Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/33051d-c2a0-4ac7-b7f3-90adec85dd85/1/wBekqCFysgav7hwT0pbuJgOFtXE.mft
File:                     wBekqCFysgav7hwT0pbuJgOFtXE.mft (raw, json)
Hash identifier:          cacPAjg/TZDYPYK+ben4Lah+pfC8Xw77DHqoExYZuSY=
Subject key identifier:   63:A1:10:06:52:EA:BA:63:DE:28:F1:02:69:81:05:36:0E:54:FB:E8
Authority key identifier: C0:17:A4:A8:21:72:B2:06:AF:EE:1C:13:D2:96:EE:26:03:85:B5:71
Certificate issuer:       /CN=c017a4a82172b206afee1c13d296ee260385b571
Certificate serial:       01976026DE5C624505A2E7D67528D5CB9E34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wBekqCFysgav7hwT0pbuJgOFtXE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/33051d-c2a0-4ac7-b7f3-90adec85dd85/1/wBekqCFysgav7hwT0pbuJgOFtXE.mft
Manifest number:          1589
Signing time:             Wed 11 Jun 2025 18:00:49 +0000
Manifest this update:     Wed 11 Jun 2025 18:00:49 +0000
Manifest next update:     Thu 12 Jun 2025 18:00:49 +0000
Files and hashes:         1: dCiNIBkWF2RsTfBzLCoJZdfeZWw.roa (hash: YbTpFGUkZZd0ope4WSof9klg7VlGCuc2kGLkcWvVqI4=)
                          2: wBekqCFysgav7hwT0pbuJgOFtXE.crl (hash: TzRBSe5RPPAk0lXWwSXXg4RYHvJr7OaQSzOpMbDYEpo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/33051d-c2a0-4ac7-b7f3-90adec85dd85/1/wBekqCFysgav7hwT0pbuJgOFtXE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/33051d-c2a0-4ac7-b7f3-90adec85dd85/1/wBekqCFysgav7hwT0pbuJgOFtXE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wBekqCFysgav7hwT0pbuJgOFtXE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Jun 2025 15:40:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:60:26:de:5c:62:45:05:a2:e7:d6:75:28:d5:cb:9e:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c017a4a82172b206afee1c13d296ee260385b571
        Validity
            Not Before: Jun 11 18:00:49 2025 GMT
            Not After : Jun 12 18:00:49 2025 GMT
        Subject: CN=63a1100652eaba63de28f102698105360e54fbe8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:78:73:49:91:54:a5:9c:49:ca:72:be:5e:52:
                    f9:92:66:76:e2:d2:0b:d7:26:14:cb:59:5f:94:fb:
                    ae:43:6c:91:51:82:68:b9:da:e5:82:93:75:bb:68:
                    14:8a:d5:a3:6c:d9:e4:a8:9e:fb:3e:2f:86:18:8f:
                    d8:5d:13:a1:77:d0:4d:6f:b6:4d:9e:9c:1e:26:d9:
                    92:6f:4a:65:33:6b:bd:3b:7f:65:64:f2:a9:c8:45:
                    00:74:16:a2:17:75:86:b4:2b:c3:cb:b3:32:b5:ae:
                    fe:0f:35:52:3e:81:b8:de:da:94:5c:0e:ce:8f:5a:
                    72:4d:7d:1e:9b:37:ab:4d:3c:7e:49:8a:d3:f9:5b:
                    5d:d2:25:9d:10:05:64:01:04:ba:2d:2c:25:5b:9a:
                    86:33:e8:b5:a2:85:46:35:52:0a:0a:28:f2:06:eb:
                    2b:b8:00:c2:12:d7:a2:a5:6f:48:61:af:b4:4f:2e:
                    2c:8f:e0:fd:6f:53:b2:6f:fd:bc:74:67:1d:c1:6b:
                    ff:0f:c0:75:b4:b3:fe:10:81:d9:96:2d:c0:76:78:
                    fd:91:cc:2f:e0:a8:77:e2:7a:9b:51:23:63:d5:93:
                    9e:1c:1d:a5:17:0e:61:76:4f:5e:62:d1:9b:b3:bc:
                    22:34:c5:1c:78:16:31:a3:1a:91:f3:3f:52:f7:38:
                    9b:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:A1:10:06:52:EA:BA:63:DE:28:F1:02:69:81:05:36:0E:54:FB:E8
            X509v3 Authority Key Identifier:
                keyid:C0:17:A4:A8:21:72:B2:06:AF:EE:1C:13:D2:96:EE:26:03:85:B5:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBekqCFysgav7hwT0pbuJgOFtXE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/33051d-c2a0-4ac7-b7f3-90adec85dd85/1/wBekqCFysgav7hwT0pbuJgOFtXE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/33051d-c2a0-4ac7-b7f3-90adec85dd85/1/wBekqCFysgav7hwT0pbuJgOFtXE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:21:cf:fc:38:ff:aa:01:04:e6:fe:e8:78:e6:bb:f6:3b:57:
         01:33:2b:5e:35:a0:9c:c6:45:cb:d2:70:0c:d1:6d:67:c6:a1:
         68:00:eb:0b:3f:6d:5c:a3:3c:bb:5c:c2:ae:80:3e:0d:06:ba:
         99:46:0c:14:6a:3d:40:63:79:7d:aa:aa:d7:8f:b3:a2:ae:81:
         4a:43:c6:be:6f:7f:90:e8:0c:f0:1d:b2:16:be:f7:7b:c3:83:
         3d:82:16:de:b6:27:56:2c:c0:ef:f7:8b:73:c0:5d:08:70:11:
         09:7e:74:7c:dd:28:27:88:7f:15:d4:2b:c9:9b:3a:db:7f:34:
         bf:91:c4:ed:63:36:6f:9c:07:59:44:e8:ab:3e:6a:70:4c:eb:
         48:fe:38:99:ff:4e:bf:fa:b1:09:6b:b4:52:71:9d:6f:f6:10:
         f9:6e:02:ef:f4:85:5a:41:ab:65:d6:93:70:59:59:a4:9f:a8:
         1f:63:93:8b:37:d9:58:3c:98:b7:e9:83:10:34:b9:a6:9b:aa:
         e6:c5:38:0d:01:2e:78:86:d8:2f:4c:03:ed:b8:30:03:70:b3:
         47:bd:e0:04:29:01:be:e2:9e:80:71:8a:e0:d0:6c:8a:ce:cb:
         f2:d4:ce:29:39:d5:e2:4e:d1:17:59:3d:0b:80:b9:ae:ac:b0:
         4d:94:c1:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdgJt5cYkUFoufWdSjVy540MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwMTdhNGE4MjE3MmIyMDZhZmVlMWMxM2QyOTZlZTI2MDM4
NWI1NzEwHhcNMjUwNjExMTgwMDQ5WhcNMjUwNjEyMTgwMDQ5WjAzMTEwLwYDVQQD
Eyg2M2ExMTAwNjUyZWFiYTYzZGUyOGYxMDI2OTgxMDUzNjBlNTRmYmU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0XhzSZFUpZxJynK+XlL5kmZ24tIL
1yYUy1lflPuuQ2yRUYJoudrlgpN1u2gUitWjbNnkqJ77Pi+GGI/YXROhd9BNb7ZN
npweJtmSb0plM2u9O39lZPKpyEUAdBaiF3WGtCvDy7Myta7+DzVSPoG43tqUXA7O
j1pyTX0emzerTTx+SYrT+Vtd0iWdEAVkAQS6LSwlW5qGM+i1ooVGNVIKCijyBusr
uADCEteipW9IYa+0Ty4sj+D9b1Oyb/28dGcdwWv/D8B1tLP+EIHZli3Adnj9kcwv
4Kh34nqbUSNj1ZOeHB2lFw5hdk9eYtGbs7wiNMUceBYxoxqR8z9S9zib2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGOhEAZS6rpj3ijxAmmBBTYOVPvoMB8GA1UdIwQY
MBaAFMAXpKghcrIGr+4cE9KW7iYDhbVxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0Jla3FDRnlzZ2F2N2h3VDBwYnVKZ09GdFhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS8zMzA1MWQtYzJhMC00YWM3LWI3ZjMt
OTBhZGVjODVkZDg1LzEvd0Jla3FDRnlzZ2F2N2h3VDBwYnVKZ09GdFhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS8zMzA1MWQtYzJhMC00YWM3LWI3ZjMtOTBhZGVjODVkZDg1
LzEvd0Jla3FDRnlzZ2F2N2h3VDBwYnVKZ09GdFhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASSHP/Dj/
qgEE5v7oeOa79jtXATMrXjWgnMZFy9JwDNFtZ8ahaADrCz9tXKM8u1zCroA+DQa6
mUYMFGo9QGN5faqq14+zoq6BSkPGvm9/kOgM8B2yFr73e8ODPYIW3rYnVizA7/eL
c8BdCHARCX50fN0oJ4h/FdQryZs62380v5HE7WM2b5wHWUToqz5qcEzrSP44mf9O
v/qxCWu0UnGdb/YQ+W4C7/SFWkGrZdaTcFlZpJ+oH2OTizfZWDyYt+mDEDS5ppuq
5sU4DQEueIbYL0wD7bgwA3CzR73gBCkBvuKegHGK4NBsis7L8tTOKTnV4k7RF1k9
C4C5rqywTZTBCA==
-----END CERTIFICATE-----
Generated at Wed Jun 11 23:45:05 2025 by rpki-client