Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/e81d26-80f4-40f2-bdbd-02cf6b0db63b/1/wArEVewO3ikw6lgQV-4f9Z9b9sc.mft
File:                     wArEVewO3ikw6lgQV-4f9Z9b9sc.mft (raw, json)
Hash identifier:          YArnQDBkeHxau1pWHB+WkQJ7FwkpbIGVVE37bHEGpxY=
Subject key identifier:   06:DF:DA:20:F2:39:64:D6:B7:48:77:6F:F2:BF:52:9B:47:2D:D5:34
Authority key identifier: C0:0A:C4:55:EC:0E:DE:29:30:EA:58:10:57:EE:1F:F5:9F:5B:F6:C7
Certificate issuer:       /CN=c00ac455ec0ede2930ea581057ee1ff59f5bf6c7
Certificate serial:       0197C94BAFF3DFB04C76108ECD2A480688CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wArEVewO3ikw6lgQV-4f9Z9b9sc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/e81d26-80f4-40f2-bdbd-02cf6b0db63b/1/wArEVewO3ikw6lgQV-4f9Z9b9sc.mft
Manifest number:          1047
Signing time:             Wed 02 Jul 2025 04:01:10 +0000
Manifest this update:     Wed 02 Jul 2025 04:01:10 +0000
Manifest next update:     Thu 03 Jul 2025 04:01:10 +0000
Files and hashes:         1: IaifUimRjLV0wimYFwuBxS5X-tQ.roa (hash: cmI9raT4lPlOUQCttfe+nau/yhN6VEMOtjQDtEZ8tbk=)
                          2: wArEVewO3ikw6lgQV-4f9Z9b9sc.crl (hash: sxKUn4fbF6blL/mMBx//gmUM1YZTpxqlODK10BwwCEs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/e81d26-80f4-40f2-bdbd-02cf6b0db63b/1/wArEVewO3ikw6lgQV-4f9Z9b9sc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/e81d26-80f4-40f2-bdbd-02cf6b0db63b/1/wArEVewO3ikw6lgQV-4f9Z9b9sc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wArEVewO3ikw6lgQV-4f9Z9b9sc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 03 Jul 2025 02:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:c9:4b:af:f3:df:b0:4c:76:10:8e:cd:2a:48:06:88:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c00ac455ec0ede2930ea581057ee1ff59f5bf6c7
        Validity
            Not Before: Jul  2 04:01:10 2025 GMT
            Not After : Jul  3 04:01:10 2025 GMT
        Subject: CN=06dfda20f23964d6b748776ff2bf529b472dd534
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b3:c1:14:8b:ee:ba:e0:fb:07:a7:bc:e9:4b:
                    e9:37:f0:b9:4b:28:42:6b:c6:51:ee:a4:37:06:7c:
                    e0:12:9a:05:54:8e:de:fa:3f:aa:98:4d:82:3f:ee:
                    9e:eb:c1:f0:82:13:0c:ef:9b:99:de:ca:b8:87:fd:
                    54:ac:fc:ad:21:78:e6:ee:c8:09:f9:0d:11:20:d2:
                    9a:73:d5:ca:77:60:8f:b5:49:c4:ba:6c:58:d6:c9:
                    ad:6c:b0:c7:40:33:22:3e:5d:4f:4a:e8:bc:9d:6b:
                    f6:07:ee:47:c5:36:1f:b2:b9:98:af:ac:9f:9f:e0:
                    a7:cf:5f:69:28:37:be:35:eb:8a:63:26:97:77:17:
                    71:38:8a:6a:81:f7:90:cb:e2:fc:e2:0a:f7:a8:e2:
                    49:77:19:b9:c3:f4:07:01:13:80:e4:5c:a4:95:04:
                    fc:af:fd:51:6c:99:e6:c0:15:7f:59:1f:18:bc:56:
                    fa:51:28:ad:70:8a:2b:e2:ee:ab:46:40:c3:5d:e2:
                    ad:6d:f1:7e:6f:9f:28:a2:fa:73:1d:f2:7a:51:2f:
                    b4:4c:63:24:80:f4:ce:4c:ca:c0:a6:2b:8a:48:2e:
                    7f:fc:72:75:32:46:c2:a5:81:67:00:f3:bc:0f:a1:
                    73:e1:e9:f6:af:c5:1b:33:65:bd:da:e5:f6:e8:54:
                    6a:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:DF:DA:20:F2:39:64:D6:B7:48:77:6F:F2:BF:52:9B:47:2D:D5:34
            X509v3 Authority Key Identifier:
                keyid:C0:0A:C4:55:EC:0E:DE:29:30:EA:58:10:57:EE:1F:F5:9F:5B:F6:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wArEVewO3ikw6lgQV-4f9Z9b9sc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/e81d26-80f4-40f2-bdbd-02cf6b0db63b/1/wArEVewO3ikw6lgQV-4f9Z9b9sc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/e81d26-80f4-40f2-bdbd-02cf6b0db63b/1/wArEVewO3ikw6lgQV-4f9Z9b9sc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:29:71:ed:77:62:f1:a2:a4:a8:a3:1c:cc:82:79:b9:66:71:
         fc:3e:49:37:86:7b:dc:07:89:ff:11:40:8f:dc:12:8b:84:d1:
         bc:d8:77:a8:d8:95:77:55:11:e4:c9:9a:25:6e:06:81:c1:03:
         ae:69:a3:b2:fd:28:84:86:d3:2b:f5:14:93:2a:3b:04:b7:e7:
         b4:98:d2:e8:7a:a3:03:cb:e8:10:6e:f4:7d:e8:6f:8c:e9:e4:
         0f:a1:c0:1d:8a:9b:0b:be:84:2a:f4:61:45:1c:f4:cc:12:33:
         fe:89:0d:6a:85:3d:31:02:ce:d0:42:5b:d3:0f:de:fc:8c:af:
         79:7b:b5:b1:31:95:84:4c:b5:2a:d8:c5:50:9e:74:3f:31:b3:
         f2:80:24:05:f4:45:13:dd:4d:18:94:88:ba:c8:77:32:d7:d7:
         63:48:0d:54:52:6d:6d:2d:9c:d1:6a:3d:cf:4a:4e:79:85:7f:
         39:5a:1c:c9:90:7d:88:7a:1b:6d:50:ca:66:55:ca:25:7d:77:
         77:df:17:c6:46:0d:14:34:77:a8:e7:71:93:67:2f:b7:d0:29:
         40:b0:a7:5a:7c:b0:f5:52:4b:da:b9:56:a9:2f:fc:b8:ff:1c:
         22:62:e3:ef:20:4a:15:e2:dc:ce:f2:f4:dd:25:f5:a4:ce:85:
         9d:14:99:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfJS6/z37BMdhCOzSpIBojKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwMGFjNDU1ZWMwZWRlMjkzMGVhNTgxMDU3ZWUxZmY1OWY1
YmY2YzcwHhcNMjUwNzAyMDQwMTEwWhcNMjUwNzAzMDQwMTEwWjAzMTEwLwYDVQQD
EygwNmRmZGEyMGYyMzk2NGQ2Yjc0ODc3NmZmMmJmNTI5YjQ3MmRkNTM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbPBFIvuuuD7B6e86UvpN/C5SyhC
a8ZR7qQ3BnzgEpoFVI7e+j+qmE2CP+6e68HwghMM75uZ3sq4h/1UrPytIXjm7sgJ
+Q0RINKac9XKd2CPtUnEumxY1smtbLDHQDMiPl1PSui8nWv2B+5HxTYfsrmYr6yf
n+Cnz19pKDe+NeuKYyaXdxdxOIpqgfeQy+L84gr3qOJJdxm5w/QHAROA5FyklQT8
r/1RbJnmwBV/WR8YvFb6USitcIor4u6rRkDDXeKtbfF+b58oovpzHfJ6US+0TGMk
gPTOTMrApiuKSC5//HJ1MkbCpYFnAPO8D6Fz4en2r8UbM2W92uX26FRqnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAbf2iDyOWTWt0h3b/K/UptHLdU0MB8GA1UdIwQY
MBaAFMAKxFXsDt4pMOpYEFfuH/WfW/bHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0FyRVZld08zaWt3NmxnUVYtNGY5WjliOXNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9lODFkMjYtODBmNC00MGYyLWJkYmQt
MDJjZjZiMGRiNjNiLzEvd0FyRVZld08zaWt3NmxnUVYtNGY5WjliOXNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS9lODFkMjYtODBmNC00MGYyLWJkYmQtMDJjZjZiMGRiNjNi
LzEvd0FyRVZld08zaWt3NmxnUVYtNGY5WjliOXNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQylx7Xdi
8aKkqKMczIJ5uWZx/D5JN4Z73AeJ/xFAj9wSi4TRvNh3qNiVd1UR5MmaJW4GgcED
rmmjsv0ohIbTK/UUkyo7BLfntJjS6HqjA8voEG70fehvjOnkD6HAHYqbC76EKvRh
RRz0zBIz/okNaoU9MQLO0EJb0w/e/IyveXu1sTGVhEy1KtjFUJ50PzGz8oAkBfRF
E91NGJSIush3MtfXY0gNVFJtbS2c0Wo9z0pOeYV/OVocyZB9iHobbVDKZlXKJX13
d98XxkYNFDR3qOdxk2cvt9ApQLCnWnyw9VJL2rlWqS/8uP8cImLj7yBKFeLczvL0
3SX1pM6FnRSZ0w==
-----END CERTIFICATE-----
Generated at Wed Jul 2 11:16:32 2025 by rpki-client