c-4467-ac7c-24aee2b0e82b/1/W-cZ-YXfOUpCrBHly8j4K0t67F0.mft
File:                     W-cZ-YXfOUpCrBHly8j4K0t67F0.mft (raw, json)
Hash identifier:          PT4hsqsajk5oc6/bhhrhyBEegCnAXk49FN3SXqJ93Go=
Subject key identifier:   71:AC:91:75:3F:CF:9F:3C:5F:F9:06:EB:56:8D:BD:5E:90:E6:53:BF
Authority key identifier: 5B:E7:19:F9:85:DF:39:4A:42:AC:11:E5:CB:C8:F8:2B:4B:7A:EC:5D
Certificate issuer:       /CN=5be719f985df394a42ac11e5cbc8f82b4b7aec5d
Certificate serial:       01968EF0593708B783B872693517DA1A352E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W-cZ-YXfOUpCrBHly8j4K0t67F0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/9c0278-542c-4467-ac7c-24aee2b0e82b/1/W-cZ-YXfOUpCrBHly8j4K0t67F0.mft
Manifest number:          151D
Signing time:             Fri 02 May 2025 03:00:38 +0000
Manifest this update:     Fri 02 May 2025 03:00:38 +0000
Manifest next update:     Sat 03 May 2025 03:00:38 +0000
Files and hashes:         1: W-cZ-YXfOUpCrBHly8j4K0t67F0.crl (hash: Ud/YZCEfLjLbfVZm4frOUWMj4vagUssq9CMxs3pulrw=)
                          2: qfFhbPzEEV7-3fOF8iI3mosl_gc.roa (hash: eNrgqVa+1D+OMy3T6aNIQjkftemLm7/l9HKfq0aM6Lw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/9c0278-542c-4467-ac7c-24aee2b0e82b/1/W-cZ-YXfOUpCrBHly8j4K0t67F0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/9c0278-542c-4467-ac7c-24aee2b0e82b/1/W-cZ-YXfOUpCrBHly8j4K0t67F0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W-cZ-YXfOUpCrBHly8j4K0t67F0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 May 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:8e:f0:59:37:08:b7:83:b8:72:69:35:17:da:1a:35:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5be719f985df394a42ac11e5cbc8f82b4b7aec5d
        Validity
            Not Before: May  2 03:00:38 2025 GMT
            Not After : May  3 03:00:38 2025 GMT
        Subject: CN=71ac91753fcf9f3c5ff906eb568dbd5e90e653bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:b8:1a:54:b4:5a:51:37:c6:41:4d:66:3b:03:
                    87:bd:e3:06:d1:bd:74:0c:3c:24:6a:ae:82:ff:a6:
                    5d:37:cc:c2:fb:44:5e:dc:47:63:05:a2:3b:71:c8:
                    a1:56:24:17:98:e6:ca:4b:ef:0e:01:1d:fd:ec:e0:
                    a5:97:3f:a9:f6:9e:7c:85:ac:52:95:96:b5:e5:89:
                    49:fb:04:6e:92:1a:3b:10:08:47:0c:39:44:09:49:
                    7c:46:f9:1b:e1:93:2d:02:25:3c:0a:fe:5a:cd:78:
                    20:d2:f9:30:ce:30:c4:23:5d:85:04:f0:13:ec:e9:
                    b6:eb:45:27:c6:cb:6c:99:df:5b:f3:ff:d2:4a:f8:
                    68:15:d9:8a:e1:26:64:63:f1:be:70:00:e5:86:22:
                    46:32:0d:74:3a:e0:2a:1e:8a:b6:78:45:c4:bf:69:
                    22:4b:39:27:52:e8:a4:95:7f:bb:06:77:db:f2:9b:
                    f8:27:86:6c:73:1f:4f:a9:b3:ee:98:ce:b3:fe:85:
                    fb:2e:33:d4:53:8c:3c:fc:96:5a:01:5a:9b:b4:b6:
                    86:a6:9a:e9:f2:2d:f1:47:d8:57:63:46:72:b1:e0:
                    3b:8a:18:eb:14:6f:69:b8:ea:b2:a2:ad:d8:ce:eb:
                    e9:51:60:17:74:68:df:60:24:27:c6:5c:51:c0:c9:
                    34:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:AC:91:75:3F:CF:9F:3C:5F:F9:06:EB:56:8D:BD:5E:90:E6:53:BF
