Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/cwLNwp_coJ6aDz99IRPahafh1lQ.mft
File:                     cwLNwp_coJ6aDz99IRPahafh1lQ.mft (raw, json)
Hash identifier:          iM6CUks4sHywhk22dlMeIwZZbxA6sjLicC9R4psBCZc=
Subject key identifier:   CA:27:8E:75:37:31:80:90:FA:C0:A5:EE:F0:D6:4F:A7:56:AB:B7:32
Authority key identifier: 73:02:CD:C2:9F:DC:A0:9E:9A:0F:3F:7D:21:13:DA:85:A7:E1:D6:54
Certificate issuer:       /CN=7302cdc29fdca09e9a0f3f7d2113da85a7e1d654
Certificate serial:       01967A577BB027AAE861B37E5522083F6BCA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cwLNwp_coJ6aDz99IRPahafh1lQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/cwLNwp_coJ6aDz99IRPahafh1lQ.mft
Manifest number:          1526
Signing time:             Mon 28 Apr 2025 03:01:15 +0000
Manifest this update:     Mon 28 Apr 2025 03:01:15 +0000
Manifest next update:     Tue 29 Apr 2025 03:01:15 +0000
Files and hashes:         1: 1b0YLKL7-iTCHbE9CdUd3XA5y7g.roa (hash: rIogoNu1hzVKlpslv16w1RSjAhJwMYGtMcjGmVqGYDI=)
                          2: 3OrpPYLoIXvd5Z078UIjv-o45HE.roa (hash: 7OkFl+S/WJrI7zN/5kL1WgsZR4fsHSw0RK0hWnDrWeA=)
                          3: 6hgKpsdlK6GUgCq-rwztVz_Bhck.roa (hash: x7Nnzb3+BjsMGfCWv6tnmGZkmedf5cnHnxqvvpjotow=)
                          4: BclF8ogFJm7SHbbSauqgIPuVgI8.roa (hash: 6BijkZjD88M35uPP9hk20CG6BMPOZYagpsfeWkqpwqw=)
                          5: FZc4W_DS-zYGeo6V-YV56NvLSjQ.roa (hash: Y7NpnMtxGd1OVNPFS3Fggo5HticHh8zC2s5H72cAKJA=)
                          6: cwLNwp_coJ6aDz99IRPahafh1lQ.crl (hash: 3vmpuRiJUqC4giz3kRO1qYnl2NitmzYb13+zFvFx6+E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/cwLNwp_coJ6aDz99IRPahafh1lQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/cwLNwp_coJ6aDz99IRPahafh1lQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cwLNwp_coJ6aDz99IRPahafh1lQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Apr 2025 03:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:7a:57:7b:b0:27:aa:e8:61:b3:7e:55:22:08:3f:6b:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7302cdc29fdca09e9a0f3f7d2113da85a7e1d654
        Validity
            Not Before: Apr 28 03:01:15 2025 GMT
            Not After : Apr 29 03:01:15 2025 GMT
        Subject: CN=ca278e7537318090fac0a5eef0d64fa756abb732
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:43:b4:55:34:f0:b7:61:d2:57:e6:57:7b:49:
                    77:71:ef:5b:5c:05:d6:b7:d7:ac:65:f9:3a:59:9e:
                    d4:62:83:bc:84:50:be:4c:0d:86:1e:9a:88:4f:20:
                    0b:9d:c0:64:82:c5:6a:e6:32:f8:34:22:de:9c:ca:
                    dc:48:b1:9e:ee:5e:42:2c:74:07:01:2d:8b:10:75:
                    0b:23:59:05:9b:73:74:41:b3:dd:c0:d7:fb:d0:50:
                    09:28:41:d7:d2:6c:b4:75:92:55:06:a1:fe:b3:0d:
                    5f:85:bb:ac:1f:67:1a:49:17:02:b0:60:c8:fc:bb:
                    91:1a:6b:22:a1:16:13:76:c5:5e:85:05:5f:ba:f9:
                    5a:07:b3:c0:2a:87:e2:e0:7e:8a:42:3e:3f:21:c0:
                    db:e6:a8:c1:bf:e5:bc:85:42:fe:78:cf:30:cd:e5:
                    b2:af:03:e6:8b:9d:75:28:ad:aa:5f:de:1a:08:40:
                    fc:6c:2c:d5:3a:3d:8d:11:f9:37:6b:b3:cb:87:96:
                    fe:72:18:5e:7b:21:fa:e8:f4:c3:64:99:89:1b:89:
                    5f:ca:36:ed:5c:84:67:e7:ba:8e:0d:6f:b7:07:f4:
                    e3:bd:74:cb:e0:03:70:6a:f3:26:f0:6e:55:74:fa:
                    38:a1:40:4f:b9:64:e8:41:ed:b7:2f:84:2b:94:f3:
                    a6:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:27:8E:75:37:31:80:90:FA:C0:A5:EE:F0:D6:4F:A7:56:AB:B7:32
            X509v3 Authority Key Identifier:
                keyid:73:02:CD:C2:9F:DC:A0:9E:9A:0F:3F:7D:21:13:DA:85:A7:E1:D6:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cwLNwp_coJ6aDz99IRPahafh1lQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/cwLNwp_coJ6aDz99IRPahafh1lQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/cwLNwp_coJ6aDz99IRPahafh1lQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:f8:53:5f:79:0a:37:b3:cb:c5:87:d8:8c:e6:f4:9b:11:5e:
         d4:6e:fb:ff:ec:5b:44:e1:e9:1f:e7:e1:60:ab:9a:a0:a7:dc:
         48:11:bc:82:d6:8b:bc:65:d9:f8:fb:f8:85:a4:57:e9:10:0c:
         b6:45:6e:36:ae:91:16:61:f1:a5:9d:2f:7b:8d:ab:e6:cb:49:
         63:55:9e:85:73:df:e7:fc:08:54:2c:a0:43:21:6d:1d:db:35:
         84:75:ba:78:54:63:06:10:8a:ef:9f:a2:9a:11:ac:a4:dd:7b:
         08:89:41:32:5c:0d:e2:9f:03:d2:aa:b5:e2:58:65:74:10:18:
         46:a8:f6:ed:25:0a:0f:8a:e9:96:80:82:cb:d9:ee:fd:87:2b:
         c0:d5:37:42:41:6b:64:a4:c8:41:e5:65:5c:a6:dd:bf:21:ff:
         78:92:c5:32:2c:a2:e0:47:a1:eb:a0:a6:45:ba:f3:c8:85:a9:
         c7:6b:5c:46:2d:f7:55:54:f7:04:98:fa:e2:8b:19:ca:71:73:
         5c:9f:c6:1d:4d:a7:a0:be:93:d2:97:9d:0a:a9:c0:01:59:48:
         1d:e4:c1:f3:9b:12:47:89:75:fc:e4:bd:0a:af:a6:8a:1a:66:
         f9:6e:b6:31:1c:69:d9:d7:d4:a6:0b:1d:b0:21:19:89:ea:30:
         64:dd:cd:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ6V3uwJ6roYbN+VSIIP2vKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczMDJjZGMyOWZkY2EwOWU5YTBmM2Y3ZDIxMTNkYTg1YTdl
MWQ2NTQwHhcNMjUwNDI4MDMwMTE1WhcNMjUwNDI5MDMwMTE1WjAzMTEwLwYDVQQD
EyhjYTI3OGU3NTM3MzE4MDkwZmFjMGE1ZWVmMGQ2NGZhNzU2YWJiNzMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUO0VTTwt2HSV+ZXe0l3ce9bXAXW
t9esZfk6WZ7UYoO8hFC+TA2GHpqITyALncBkgsVq5jL4NCLenMrcSLGe7l5CLHQH
AS2LEHULI1kFm3N0QbPdwNf70FAJKEHX0my0dZJVBqH+sw1fhbusH2caSRcCsGDI
/LuRGmsioRYTdsVehQVfuvlaB7PAKofi4H6KQj4/IcDb5qjBv+W8hUL+eM8wzeWy
rwPmi511KK2qX94aCED8bCzVOj2NEfk3a7PLh5b+chheeyH66PTDZJmJG4lfyjbt
XIRn57qODW+3B/TjvXTL4ANwavMm8G5VdPo4oUBPuWToQe23L4QrlPOmXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMonjnU3MYCQ+sCl7vDWT6dWq7cyMB8GA1UdIwQY
MBaAFHMCzcKf3KCemg8/fSET2oWn4dZUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3dMTndwX2NvSjZhRHo5OUlSUGFoYWZoMWxRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC83NzIxN2QtODE0Yi00ODZhLThlZjIt
ZmUwMzMzZWQwMDVmLzEvY3dMTndwX2NvSjZhRHo5OUlSUGFoYWZoMWxRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC83NzIxN2QtODE0Yi00ODZhLThlZjItZmUwMzMzZWQwMDVm
LzEvY3dMTndwX2NvSjZhRHo5OUlSUGFoYWZoMWxRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe/hTX3kK
N7PLxYfYjOb0mxFe1G77/+xbROHpH+fhYKuaoKfcSBG8gtaLvGXZ+Pv4haRX6RAM
tkVuNq6RFmHxpZ0ve42r5stJY1WehXPf5/wIVCygQyFtHds1hHW6eFRjBhCK75+i
mhGspN17CIlBMlwN4p8D0qq14lhldBAYRqj27SUKD4rploCCy9nu/YcrwNU3QkFr
ZKTIQeVlXKbdvyH/eJLFMiyi4Eeh66CmRbrzyIWpx2tcRi33VVT3BJj64osZynFz
XJ/GHU2noL6T0pedCqnAAVlIHeTB85sSR4l1/OS9Cq+mihpm+W62MRxp2dfUpgsd
sCEZieowZN3NZg==
-----END CERTIFICATE-----
Generated at Mon Apr 28 11:16:07 2025 by rpki-client