Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/d85a23-148a-4dbf-b2a3-4c26d020d425/1/wrUuo8q9FGpXffzfuHX_WjV1ctc.mft
File:                     wrUuo8q9FGpXffzfuHX_WjV1ctc.mft (raw, json)
Hash identifier:          5aW+RX8qz/q0m7KN3EJGABr9fS0wyzP+Xn6M7Ufz+fs=
Subject key identifier:   5E:8F:7E:4A:85:51:20:FD:03:BB:55:57:76:48:E9:A8:B8:D4:4A:39
Authority key identifier: C2:B5:2E:A3:CA:BD:14:6A:57:7D:FC:DF:B8:75:FF:5A:35:75:72:D7
Certificate issuer:       /CN=c2b52ea3cabd146a577dfcdfb875ff5a357572d7
Certificate serial:       0196579476DF1DA3D6AF2CD69B6F93521B55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wrUuo8q9FGpXffzfuHX_WjV1ctc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/d85a23-148a-4dbf-b2a3-4c26d020d425/1/wrUuo8q9FGpXffzfuHX_WjV1ctc.mft
Manifest number:          0484
Signing time:             Mon 21 Apr 2025 09:01:09 +0000
Manifest this update:     Mon 21 Apr 2025 09:01:09 +0000
Manifest next update:     Tue 22 Apr 2025 09:01:09 +0000
Files and hashes:         1: MG_LemiZ4GgmFKwuBUT8GzFCS9o.roa (hash: OHMWKPBCF82oEvnytVAEpjmK3rUs3XOc7SKkHkxU2KQ=)
                          2: wrUuo8q9FGpXffzfuHX_WjV1ctc.crl (hash: R72+80XRIXfjRscFk7e3XzHhjFOM4BKh92HyT/4tJN0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/d85a23-148a-4dbf-b2a3-4c26d020d425/1/wrUuo8q9FGpXffzfuHX_WjV1ctc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/d85a23-148a-4dbf-b2a3-4c26d020d425/1/wrUuo8q9FGpXffzfuHX_WjV1ctc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wrUuo8q9FGpXffzfuHX_WjV1ctc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Apr 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:57:94:76:df:1d:a3:d6:af:2c:d6:9b:6f:93:52:1b:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2b52ea3cabd146a577dfcdfb875ff5a357572d7
        Validity
            Not Before: Apr 21 09:01:09 2025 GMT
            Not After : Apr 22 09:01:09 2025 GMT
        Subject: CN=5e8f7e4a855120fd03bb55577648e9a8b8d44a39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:87:c0:9a:5d:9c:69:44:2b:d4:3a:10:22:fb:
                    23:f1:8e:14:d7:3b:68:f6:cb:a2:6f:02:35:dc:f7:
                    cd:db:39:f1:45:3a:1a:08:cb:b3:8c:42:10:98:17:
                    aa:d0:67:cd:5e:87:83:43:ff:fd:48:64:28:4e:a4:
                    41:14:16:5c:ee:0a:57:0c:d6:f9:58:7e:fe:e1:e2:
                    36:10:3f:ab:0a:58:8c:8a:1e:8b:51:7c:3d:61:d8:
                    64:e3:3d:ad:94:80:5f:6a:1e:5c:72:bc:4c:fd:a0:
                    9a:73:e5:71:c2:2d:00:d5:64:7c:28:ca:9a:19:6b:
                    72:84:15:e2:3c:10:31:52:1d:b3:9a:0d:6d:f6:e9:
                    08:40:7d:35:dd:42:ea:90:79:07:25:09:73:81:e6:
                    18:8a:e1:9d:98:92:13:a5:ca:77:2c:b8:ab:31:aa:
                    d0:b1:bd:33:83:89:dd:ce:1d:bb:44:71:18:d4:61:
                    ec:70:bf:55:06:f5:53:ec:ac:87:1e:34:12:1d:79:
                    0a:a3:28:3a:49:ae:ab:05:a2:15:a8:ec:89:89:99:
                    ee:7c:9e:45:84:b2:58:93:9c:e0:21:5b:ef:73:4f:
                    0c:b1:dd:5f:f8:8d:6f:8e:bc:8b:02:b1:92:9f:17:
                    6c:87:9a:fd:cd:45:e1:77:0f:19:3d:45:66:85:e4:
                    4a:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:8F:7E:4A:85:51:20:FD:03:BB:55:57:76:48:E9:A8:B8:D4:4A:39
            X509v3 Authority Key Identifier:
                keyid:C2:B5:2E:A3:CA:BD:14:6A:57:7D:FC:DF:B8:75:FF:5A:35:75:72:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wrUuo8q9FGpXffzfuHX_WjV1ctc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d85a23-148a-4dbf-b2a3-4c26d020d425/1/wrUuo8q9FGpXffzfuHX_WjV1ctc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d85a23-148a-4dbf-b2a3-4c26d020d425/1/wrUuo8q9FGpXffzfuHX_WjV1ctc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d4:fb:97:c8:8c:37:3a:26:fc:29:72:35:9d:4d:47:8e:90:6d:
         0a:38:fd:92:82:a2:94:05:aa:72:0c:a7:96:4b:0b:49:cb:3b:
         7c:0a:ea:87:5e:36:94:96:6f:4b:72:5f:3f:b8:51:aa:2d:9c:
         f3:91:d0:f6:49:a9:07:67:3e:ba:7f:56:87:12:b3:e9:61:dc:
         1b:46:4f:fc:be:5a:64:f9:7a:b9:be:a6:19:31:de:7a:66:db:
         e6:06:a0:e1:7d:a9:ca:c4:4c:30:7c:39:b8:97:bb:cb:ea:10:
         0e:70:5d:51:e6:6b:25:80:12:4c:7e:8d:4a:a5:34:28:4e:64:
         32:a6:e8:33:81:53:e2:ee:65:78:f4:8a:43:4a:6c:8e:81:24:
         db:3e:44:2f:74:a5:ce:ea:4e:63:b5:b9:08:25:66:a4:45:3e:
         18:b4:d7:86:c7:57:e6:2a:f3:75:cb:c6:c0:2a:1e:11:e1:d8:
         be:58:49:a6:06:0b:df:e9:5c:15:6b:1a:dd:7c:4b:24:87:6d:
         07:5c:67:07:e0:b4:02:a0:5f:48:6f:ab:48:c2:f4:0e:64:7f:
         4b:fb:55:25:99:39:d1:5b:84:fd:df:3d:ff:7e:a7:09:f9:b9:
         7e:29:55:c3:fd:2f:7a:fd:ff:df:ee:73:cb:11:6a:15:90:c5:
         2a:d0:0a:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZXlHbfHaPWryzWm2+TUhtVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyYjUyZWEzY2FiZDE0NmE1NzdkZmNkZmI4NzVmZjVhMzU3
NTcyZDcwHhcNMjUwNDIxMDkwMTA5WhcNMjUwNDIyMDkwMTA5WjAzMTEwLwYDVQQD
Eyg1ZThmN2U0YTg1NTEyMGZkMDNiYjU1NTc3NjQ4ZTlhOGI4ZDQ0YTM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ofAml2caUQr1DoQIvsj8Y4U1zto
9suibwI13PfN2znxRToaCMuzjEIQmBeq0GfNXoeDQ//9SGQoTqRBFBZc7gpXDNb5
WH7+4eI2ED+rCliMih6LUXw9Ydhk4z2tlIBfah5ccrxM/aCac+Vxwi0A1WR8KMqa
GWtyhBXiPBAxUh2zmg1t9ukIQH013ULqkHkHJQlzgeYYiuGdmJITpcp3LLirMarQ
sb0zg4ndzh27RHEY1GHscL9VBvVT7KyHHjQSHXkKoyg6Sa6rBaIVqOyJiZnufJ5F
hLJYk5zgIVvvc08Msd1f+I1vjryLArGSnxdsh5r9zUXhdw8ZPUVmheRKpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF6PfkqFUSD9A7tVV3ZI6ai41Eo5MB8GA1UdIwQY
MBaAFMK1LqPKvRRqV33837h1/1o1dXLXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3JVdW84cTlGR3BYZmZ6ZnVIWF9XalYxY3RjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9kODVhMjMtMTQ4YS00ZGJmLWIyYTMt
NGMyNmQwMjBkNDI1LzEvd3JVdW84cTlGR3BYZmZ6ZnVIWF9XalYxY3RjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC9kODVhMjMtMTQ4YS00ZGJmLWIyYTMtNGMyNmQwMjBkNDI1
LzEvd3JVdW84cTlGR3BYZmZ6ZnVIWF9XalYxY3RjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1PuXyIw3
Oib8KXI1nU1HjpBtCjj9koKilAWqcgynlksLScs7fArqh142lJZvS3JfP7hRqi2c
85HQ9kmpB2c+un9WhxKz6WHcG0ZP/L5aZPl6ub6mGTHeembb5gag4X2pysRMMHw5
uJe7y+oQDnBdUeZrJYASTH6NSqU0KE5kMqboM4FT4u5lePSKQ0psjoEk2z5EL3Sl
zupOY7W5CCVmpEU+GLTXhsdX5irzdcvGwCoeEeHYvlhJpgYL3+lcFWsa3XxLJIdt
B1xnB+C0AqBfSG+rSML0DmR/S/tVJZk50VuE/d89/36nCfm5filVw/0vev3/3+5z
yxFqFZDFKtAKmw==
-----END CERTIFICATE-----
Generated at Mon Apr 21 10:41:11 2025 by rpki-client