            X509v3 Authority Key Identifier:
                keyid:5B:E7:19:F9:85:DF:39:4A:42:AC:11:E5:CB:C8:F8:2B:4B:7A:EC:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-cZ-YXfOUpCrBHly8j4K0t67F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9c0278-542c-4467-ac7c-24aee2b0e82b/1/W-cZ-YXfOUpCrBHly8j4K0t67F0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9c0278-542c-4467-ac7c-24aee2b0e82b/1/W-cZ-YXfOUpCrBHly8j4K0t67F0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:6c:25:2f:8e:4f:92:5f:fe:dd:50:81:94:1d:e6:6b:75:20:
         e9:4b:7a:1b:0b:33:39:71:c2:02:ca:5f:b1:93:8b:80:8e:7a:
         c3:ad:26:7e:8b:c7:be:91:89:e9:5b:c3:8c:fc:a5:27:22:10:
         1a:2f:0e:71:90:66:e0:f0:d7:be:9c:48:6d:37:b5:0d:a8:7c:
         4b:43:63:a4:bb:c8:77:7d:a5:e8:62:6e:17:be:0b:79:28:d1:
         69:9a:5c:2e:a2:da:ff:4d:d0:ab:8a:40:02:ea:6d:8d:88:36:
         55:36:d5:4c:36:a9:ef:54:af:55:0d:e3:c7:d2:99:8a:9c:9c:
         e2:d7:4e:3f:32:41:d6:4c:a4:d0:6b:e2:b3:f6:62:6f:88:08:
         85:31:2b:9b:af:db:36:15:56:c5:1a:a9:2d:0d:c3:ba:45:da:
         a6:9d:b9:d2:c4:ac:de:b9:0f:af:a0:f3:38:18:cd:90:b8:6a:
         6f:bb:09:54:dd:3f:70:36:6e:d5:be:5d:c3:c9:36:19:1f:21:
         24:82:f4:9d:a3:0f:0b:92:2b:e2:dc:88:79:8a:87:32:19:16:
         4a:c1:23:3a:78:dd:8e:69:85:09:a1:0a:81:00:34:6c:63:87:
         af:78:42:84:30:87:5a:79:7f:21:46:ee:c5:f3:da:7b:f3:9c:
         e3:70:2f:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaO8Fk3CLeDuHJpNRfaGjUuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViZTcxOWY5ODVkZjM5NGE0MmFjMTFlNWNiYzhmODJiNGI3
YWVjNWQwHhcNMjUwNTAyMDMwMDM4WhcNMjUwNTAzMDMwMDM4WjAzMTEwLwYDVQQD
Eyg3MWFjOTE3NTNmY2Y5ZjNjNWZmOTA2ZWI1NjhkYmQ1ZTkwZTY1M2JmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrgaVLRaUTfGQU1mOwOHveMG0b10
DDwkaq6C/6ZdN8zC+0Re3EdjBaI7ccihViQXmObKS+8OAR397OCllz+p9p58haxS
lZa15YlJ+wRukho7EAhHDDlECUl8Rvkb4ZMtAiU8Cv5azXgg0vkwzjDEI12FBPAT
7Om260Unxstsmd9b8//SSvhoFdmK4SZkY/G+cADlhiJGMg10OuAqHoq2eEXEv2ki
SzknUuiklX+7Bnfb8pv4J4Zscx9PqbPumM6z/oX7LjPUU4w8/JZaAVqbtLaGpprp
8i3xR9hXY0ZyseA7ihjrFG9puOqyoq3YzuvpUWAXdGjfYCQnxlxRwMk0/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHGskXU/z588X/kG61aNvV6Q5lO/MB8GA1UdIwQY
MBaAFFvnGfmF3zlKQqwR5cvI+CtLeuxdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVy1jWi1ZWGZPVXBDckJIbHk4ajRLMHQ2N0YwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85YzAyNzgtNTQyYy00NDY3LWFjN2Mt
MjRhZWUyYjBlODJiLzEvVy1jWi1ZWGZPVXBDckJIbHk4ajRLMHQ2N0YwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS85YzAyNzgtNTQyYy00NDY3LWFjN2MtMjRhZWUyYjBlODJi
LzEvVy1jWi1ZWGZPVXBDckJIbHk4ajRLMHQ2N0YwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvWwlL45P
kl/+3VCBlB3ma3Ug6Ut6GwszOXHCAspfsZOLgI56w60mfovHvpGJ6VvDjPylJyIQ
Gi8OcZBm4PDXvpxIbTe1Dah8S0NjpLvId32l6GJuF74LeSjRaZpcLqLa/03Qq4pA
AuptjYg2VTbVTDap71SvVQ3jx9KZipyc4tdOPzJB1kyk0Gvis/Zib4gIhTErm6/b
NhVWxRqpLQ3DukXapp250sSs3rkPr6DzOBjNkLhqb7sJVN0/cDZu1b5dw8k2GR8h
JIL0naMPC5Ir4tyIeYqHMhkWSsEjOnjdjmmFCaEKgQA0bGOHr3hChDCHWnl/IUbu
xfPae/Oc43AvWA==
-----END CERTIFICATE-----
Generated at Fri May 2 12:04:06 2025 by rpki-client