Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/c976fc-d7d3-4cba-b02e-dbbb35c9e378/1/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.mft
File:                     w-hlabFpDJ3_dFy7Q4BbhYKwBa0.mft (raw, json)
Hash identifier:          RamaMCXKwTEiuUaCrj9TAIEiT5WP0sI1hYB2Q2oyKhM=
Subject key identifier:   B3:12:38:BB:53:65:13:16:F8:77:E7:BB:10:CC:85:FC:12:6F:1B:AB
Authority key identifier: C3:E8:65:69:B1:69:0C:9D:FF:74:5C:BB:43:80:5B:85:82:B0:05:AD
Certificate issuer:       /CN=c3e86569b1690c9dff745cbb43805b8582b005ad
Certificate serial:       019648FC88C98E215714E21C6A5E1F22ADDD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/c976fc-d7d3-4cba-b02e-dbbb35c9e378/1/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.mft
Manifest number:          14F9
Signing time:             Fri 18 Apr 2025 13:00:31 +0000
Manifest this update:     Fri 18 Apr 2025 13:00:31 +0000
Manifest next update:     Sat 19 Apr 2025 13:00:31 +0000
Files and hashes:         1: GfVJNtBqDjYi0Gf5Q216kr4bXN4.roa (hash: y9FyRvs17LSTei1C0cR4cXi2RJhRkUIb5SAPSm2CSi4=)
                          2: w-hlabFpDJ3_dFy7Q4BbhYKwBa0.crl (hash: S3bbdUtDYRwnRjjcxtBgloCdZWSoUTuzlWBNzIQQeek=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/c976fc-d7d3-4cba-b02e-dbbb35c9e378/1/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/c976fc-d7d3-4cba-b02e-dbbb35c9e378/1/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 13:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:48:fc:88:c9:8e:21:57:14:e2:1c:6a:5e:1f:22:ad:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3e86569b1690c9dff745cbb43805b8582b005ad
        Validity
            Not Before: Apr 18 13:00:31 2025 GMT
            Not After : Apr 19 13:00:31 2025 GMT
        Subject: CN=b31238bb53651316f877e7bb10cc85fc126f1bab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:cf:79:a7:39:27:4f:9b:dd:75:6f:a2:17:79:
                    18:29:11:a4:45:58:ee:a8:aa:78:94:0e:39:5a:7a:
                    bd:1a:34:c7:cf:85:c0:63:f9:91:08:13:57:60:76:
                    d1:f8:ac:70:cc:2b:87:03:19:07:2d:49:6e:bf:50:
                    8f:0c:c3:c4:06:fb:64:5a:57:5a:e3:47:47:8a:c5:
                    fa:92:af:82:ce:b4:d4:a0:8e:96:7a:b5:8c:32:85:
                    26:a0:8b:d0:d8:ef:5a:95:4b:70:77:01:63:ed:31:
                    96:59:04:49:87:a1:a7:96:1b:bf:38:aa:e1:35:21:
                    bf:ee:2f:71:0f:4f:04:88:a6:d4:dc:29:f9:32:49:
                    37:fa:db:9d:fb:0d:4a:02:f1:20:f9:ec:dc:c1:de:
                    2a:17:e9:f8:a9:13:b4:5b:9c:4d:8a:ee:5f:e2:88:
                    b2:a2:31:9d:9b:df:16:26:fb:0f:3a:0d:db:ec:eb:
                    de:1d:64:1d:df:f3:0c:49:22:0c:e3:b8:fb:f5:cd:
                    87:94:04:67:a0:d4:22:d8:97:c6:59:21:60:48:8f:
                    30:2d:55:ec:cb:13:7c:e7:9c:81:b5:0a:a2:63:b6:
                    fc:9d:f9:17:ae:d5:92:f0:4b:b7:b3:fa:f4:6c:69:
                    d6:8a:1c:5f:d5:fd:a3:62:8b:64:3b:f2:51:82:27:
