Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/ac9dab-e91b-4541-b595-be4117e2319c/1/Wwb3RuVJ7Jdj4HzXZv6hTihm00E.mft
File:                     Wwb3RuVJ7Jdj4HzXZv6hTihm00E.mft (raw, json)
Hash identifier:          osys4bVhvvJZ6RDG+IaaJOHz4DTreXhkHT8u9RDA0Ls=
Subject key identifier:   88:2E:7E:88:87:B4:CA:98:E2:09:26:15:A8:74:30:0F:82:56:8E:BE
Authority key identifier: 5B:06:F7:46:E5:49:EC:97:63:E0:7C:D7:66:FE:A1:4E:28:66:D3:41
Certificate issuer:       /CN=5b06f746e549ec9763e07cd766fea14e2866d341
Certificate serial:       0194C3BE2E683CE5F736A38D44DBD10AA0F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wwb3RuVJ7Jdj4HzXZv6hTihm00E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/ac9dab-e91b-4541-b595-be4117e2319c/1/Wwb3RuVJ7Jdj4HzXZv6hTihm00E.mft
Manifest number:          7C
Signing time:             Sat 01 Feb 2025 23:00:08 +0000
Manifest this update:     Sat 01 Feb 2025 23:00:08 +0000
Manifest next update:     Sun 02 Feb 2025 23:00:08 +0000
Files and hashes:         1: Wwb3RuVJ7Jdj4HzXZv6hTihm00E.crl (hash: 5mNeDlIXqVHqOT4JgVf0YRHCjfnAKfM6tngnNoVFqB0=)
                          2: bW1NhmGBTwYgPPg4roDWhoM3_yw.roa (hash: JPmmBhJ0tN9Tg+cz1OMedHqMeYz4nB4Qc7iEbdz/1O8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/ac9dab-e91b-4541-b595-be4117e2319c/1/Wwb3RuVJ7Jdj4HzXZv6hTihm00E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/ac9dab-e91b-4541-b595-be4117e2319c/1/Wwb3RuVJ7Jdj4HzXZv6hTihm00E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Wwb3RuVJ7Jdj4HzXZv6hTihm00E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 02 Feb 2025 23:00:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:c3:be:2e:68:3c:e5:f7:36:a3:8d:44:db:d1:0a:a0:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b06f746e549ec9763e07cd766fea14e2866d341
        Validity
            Not Before: Feb  1 23:00:08 2025 GMT
            Not After : Feb  2 23:00:08 2025 GMT
        Subject: CN=882e7e8887b4ca98e2092615a874300f82568ebe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:df:cb:87:d4:10:5c:05:7b:39:8d:78:a0:33:
                    a5:79:84:16:45:78:e4:10:e4:e0:12:41:3b:11:06:
                    9e:9c:08:c3:36:2f:d8:4c:fd:e9:43:0c:5d:1a:b4:
                    c1:e9:62:02:e2:89:80:1b:79:28:9a:84:e0:af:ab:
                    10:b7:5c:a2:65:41:c1:98:d5:e5:c7:dc:f0:b7:2e:
                    05:8b:80:89:1e:2c:95:d0:df:04:61:60:85:36:9a:
                    50:61:a6:3b:96:24:a2:90:33:82:9a:b6:4d:2a:f6:
                    a9:a4:08:5c:e3:61:c6:88:1e:46:3d:00:9d:99:23:
                    fc:b7:db:de:15:cb:52:0f:39:3c:07:92:5c:5d:e8:
                    b0:b8:25:0f:b9:8e:8b:25:e0:7c:5a:03:d1:6f:22:
                    c7:5c:9f:64:17:75:c9:3a:76:65:e1:a2:61:5f:18:
                    a6:88:48:d1:0f:da:aa:aa:d1:38:2e:24:be:28:66:
                    34:5c:99:f5:08:b6:05:ef:9c:ff:88:7d:0d:5b:62:
                    a0:e3:b9:1c:bf:2b:95:cb:60:16:0d:4e:e5:05:c2:
                    35:68:d8:84:24:8e:47:16:22:a5:c1:93:34:f3:e5:
                    5b:50:ed:8f:c3:62:cd:cb:5d:2a:f1:3e:a4:ba:aa:
                    e6:e6:57:ee:25:a4:18:c7:f1:77:13:0c:f7:0b:7c:
                    3b:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:2E:7E:88:87:B4:CA:98:E2:09:26:15:A8:74:30:0F:82:56:8E:BE
            X509v3 Authority Key Identifier:
                keyid:5B:06:F7:46:E5:49:EC:97:63:E0:7C:D7:66:FE:A1:4E:28:66:D3:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wwb3RuVJ7Jdj4HzXZv6hTihm00E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ac9dab-e91b-4541-b595-be4117e2319c/1/Wwb3RuVJ7Jdj4HzXZv6hTihm00E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ac9dab-e91b-4541-b595-be4117e2319c/1/Wwb3RuVJ7Jdj4HzXZv6hTihm00E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:97:14:33:d3:eb:52:d7:77:fe:8b:8e:29:b3:0a:68:8d:dc:
         e1:fe:63:ce:9a:37:b5:1a:26:09:2f:a6:3d:5d:6b:eb:ab:dc:
         5e:ff:40:8d:ef:f5:3e:76:74:60:8e:90:92:81:51:dd:c3:be:
         5d:cb:e3:1c:67:40:91:5d:8f:c2:5c:9e:c0:17:38:1c:78:19:
         2c:1b:45:c0:b7:2a:a9:89:73:e4:c3:e1:72:32:8d:49:d4:38:
         3b:04:71:e1:62:b9:5c:6b:44:ea:09:45:53:3b:24:4c:97:6c:
         cb:7b:1e:42:eb:83:1f:36:de:bf:c9:03:cc:42:21:04:44:aa:
         42:59:41:0b:5f:6d:74:59:20:0d:cc:e9:a5:3e:24:f4:82:f6:
         43:41:c0:6f:37:b1:fc:2d:97:fc:ca:4d:a9:e5:a4:73:28:90:
         9b:b2:ae:25:60:23:db:a4:f3:a6:fc:41:f3:d7:68:c0:0a:a2:
         ea:5a:4e:77:84:59:6f:7f:e1:fb:9c:13:af:11:e0:99:1d:ed:
         bf:66:0a:29:10:29:f1:04:f4:e8:52:c9:36:7d:48:0f:08:4a:
         7b:db:f9:38:2d:bd:1f:e1:45:16:b0:99:53:df:fd:08:45:4d:
         8d:d0:d2:92:35:b9:e9:2f:37:11:49:bc:6d:c8:dc:2b:e9:98:
         b2:a3:81:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTDvi5oPOX3NqONRNvRCqD4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViMDZmNzQ2ZTU0OWVjOTc2M2UwN2NkNzY2ZmVhMTRlMjg2
NmQzNDEwHhcNMjUwMjAxMjMwMDA4WhcNMjUwMjAyMjMwMDA4WjAzMTEwLwYDVQQD
Eyg4ODJlN2U4ODg3YjRjYTk4ZTIwOTI2MTVhODc0MzAwZjgyNTY4ZWJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnN/Lh9QQXAV7OY14oDOleYQWRXjk
EOTgEkE7EQaenAjDNi/YTP3pQwxdGrTB6WIC4omAG3komoTgr6sQt1yiZUHBmNXl
x9zwty4Fi4CJHiyV0N8EYWCFNppQYaY7liSikDOCmrZNKvappAhc42HGiB5GPQCd
mSP8t9veFctSDzk8B5JcXeiwuCUPuY6LJeB8WgPRbyLHXJ9kF3XJOnZl4aJhXxim
iEjRD9qqqtE4LiS+KGY0XJn1CLYF75z/iH0NW2Kg47kcvyuVy2AWDU7lBcI1aNiE
JI5HFiKlwZM08+VbUO2Pw2LNy10q8T6kuqrm5lfuJaQYx/F3Ewz3C3w7YwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIgufoiHtMqY4gkmFah0MA+CVo6+MB8GA1UdIwQY
MBaAFFsG90blSeyXY+B812b+oU4oZtNBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3diM1J1Vko3SmRqNEh6WFp2NmhUaWhtMDBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9hYzlkYWItZTkxYi00NTQxLWI1OTUt
YmU0MTE3ZTIzMTljLzEvV3diM1J1Vko3SmRqNEh6WFp2NmhUaWhtMDBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9hYzlkYWItZTkxYi00NTQxLWI1OTUtYmU0MTE3ZTIzMTlj
LzEvV3diM1J1Vko3SmRqNEh6WFp2NmhUaWhtMDBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADpcUM9Pr
Utd3/ouOKbMKaI3c4f5jzpo3tRomCS+mPV1r66vcXv9Aje/1PnZ0YI6QkoFR3cO+
XcvjHGdAkV2PwlyewBc4HHgZLBtFwLcqqYlz5MPhcjKNSdQ4OwRx4WK5XGtE6glF
UzskTJdsy3seQuuDHzbev8kDzEIhBESqQllBC19tdFkgDczppT4k9IL2Q0HAbzex
/C2X/MpNqeWkcyiQm7KuJWAj26TzpvxB89dowAqi6lpOd4RZb3/h+5wTrxHgmR3t
v2YKKRAp8QT06FLJNn1IDwhKe9v5OC29H+FFFrCZU9/9CEVNjdDSkjW56S83EUm8
bcjcK+mYsqOB8g==
-----END CERTIFICATE-----
Generated at Sun Feb 2 07:01:33 2025 by rpki-client