Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/179bd8-fc68-4f76-86ff-68f316607376/1/Wjsd3asz5FUGrZdwQJJHIEF9Vog.mft
File:                     Wjsd3asz5FUGrZdwQJJHIEF9Vog.mft (raw, json)
Hash identifier:          MPG2aYnbLCNKL+Tk6TsegD5olZuEJ6sw8opM5z+zbhI=
Subject key identifier:   52:64:30:B8:E4:D7:90:6E:79:6F:60:D4:5C:A2:56:7C:B1:06:8A:34
Authority key identifier: 5A:3B:1D:DD:AB:33:E4:55:06:AD:97:70:40:92:47:20:41:7D:56:88
Certificate issuer:       /CN=5a3b1dddab33e45506ad977040924720417d5688
Certificate serial:       019768BBB42CD451102235311B42DCCB7364
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wjsd3asz5FUGrZdwQJJHIEF9Vog.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/179bd8-fc68-4f76-86ff-68f316607376/1/Wjsd3asz5FUGrZdwQJJHIEF9Vog.mft
Manifest number:          0AD5
Signing time:             Fri 13 Jun 2025 10:00:21 +0000
Manifest this update:     Fri 13 Jun 2025 10:00:21 +0000
Manifest next update:     Sat 14 Jun 2025 10:00:21 +0000
Files and hashes:         1: Wjsd3asz5FUGrZdwQJJHIEF9Vog.crl (hash: XABF1//DvfbBaQurMBcBB/6wvmYOTZss998pVyXvWYU=)
                          2: y0QD6cVeHITeOOUrewdmduPjNyw.roa (hash: d578B+uX2xF03DWPlSDJU4G4ivlMPauq0XylCe7obdU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/179bd8-fc68-4f76-86ff-68f316607376/1/Wjsd3asz5FUGrZdwQJJHIEF9Vog.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/179bd8-fc68-4f76-86ff-68f316607376/1/Wjsd3asz5FUGrZdwQJJHIEF9Vog.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Wjsd3asz5FUGrZdwQJJHIEF9Vog.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 10:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:68:bb:b4:2c:d4:51:10:22:35:31:1b:42:dc:cb:73:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a3b1dddab33e45506ad977040924720417d5688
        Validity
            Not Before: Jun 13 10:00:21 2025 GMT
            Not After : Jun 14 10:00:21 2025 GMT
        Subject: CN=526430b8e4d7906e796f60d45ca2567cb1068a34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ae:49:45:5c:b7:50:2a:9a:68:8e:6b:eb:8a:
                    53:a6:22:d3:13:72:5d:97:88:03:60:ad:91:3d:ac:
                    90:ce:54:97:40:0e:17:b2:30:28:a9:d1:f8:e8:20:
                    6b:2b:9a:7c:22:aa:a0:0b:89:89:2b:da:b8:f0:c2:
                    03:d6:9c:2f:04:9a:2a:fc:49:51:df:b1:18:d9:e0:
                    8a:b2:e6:36:fb:05:8c:fc:52:40:dc:2e:32:c7:17:
                    0e:03:96:74:2b:e9:62:e6:8d:ba:d1:e9:2d:90:3a:
                    fc:f1:c7:ff:b4:e8:13:29:0f:7d:dd:8e:12:9a:fe:
                    8e:06:92:4a:eb:a2:bc:8b:af:1b:9f:07:fa:10:e1:
                    c0:2d:80:a5:b1:01:d8:ea:53:46:29:43:46:5f:7a:
                    fa:2f:f9:5f:a7:5a:4e:4f:4f:cb:1d:76:82:2b:3c:
                    49:4e:99:4a:f7:98:ae:f5:a4:6e:b1:fe:9c:46:e9:
                    68:e6:0f:63:51:a8:e3:c7:0c:ca:8e:c5:36:a3:07:
                    1b:dd:8f:5d:cc:e0:38:a4:7b:20:b7:e4:cc:f2:fd:
                    6b:e2:9f:60:14:41:1c:5d:ed:82:be:25:94:67:2b:
                    87:58:4a:97:1f:89:97:f4:06:73:59:10:0a:41:99:
                    54:95:ca:a9:e8:fa:95:c2:ca:07:4a:31:c2:e8:57:
