Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.mft
File:                     WzNYEQ2t8iTnGZFBYXMd9eVsQYg.mft (raw, json)
Hash identifier:          kAqEYUmmzr3X2TJCA3CQC3apS6jNdHzsLbfJLm4pDVs=
Subject key identifier:   30:62:47:0C:32:3F:25:3F:85:C6:CA:21:F2:70:D6:F3:A1:5D:EC:F9
Authority key identifier: 5B:33:58:11:0D:AD:F2:24:E7:19:91:41:61:73:1D:F5:E5:6C:41:88
Certificate issuer:       /CN=5b3358110dadf224e719914161731df5e56c4188
Certificate serial:       0196851158A052D0C33AF52AD19998CB11E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.mft
Manifest number:          1480
Signing time:             Wed 30 Apr 2025 05:00:28 +0000
Manifest this update:     Wed 30 Apr 2025 05:00:28 +0000
Manifest next update:     Thu 01 May 2025 05:00:28 +0000
Files and hashes:         1: WzNYEQ2t8iTnGZFBYXMd9eVsQYg.crl (hash: fOncOCu93VNoVdAh5az7WkYWN3AO6vRhM4+Z3wPZCbc=)
                          2: ad0B85jvjdQ5awOY3wMvIUJWKS0.roa (hash: TTcNh3M53FShxBm0xKV5WZZn8GR6GuYGWd3G/MpA0dY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 May 2025 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:85:11:58:a0:52:d0:c3:3a:f5:2a:d1:99:98:cb:11:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b3358110dadf224e719914161731df5e56c4188
        Validity
            Not Before: Apr 30 05:00:28 2025 GMT
            Not After : May  1 05:00:28 2025 GMT
        Subject: CN=3062470c323f253f85c6ca21f270d6f3a15decf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:fd:ba:48:55:33:ac:3e:cc:27:fb:e3:85:92:
                    fa:24:bd:70:b9:38:cd:77:35:59:4b:2f:35:10:7f:
                    8e:47:24:92:87:6f:c7:83:21:5c:06:18:36:67:28:
                    a3:1a:fe:84:93:23:f8:5a:0a:6b:ed:a4:f3:b2:d0:
                    93:60:f9:88:5c:53:ab:06:cc:8b:a0:34:69:8c:4c:
                    cb:9d:5a:59:19:36:3e:35:6f:f6:35:4f:bc:d5:d4:
                    96:d6:93:62:c5:e3:5c:d6:4d:d1:cc:55:d6:ec:57:
                    a3:32:e2:bd:cd:65:94:64:a3:ba:c4:b8:0b:7d:0f:
                    6c:ba:64:45:3b:2a:8d:9e:8c:53:01:71:1d:65:0c:
                    74:7a:b7:a0:79:3e:be:6e:7d:f3:11:5f:25:0e:08:
                    64:fb:f9:72:a5:75:db:cd:62:3d:97:c6:aa:ae:d2:
                    58:c7:13:83:c6:73:e6:99:e4:b7:1a:fb:36:91:88:
                    96:f6:00:0f:ab:21:ff:b9:f2:44:22:17:85:f2:68:
                    98:fe:9b:86:36:c1:55:16:25:66:da:a0:21:6d:a5:
                    43:ea:a5:cf:0b:aa:c4:f1:f3:be:f5:b4:bd:98:f9:
                    c0:27:ed:94:a6:73:d3:a9:60:12:85:60:26:23:f0:
                    bf:1b:55:47:4d:2f:0c:e5:8c:f6:45:98:b7:bf:a6:
                    6e:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:62:47:0C:32:3F:25:3F:85:C6:CA:21:F2:70:D6:F3:A1:5D:EC:F9
            X509v3 Authority Key Identifier:
