Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.mft
File:                     WFPmWjCHtMqFyIArYP8PArQQbZc.mft (raw, json)
Hash identifier:          bK2RBPv68qHGykVKnS+NEHBIZii9m0v2YsRY+Aea3sQ=
Subject key identifier:   81:7A:05:F4:C8:CE:94:B3:62:5F:F7:E0:B6:7B:86:9B:39:32:B6:65
Authority key identifier: 58:53:E6:5A:30:87:B4:CA:85:C8:80:2B:60:FF:0F:02:B4:10:6D:97
Certificate issuer:       /CN=5853e65a3087b4ca85c8802b60ff0f02b4106d97
Certificate serial:       019749D583E968017BE548D912149EBBB04E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WFPmWjCHtMqFyIArYP8PArQQbZc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.mft
Manifest number:          157F
Signing time:             Sat 07 Jun 2025 10:00:18 +0000
Manifest this update:     Sat 07 Jun 2025 10:00:18 +0000
Manifest next update:     Sun 08 Jun 2025 10:00:18 +0000
Files and hashes:         1: 02c0qJQBaigaXqN3maDpONIFFAc.roa (hash: vlyVQJ8T6zqr0LECSkvXw3QlmL9Yjq/p8Uw6tjeUbr0=)
                          2: Pg2gOuPKcxedaD2sl59MmthUm3Y.roa (hash: WZc+oVHpNNLn5e9mOqx5XLubp1FGZ4dlKP4oaNZHVd8=)
                          3: WFPmWjCHtMqFyIArYP8PArQQbZc.crl (hash: WSZyTj5ji1IWewjoPvkZg4+r6IC9eQmWpIdTkkMLazw=)
                          4: ahTFb9S5fLEMmoyGHiPW-vefiaQ.roa (hash: zqpUKAyeaL36v8tPjx+vALU808R28L9YVhwRYuClrAU=)
                          5: ioEYoSKyEtfdiu8IAgBkdSDUxq0.roa (hash: CEmR3YzuPC7K/CwWVdeEu1K1wp1B5QCNbwR4nRi5bvI=)
                          6: nIj-C3WdkAFcA4_Ngvkfutdaf_s.roa (hash: yzlIgktfxTBSgISHGYHZ7rHc6AI8aMue2aaA1Dfkxmw=)
                          7: navET64WjDznMyZwQ_DOauhQ_9c.roa (hash: 0cyJx0VGxqHx5SG278Ye2Mukf1TTlmRpgV9pjTpL9aA=)
                          8: uQzeyhb_YH9D-fUCEABxF4wv1F8.roa (hash: 8/LP96pPXoanusy0qN7hBVY8daOytWMa0c+vNmNso88=)
                          9: yMil0VU9iMTJivoi_lPAt-4Ce_g.roa (hash: AOwv0RlV94x3NlTYd1oZANIiYY1kB3TCsu+XGZoajDs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WFPmWjCHtMqFyIArYP8PArQQbZc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:d5:83:e9:68:01:7b:e5:48:d9:12:14:9e:bb:b0:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5853e65a3087b4ca85c8802b60ff0f02b4106d97
        Validity
            Not Before: Jun  7 10:00:18 2025 GMT
            Not After : Jun  8 10:00:18 2025 GMT
        Subject: CN=817a05f4c8ce94b3625ff7e0b67b869b3932b665
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:49:f7:dd:7b:35:ba:a1:ca:a6:bd:eb:1d:2e:
                    fd:68:6e:5a:94:19:c2:34:b0:00:37:2b:d1:88:52:
                    ef:a9:40:84:17:d5:da:f0:c4:96:49:75:a8:37:66:
                    4b:51:1a:3f:4f:e9:03:81:9d:2e:89:a8:0b:60:0b:
                    e1:7a:5c:95:03:2c:cf:d7:dc:28:49:95:3a:20:5b:
                    0e:39:f8:64:7f:0e:2d:f9:e3:ca:5d:f7:63:b9:a9:
                    48:b6:9c:43:8a:f0:36:c4:88:60:84:05:a9:db:2e:
                    53:9d:bc:d3:98:64:99:82:f5:e7:d7:b9:8c:bd:86:
                    6a:d1:3a:7b:c8:01:9e:76:34:6b:00:1c:e8:dc:f4:
                    c9:20:7e:13:f2:11:76:d1:ab:84:d7:ac:b1:f4:99:
                    36:2a:a3:84:b3:5a:48:fa:25:ec:6d:1c:3e:5e:ab:
                    ca:b7:14:52:a7:5e:96:f9:4e:f6:76:54:9c:ab:60:
                    30:46:dc:60:33:c1:df:f6:48:84:05:6f:c3:5d:a4:
                    6a:d1:59:cf:2b:8c:f2:a3:12:5b:08:a9:7b:ca:2e:
                    ac:6c:5a:8e:17:17:37:e0:e5:57:b5:82:61:ea:0b:
                    fc:cd:e8:71:bc:b1:cf:f7:58:af:c7:3d:03:4b:ca:
                    40:e7:e5:8a:5d:b3:de:13:a8:55:fb:4f:42:10:4e:
                    4e:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:7A:05:F4:C8:CE:94:B3:62:5F:F7:E0:B6:7B:86:9B:39:32:B6:65
            X509v3 Authority Key Identifier:
                keyid:58:53:E6:5A:30:87:B4:CA:85:C8:80:2B:60:FF:0F:02:B4:10:6D:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WFPmWjCHtMqFyIArYP8PArQQbZc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6afd1e-cb7e-4e6e-a8a4-e18602739cd5/1/WFPmWjCHtMqFyIArYP8PArQQbZc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:ff:f5:81:55:ee:88:29:e4:a4:05:22:a7:15:b3:09:03:80:
         d6:4b:83:0d:96:1b:b8:8f:55:46:03:21:91:d6:7a:0c:f4:0b:
         1c:f9:ca:4f:a5:6c:ba:2e:d4:2c:53:99:00:bc:b9:a4:79:ec:
         f1:d6:86:12:d4:59:0f:cd:d8:39:7c:1d:2a:84:08:5f:38:6c:
         04:65:b6:45:ac:b2:a0:04:33:d4:0a:1b:d4:87:de:f3:29:b2:
         ea:fe:d6:f9:89:82:89:0d:e8:db:b2:42:da:30:77:97:48:d5:
         02:3d:09:ab:79:f2:2d:b0:18:be:be:bf:a7:a8:58:bc:81:09:
         1e:15:0a:10:08:97:ee:cd:74:2d:ae:37:fc:4a:f1:7e:87:d5:
         ac:06:3a:2b:14:56:a3:65:bd:13:e7:f8:ba:d9:e6:1a:77:aa:
         42:76:e7:82:76:14:db:47:45:e9:ab:ba:a1:74:a3:42:8a:13:
         0c:27:8e:5e:14:df:97:bd:7e:f9:50:83:da:75:aa:e6:09:2e:
         55:82:ca:88:b0:0d:b1:46:0d:f4:90:df:75:e2:b6:62:ee:c4:
         69:8a:42:ca:a3:53:cf:33:e3:46:f7:16:ab:29:d6:43:1e:80:
         eb:bd:ba:fa:01:ae:e3:61:bc:b5:19:f6:66:7f:95:73:26:37:
         a6:d7:b5:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJ1YPpaAF75UjZEhSeu7BOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4NTNlNjVhMzA4N2I0Y2E4NWM4ODAyYjYwZmYwZjAyYjQx
MDZkOTcwHhcNMjUwNjA3MTAwMDE4WhcNMjUwNjA4MTAwMDE4WjAzMTEwLwYDVQQD
Eyg4MTdhMDVmNGM4Y2U5NGIzNjI1ZmY3ZTBiNjdiODY5YjM5MzJiNjY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyEn33Xs1uqHKpr3rHS79aG5alBnC
NLAANyvRiFLvqUCEF9Xa8MSWSXWoN2ZLURo/T+kDgZ0uiagLYAvhelyVAyzP19wo
SZU6IFsOOfhkfw4t+ePKXfdjualItpxDivA2xIhghAWp2y5TnbzTmGSZgvXn17mM
vYZq0Tp7yAGedjRrABzo3PTJIH4T8hF20auE16yx9Jk2KqOEs1pI+iXsbRw+XqvK
txRSp16W+U72dlScq2AwRtxgM8Hf9kiEBW/DXaRq0VnPK4zyoxJbCKl7yi6sbFqO
Fxc34OVXtYJh6gv8zehxvLHP91ivxz0DS8pA5+WKXbPeE6hV+09CEE5OfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIF6BfTIzpSzYl/34LZ7hps5MrZlMB8GA1UdIwQY
MBaAFFhT5lowh7TKhciAK2D/DwK0EG2XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0ZQbVdqQ0h0TXFGeUlBcllQOFBBclFRYlpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi82YWZkMWUtY2I3ZS00ZTZlLWE4YTQt
ZTE4NjAyNzM5Y2Q1LzEvV0ZQbVdqQ0h0TXFGeUlBcllQOFBBclFRYlpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi82YWZkMWUtY2I3ZS00ZTZlLWE4YTQtZTE4NjAyNzM5Y2Q1
LzEvV0ZQbVdqQ0h0TXFGeUlBcllQOFBBclFRYlpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKf/1gVXu
iCnkpAUipxWzCQOA1kuDDZYbuI9VRgMhkdZ6DPQLHPnKT6Vsui7ULFOZALy5pHns
8daGEtRZD83YOXwdKoQIXzhsBGW2RayyoAQz1Aob1Ife8ymy6v7W+YmCiQ3o27JC
2jB3l0jVAj0Jq3nyLbAYvr6/p6hYvIEJHhUKEAiX7s10La43/ErxfofVrAY6KxRW
o2W9E+f4utnmGneqQnbngnYU20dF6au6oXSjQooTDCeOXhTfl71++VCD2nWq5gku
VYLKiLANsUYN9JDfdeK2Yu7EaYpCyqNTzzPjRvcWqynWQx6A6726+gGu42G8tRn2
Zn+VcyY3pte1vQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 13:38:39 2025 by rpki-client