                    59:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:64:30:B8:E4:D7:90:6E:79:6F:60:D4:5C:A2:56:7C:B1:06:8A:34
            X509v3 Authority Key Identifier:
                keyid:5A:3B:1D:DD:AB:33:E4:55:06:AD:97:70:40:92:47:20:41:7D:56:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wjsd3asz5FUGrZdwQJJHIEF9Vog.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/179bd8-fc68-4f76-86ff-68f316607376/1/Wjsd3asz5FUGrZdwQJJHIEF9Vog.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/179bd8-fc68-4f76-86ff-68f316607376/1/Wjsd3asz5FUGrZdwQJJHIEF9Vog.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:a9:c2:e8:20:ee:13:11:58:88:0e:b1:00:eb:af:61:86:cb:
         74:61:6b:5c:1c:a1:93:87:f8:ba:42:a7:09:67:38:55:da:ef:
         0d:2c:dd:1e:e2:8c:46:d4:c7:c2:be:37:f5:89:b5:c3:93:de:
         91:c4:ff:15:41:13:aa:a0:90:06:77:bc:a9:ab:d2:b0:7a:60:
         e1:fc:e7:95:4b:69:9f:24:b0:49:f0:40:18:65:9a:5d:7f:fa:
         44:89:5a:0b:5e:11:ac:6f:a1:8f:31:5b:19:53:f1:97:4c:a1:
         a5:37:52:b9:77:3e:d6:7a:85:70:80:fe:44:77:cb:45:3d:24:
         2e:5b:f4:04:be:01:64:f4:4a:f6:72:db:b7:d2:88:ed:9f:67:
         a9:8b:66:fd:5c:17:65:1d:5d:fa:85:3d:5e:7b:cc:01:b9:25:
         17:52:0a:83:53:af:94:2b:41:94:db:ea:af:11:08:7b:44:73:
         7a:46:ba:f0:61:a2:5d:af:51:a6:bb:39:1f:f2:48:e3:2b:ff:
         62:af:ef:b0:24:21:e6:2f:96:50:57:0c:e6:78:e5:7f:75:28:
         e2:6a:e1:4f:f9:9d:15:bc:26:a9:2b:c4:13:6c:97:ee:7a:dc:
         9f:20:27:18:65:e2:a7:9c:ed:bb:93:c8:36:2a:68:0f:9d:94:
         74:e4:24:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdou7Qs1FEQIjUxG0Lcy3NkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhM2IxZGRkYWIzM2U0NTUwNmFkOTc3MDQwOTI0NzIwNDE3
ZDU2ODgwHhcNMjUwNjEzMTAwMDIxWhcNMjUwNjE0MTAwMDIxWjAzMTEwLwYDVQQD
Eyg1MjY0MzBiOGU0ZDc5MDZlNzk2ZjYwZDQ1Y2EyNTY3Y2IxMDY4YTM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAma5JRVy3UCqaaI5r64pTpiLTE3Jd
l4gDYK2RPayQzlSXQA4XsjAoqdH46CBrK5p8IqqgC4mJK9q48MID1pwvBJoq/ElR
37EY2eCKsuY2+wWM/FJA3C4yxxcOA5Z0K+li5o260ektkDr88cf/tOgTKQ993Y4S
mv6OBpJK66K8i68bnwf6EOHALYClsQHY6lNGKUNGX3r6L/lfp1pOT0/LHXaCKzxJ
TplK95iu9aRusf6cRulo5g9jUajjxwzKjsU2owcb3Y9dzOA4pHsgt+TM8v1r4p9g
FEEcXe2CviWUZyuHWEqXH4mX9AZzWRAKQZlUlcqp6PqVwsoHSjHC6FdZrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFJkMLjk15BueW9g1FyiVnyxBoo0MB8GA1UdIwQY
MBaAFFo7Hd2rM+RVBq2XcECSRyBBfVaIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2pzZDNhc3o1RlVHclpkd1FKSkhJRUY5Vm9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8xNzliZDgtZmM2OC00Zjc2LTg2ZmYt
NjhmMzE2NjA3Mzc2LzEvV2pzZDNhc3o1RlVHclpkd1FKSkhJRUY5Vm9nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy8xNzliZDgtZmM2OC00Zjc2LTg2ZmYtNjhmMzE2NjA3Mzc2
LzEvV2pzZDNhc3o1RlVHclpkd1FKSkhJRUY5Vm9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApKnC6CDu
ExFYiA6xAOuvYYbLdGFrXByhk4f4ukKnCWc4VdrvDSzdHuKMRtTHwr439Ym1w5Pe
kcT/FUETqqCQBne8qavSsHpg4fznlUtpnySwSfBAGGWaXX/6RIlaC14RrG+hjzFb
GVPxl0yhpTdSuXc+1nqFcID+RHfLRT0kLlv0BL4BZPRK9nLbt9KI7Z9nqYtm/VwX
ZR1d+oU9XnvMAbklF1IKg1OvlCtBlNvqrxEIe0Rzeka68GGiXa9Rprs5H/JI4yv/
Yq/vsCQh5i+WUFcM5njlf3Uo4mrhT/mdFbwmqSvEE2yX7nrcnyAnGGXip5ztu5PI
NipoD52UdOQkhQ==
-----END CERTIFICATE-----
Generated at Fri Jun 13 20:10:28 2025 by rpki-client