Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/e6bf5b-2e6a-42a4-b711-019cf77e4788/1/WC8uFTMWTruNhxz28sSaVn6iZjU.mft
File:                     WC8uFTMWTruNhxz28sSaVn6iZjU.mft (raw, json)
Hash identifier:          0GOtNRIgZWQvPc0jhJGPaVmDfC42Y5hS0DkR+vDJX6k=
Subject key identifier:   34:44:7B:32:88:3D:1B:EB:3C:EC:61:D1:3E:19:9A:DD:84:0F:7C:A5
Authority key identifier: 58:2F:2E:15:33:16:4E:BB:8D:87:1C:F6:F2:C4:9A:56:7E:A2:66:35
Certificate issuer:       /CN=582f2e1533164ebb8d871cf6f2c49a567ea26635
Certificate serial:       01976C98C0014AEEC00A4F6D9CC9EF078817
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WC8uFTMWTruNhxz28sSaVn6iZjU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/e6bf5b-2e6a-42a4-b711-019cf77e4788/1/WC8uFTMWTruNhxz28sSaVn6iZjU.mft
Manifest number:          0CAD
Signing time:             Sat 14 Jun 2025 04:00:39 +0000
Manifest this update:     Sat 14 Jun 2025 04:00:39 +0000
Manifest next update:     Sun 15 Jun 2025 04:00:39 +0000
Files and hashes:         1: WC8uFTMWTruNhxz28sSaVn6iZjU.crl (hash: /dzgYfRAE14Fk1D9TIJBH4+5P5uPrcpk5FseNVqvISw=)
                          2: Z3Q1WvhVYQp6sTYJIGKzU8X4Hic.roa (hash: bVLYhkF2BtQwTz9AAyN5WatAhOO7gcaRPVhwXWE9H14=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/e6bf5b-2e6a-42a4-b711-019cf77e4788/1/WC8uFTMWTruNhxz28sSaVn6iZjU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/e6bf5b-2e6a-42a4-b711-019cf77e4788/1/WC8uFTMWTruNhxz28sSaVn6iZjU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WC8uFTMWTruNhxz28sSaVn6iZjU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:98:c0:01:4a:ee:c0:0a:4f:6d:9c:c9:ef:07:88:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=582f2e1533164ebb8d871cf6f2c49a567ea26635
        Validity
            Not Before: Jun 14 04:00:39 2025 GMT
            Not After : Jun 15 04:00:39 2025 GMT
        Subject: CN=34447b32883d1beb3cec61d13e199add840f7ca5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:3d:4a:67:13:a2:34:77:8d:d1:ad:0a:bd:03:
                    54:71:1d:93:62:a4:07:65:0b:4a:a8:9d:09:7a:40:
                    75:1c:a4:bc:cb:a2:32:9f:9c:ca:4f:1c:f0:ad:58:
                    41:ba:7b:2c:91:97:70:8b:de:20:9f:6e:4e:21:84:
                    06:d3:7b:a9:94:f8:9a:94:6f:c3:f1:ff:4f:12:da:
                    b5:5d:5d:04:14:42:3b:e9:f2:df:59:16:75:c4:4f:
                    82:32:c2:72:cc:d6:73:27:5c:c4:be:61:ef:d9:ab:
                    0c:ce:3f:fc:f3:a7:bf:6e:1b:98:a5:d5:8a:0b:c0:
                    7d:fd:40:f8:42:9a:8b:c7:c1:b2:36:9d:9e:ea:5d:
                    ef:c6:2a:f8:c7:16:0d:94:ec:78:35:e6:cb:de:c3:
                    6b:2c:a7:1c:74:29:5b:d9:39:b6:21:7a:52:11:a4:
                    d5:d3:7e:49:0d:45:9d:a6:6d:24:63:01:06:0b:a9:
                    11:d6:55:8b:78:83:f5:13:8c:25:35:d9:62:98:27:
                    e2:c9:b4:e5:61:7d:37:dd:17:c8:7b:53:ac:46:9c:
                    b2:b6:a5:22:66:c7:42:7b:6e:20:18:a5:a2:b8:ad:
                    e0:7a:2e:c0:0f:1e:dd:47:36:7a:6d:c8:07:04:a4:
                    b9:de:b7:50:bf:11:8d:eb:62:f6:57:27:bd:56:6d:
                    09:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:44:7B:32:88:3D:1B:EB:3C:EC:61:D1:3E:19:9A:DD:84:0F:7C:A5
