Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.mft
File:                     w5gGDxvyLwmZywcbG0JpbbxD4Qw.mft (raw, json)
Hash identifier:          HkjC1Kuz8U7YUK5xnuIJFB+DdCQ4dqjUSrB2xu0GWTc=
Subject key identifier:   E5:CD:11:4C:60:62:B7:2D:77:25:0C:B7:38:96:91:95:AB:12:60:C3
Authority key identifier: C3:98:06:0F:1B:F2:2F:09:99:CB:07:1B:1B:42:69:6D:BC:43:E1:0C
Certificate issuer:       /CN=c398060f1bf22f0999cb071b1b42696dbc43e10c
Certificate serial:       019781A01D7745C948E18D9D94783582DE9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.mft
Manifest number:          15C2
Signing time:             Wed 18 Jun 2025 06:00:43 +0000
Manifest this update:     Wed 18 Jun 2025 06:00:43 +0000
Manifest next update:     Thu 19 Jun 2025 06:00:43 +0000
Files and hashes:         1: 1-xQ2A-voFc496nscIZVVisqrEOU.roa (hash: Bx53C7ad+VIQubS6rdt+VkfhYstF1PdeXxBWiHpjhtY=)
                          2: 2JhXptnvhueVQmeHn25cz0kurHI.roa (hash: 8SozpyusIiaDiWUG+p4VEYgVUXO18QzNYiLErT92LEQ=)
                          3: 4UNuayKJ9SKFMuYEY-BWSB61PDo.roa (hash: VdmvXseDtE+yEFHvon3CqWBkcnp2a6Fyr5Xk6vQjKrA=)
                          4: AOHo_zNkn17jUlogxpO30pi4vZk.roa (hash: +QPjJA3N7ss0yCIwrgcDQ/5UO7ASRz1q9sJuFdAbQnM=)
                          5: FC18L6lC5yaJe6exeGTUDqFYlIo.roa (hash: GydOuNkxodWdIUJZgEfyA03NGxGVxZmhiSQz6U5MpVU=)
                          6: NCJsjpTQWxI0n5NAackGxmLU8Ko.roa (hash: 6TfkgUsG2HVnXozc83DWJO6FnPYzO18qDayvSPxdcok=)
                          7: R7hZWRZrAnJei2iE6wt7eIe4FZk.roa (hash: t2Z1XiCtqv1iQqmj18uapS137l9O9IhR3Vr8NcgP36M=)
                          8: TjCkJR8qj6olugjRfD8NHtt3pZQ.roa (hash: qhX3u+/8KbHWKUW3NatWO53LfU8WF9QKEMeAjJDe1Jc=)
                          9: YVr0AF2c3KiDV-SjuPftS3CnSqY.roa (hash: ArqLxgm2U8vUhD9/kr3eJUcwEOkYGBgAWgDslpkJKrw=)
                          10: _j08j-2FDwC68rueaFbBqi1fpuA.roa (hash: qxS+XcpGtA2PtYARd7lBLLnmeCdljjuwyVVXC8rvxSU=)
                          11: hOu0RIEKB2ppqE90CKomzj_fPaU.roa (hash: 5puJ0YRx40NGpD/EpFU4mHjPixkjg4PxMixsFx+pf6M=)
                          12: jyuHoIpvGivbz5mzbJp3o-Fm4XE.roa (hash: L8QWmw7gSLTV6VDNnAdLsuvANJDNKaAv8M2I7z7lbPU=)
                          13: o5ELM4xYmad2C_2xxSWlwJhmr5o.roa (hash: DRFJi1VatiJUae8GoAxelcGEqzT42Z4nJl4HxitHaE8=)
                          14: qs9auAFh2pBR3JizXaVl9ahPIZw.roa (hash: rWVPduWCAoKm2gglbIKEXbvoDR4rX+//s9Ke5NqI9jo=)
                          15: rC_bTep_k2W1swG7Jm4biitFHA4.roa (hash: Sbe+qsJH965cmbXMZY6OWU+P7tgNGwOdhieuhSBvccc=)
