Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/5fffde-48c4-4140-84fc-19dbd6b42fb5/1/1-WRckYqylK3RmyZ_SPPHvrn6DOs.mft
File:                     1-WRckYqylK3RmyZ_SPPHvrn6DOs.mft (raw, json)
Hash identifier:          oVHLtNokRmOv9WYuZj5l32IhMnSkH7mINLtU9alA6JE=
Subject key identifier:   BF:7E:E2:45:23:D4:97:08:17:E5:B2:C3:1B:F6:77:41:28:04:0E:79
Authority key identifier: F9:64:5C:91:8A:B2:94:AD:D1:9B:26:7F:48:F3:C7:BE:B9:FA:0C:EB
Certificate issuer:       /CN=f9645c918ab294add19b267f48f3c7beb9fa0ceb
Certificate serial:       01976F2C404D6D444BFAB2B076403D48E0BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-WRckYqylK3RmyZ_SPPHvrn6DOs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/5fffde-48c4-4140-84fc-19dbd6b42fb5/1/1-WRckYqylK3RmyZ_SPPHvrn6DOs.mft
Manifest number:          053B
Signing time:             Sat 14 Jun 2025 16:01:00 +0000
Manifest this update:     Sat 14 Jun 2025 16:01:00 +0000
Manifest next update:     Sun 15 Jun 2025 16:01:00 +0000
Files and hashes:         1: 1-WRckYqylK3RmyZ_SPPHvrn6DOs.crl (hash: NlbKYXg3vXC/2/x3SYLp1FV6jOab8+2ULmiTPU/c0lo=)
                          2: iAnZ5coAUkQIezSEoSc6B6_I7O4.roa (hash: 3KAUfgARN/Q5cvGPYfJlDhSfAV6Du1VfpKukfXJreCs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/5fffde-48c4-4140-84fc-19dbd6b42fb5/1/1-WRckYqylK3RmyZ_SPPHvrn6DOs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/5fffde-48c4-4140-84fc-19dbd6b42fb5/1/1-WRckYqylK3RmyZ_SPPHvrn6DOs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-WRckYqylK3RmyZ_SPPHvrn6DOs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 16:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6f:2c:40:4d:6d:44:4b:fa:b2:b0:76:40:3d:48:e0:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9645c918ab294add19b267f48f3c7beb9fa0ceb
        Validity
            Not Before: Jun 14 16:01:00 2025 GMT
            Not After : Jun 15 16:01:00 2025 GMT
        Subject: CN=bf7ee24523d4970817e5b2c31bf6774128040e79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:78:b7:5b:8c:2c:8a:a6:c5:1b:59:da:b5:15:
                    ec:cc:e8:74:45:0f:ab:33:05:42:92:a3:5b:74:a9:
                    b1:92:33:41:a5:f3:40:4d:3a:92:5c:fe:69:8e:ac:
                    69:eb:02:5b:60:6d:5f:5c:a0:dd:04:41:00:23:1e:
                    59:7b:69:e5:91:72:ce:c4:66:0d:2f:95:48:ab:ad:
                    6d:a2:fc:31:c6:8e:4b:78:ed:f6:b7:1a:3c:31:46:
                    ec:9e:d4:75:95:e3:79:c2:99:18:15:55:3a:83:29:
                    39:8b:66:11:8d:e0:c9:4c:7b:f4:69:ee:f7:d3:6c:
                    52:65:e5:2f:35:13:a3:9f:ef:b0:c2:40:eb:b2:68:
                    35:5a:2a:01:e1:85:3d:43:32:99:f3:9f:86:7b:bc:
                    13:c8:ff:fe:d7:80:1f:82:0a:24:df:b5:25:ef:05:
                    bc:b4:51:4b:69:a6:47:09:cb:66:12:cd:ab:3e:b3:
                    34:68:20:9e:ea:12:a7:73:0f:57:e5:cc:15:05:d5:
                    2e:4a:9b:09:fe:ed:2b:5e:09:4b:2e:d8:20:51:1f:
                    9e:55:c1:34:01:81:ca:71:c3:3e:00:f0:34:d7:33:
                    5d:bc:45:fc:34:9b:9c:49:3a:df:c4:0f:c4:ca:26:
                    0b:49:aa:16:01:86:db:29:62:12:ed:76:59:9b:d1:
                    5f:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:7E:E2:45:23:D4:97:08:17:E5:B2:C3:1B:F6:77:41:28:04:0E:79
            X509v3 Authority Key Identifier:
                keyid:F9:64:5C:91:8A:B2:94:AD:D1:9B:26:7F:48:F3:C7:BE:B9:FA:0C:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-WRckYqylK3RmyZ_SPPHvrn6DOs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/5fffde-48c4-4140-84fc-19dbd6b42fb5/1/1-WRckYqylK3RmyZ_SPPHvrn6DOs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/5fffde-48c4-4140-84fc-19dbd6b42fb5/1/1-WRckYqylK3RmyZ_SPPHvrn6DOs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:43:ea:bc:c6:19:fb:bd:32:8e:af:c1:f9:51:e4:41:93:db:
         b9:71:a7:66:02:80:23:47:26:fb:22:35:34:68:3c:b2:ba:d7:
         34:a4:b1:00:75:9c:4a:70:0d:c7:14:a6:20:39:ea:ab:ea:d4:
         25:06:e5:93:9f:12:8d:05:50:88:79:f5:b9:df:4c:85:c0:75:
         44:7d:24:07:48:0c:58:42:06:d7:70:02:31:a2:8a:52:96:76:
         a2:3c:2d:35:3b:0b:be:57:6c:90:d5:38:82:b5:35:00:17:a1:
         9a:d0:2e:13:4a:47:d9:a7:4a:cd:d1:7c:ad:38:3e:9c:3b:22:
         e2:b6:c3:0d:af:15:5c:18:22:89:e1:47:9d:cd:8d:f4:ae:5f:
         aa:91:fd:86:90:90:3c:7f:e0:e4:5e:51:80:09:ce:1d:80:58:
         16:4a:09:0e:dc:af:31:71:c5:b2:5d:a3:95:4c:ca:78:2a:31:
         62:72:a3:ff:a2:01:12:40:ba:06:bd:f1:92:64:b5:24:0b:fc:
         13:b9:ed:40:87:53:7c:aa:bb:7d:ac:02:63:d3:f8:a6:0b:42:
         f2:53:ff:26:0a:1e:1d:28:b8:8a:4b:34:4d:e7:20:81:77:09:
         aa:a1:7b:4b:e5:f0:3b:ae:a9:33:fc:98:b8:e5:27:8b:22:8d:
         04:68:47:bb
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZdvLEBNbURL+rKwdkA9SOC/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5NjQ1YzkxOGFiMjk0YWRkMTliMjY3ZjQ4ZjNjN2JlYjlm
YTBjZWIwHhcNMjUwNjE0MTYwMTAwWhcNMjUwNjE1MTYwMTAwWjAzMTEwLwYDVQQD
EyhiZjdlZTI0NTIzZDQ5NzA4MTdlNWIyYzMxYmY2Nzc0MTI4MDQwZTc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXi3W4wsiqbFG1natRXszOh0RQ+r
MwVCkqNbdKmxkjNBpfNATTqSXP5pjqxp6wJbYG1fXKDdBEEAIx5Ze2nlkXLOxGYN
L5VIq61tovwxxo5LeO32txo8MUbsntR1leN5wpkYFVU6gyk5i2YRjeDJTHv0ae73
02xSZeUvNROjn++wwkDrsmg1WioB4YU9QzKZ85+Ge7wTyP/+14Afggok37Ul7wW8
tFFLaaZHCctmEs2rPrM0aCCe6hKncw9X5cwVBdUuSpsJ/u0rXglLLtggUR+eVcE0
AYHKccM+APA01zNdvEX8NJucSTrfxA/EyiYLSaoWAYbbKWIS7XZZm9FfUQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFL9+4kUj1JcIF+Wywxv2d0EoBA55MB8GA1UdIwQY
MBaAFPlkXJGKspSt0Zsmf0jzx765+gzrMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1XUmNrWXF5bEszUm15Wl9TUFBIdnJuNkRPcy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYWQvNWZmZmRlLTQ4YzQtNDE0MC04NGZj
LTE5ZGJkNmI0MmZiNS8xLzEtV1Jja1lxeWxLM1JteVpfU1BQSHZybjZET3MubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2FkLzVmZmZkZS00OGM0LTQxNDAtODRmYy0xOWRiZDZiNDJm
YjUvMS8xLVdSY2tZcXlsSzNSbXlaX1NQUEh2cm42RE9zLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiEPq
vMYZ+70yjq/B+VHkQZPbuXGnZgKAI0cm+yI1NGg8srrXNKSxAHWcSnANxxSmIDnq
q+rUJQblk58SjQVQiHn1ud9MhcB1RH0kB0gMWEIG13ACMaKKUpZ2ojwtNTsLvlds
kNU4grU1ABehmtAuE0pH2adKzdF8rTg+nDsi4rbDDa8VXBgiieFHnc2N9K5fqpH9
hpCQPH/g5F5RgAnOHYBYFkoJDtyvMXHFsl2jlUzKeCoxYnKj/6IBEkC6Br3xkmS1
JAv8E7ntQIdTfKq7fawCY9P4pgtC8lP/JgoeHSi4iks0TecggXcJqqF7S+XwO66p
M/yYuOUniyKNBGhHuw==
-----END CERTIFICATE-----
Generated at Sun Jun 15 00:09:39 2025 by rpki-client