                keyid:5B:33:58:11:0D:AD:F2:24:E7:19:91:41:61:73:1D:F5:E5:6C:41:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/792372-3d2a-44fd-91a0-f4272eec280d/1/WzNYEQ2t8iTnGZFBYXMd9eVsQYg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:49:e4:f6:30:4e:f8:07:8c:84:ba:7a:01:13:68:bc:73:68:
         dc:35:c0:07:ed:73:a3:85:97:bd:45:b6:97:17:2f:08:95:67:
         4b:86:fb:ee:d3:60:e1:b2:7c:18:aa:bc:c3:b6:42:ae:b5:fb:
         55:7f:d2:87:b0:cd:27:5b:f1:13:6c:1b:4e:dc:8f:b0:ff:ac:
         4b:d7:f7:7c:bc:24:7f:ec:81:d4:8e:52:ac:be:57:8d:b7:4f:
         dc:89:34:8e:ba:24:62:c1:53:9b:cb:73:fd:39:7e:93:49:93:
         4a:2b:7d:1f:48:cc:11:56:5a:85:cd:5f:a4:bb:f8:a6:4a:17:
         b2:6a:e3:59:03:0a:78:0c:a6:93:e8:77:d4:17:c4:56:f4:3f:
         5e:4c:0c:f2:ed:bf:49:b2:71:0e:19:eb:b0:03:43:ff:71:00:
         71:30:a5:35:5f:49:95:b0:cb:69:36:78:4a:df:c9:50:24:91:
         54:29:59:b4:04:62:a8:6a:c7:04:2e:9e:8e:46:0d:d9:cf:7e:
         8c:40:ea:69:ac:76:cf:83:79:46:05:95:59:78:9d:74:a8:07:
         bf:90:46:63:f3:8e:29:6f:62:8d:79:09:49:8d:58:8d:32:20:
         8f:5a:f9:5e:6b:05:4a:b6:a0:a2:c8:62:9b:49:2c:35:82:55:
         a3:fb:7d:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaFEVigUtDDOvUq0ZmYyxHpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViMzM1ODExMGRhZGYyMjRlNzE5OTE0MTYxNzMxZGY1ZTU2
YzQxODgwHhcNMjUwNDMwMDUwMDI4WhcNMjUwNTAxMDUwMDI4WjAzMTEwLwYDVQQD
EygzMDYyNDcwYzMyM2YyNTNmODVjNmNhMjFmMjcwZDZmM2ExNWRlY2Y5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+P26SFUzrD7MJ/vjhZL6JL1wuTjN
dzVZSy81EH+ORySSh2/HgyFcBhg2ZyijGv6EkyP4Wgpr7aTzstCTYPmIXFOrBsyL
oDRpjEzLnVpZGTY+NW/2NU+81dSW1pNixeNc1k3RzFXW7FejMuK9zWWUZKO6xLgL
fQ9sumRFOyqNnoxTAXEdZQx0eregeT6+bn3zEV8lDghk+/lypXXbzWI9l8aqrtJY
xxODxnPmmeS3Gvs2kYiW9gAPqyH/ufJEIheF8miY/puGNsFVFiVm2qAhbaVD6qXP
C6rE8fO+9bS9mPnAJ+2UpnPTqWAShWAmI/C/G1VHTS8M5Yz2RZi3v6ZuXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDBiRwwyPyU/hcbKIfJw1vOhXez5MB8GA1UdIwQY
MBaAFFszWBENrfIk5xmRQWFzHfXlbEGIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3pOWUVRMnQ4aVRuR1pGQllYTWQ5ZVZzUVlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC83OTIzNzItM2QyYS00NGZkLTkxYTAt
ZjQyNzJlZWMyODBkLzEvV3pOWUVRMnQ4aVRuR1pGQllYTWQ5ZVZzUVlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC83OTIzNzItM2QyYS00NGZkLTkxYTAtZjQyNzJlZWMyODBk
LzEvV3pOWUVRMnQ4aVRuR1pGQllYTWQ5ZVZzUVlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATUnk9jBO
+AeMhLp6ARNovHNo3DXAB+1zo4WXvUW2lxcvCJVnS4b77tNg4bJ8GKq8w7ZCrrX7
VX/Sh7DNJ1vxE2wbTtyPsP+sS9f3fLwkf+yB1I5SrL5XjbdP3Ik0jrokYsFTm8tz
/Tl+k0mTSit9H0jMEVZahc1fpLv4pkoXsmrjWQMKeAymk+h31BfEVvQ/XkwM8u2/
SbJxDhnrsAND/3EAcTClNV9JlbDLaTZ4St/JUCSRVClZtARiqGrHBC6ejkYN2c9+
jEDqaax2z4N5RgWVWXiddKgHv5BGY/OOKW9ijXkJSY1YjTIgj1r5XmsFSragoshi
m0ksNYJVo/t9Ow==
-----END CERTIFICATE-----
Generated at Wed Apr 30 08:29:28 2025 by rpki-client