Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/d85a23-148a-4dbf-b2a3-4c26d020d425/1/wrUuo8q9FGpXffzfuHX_WjV1ctc.mft
File:                     wrUuo8q9FGpXffzfuHX_WjV1ctc.mft (raw, json)
Hash identifier:          SoO7IyAzFjI9yv6CMwbXOgkaRYfd5WpRo8mjUERHnUA=
Subject key identifier:   30:08:C7:F7:6C:2D:1A:0D:76:90:52:32:66:5C:E4:2C:A8:B0:3E:A4
Authority key identifier: C2:B5:2E:A3:CA:BD:14:6A:57:7D:FC:DF:B8:75:FF:5A:35:75:72:D7
Certificate issuer:       /CN=c2b52ea3cabd146a577dfcdfb875ff5a357572d7
Certificate serial:       019748FA4403C6BA58C53A645D834462635E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wrUuo8q9FGpXffzfuHX_WjV1ctc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/d85a23-148a-4dbf-b2a3-4c26d020d425/1/wrUuo8q9FGpXffzfuHX_WjV1ctc.mft
Manifest number:          0501
Signing time:             Sat 07 Jun 2025 06:00:50 +0000
Manifest this update:     Sat 07 Jun 2025 06:00:50 +0000
Manifest next update:     Sun 08 Jun 2025 06:00:50 +0000
Files and hashes:         1: MG_LemiZ4GgmFKwuBUT8GzFCS9o.roa (hash: OHMWKPBCF82oEvnytVAEpjmK3rUs3XOc7SKkHkxU2KQ=)
                          2: wrUuo8q9FGpXffzfuHX_WjV1ctc.crl (hash: XLoXFafD4Y5rNQCSM+VqeSMRT6pDGKxMVHyBHC/71E8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/d85a23-148a-4dbf-b2a3-4c26d020d425/1/wrUuo8q9FGpXffzfuHX_WjV1ctc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/d85a23-148a-4dbf-b2a3-4c26d020d425/1/wrUuo8q9FGpXffzfuHX_WjV1ctc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wrUuo8q9FGpXffzfuHX_WjV1ctc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 22:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:fa:44:03:c6:ba:58:c5:3a:64:5d:83:44:62:63:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2b52ea3cabd146a577dfcdfb875ff5a357572d7
        Validity
            Not Before: Jun  7 06:00:50 2025 GMT
            Not After : Jun  8 06:00:50 2025 GMT
        Subject: CN=3008c7f76c2d1a0d76905232665ce42ca8b03ea4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:fe:37:d6:12:d3:70:0a:93:71:3f:70:32:57:
                    5e:ea:af:34:c6:12:09:74:f5:56:76:05:84:9c:8c:
                    ca:f3:8b:a1:58:9a:f0:bd:b9:95:f5:58:db:64:bd:
                    73:31:a4:16:e8:59:ac:fa:ea:6b:21:66:6d:8d:c1:
                    39:5a:71:24:51:25:7e:ca:14:08:ae:8d:d3:81:61:
                    22:23:a1:ab:f9:89:aa:50:72:e6:32:43:f8:ad:b3:
                    4d:f7:21:0a:76:e3:28:29:a1:d2:41:ee:0e:37:3f:
                    c3:3d:83:35:0a:6e:39:3a:89:e4:5a:08:d3:4c:21:
                    ab:3e:09:d8:3a:a1:8b:d6:b4:06:70:08:3a:df:3f:
                    1d:b0:1e:c7:a7:cb:31:75:e5:60:9f:ca:9e:bd:93:
                    fb:8f:b1:50:b0:4e:7e:d5:ac:95:0e:12:f8:1e:fd:
                    f3:dd:1b:fb:5d:4b:22:30:d1:64:3b:46:ed:d1:dc:
                    a8:e6:1b:54:d0:33:81:3b:20:9f:6b:ab:ca:31:1b:
                    98:64:01:28:5e:c5:20:a8:b3:d2:41:20:79:8d:86:
                    06:4a:bf:83:38:1e:1d:34:64:e6:c9:99:3c:e5:32:
                    f8:9a:1a:01:1f:5c:4d:15:30:f8:ae:e0:f2:25:a7:
                    c1:fa:c9:bb:a1:6a:31:03:14:be:a2:fe:e9:7f:2a:
                    98:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:08:C7:F7:6C:2D:1A:0D:76:90:52:32:66:5C:E4:2C:A8:B0:3E:A4
            X509v3 Authority Key Identifier:
                keyid:C2:B5:2E:A3:CA:BD:14:6A:57:7D:FC:DF:B8:75:FF:5A:35:75:72:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wrUuo8q9FGpXffzfuHX_WjV1ctc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d85a23-148a-4dbf-b2a3-4c26d020d425/1/wrUuo8q9FGpXffzfuHX_WjV1ctc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d85a23-148a-4dbf-b2a3-4c26d020d425/1/wrUuo8q9FGpXffzfuHX_WjV1ctc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:a2:59:5e:b3:ac:88:d4:33:4c:e3:9c:28:45:2c:e1:e9:c1:
         ba:35:7c:87:3b:eb:7c:18:61:38:2f:ab:2e:1e:42:e6:86:d6:
         ec:61:9a:60:da:c5:1e:ae:24:8c:55:d0:bf:f8:44:14:aa:b0:
         53:84:f2:ea:8e:f9:5a:13:4a:58:b4:c6:de:3a:0a:a0:a3:a4:
         e9:8f:97:17:23:51:5d:54:18:58:a5:72:2c:0b:eb:e0:3c:3d:
         da:d0:57:8a:f8:bf:68:82:7c:41:90:3a:3b:0f:7b:a5:f3:39:
         e6:13:9a:00:a4:73:c3:8f:c6:00:b0:f9:d2:f3:66:87:17:6c:
         6b:1a:03:b2:ed:45:60:38:d3:76:0b:65:30:80:5a:44:ad:ba:
         74:30:44:6a:4d:58:c5:ab:d5:39:d3:6d:59:e1:a0:c4:8e:ee:
         c5:41:db:56:ec:cd:a2:09:c7:4c:72:f1:f2:54:f3:05:a8:ec:
         ae:c4:95:b1:55:8f:df:be:e8:b8:fe:be:e2:eb:ef:05:1b:d8:
         ce:1a:fc:d5:8a:4c:95:4d:0d:f8:02:bc:b0:0e:89:e0:f8:e1:
         ac:10:9e:3a:c6:6e:0a:51:ef:b8:24:ed:7e:81:6c:c2:2d:8d:
         18:14:ee:a1:20:12:fa:b9:44:37:ff:49:01:b5:e3:a3:25:10:
         77:7a:6f:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdI+kQDxrpYxTpkXYNEYmNeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyYjUyZWEzY2FiZDE0NmE1NzdkZmNkZmI4NzVmZjVhMzU3
NTcyZDcwHhcNMjUwNjA3MDYwMDUwWhcNMjUwNjA4MDYwMDUwWjAzMTEwLwYDVQQD
EygzMDA4YzdmNzZjMmQxYTBkNzY5MDUyMzI2NjVjZTQyY2E4YjAzZWE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApv431hLTcAqTcT9wMlde6q80xhIJ
dPVWdgWEnIzK84uhWJrwvbmV9VjbZL1zMaQW6Fms+uprIWZtjcE5WnEkUSV+yhQI
ro3TgWEiI6Gr+YmqUHLmMkP4rbNN9yEKduMoKaHSQe4ONz/DPYM1Cm45OonkWgjT
TCGrPgnYOqGL1rQGcAg63z8dsB7Hp8sxdeVgn8qevZP7j7FQsE5+1ayVDhL4Hv3z
3Rv7XUsiMNFkO0bt0dyo5htU0DOBOyCfa6vKMRuYZAEoXsUgqLPSQSB5jYYGSr+D
OB4dNGTmyZk85TL4mhoBH1xNFTD4ruDyJafB+sm7oWoxAxS+ov7pfyqYlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDAIx/dsLRoNdpBSMmZc5CyosD6kMB8GA1UdIwQY
MBaAFMK1LqPKvRRqV33837h1/1o1dXLXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3JVdW84cTlGR3BYZmZ6ZnVIWF9XalYxY3RjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9kODVhMjMtMTQ4YS00ZGJmLWIyYTMt
NGMyNmQwMjBkNDI1LzEvd3JVdW84cTlGR3BYZmZ6ZnVIWF9XalYxY3RjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC9kODVhMjMtMTQ4YS00ZGJmLWIyYTMtNGMyNmQwMjBkNDI1
LzEvd3JVdW84cTlGR3BYZmZ6ZnVIWF9XalYxY3RjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT6JZXrOs
iNQzTOOcKEUs4enBujV8hzvrfBhhOC+rLh5C5obW7GGaYNrFHq4kjFXQv/hEFKqw
U4Ty6o75WhNKWLTG3joKoKOk6Y+XFyNRXVQYWKVyLAvr4Dw92tBXivi/aIJ8QZA6
Ow97pfM55hOaAKRzw4/GALD50vNmhxdsaxoDsu1FYDjTdgtlMIBaRK26dDBEak1Y
xavVOdNtWeGgxI7uxUHbVuzNognHTHLx8lTzBajsrsSVsVWP377ouP6+4uvvBRvY
zhr81YpMlU0N+AK8sA6J4PjhrBCeOsZuClHvuCTtfoFswi2NGBTuoSAS+rlEN/9J
AbXjoyUQd3pvKA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 08:00:18 2025 by rpki-client