            X509v3 Authority Key Identifier:
                keyid:58:2F:2E:15:33:16:4E:BB:8D:87:1C:F6:F2:C4:9A:56:7E:A2:66:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WC8uFTMWTruNhxz28sSaVn6iZjU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/e6bf5b-2e6a-42a4-b711-019cf77e4788/1/WC8uFTMWTruNhxz28sSaVn6iZjU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/e6bf5b-2e6a-42a4-b711-019cf77e4788/1/WC8uFTMWTruNhxz28sSaVn6iZjU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:c2:68:b7:d9:fe:96:64:f1:c7:bd:a6:18:79:85:ca:4f:98:
         6b:ed:cc:73:5a:0d:16:82:2f:1a:f0:17:31:2f:1b:a6:93:c9:
         3b:79:66:05:42:e2:72:eb:ed:8c:fc:85:f0:71:b7:9a:6a:53:
         a9:b5:7a:77:91:f7:b3:8a:8d:01:e1:5b:c7:b0:b2:c3:df:e7:
         53:68:64:53:d5:6a:0d:75:83:16:22:b8:8e:b2:d7:c5:20:85:
         42:a9:57:8f:4b:f5:a3:8b:88:34:ee:bd:eb:86:64:58:4b:b4:
         69:f7:0c:78:39:ed:3e:53:84:d1:1c:03:76:a5:d3:5b:93:98:
         c5:df:c5:fe:6a:c9:cb:11:f3:4a:1f:91:03:f1:06:36:11:ce:
         2f:ad:96:1e:38:8f:78:13:51:df:0c:b3:5c:28:04:3b:a3:42:
         ee:fc:c3:03:21:75:23:5d:e4:c6:77:8f:f0:9f:fd:2f:e8:bc:
         e1:46:38:aa:36:ca:19:89:11:08:16:78:f0:7c:d1:28:3c:dd:
         6b:0e:50:ac:76:27:91:27:c6:a4:8a:80:4d:88:c5:67:f6:fb:
         98:c0:60:5c:5e:83:f4:3b:85:85:41:48:5c:9e:5b:a1:9b:a5:
         16:32:8b:06:d5:23:14:d8:40:48:9f:cf:be:98:1a:ee:da:69:
         2a:05:7d:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsmMABSu7ACk9tnMnvB4gXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4MmYyZTE1MzMxNjRlYmI4ZDg3MWNmNmYyYzQ5YTU2N2Vh
MjY2MzUwHhcNMjUwNjE0MDQwMDM5WhcNMjUwNjE1MDQwMDM5WjAzMTEwLwYDVQQD
EygzNDQ0N2IzMjg4M2QxYmViM2NlYzYxZDEzZTE5OWFkZDg0MGY3Y2E1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvT1KZxOiNHeN0a0KvQNUcR2TYqQH
ZQtKqJ0JekB1HKS8y6Iyn5zKTxzwrVhBunsskZdwi94gn25OIYQG03uplPialG/D
8f9PEtq1XV0EFEI76fLfWRZ1xE+CMsJyzNZzJ1zEvmHv2asMzj/886e/bhuYpdWK
C8B9/UD4QpqLx8GyNp2e6l3vxir4xxYNlOx4NebL3sNrLKccdClb2Tm2IXpSEaTV
035JDUWdpm0kYwEGC6kR1lWLeIP1E4wlNdlimCfiybTlYX033RfIe1OsRpyytqUi
ZsdCe24gGKWiuK3gei7ADx7dRzZ6bcgHBKS53rdQvxGN62L2Vye9Vm0JHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDREezKIPRvrPOxh0T4Zmt2ED3ylMB8GA1UdIwQY
MBaAFFgvLhUzFk67jYcc9vLEmlZ+omY1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0M4dUZUTVdUcnVOaHh6MjhzU2FWbjZpWmpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9lNmJmNWItMmU2YS00MmE0LWI3MTEt
MDE5Y2Y3N2U0Nzg4LzEvV0M4dUZUTVdUcnVOaHh6MjhzU2FWbjZpWmpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi9lNmJmNWItMmU2YS00MmE0LWI3MTEtMDE5Y2Y3N2U0Nzg4
LzEvV0M4dUZUTVdUcnVOaHh6MjhzU2FWbjZpWmpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq8Jot9n+
lmTxx72mGHmFyk+Ya+3Mc1oNFoIvGvAXMS8bppPJO3lmBULicuvtjPyF8HG3mmpT
qbV6d5H3s4qNAeFbx7Cyw9/nU2hkU9VqDXWDFiK4jrLXxSCFQqlXj0v1o4uINO69
64ZkWEu0afcMeDntPlOE0RwDdqXTW5OYxd/F/mrJyxHzSh+RA/EGNhHOL62WHjiP
eBNR3wyzXCgEO6NC7vzDAyF1I13kxneP8J/9L+i84UY4qjbKGYkRCBZ48HzRKDzd
aw5QrHYnkSfGpIqATYjFZ/b7mMBgXF6D9DuFhUFIXJ5boZulFjKLBtUjFNhASJ/P
vpga7tppKgV97g==
-----END CERTIFICATE-----
Generated at Sat Jun 14 10:32:23 2025 by rpki-client