Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/5ad73b-db17-4322-ade5-b9a9d8ae9421/1/m3Weyf9U3gOn_zpl7bsuB1jmh4w.mft
File:                     m3Weyf9U3gOn_zpl7bsuB1jmh4w.mft (raw, json)
Hash identifier:          wCowU7mgoZuLBkImAofLF2W7/CM7LI3hGHRlCfHqmKU=
Subject key identifier:   34:97:99:39:32:F8:E3:33:60:BE:44:61:92:75:12:68:84:CB:A1:C5
Authority key identifier: 9B:75:9E:C9:FF:54:DE:03:A7:FF:3A:65:ED:BB:2E:07:58:E6:87:8C
Certificate issuer:       /CN=9b759ec9ff54de03a7ff3a65edbb2e0758e6878c
Certificate serial:       019601F6EE1020B2BDA8731F4549D9CDE2C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m3Weyf9U3gOn_zpl7bsuB1jmh4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/5ad73b-db17-4322-ade5-b9a9d8ae9421/1/m3Weyf9U3gOn_zpl7bsuB1jmh4w.mft
Manifest number:          1287
Signing time:             Fri 04 Apr 2025 18:01:22 +0000
Manifest this update:     Fri 04 Apr 2025 18:01:22 +0000
Manifest next update:     Sat 05 Apr 2025 18:01:22 +0000
Files and hashes:         1: 60W-NBk3253Bk_GEI2gKgd_BE8I.roa (hash: X2dRuZeK2mpNw1Oq8MItS3tX6isys5T0YQbrPJr37XA=)
                          2: WMfZ9_oSWOFVeUy99ChSUELiYaI.roa (hash: H0ifkv1EEGP8mDtQZpBc/lFwxXIm4L3JwiD9/BcXTyk=)
                          3: m3Weyf9U3gOn_zpl7bsuB1jmh4w.crl (hash: DILAZfb1CF/9xFY/cIvfv8mgrQDWIyEPXdOgG1R39Ws=)
                          4: tXaCAurW2gGTHINoOjZh72dEXKU.roa (hash: y5O02pogDW0jIlJpvO+hAt91pj2qn6goqR2eIeEiFSw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/5ad73b-db17-4322-ade5-b9a9d8ae9421/1/m3Weyf9U3gOn_zpl7bsuB1jmh4w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/5ad73b-db17-4322-ade5-b9a9d8ae9421/1/m3Weyf9U3gOn_zpl7bsuB1jmh4w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m3Weyf9U3gOn_zpl7bsuB1jmh4w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Apr 2025 18:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:01:f6:ee:10:20:b2:bd:a8:73:1f:45:49:d9:cd:e2:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b759ec9ff54de03a7ff3a65edbb2e0758e6878c
        Validity
            Not Before: Apr  4 18:01:22 2025 GMT
            Not After : Apr  5 18:01:22 2025 GMT
        Subject: CN=3497993932f8e33360be44619275126884cba1c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ec:b5:31:2f:d8:d1:88:bb:ef:23:2d:99:7b:
                    18:ba:44:94:4b:07:14:69:d9:e4:30:8c:a9:5a:3f:
                    b3:b3:aa:5d:a8:5a:c1:eb:a5:bc:d5:13:d5:12:d2:
                    8f:3e:f6:13:82:5d:6d:e4:59:64:97:d0:65:cc:81:
                    d7:3c:21:00:d4:25:98:0f:14:d8:18:9e:93:cd:2f:
                    16:4b:ad:04:21:1e:53:71:80:b9:cb:0a:b9:cb:24:
                    cc:e2:b4:66:10:0c:b1:de:28:5a:f2:f5:8a:61:81:
                    ea:05:3b:1a:60:36:14:80:1d:8b:ac:17:11:0f:38:
                    46:e6:88:28:50:7c:b2:cf:0e:bd:74:47:e2:f9:ac:
                    5b:ee:d9:4f:91:03:67:82:0b:1d:62:6f:4c:03:6d:
                    e7:7d:e5:7c:03:65:d8:00:d6:fd:23:93:8a:93:ff:
                    c6:34:09:a2:a8:e6:b1:7b:28:4f:d3:6a:44:69:83:
                    b6:44:c4:7a:91:28:1c:e8:eb:96:fc:0c:53:82:b9:
                    1d:dc:a0:26:5c:c7:de:a5:ac:ec:8a:6c:f7:f1:d0:
                    29:f7:33:2b:95:21:df:2b:9e:6c:e2:5e:48:43:d2:
                    41:af:b4:60:d6:3b:2f:ab:2c:e5:3f:28:e1:3c:bb:
                    a3:e8:bb:32:9e:19:ab:98:cf:72:ac:3e:b1:88:c4:
                    d8:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:97:99:39:32:F8:E3:33:60:BE:44:61:92:75:12:68:84:CB:A1:C5
            X509v3 Authority Key Identifier:
                keyid:9B:75:9E:C9:FF:54:DE:03:A7:FF:3A:65:ED:BB:2E:07:58:E6:87:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m3Weyf9U3gOn_zpl7bsuB1jmh4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/5ad73b-db17-4322-ade5-b9a9d8ae9421/1/m3Weyf9U3gOn_zpl7bsuB1jmh4w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/5ad73b-db17-4322-ade5-b9a9d8ae9421/1/m3Weyf9U3gOn_zpl7bsuB1jmh4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:4e:d1:9a:6c:c1:96:86:ad:06:97:dc:b2:9c:25:ab:6d:94:
         ac:34:5e:3c:48:e2:f6:66:ff:93:1f:3d:5e:f9:cb:44:36:f8:
         7e:5b:45:d2:7b:34:02:bf:38:da:e0:fb:08:68:34:c5:4f:90:
         d2:a2:78:93:b6:d6:fb:0e:cf:c3:2d:56:5c:dd:a9:bc:0d:5e:
         39:66:0a:38:1c:b0:c4:ec:d7:aa:48:33:ac:67:1a:7a:ec:a6:
         1f:ce:cc:e0:24:82:80:d6:e6:f2:84:53:f2:14:45:05:dc:04:
         36:29:5a:31:1a:8c:5d:8d:ab:69:56:66:e2:05:1b:cc:dc:a8:
         81:1a:4b:2b:35:79:d4:50:38:98:0a:23:54:90:44:c5:05:a0:
         b9:cf:5b:dc:be:ce:c9:13:44:b9:0f:6f:25:bb:9f:f1:64:25:
         dd:50:c4:d4:f3:ff:52:eb:4f:f4:9e:06:cf:b1:7e:51:e9:9d:
         b5:47:f1:49:8f:36:38:b6:ef:2f:3a:6e:fd:8e:d5:e8:8a:40:
         bc:53:0b:3d:1a:3b:9a:48:80:98:cb:3b:2f:40:4a:ad:8f:bb:
         f3:57:fe:20:2e:08:60:d1:a4:5f:98:ba:00:75:b4:d5:1a:b4:
         ca:22:85:9b:da:42:51:6d:b5:8f:d3:f7:6d:d8:f5:35:a0:01:
         d9:9e:73:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYB9u4QILK9qHMfRUnZzeLCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliNzU5ZWM5ZmY1NGRlMDNhN2ZmM2E2NWVkYmIyZTA3NThl
Njg3OGMwHhcNMjUwNDA0MTgwMTIyWhcNMjUwNDA1MTgwMTIyWjAzMTEwLwYDVQQD
EygzNDk3OTkzOTMyZjhlMzMzNjBiZTQ0NjE5Mjc1MTI2ODg0Y2JhMWM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAquy1MS/Y0Yi77yMtmXsYukSUSwcU
adnkMIypWj+zs6pdqFrB66W81RPVEtKPPvYTgl1t5Flkl9BlzIHXPCEA1CWYDxTY
GJ6TzS8WS60EIR5TcYC5ywq5yyTM4rRmEAyx3iha8vWKYYHqBTsaYDYUgB2LrBcR
DzhG5ogoUHyyzw69dEfi+axb7tlPkQNnggsdYm9MA23nfeV8A2XYANb9I5OKk//G
NAmiqOaxeyhP02pEaYO2RMR6kSgc6OuW/AxTgrkd3KAmXMfepazsimz38dAp9zMr
lSHfK55s4l5IQ9JBr7Rg1jsvqyzlPyjhPLuj6LsynhmrmM9yrD6xiMTYuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDSXmTky+OMzYL5EYZJ1EmiEy6HFMB8GA1UdIwQY
MBaAFJt1nsn/VN4Dp/86Ze27LgdY5oeMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTNXZXlmOVUzZ09uX3pwbDdic3VCMWptaDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS81YWQ3M2ItZGIxNy00MzIyLWFkZTUt
YjlhOWQ4YWU5NDIxLzEvbTNXZXlmOVUzZ09uX3pwbDdic3VCMWptaDR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS81YWQ3M2ItZGIxNy00MzIyLWFkZTUtYjlhOWQ4YWU5NDIx
LzEvbTNXZXlmOVUzZ09uX3pwbDdic3VCMWptaDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFk7RmmzB
loatBpfcspwlq22UrDRePEji9mb/kx89XvnLRDb4fltF0ns0Ar842uD7CGg0xU+Q
0qJ4k7bW+w7Pwy1WXN2pvA1eOWYKOBywxOzXqkgzrGcaeuymH87M4CSCgNbm8oRT
8hRFBdwENilaMRqMXY2raVZm4gUbzNyogRpLKzV51FA4mAojVJBExQWguc9b3L7O
yRNEuQ9vJbuf8WQl3VDE1PP/UutP9J4Gz7F+UemdtUfxSY82OLbvLzpu/Y7V6IpA
vFMLPRo7mkiAmMs7L0BKrY+781f+IC4IYNGkX5i6AHW01Rq0yiKFm9pCUW21j9P3
bdj1NaAB2Z5zHA==
-----END CERTIFICATE-----
Generated at Sat Apr 5 03:43:12 2025 by rpki-client