Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/24b5ba-bf06-4b51-95bc-a45218c58418/1/wMlBPwdqeCEQwUSQ2JDxs-mOB4U.mft
File:                     wMlBPwdqeCEQwUSQ2JDxs-mOB4U.mft (raw, json)
Hash identifier:          +zrfB6ivsoib+zvg/R9GcYWwXRiegGloFGU6ylFnsAA=
Subject key identifier:   FE:E6:76:AA:B7:49:ED:A8:2D:10:38:58:48:6A:6D:1E:49:56:CE:55
Authority key identifier: C0:C9:41:3F:07:6A:78:21:10:C1:44:90:D8:90:F1:B3:E9:8E:07:85
Certificate issuer:       /CN=c0c9413f076a782110c14490d890f1b3e98e0785
Certificate serial:       01967FB44604A7D264B059509054E4EBD135
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wMlBPwdqeCEQwUSQ2JDxs-mOB4U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/24b5ba-bf06-4b51-95bc-a45218c58418/1/wMlBPwdqeCEQwUSQ2JDxs-mOB4U.mft
Manifest number:          0AC2
Signing time:             Tue 29 Apr 2025 04:00:42 +0000
Manifest this update:     Tue 29 Apr 2025 04:00:42 +0000
Manifest next update:     Wed 30 Apr 2025 04:00:42 +0000
Files and hashes:         1: XvSqa1PF0nx9rdnf-qHYXXmj-t4.roa (hash: 6D9O10hjXxh7sEXhihEUoyls7053T5SpuEJHdN4TtnE=)
                          2: wMlBPwdqeCEQwUSQ2JDxs-mOB4U.crl (hash: EqDcWsBPs+ah+xDgmio/4sflZzR2K10rjyOZK9M273I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/24b5ba-bf06-4b51-95bc-a45218c58418/1/wMlBPwdqeCEQwUSQ2JDxs-mOB4U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/24b5ba-bf06-4b51-95bc-a45218c58418/1/wMlBPwdqeCEQwUSQ2JDxs-mOB4U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wMlBPwdqeCEQwUSQ2JDxs-mOB4U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Apr 2025 04:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:7f:b4:46:04:a7:d2:64:b0:59:50:90:54:e4:eb:d1:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0c9413f076a782110c14490d890f1b3e98e0785
        Validity
            Not Before: Apr 29 04:00:42 2025 GMT
            Not After : Apr 30 04:00:42 2025 GMT
        Subject: CN=fee676aab749eda82d103858486a6d1e4956ce55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:42:c1:39:2d:cb:2b:0f:7d:16:ac:b9:a4:7e:
                    0b:ba:d9:50:d3:0e:d9:e6:aa:20:05:4b:5f:81:48:
                    03:00:4d:00:aa:81:87:19:04:88:d1:e7:f9:40:58:
                    96:48:0f:50:ea:4d:63:0d:c9:38:ec:61:38:eb:0c:
                    84:bf:20:0f:15:83:58:c5:dd:7b:38:ab:b2:27:49:
                    e9:e9:5f:98:c5:3a:fe:78:ec:24:52:84:fd:0d:6d:
                    aa:ef:c8:e5:c8:65:bd:6b:02:dc:f6:cd:aa:ea:17:
                    5e:95:e5:18:9b:e2:44:4a:46:25:b9:a4:49:5a:8f:
                    22:54:ad:26:92:1f:0d:6b:e0:11:c3:f8:c1:e6:20:
                    52:c3:b4:b0:5d:9e:d1:17:84:8d:69:0b:68:fa:07:
                    19:3f:2f:a0:c7:cb:f7:90:c6:1e:98:14:41:c4:46:
                    b8:a2:ab:77:f9:d0:8f:0c:0f:71:36:a3:d7:f5:c5:
                    a4:f0:3a:62:fb:6e:2c:42:3f:28:2e:42:95:17:89:
                    bf:00:1c:0b:aa:ea:4f:6d:cc:14:34:c7:5a:e8:bc:
                    f9:da:84:3d:7a:03:01:e2:ea:5a:6a:21:a9:0b:f9:
                    0f:dc:ab:28:e8:7a:e0:ca:2f:ff:98:fd:24:13:14:
                    79:72:0f:ef:c5:cc:9e:9b:85:61:b7:81:6c:9c:b7:
                    1c:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:E6:76:AA:B7:49:ED:A8:2D:10:38:58:48:6A:6D:1E:49:56:CE:55
            X509v3 Authority Key Identifier:
                keyid:C0:C9:41:3F:07:6A:78:21:10:C1:44:90:D8:90:F1:B3:E9:8E:07:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wMlBPwdqeCEQwUSQ2JDxs-mOB4U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/24b5ba-bf06-4b51-95bc-a45218c58418/1/wMlBPwdqeCEQwUSQ2JDxs-mOB4U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/24b5ba-bf06-4b51-95bc-a45218c58418/1/wMlBPwdqeCEQwUSQ2JDxs-mOB4U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:c1:1e:a7:3e:01:da:f9:ec:ea:fd:22:2b:e6:d1:d5:17:d0:
         84:17:b7:b8:7e:1c:ce:21:a1:99:cc:3a:8a:b5:72:18:2e:4f:
         8c:04:54:e1:d8:5e:58:a5:f3:1a:28:65:06:15:fa:42:e2:87:
         c0:56:ad:3f:a0:a9:38:c3:2b:0d:0b:1a:7d:de:76:3c:65:23:
         4e:ea:be:21:02:7d:52:48:f0:ef:4c:7c:a8:41:04:6b:ff:68:
         62:09:85:d1:da:4b:df:f8:17:28:f4:3c:e2:da:6d:ea:89:79:
         25:07:b2:c8:f2:97:1b:ed:ff:28:5e:15:9e:40:54:c7:bc:3f:
         7a:0d:df:0d:b5:80:82:74:b1:b4:48:07:26:d3:f0:63:0d:2c:
         d7:2b:0d:9d:e7:73:e7:90:d1:fd:1a:cd:22:2d:3d:ee:06:1a:
         e7:81:a1:15:0b:4e:de:48:5d:a1:cb:d0:70:e4:2c:2f:85:83:
         a4:15:01:0a:2b:15:34:55:d5:e1:c8:2a:fc:40:86:14:ee:e2:
         09:5a:c9:84:f4:58:db:9a:63:e3:b7:61:8c:1a:42:57:dd:d9:
         33:7d:5e:86:14:f9:7e:ea:95:23:e2:4e:9d:f3:60:77:74:7a:
         c3:70:28:f3:86:0a:9f:47:32:d1:cb:54:8b:8e:8c:31:db:23:
         56:99:31:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ/tEYEp9JksFlQkFTk69E1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwYzk0MTNmMDc2YTc4MjExMGMxNDQ5MGQ4OTBmMWIzZTk4
ZTA3ODUwHhcNMjUwNDI5MDQwMDQyWhcNMjUwNDMwMDQwMDQyWjAzMTEwLwYDVQQD
EyhmZWU2NzZhYWI3NDllZGE4MmQxMDM4NTg0ODZhNmQxZTQ5NTZjZTU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0LBOS3LKw99Fqy5pH4LutlQ0w7Z
5qogBUtfgUgDAE0AqoGHGQSI0ef5QFiWSA9Q6k1jDck47GE46wyEvyAPFYNYxd17
OKuyJ0np6V+YxTr+eOwkUoT9DW2q78jlyGW9awLc9s2q6hdeleUYm+JESkYluaRJ
Wo8iVK0mkh8Na+ARw/jB5iBSw7SwXZ7RF4SNaQto+gcZPy+gx8v3kMYemBRBxEa4
oqt3+dCPDA9xNqPX9cWk8Dpi+24sQj8oLkKVF4m/ABwLqupPbcwUNMda6Lz52oQ9
egMB4upaaiGpC/kP3Kso6Hrgyi//mP0kExR5cg/vxcyem4Vht4FsnLcc5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP7mdqq3Se2oLRA4WEhqbR5JVs5VMB8GA1UdIwQY
MBaAFMDJQT8HanghEMFEkNiQ8bPpjgeFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd01sQlB3ZHFlQ0VRd1VTUTJKRHhzLW1PQjRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi8yNGI1YmEtYmYwNi00YjUxLTk1YmMt
YTQ1MjE4YzU4NDE4LzEvd01sQlB3ZHFlQ0VRd1VTUTJKRHhzLW1PQjRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi8yNGI1YmEtYmYwNi00YjUxLTk1YmMtYTQ1MjE4YzU4NDE4
LzEvd01sQlB3ZHFlQ0VRd1VTUTJKRHhzLW1PQjRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ8Eepz4B
2vns6v0iK+bR1RfQhBe3uH4cziGhmcw6irVyGC5PjARU4dheWKXzGihlBhX6QuKH
wFatP6CpOMMrDQsafd52PGUjTuq+IQJ9Ukjw70x8qEEEa/9oYgmF0dpL3/gXKPQ8
4tpt6ol5JQeyyPKXG+3/KF4VnkBUx7w/eg3fDbWAgnSxtEgHJtPwYw0s1ysNnedz
55DR/RrNIi097gYa54GhFQtO3khdocvQcOQsL4WDpBUBCisVNFXV4cgq/ECGFO7i
CVrJhPRY25pj47dhjBpCV93ZM31ehhT5fuqVI+JOnfNgd3R6w3Ao84YKn0cy0ctU
i46MMdsjVpkxGA==
-----END CERTIFICATE-----
Generated at Tue Apr 29 14:29:48 2025 by rpki-client