Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/31eeed-388d-40c0-b17d-f553ddd9ed1a/1/wb6oOT9qHTeZGYndh1_FMeQIQDE.mft
File:                     wb6oOT9qHTeZGYndh1_FMeQIQDE.mft (raw, json)
Hash identifier:          VKo84KP+nkbPclxqWf5OQAde7GAej59A023qbgzqLMs=
Subject key identifier:   56:53:90:57:BE:13:96:05:2E:1C:05:4E:75:2F:C3:EF:7F:42:1B:4B
Authority key identifier: C1:BE:A8:39:3F:6A:1D:37:99:19:89:DD:87:5F:C5:31:E4:08:40:31
Certificate issuer:       /CN=c1bea8393f6a1d37991989dd875fc531e4084031
Certificate serial:       019748F9FFDC379214DD1406D445AE039F1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wb6oOT9qHTeZGYndh1_FMeQIQDE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/31eeed-388d-40c0-b17d-f553ddd9ed1a/1/wb6oOT9qHTeZGYndh1_FMeQIQDE.mft
Manifest number:          11C0
Signing time:             Sat 07 Jun 2025 06:00:32 +0000
Manifest this update:     Sat 07 Jun 2025 06:00:32 +0000
Manifest next update:     Sun 08 Jun 2025 06:00:32 +0000
Files and hashes:         1: nbmVOIuVbGlA2xpA2whbaoSkl60.roa (hash: 70PvMKGXMQMI5jikM85xlBPooLtb7IA/Vc36Qg7U1Uo=)
                          2: wb6oOT9qHTeZGYndh1_FMeQIQDE.crl (hash: stAzwGb2O6yJnjX8fKZkjSHSY6l3spgNpxIuXqJkGkE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/31eeed-388d-40c0-b17d-f553ddd9ed1a/1/wb6oOT9qHTeZGYndh1_FMeQIQDE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/31eeed-388d-40c0-b17d-f553ddd9ed1a/1/wb6oOT9qHTeZGYndh1_FMeQIQDE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wb6oOT9qHTeZGYndh1_FMeQIQDE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:f9:ff:dc:37:92:14:dd:14:06:d4:45:ae:03:9f:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1bea8393f6a1d37991989dd875fc531e4084031
        Validity
            Not Before: Jun  7 06:00:32 2025 GMT
            Not After : Jun  8 06:00:32 2025 GMT
        Subject: CN=56539057be1396052e1c054e752fc3ef7f421b4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:11:a7:32:ff:46:29:de:25:42:5b:14:d4:fb:
                    e1:e2:6c:7c:4b:76:5f:e7:61:ba:7a:46:d3:e7:22:
                    ce:a5:34:82:8e:ee:08:35:86:35:b9:64:9d:84:a6:
                    b4:5c:ac:2a:15:c2:48:42:fc:ad:0b:22:96:71:81:
                    9c:36:7f:34:42:14:5e:4a:60:29:52:6a:a3:e8:90:
                    97:88:19:78:b8:8e:97:c3:bc:93:d7:86:ef:6d:05:
                    07:32:e9:59:cd:0c:52:97:68:bc:10:6b:3b:37:34:
                    ed:57:de:13:dc:47:5c:dd:e4:ab:34:4c:b0:e4:3c:
                    bb:69:58:ed:11:9e:46:f7:ab:af:db:b0:cb:52:f4:
                    f8:30:0c:ab:7e:32:82:b5:63:fc:0e:cf:6e:d6:e9:
                    10:07:19:66:da:31:b8:24:a0:da:2a:28:b5:6d:f9:
                    3b:1c:f0:57:f0:9b:6e:86:f0:2a:3a:cf:90:31:3f:
                    97:b3:51:cc:f9:83:e8:5d:95:b0:45:cd:53:4c:f8:
                    0c:5f:c4:3b:ff:e6:00:b4:8b:15:b5:c3:ed:09:91:
                    c1:7a:4d:39:30:90:78:e1:8d:32:26:8c:9d:00:68:
                    5c:fa:29:9c:9e:c4:5c:99:e4:3d:33:c2:ca:3b:fa:
                    7c:61:af:26:bc:af:c0:c6:ac:fd:f4:45:43:5d:33:
                    7d:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:53:90:57:BE:13:96:05:2E:1C:05:4E:75:2F:C3:EF:7F:42:1B:4B
