Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/4b7576-2b9c-43af-8817-6b0065508996/1/WkpH1YK7DpaA-JJYq5bQWGfTUu8.mft
File:                     WkpH1YK7DpaA-JJYq5bQWGfTUu8.mft (raw, json)
Hash identifier:          P1RzKfjMUQm/R5nMw7DI2RrH2fWNByqxQVFkn+PxZYc=
Subject key identifier:   10:94:CA:86:E0:AC:B5:FC:63:AD:1C:FD:65:09:90:88:3D:FC:B7:5B
Authority key identifier: 5A:4A:47:D5:82:BB:0E:96:80:F8:92:58:AB:96:D0:58:67:D3:52:EF
Certificate issuer:       /CN=5a4a47d582bb0e9680f89258ab96d05867d352ef
Certificate serial:       0196857F3401B7E870AB302799C4DCE4790E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WkpH1YK7DpaA-JJYq5bQWGfTUu8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/4b7576-2b9c-43af-8817-6b0065508996/1/WkpH1YK7DpaA-JJYq5bQWGfTUu8.mft
Manifest number:          1300
Signing time:             Wed 30 Apr 2025 07:00:28 +0000
Manifest this update:     Wed 30 Apr 2025 07:00:28 +0000
Manifest next update:     Thu 01 May 2025 07:00:28 +0000
Files and hashes:         1: IAWEnryJVpaK2PC1i1p1gzyA5aM.roa (hash: V8zeqHEXmBXDf+5VLnGO8LhbeOvdCzFQOaNucWQFdJs=)
                          2: IxvoZc4F3Qaa5ur1q1XhsdbIwYI.roa (hash: uBXV07kX7Q7HlXXY9czyil+ZyCPUWCh5XY0q2xGQk9E=)
                          3: WkpH1YK7DpaA-JJYq5bQWGfTUu8.crl (hash: LxNb7dNTTCXtetMBa5zAZqOxn/vW24cqGIqK2LiVLuc=)
                          4: gcLYIM7NGFOjlEOaeCFYBSRJsQU.roa (hash: Gb37A8lctlHsApBbJF+wFlN+wBQgxlqZQzSQ9DIxfCE=)
                          5: tMFph9cmJacY9_6pBYOFi0X8qxI.roa (hash: yN3wCBUXrF4u5FVJmYsnf0p7F7khnudzz4ntTOuoOuA=)
                          6: tYYSCJCFza29RNke_2EcrZu7XHo.roa (hash: lB4PFBQhaKp43hqTQ3cMQhuQr2bCAaP0ut24A/mZGfI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/4b7576-2b9c-43af-8817-6b0065508996/1/WkpH1YK7DpaA-JJYq5bQWGfTUu8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/4b7576-2b9c-43af-8817-6b0065508996/1/WkpH1YK7DpaA-JJYq5bQWGfTUu8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WkpH1YK7DpaA-JJYq5bQWGfTUu8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 May 2025 07:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:85:7f:34:01:b7:e8:70:ab:30:27:99:c4:dc:e4:79:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a4a47d582bb0e9680f89258ab96d05867d352ef
        Validity
            Not Before: Apr 30 07:00:28 2025 GMT
            Not After : May  1 07:00:28 2025 GMT
        Subject: CN=1094ca86e0acb5fc63ad1cfd650990883dfcb75b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:a8:2b:a3:35:71:c9:d5:0a:e8:d3:23:6d:3c:
                    a3:0e:56:c3:09:d8:6c:4a:38:77:64:31:b4:70:c6:
                    b7:7a:6a:fa:f9:bb:30:db:8f:e8:57:3d:30:04:55:
                    bf:1a:7d:78:76:e0:0a:1e:54:e4:f8:06:9e:cd:b9:
                    8d:c0:61:3d:dc:a6:15:af:82:ce:27:80:d7:09:4d:
                    1c:92:f2:23:75:a8:19:c0:d6:46:1e:c9:a0:1b:e5:
                    84:bb:91:11:90:2f:a2:dd:e9:48:80:82:c3:f6:62:
                    8c:48:35:a7:1a:12:e8:31:11:8e:89:9c:61:82:a5:
                    02:ba:e5:83:41:2c:3d:a0:7c:21:18:c1:b5:1d:50:
                    40:ff:1d:a6:4b:04:8f:26:54:41:1a:ec:33:60:5a:
                    52:c0:36:d1:62:5d:11:af:fd:84:2b:dd:3c:a9:e3:
                    b5:f3:9a:a1:2c:f2:3d:16:c3:9d:00:f6:ba:64:c7:
                    50:38:7a:5c:b4:b9:62:27:38:c4:d1:e5:98:c4:2e:
                    47:61:82:74:e6:30:50:2c:0d:1f:e0:0b:b9:31:82:
                    df:74:01:7c:1e:f8:b6:49:25:0a:07:26:6f:64:fa:
                    85:b2:ad:f9:c1:ab:78:8d:0d:74:3b:35:2b:2b:e8:
                    59:00:97:b6:97:8a:31:84:ee:2f:e3:9f:e8:26:97:
                    b1:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:94:CA:86:E0:AC:B5:FC:63:AD:1C:FD:65:09:90:88:3D:FC:B7:5B
            X509v3 Authority Key Identifier:
                keyid:5A:4A:47:D5:82:BB:0E:96:80:F8:92:58:AB:96:D0:58:67:D3:52:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WkpH1YK7DpaA-JJYq5bQWGfTUu8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/4b7576-2b9c-43af-8817-6b0065508996/1/WkpH1YK7DpaA-JJYq5bQWGfTUu8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/4b7576-2b9c-43af-8817-6b0065508996/1/WkpH1YK7DpaA-JJYq5bQWGfTUu8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:bc:26:78:fb:40:cc:ed:e4:cc:fe:81:e0:f6:a5:d4:72:90:
         79:ab:8d:14:e7:af:6b:a0:05:18:d6:74:2e:a3:96:03:a0:d9:
         38:96:22:f7:f2:00:b0:87:0e:94:61:b0:5d:83:a7:ba:30:17:
         af:09:06:88:a4:e9:fe:29:34:e5:db:5b:2c:03:6c:5b:50:44:
         95:e7:85:ec:d3:df:c7:5e:51:9c:e6:4b:0c:95:ce:d4:ae:46:
         b9:cb:f0:95:4a:6b:1a:af:aa:5b:bc:7b:73:7a:62:3c:03:9f:
         cb:70:f5:28:79:18:85:d1:36:1b:cb:af:5b:6e:ff:2b:2b:6c:
         4e:2b:2f:ff:44:af:02:9f:53:70:ba:a6:f1:4c:45:f7:fd:8c:
         3d:6c:01:b9:aa:cb:a6:bd:fb:ea:64:43:e4:51:17:ae:11:45:
         6e:d4:56:cd:36:8a:b8:b8:d9:22:7f:27:9a:1c:98:04:92:b5:
         3a:78:71:d2:da:65:61:07:ce:10:05:ec:d2:92:08:44:5f:54:
         5e:4f:42:25:58:bb:65:58:a0:72:e2:c6:08:fe:29:59:ad:08:
         65:f0:50:b8:0c:7c:ac:30:cf:25:a0:6b:99:0a:39:4c:a2:26:
         f0:4c:b0:16:71:14:fe:7f:54:6c:72:f1:a5:11:30:75:e8:b4:
         ce:93:24:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaFfzQBt+hwqzAnmcTc5HkOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhNGE0N2Q1ODJiYjBlOTY4MGY4OTI1OGFiOTZkMDU4Njdk
MzUyZWYwHhcNMjUwNDMwMDcwMDI4WhcNMjUwNTAxMDcwMDI4WjAzMTEwLwYDVQQD
EygxMDk0Y2E4NmUwYWNiNWZjNjNhZDFjZmQ2NTA5OTA4ODNkZmNiNzViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5KgrozVxydUK6NMjbTyjDlbDCdhs
Sjh3ZDG0cMa3emr6+bsw24/oVz0wBFW/Gn14duAKHlTk+AaezbmNwGE93KYVr4LO
J4DXCU0ckvIjdagZwNZGHsmgG+WEu5ERkC+i3elIgILD9mKMSDWnGhLoMRGOiZxh
gqUCuuWDQSw9oHwhGMG1HVBA/x2mSwSPJlRBGuwzYFpSwDbRYl0Rr/2EK908qeO1
85qhLPI9FsOdAPa6ZMdQOHpctLliJzjE0eWYxC5HYYJ05jBQLA0f4Au5MYLfdAF8
Hvi2SSUKByZvZPqFsq35wat4jQ10OzUrK+hZAJe2l4oxhO4v45/oJpexrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBCUyobgrLX8Y60c/WUJkIg9/LdbMB8GA1UdIwQY
MBaAFFpKR9WCuw6WgPiSWKuW0Fhn01LvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2twSDFZSzdEcGFBLUpKWXE1YlFXR2ZUVXU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS80Yjc1NzYtMmI5Yy00M2FmLTg4MTct
NmIwMDY1NTA4OTk2LzEvV2twSDFZSzdEcGFBLUpKWXE1YlFXR2ZUVXU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS80Yjc1NzYtMmI5Yy00M2FmLTg4MTctNmIwMDY1NTA4OTk2
LzEvV2twSDFZSzdEcGFBLUpKWXE1YlFXR2ZUVXU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxbwmePtA
zO3kzP6B4Pal1HKQeauNFOeva6AFGNZ0LqOWA6DZOJYi9/IAsIcOlGGwXYOnujAX
rwkGiKTp/ik05dtbLANsW1BEleeF7NPfx15RnOZLDJXO1K5GucvwlUprGq+qW7x7
c3piPAOfy3D1KHkYhdE2G8uvW27/KytsTisv/0SvAp9TcLqm8UxF9/2MPWwBuarL
pr376mRD5FEXrhFFbtRWzTaKuLjZIn8nmhyYBJK1Onhx0tplYQfOEAXs0pIIRF9U
Xk9CJVi7ZVigcuLGCP4pWa0IZfBQuAx8rDDPJaBrmQo5TKIm8EywFnEU/n9UbHLx
pREwdei0zpMkJQ==
-----END CERTIFICATE-----
Generated at Wed Apr 30 14:47:08 2025 by rpki-client