                    66:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:12:38:BB:53:65:13:16:F8:77:E7:BB:10:CC:85:FC:12:6F:1B:AB
            X509v3 Authority Key Identifier:
                keyid:C3:E8:65:69:B1:69:0C:9D:FF:74:5C:BB:43:80:5B:85:82:B0:05:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c976fc-d7d3-4cba-b02e-dbbb35c9e378/1/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c976fc-d7d3-4cba-b02e-dbbb35c9e378/1/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:f8:94:c9:ee:13:b8:b5:51:70:2d:16:ee:cb:92:65:bc:6a:
         9a:87:76:fe:3c:e6:63:d0:4d:0c:6d:5c:1d:ba:fb:cd:12:e4:
         56:da:30:79:54:6f:43:c3:26:37:96:7e:a1:f7:c7:b4:5e:bc:
         91:ce:b6:dd:62:b5:25:5f:3c:e2:20:63:75:9e:40:af:db:07:
         7b:20:aa:21:a6:64:bf:0b:35:47:de:0a:4f:79:c0:69:8e:be:
         4a:c3:31:f4:d2:30:a9:b9:da:49:cb:e2:ff:de:71:5d:46:c6:
         1d:fb:9f:55:c3:c7:81:0e:4e:90:68:5b:10:cd:a2:55:d8:5e:
         6d:f8:60:ea:59:01:52:42:64:d7:a5:b7:80:6a:da:fe:fd:04:
         89:e3:65:b8:15:2b:a1:01:d3:0b:6f:fa:b0:94:20:bd:2d:49:
         8d:7f:12:f5:2f:c6:ac:89:55:b7:d2:2b:6e:11:f8:27:f8:08:
         d3:4a:e8:46:91:78:9f:ae:b9:27:8a:b8:cf:84:fa:ab:af:a6:
         7a:08:7a:a4:db:b8:ea:66:41:77:52:7c:ae:de:cc:77:d8:af:
         86:59:01:b1:08:2b:ee:8e:af:41:1a:ee:4a:c5:d5:8b:33:60:
         40:ca:72:81:63:1b:8c:94:66:3a:72:15:2a:84:ae:0e:e8:45:
         aa:ab:81:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZI/IjJjiFXFOIcal4fIq3dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzZTg2NTY5YjE2OTBjOWRmZjc0NWNiYjQzODA1Yjg1ODJi
MDA1YWQwHhcNMjUwNDE4MTMwMDMxWhcNMjUwNDE5MTMwMDMxWjAzMTEwLwYDVQQD
EyhiMzEyMzhiYjUzNjUxMzE2Zjg3N2U3YmIxMGNjODVmYzEyNmYxYmFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzs95pzknT5vddW+iF3kYKRGkRVju
qKp4lA45Wnq9GjTHz4XAY/mRCBNXYHbR+KxwzCuHAxkHLUluv1CPDMPEBvtkWlda
40dHisX6kq+CzrTUoI6WerWMMoUmoIvQ2O9alUtwdwFj7TGWWQRJh6Gnlhu/OKrh
NSG/7i9xD08EiKbU3Cn5Mkk3+tud+w1KAvEg+ezcwd4qF+n4qRO0W5xNiu5f4oiy
ojGdm98WJvsPOg3b7OveHWQd3/MMSSIM47j79c2HlARnoNQi2JfGWSFgSI8wLVXs
yxN855yBtQqiY7b8nfkXrtWS8Eu3s/r0bGnWihxf1f2jYotkO/JRgidmuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLMSOLtTZRMW+HfnuxDMhfwSbxurMB8GA1UdIwQY
MBaAFMPoZWmxaQyd/3Rcu0OAW4WCsAWtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdy1obGFiRnBESjNfZEZ5N1E0QmJoWUt3QmEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9jOTc2ZmMtZDdkMy00Y2JhLWIwMmUt
ZGJiYjM1YzllMzc4LzEvdy1obGFiRnBESjNfZEZ5N1E0QmJoWUt3QmEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS9jOTc2ZmMtZDdkMy00Y2JhLWIwMmUtZGJiYjM1YzllMzc4
LzEvdy1obGFiRnBESjNfZEZ5N1E0QmJoWUt3QmEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj/iUye4T
uLVRcC0W7suSZbxqmod2/jzmY9BNDG1cHbr7zRLkVtoweVRvQ8MmN5Z+offHtF68
kc623WK1JV884iBjdZ5Ar9sHeyCqIaZkvws1R94KT3nAaY6+SsMx9NIwqbnaScvi
/95xXUbGHfufVcPHgQ5OkGhbEM2iVdhebfhg6lkBUkJk16W3gGra/v0EieNluBUr
oQHTC2/6sJQgvS1JjX8S9S/GrIlVt9IrbhH4J/gI00roRpF4n665J4q4z4T6q6+m
egh6pNu46mZBd1J8rt7Md9ivhlkBsQgr7o6vQRruSsXVizNgQMpygWMbjJRmOnIV
KoSuDuhFqquBaw==
-----END CERTIFICATE-----
Generated at Sat Apr 19 00:01:37 2025 by rpki-client