                          16: v8zUsRBNwECEAu2aOUDthF32Ldc.roa (hash: EgwEm0mHHZuzyt4EgzWtyJchZ9xyGDbUPpYJISyJCnY=)
                          17: w5gGDxvyLwmZywcbG0JpbbxD4Qw.crl (hash: L4vykdgfpiOvctjjuaFWEwKXB7RfzQpqf0vkOOj8cyI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 19 Jun 2025 06:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:81:a0:1d:77:45:c9:48:e1:8d:9d:94:78:35:82:de:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c398060f1bf22f0999cb071b1b42696dbc43e10c
        Validity
            Not Before: Jun 18 06:00:43 2025 GMT
            Not After : Jun 19 06:00:43 2025 GMT
        Subject: CN=e5cd114c6062b72d77250cb738969195ab1260c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:14:71:48:84:57:73:94:43:ea:d1:25:58:55:
                    5f:93:29:47:6d:ea:99:cb:18:da:7b:cd:92:0c:07:
                    f2:44:39:c6:6e:80:95:4d:18:5e:3d:bb:a8:25:03:
                    2f:da:e4:e1:86:ee:98:69:4c:fd:c8:46:be:f6:c8:
                    7b:80:93:26:2f:4a:9e:f9:fc:60:3e:92:f9:8e:f7:
                    e6:d1:18:f6:c4:e9:3a:8c:84:fe:e8:9f:b5:ce:2f:
                    fc:69:c7:6d:68:f5:b4:6a:6a:c3:38:39:c3:26:7b:
                    b7:6e:a8:8d:a6:b0:81:4e:ac:36:c3:d7:bc:a5:25:
                    b7:55:5d:2f:b7:de:87:db:92:5a:74:44:a1:ed:83:
                    84:6c:f9:b7:87:13:27:10:0b:33:af:b9:0f:f1:9b:
                    60:94:3e:0d:cc:7b:c2:08:ab:d0:12:28:f0:94:21:
                    02:82:bd:9a:91:d3:e1:9b:05:7b:02:52:d8:cd:dc:
                    f1:51:f0:7b:d8:d0:34:49:e6:1d:4c:e0:f1:47:e9:
                    90:5f:3d:e9:e8:da:26:5d:df:77:d7:ae:dd:d2:e4:
                    81:f6:63:ec:96:a2:3b:d5:e6:5f:75:79:46:94:ca:
                    e2:34:95:4b:2a:0b:f9:cb:0a:e0:2c:a6:0d:b6:f6:
                    d2:ac:18:f4:9d:1b:b1:0f:f8:c4:97:ef:6c:50:38:
                    c4:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:CD:11:4C:60:62:B7:2D:77:25:0C:B7:38:96:91:95:AB:12:60:C3
            X509v3 Authority Key Identifier:
                keyid:C3:98:06:0F:1B:F2:2F:09:99:CB:07:1B:1B:42:69:6D:BC:43:E1:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w5gGDxvyLwmZywcbG0JpbbxD4Qw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3bfc31-dc32-4541-8460-c927b8c2c7c4/1/w5gGDxvyLwmZywcbG0JpbbxD4Qw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:64:17:2f:ea:53:e1:4b:b4:99:11:09:a9:52:ba:f0:88:9e:
         fd:78:73:8f:10:ec:92:3a:fb:f2:6a:30:d4:7f:45:a2:0b:c9:
         e8:bf:21:71:ae:e4:25:f2:10:63:55:3d:e9:67:a7:c4:aa:54:
         b3:aa:83:e5:50:33:5b:bd:6d:53:d8:74:90:09:e9:93:17:23:
         36:0a:2d:64:85:48:4e:15:5e:6d:b7:9a:a4:93:f7:7e:27:a8:
         c3:99:7b:3a:bb:61:a9:77:03:18:c9:9b:e1:fa:78:e4:32:9e:
         ea:c1:d3:20:07:90:ff:f8:f0:10:04:92:c8:17:cc:2f:67:cb:
         25:1b:5e:87:d1:d0:28:94:31:dd:79:ce:bf:ec:47:4f:2b:c1:
         a3:f3:d7:4f:ce:54:29:8c:67:71:94:4e:e3:1b:a6:90:69:c5:
         2f:4d:36:12:7d:7a:36:24:8b:08:30:c2:32:a7:f3:3d:7c:66:
         ee:84:c6:18:91:30:bb:d9:15:61:2b:44:33:46:5f:a9:98:f5:
         64:e1:81:32:43:1b:ac:5b:99:81:73:3c:67:5c:a9:80:7a:d2:
         e7:3a:bc:f5:06:fb:60:87:d5:28:f6:39:fe:25:17:6c:dc:19:
         e4:a6:2f:f0:1a:e7:88:06:38:8b:bc:2a:58:43:32:7f:de:68:
         02:8e:0b:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZeBoB13RclI4Y2dlHg1gt6aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzOTgwNjBmMWJmMjJmMDk5OWNiMDcxYjFiNDI2OTZkYmM0
M2UxMGMwHhcNMjUwNjE4MDYwMDQzWhcNMjUwNjE5MDYwMDQzWjAzMTEwLwYDVQQD
EyhlNWNkMTE0YzYwNjJiNzJkNzcyNTBjYjczODk2OTE5NWFiMTI2MGMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBRxSIRXc5RD6tElWFVfkylHbeqZ
yxjae82SDAfyRDnGboCVTRhePbuoJQMv2uThhu6YaUz9yEa+9sh7gJMmL0qe+fxg
PpL5jvfm0Rj2xOk6jIT+6J+1zi/8acdtaPW0amrDODnDJnu3bqiNprCBTqw2w9e8
pSW3VV0vt96H25JadESh7YOEbPm3hxMnEAszr7kP8ZtglD4NzHvCCKvQEijwlCEC
gr2akdPhmwV7AlLYzdzxUfB72NA0SeYdTODxR+mQXz3p6NomXd93167d0uSB9mPs
lqI71eZfdXlGlMriNJVLKgv5ywrgLKYNtvbSrBj0nRuxD/jEl+9sUDjEXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOXNEUxgYrctdyUMtziWkZWrEmDDMB8GA1UdIwQY
MBaAFMOYBg8b8i8JmcsHGxtCaW28Q+EMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzVnR0R4dnlMd21aeXdjYkcwSnBiYnhENFF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8zYmZjMzEtZGMzMi00NTQxLTg0NjAt
YzkyN2I4YzJjN2M0LzEvdzVnR0R4dnlMd21aeXdjYkcwSnBiYnhENFF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC8zYmZjMzEtZGMzMi00NTQxLTg0NjAtYzkyN2I4YzJjN2M0
LzEvdzVnR0R4dnlMd21aeXdjYkcwSnBiYnhENFF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQmQXL+pT
4Uu0mREJqVK68Iie/XhzjxDskjr78mow1H9FogvJ6L8hca7kJfIQY1U96WenxKpU
s6qD5VAzW71tU9h0kAnpkxcjNgotZIVIThVebbeapJP3fieow5l7OrthqXcDGMmb
4fp45DKe6sHTIAeQ//jwEASSyBfML2fLJRteh9HQKJQx3XnOv+xHTyvBo/PXT85U
KYxncZRO4xumkGnFL002En16NiSLCDDCMqfzPXxm7oTGGJEwu9kVYStEM0ZfqZj1
ZOGBMkMbrFuZgXM8Z1ypgHrS5zq89Qb7YIfVKPY5/iUXbNwZ5KYv8BrniAY4i7wq
WEMyf95oAo4LKA==
-----END CERTIFICATE-----
Generated at Wed Jun 18 16:12:08 2025 by rpki-client