Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/02966a-a7ae-4054-ab34-f7e73ddef4e2/1/wDleyIIdj4GJQTOSvYdte9eVwWw.mft
File:                     wDleyIIdj4GJQTOSvYdte9eVwWw.mft (raw, json)
Hash identifier:          IXidFc+1cL4V96D5f13og0/58rDxzoZwOnWdU+3KjtI=
Subject key identifier:   64:45:51:98:92:31:25:BE:F1:12:4A:20:72:6E:B9:9A:5A:8F:63:EA
Authority key identifier: C0:39:5E:C8:82:1D:8F:81:89:41:33:92:BD:87:6D:7B:D7:95:C1:6C
Certificate issuer:       /CN=c0395ec8821d8f8189413392bd876d7bd795c16c
Certificate serial:       019768850FD98E86B2C5068005F4C2B1E498
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wDleyIIdj4GJQTOSvYdte9eVwWw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/02966a-a7ae-4054-ab34-f7e73ddef4e2/1/wDleyIIdj4GJQTOSvYdte9eVwWw.mft
Manifest number:          158E
Signing time:             Fri 13 Jun 2025 09:00:40 +0000
Manifest this update:     Fri 13 Jun 2025 09:00:40 +0000
Manifest next update:     Sat 14 Jun 2025 09:00:40 +0000
Files and hashes:         1: P3YoBo67vazrugYfMD3lybaWtAo.roa (hash: /AdjcQW3/wvGSZ4+BEuR5TlveAfDafAH3hNdQ89CSF4=)
                          2: wDleyIIdj4GJQTOSvYdte9eVwWw.crl (hash: 2pNx45EPhN71KgBcOu/INbzw8IH8fRdNzCrHBDK8F/Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/02966a-a7ae-4054-ab34-f7e73ddef4e2/1/wDleyIIdj4GJQTOSvYdte9eVwWw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/02966a-a7ae-4054-ab34-f7e73ddef4e2/1/wDleyIIdj4GJQTOSvYdte9eVwWw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wDleyIIdj4GJQTOSvYdte9eVwWw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 09:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:68:85:0f:d9:8e:86:b2:c5:06:80:05:f4:c2:b1:e4:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0395ec8821d8f8189413392bd876d7bd795c16c
        Validity
            Not Before: Jun 13 09:00:40 2025 GMT
            Not After : Jun 14 09:00:40 2025 GMT
        Subject: CN=64455198923125bef1124a20726eb99a5a8f63ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:7e:54:64:e3:fc:60:63:d2:78:8d:97:dc:71:
                    f4:32:0f:42:ce:ac:6a:e7:96:80:c6:2f:53:7f:34:
                    b8:64:4e:db:b4:fa:7b:e3:d0:a9:52:16:6a:93:4a:
                    85:fd:7f:07:50:8b:7b:b3:20:b6:d6:59:66:6d:9b:
                    1d:51:57:d8:e3:6b:55:41:88:68:ce:56:5a:71:ca:
                    77:c5:c1:26:d1:7a:a0:d0:c4:02:02:af:cf:da:53:
                    2e:34:ea:dd:c4:e7:5e:17:45:ef:fc:0f:af:d9:d8:
                    4e:03:13:af:31:96:aa:d9:0d:f5:db:0a:d3:37:8a:
                    bf:28:e0:12:05:b6:0c:2b:8d:aa:1e:b1:8a:a8:88:
                    3b:57:b5:79:f0:2e:b3:8b:03:fa:6b:36:3b:51:84:
                    15:ac:14:a5:9f:8b:4a:8a:95:d6:c5:e2:6f:01:31:
                    0b:e8:73:e9:c0:9c:dc:c0:59:98:ee:fd:6f:a1:f6:
                    a8:38:17:79:b1:ed:11:90:cb:75:61:16:e1:5a:81:
                    22:f0:e3:93:9b:bf:9a:26:de:5f:a9:10:66:5e:d3:
                    7c:4a:20:e3:9e:46:cc:e6:1e:37:e5:1e:bb:f0:e1:
                    55:e8:70:13:52:4e:ef:e0:3f:4f:a2:c5:b6:a9:7d:
                    25:dc:8d:71:91:4d:36:95:14:76:f5:b2:5d:6a:a0:
                    da:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:45:51:98:92:31:25:BE:F1:12:4A:20:72:6E:B9:9A:5A:8F:63:EA
            X509v3 Authority Key Identifier:
                keyid:C0:39:5E:C8:82:1D:8F:81:89:41:33:92:BD:87:6D:7B:D7:95:C1:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wDleyIIdj4GJQTOSvYdte9eVwWw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/02966a-a7ae-4054-ab34-f7e73ddef4e2/1/wDleyIIdj4GJQTOSvYdte9eVwWw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/02966a-a7ae-4054-ab34-f7e73ddef4e2/1/wDleyIIdj4GJQTOSvYdte9eVwWw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:92:55:70:b5:ee:4a:29:d0:e2:db:00:ee:8b:5d:da:e4:15:
         02:34:d5:3c:55:d7:f8:40:01:06:7c:57:f3:66:20:6d:97:0b:
         c2:80:2d:6d:c0:60:5d:d8:bc:f8:3b:a8:59:0f:7c:b3:78:87:
         ae:a3:0f:03:0d:da:10:d8:01:c9:4f:93:25:3a:eb:a9:11:53:
         26:a8:c6:6d:e7:ab:51:2f:5c:99:7e:de:d5:e5:51:f2:0f:be:
         65:9a:2a:db:95:94:11:b6:ae:cc:2c:23:37:b4:80:d3:41:bf:
         c4:5d:64:47:27:b9:dd:ea:98:f7:a5:01:37:16:7d:c9:2b:6f:
         45:f3:96:c7:65:17:19:80:d7:a6:70:fe:58:fa:11:f9:50:2d:
         66:5d:39:bf:83:e1:68:43:69:07:96:8c:4e:81:2a:68:a8:c4:
         f2:6b:85:f7:94:a4:43:9a:38:fb:1b:60:54:13:a9:34:f6:5c:
         e0:d0:a5:9b:60:6b:88:f5:4e:27:08:19:c1:74:f4:7b:2d:80:
         3b:1b:80:9f:99:57:00:8a:09:8e:5a:2f:6f:ae:95:77:a5:e4:
         9d:ab:11:a5:1d:d6:a9:03:37:ba:c5:93:fc:7b:f7:0d:54:e0:
         12:0e:a1:3f:bc:01:3e:28:39:7b:ee:41:dd:db:1b:07:8f:e8:
         74:7f:11:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdohQ/ZjoayxQaABfTCseSYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwMzk1ZWM4ODIxZDhmODE4OTQxMzM5MmJkODc2ZDdiZDc5
NWMxNmMwHhcNMjUwNjEzMDkwMDQwWhcNMjUwNjE0MDkwMDQwWjAzMTEwLwYDVQQD
Eyg2NDQ1NTE5ODkyMzEyNWJlZjExMjRhMjA3MjZlYjk5YTVhOGY2M2VhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkX5UZOP8YGPSeI2X3HH0Mg9Czqxq
55aAxi9TfzS4ZE7btPp749CpUhZqk0qF/X8HUIt7syC21llmbZsdUVfY42tVQYho
zlZaccp3xcEm0Xqg0MQCAq/P2lMuNOrdxOdeF0Xv/A+v2dhOAxOvMZaq2Q312wrT
N4q/KOASBbYMK42qHrGKqIg7V7V58C6ziwP6azY7UYQVrBSln4tKipXWxeJvATEL
6HPpwJzcwFmY7v1vofaoOBd5se0RkMt1YRbhWoEi8OOTm7+aJt5fqRBmXtN8SiDj
nkbM5h435R678OFV6HATUk7v4D9PosW2qX0l3I1xkU02lRR29bJdaqDa5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGRFUZiSMSW+8RJKIHJuuZpaj2PqMB8GA1UdIwQY
MBaAFMA5XsiCHY+BiUEzkr2HbXvXlcFsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0RsZXlJSWRqNEdKUVRPU3ZZZHRlOWVWd1d3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8wMjk2NmEtYTdhZS00MDU0LWFiMzQt
ZjdlNzNkZGVmNGUyLzEvd0RsZXlJSWRqNEdKUVRPU3ZZZHRlOWVWd1d3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS8wMjk2NmEtYTdhZS00MDU0LWFiMzQtZjdlNzNkZGVmNGUy
LzEvd0RsZXlJSWRqNEdKUVRPU3ZZZHRlOWVWd1d3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnJJVcLXu
SinQ4tsA7otd2uQVAjTVPFXX+EABBnxX82YgbZcLwoAtbcBgXdi8+DuoWQ98s3iH
rqMPAw3aENgByU+TJTrrqRFTJqjGbeerUS9cmX7e1eVR8g++ZZoq25WUEbauzCwj
N7SA00G/xF1kRye53eqY96UBNxZ9yStvRfOWx2UXGYDXpnD+WPoR+VAtZl05v4Ph
aENpB5aMToEqaKjE8muF95SkQ5o4+xtgVBOpNPZc4NClm2BriPVOJwgZwXT0ey2A
OxuAn5lXAIoJjlovb66Vd6XknasRpR3WqQM3usWT/Hv3DVTgEg6hP7wBPig5e+5B
3dsbB4/odH8RqQ==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:20:56 2025 by rpki-client