            X509v3 Authority Key Identifier:
                keyid:C1:BE:A8:39:3F:6A:1D:37:99:19:89:DD:87:5F:C5:31:E4:08:40:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wb6oOT9qHTeZGYndh1_FMeQIQDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/31eeed-388d-40c0-b17d-f553ddd9ed1a/1/wb6oOT9qHTeZGYndh1_FMeQIQDE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/31eeed-388d-40c0-b17d-f553ddd9ed1a/1/wb6oOT9qHTeZGYndh1_FMeQIQDE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:d1:37:28:19:a4:97:1a:4e:af:36:de:d3:ac:81:b5:31:0c:
         db:37:1e:2e:18:6c:07:ae:f4:ba:ae:1c:28:86:c8:65:ae:85:
         1b:b4:31:4e:ca:9b:e5:0f:48:0a:24:9e:cc:c3:58:ed:48:ae:
         17:cf:46:9e:d6:e2:80:64:73:b6:94:d9:e5:bb:2b:ad:74:19:
         9c:bd:f5:8b:56:0d:56:e6:7c:b2:b4:f4:aa:98:b2:13:06:87:
         6b:6f:ad:29:6e:93:48:ad:67:f7:d9:4d:3c:e9:a2:f4:71:c7:
         fb:f2:b0:55:01:6a:43:76:2d:e9:86:85:c0:0a:b6:4b:49:f7:
         9d:2c:97:02:18:b9:7c:ce:5d:de:09:a4:b4:5d:e0:6b:08:1e:
         72:0d:fa:ea:d5:cf:5a:79:ff:87:69:58:b6:f9:84:34:79:f6:
         a2:f6:06:cd:09:f6:11:9e:fa:c6:bc:d9:95:29:df:82:1c:df:
         3a:5d:2e:e0:57:b1:01:b0:0c:b2:c3:6d:05:ff:97:4a:c1:12:
         e8:52:eb:65:c2:af:06:ae:c0:2f:4d:d0:8c:9b:9f:d3:eb:70:
         fe:32:2a:79:59:1f:d4:3e:bb:e1:76:d2:7f:32:b2:f5:61:64:
         e1:70:b1:be:0d:b0:fb:29:b9:ef:6b:ce:11:2f:f7:5e:0d:b3:
         59:c1:0c:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdI+f/cN5IU3RQG1EWuA58dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxYmVhODM5M2Y2YTFkMzc5OTE5ODlkZDg3NWZjNTMxZTQw
ODQwMzEwHhcNMjUwNjA3MDYwMDMyWhcNMjUwNjA4MDYwMDMyWjAzMTEwLwYDVQQD
Eyg1NjUzOTA1N2JlMTM5NjA1MmUxYzA1NGU3NTJmYzNlZjdmNDIxYjRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1xGnMv9GKd4lQlsU1Pvh4mx8S3Zf
52G6ekbT5yLOpTSCju4INYY1uWSdhKa0XKwqFcJIQvytCyKWcYGcNn80QhReSmAp
Umqj6JCXiBl4uI6Xw7yT14bvbQUHMulZzQxSl2i8EGs7NzTtV94T3Edc3eSrNEyw
5Dy7aVjtEZ5G96uv27DLUvT4MAyrfjKCtWP8Ds9u1ukQBxlm2jG4JKDaKii1bfk7
HPBX8JtuhvAqOs+QMT+Xs1HM+YPoXZWwRc1TTPgMX8Q7/+YAtIsVtcPtCZHBek05
MJB44Y0yJoydAGhc+imcnsRcmeQ9M8LKO/p8Ya8mvK/Axqz99EVDXTN9gQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFZTkFe+E5YFLhwFTnUvw+9/QhtLMB8GA1UdIwQY
MBaAFMG+qDk/ah03mRmJ3YdfxTHkCEAxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2I2b09UOXFIVGVaR1luZGgxX0ZNZVFJUURFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8zMWVlZWQtMzg4ZC00MGMwLWIxN2Qt
ZjU1M2RkZDllZDFhLzEvd2I2b09UOXFIVGVaR1luZGgxX0ZNZVFJUURFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC8zMWVlZWQtMzg4ZC00MGMwLWIxN2QtZjU1M2RkZDllZDFh
LzEvd2I2b09UOXFIVGVaR1luZGgxX0ZNZVFJUURFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdNE3KBmk
lxpOrzbe06yBtTEM2zceLhhsB670uq4cKIbIZa6FG7QxTsqb5Q9ICiSezMNY7Uiu
F89GntbigGRztpTZ5bsrrXQZnL31i1YNVuZ8srT0qpiyEwaHa2+tKW6TSK1n99lN
POmi9HHH+/KwVQFqQ3Yt6YaFwAq2S0n3nSyXAhi5fM5d3gmktF3gawgecg366tXP
Wnn/h2lYtvmENHn2ovYGzQn2EZ76xrzZlSnfghzfOl0u4FexAbAMssNtBf+XSsES
6FLrZcKvBq7AL03QjJuf0+tw/jIqeVkf1D674XbSfzKy9WFk4XCxvg2w+ym572vO
ES/3Xg2zWcEM7g==
-----END CERTIFICATE-----
Generated at Sat Jun 7 09:24:49 2025 by rpki-client