Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/485305-4c23-4f37-854b-a9d3eef06c67/1/WKJsK8UDp8aBKNKuGrTNN965kyU.mft
File:                     WKJsK8UDp8aBKNKuGrTNN965kyU.mft (raw, json)
Hash identifier:          toW7koCTPrsogWcWNVCYw5YAwV4f3hmGpBPsb1micnU=
Subject key identifier:   E5:7E:ED:5C:4C:91:55:19:D5:46:74:83:66:FD:C4:DD:EB:07:09:32
Authority key identifier: 58:A2:6C:2B:C5:03:A7:C6:81:28:D2:AE:1A:B4:CD:37:DE:B9:93:25
Certificate issuer:       /CN=58a26c2bc503a7c68128d2ae1ab4cd37deb99325
Certificate serial:       0197499F616F49E9D194E2DC6F8435700B6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WKJsK8UDp8aBKNKuGrTNN965kyU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/485305-4c23-4f37-854b-a9d3eef06c67/1/WKJsK8UDp8aBKNKuGrTNN965kyU.mft
Manifest number:          0C9C
Signing time:             Sat 07 Jun 2025 09:01:11 +0000
Manifest this update:     Sat 07 Jun 2025 09:01:11 +0000
Manifest next update:     Sun 08 Jun 2025 09:01:11 +0000
Files and hashes:         1: WKJsK8UDp8aBKNKuGrTNN965kyU.crl (hash: MIfao5mZWMHLtG95iJ28sLzyeGZoQYl4jUx0LiXTp3w=)
                          2: hNIAp98aMKo8_sMHQg1HRKY3DlY.roa (hash: rldqTVSbz4XdzrBIUsjcfeUfYNq78azu2krskuL3dgI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/485305-4c23-4f37-854b-a9d3eef06c67/1/WKJsK8UDp8aBKNKuGrTNN965kyU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/485305-4c23-4f37-854b-a9d3eef06c67/1/WKJsK8UDp8aBKNKuGrTNN965kyU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WKJsK8UDp8aBKNKuGrTNN965kyU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:9f:61:6f:49:e9:d1:94:e2:dc:6f:84:35:70:0b:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58a26c2bc503a7c68128d2ae1ab4cd37deb99325
        Validity
            Not Before: Jun  7 09:01:11 2025 GMT
            Not After : Jun  8 09:01:11 2025 GMT
        Subject: CN=e57eed5c4c915519d546748366fdc4ddeb070932
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:96:b6:5b:df:e6:01:6b:ad:f0:1c:a2:44:a3:
                    b8:9d:3a:a3:d1:16:31:39:fd:dd:9f:96:f3:29:e7:
                    eb:74:7e:1b:6b:09:0f:81:16:87:b4:4a:ad:54:b4:
                    c8:59:e8:b8:d1:9c:c0:6b:4e:95:d7:6f:15:10:bb:
                    1e:23:62:e8:4a:1d:e5:36:7a:72:6d:7f:0f:55:bf:
                    83:79:1d:c7:7f:18:51:92:14:ec:3d:89:1f:60:5d:
                    b4:af:c1:86:4d:e9:a4:31:cc:4b:73:b7:9e:c7:5d:
                    83:ec:cf:81:47:0b:bd:73:b0:57:72:e7:3e:68:ea:
                    fc:ed:ec:60:5d:7b:53:41:2e:d1:6d:7a:0e:7c:fc:
                    bc:3c:d9:00:48:a7:7f:9d:6d:50:bd:77:8e:d7:32:
                    f1:27:49:53:c4:6b:a8:70:18:ff:4f:48:3b:0f:9e:
                    20:1e:a3:fe:0a:b9:9e:05:83:92:cb:3a:67:a3:e6:
                    9f:cb:ec:8a:62:3f:b8:ee:cc:bc:ca:31:59:ce:b1:
                    27:1b:74:a7:cb:d1:74:5d:71:4c:a9:dc:d4:b9:c6:
                    62:32:1d:a9:e9:87:f0:04:75:e8:05:38:d6:f6:f3:
                    51:a0:57:3d:af:70:66:7d:8c:dc:15:72:b0:c7:04:
                    be:a9:a2:70:c4:0e:a5:53:ad:2d:5e:7c:51:de:ad:
                    fb:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:7E:ED:5C:4C:91:55:19:D5:46:74:83:66:FD:C4:DD:EB:07:09:32
            X509v3 Authority Key Identifier:
                keyid:58:A2:6C:2B:C5:03:A7:C6:81:28:D2:AE:1A:B4:CD:37:DE:B9:93:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WKJsK8UDp8aBKNKuGrTNN965kyU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/485305-4c23-4f37-854b-a9d3eef06c67/1/WKJsK8UDp8aBKNKuGrTNN965kyU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/485305-4c23-4f37-854b-a9d3eef06c67/1/WKJsK8UDp8aBKNKuGrTNN965kyU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:c9:36:19:5f:b8:1f:88:05:f3:58:50:98:9d:ca:7f:4b:82:
         32:19:16:d0:77:df:95:30:ac:ce:35:ef:19:24:3b:8f:63:6a:
         16:34:5f:1e:1f:49:ea:d7:9b:ff:98:47:3b:d1:33:11:8f:e1:
         9c:ef:f4:d5:52:52:ac:31:41:ff:c4:23:7c:02:61:36:4c:03:
         ad:73:c0:33:99:96:5d:b6:e4:ab:61:67:49:94:ec:16:41:50:
         e5:5f:fb:63:06:7f:91:35:42:f3:aa:ee:f0:f5:ef:9d:82:66:
         54:bd:62:5e:bd:c9:9e:32:b0:f3:62:38:4a:55:9c:e7:b2:86:
         4f:17:ac:a1:e0:a7:33:50:2c:f5:41:08:80:b6:bc:75:7a:4b:
         16:24:8a:25:7a:e3:45:e4:fb:c7:74:32:24:fa:93:6c:d6:9f:
         4e:ae:d2:15:2c:6c:80:d6:d7:da:ec:c4:01:35:0e:f6:5a:65:
         81:57:93:3d:3e:f9:56:7b:a0:7d:fe:04:15:45:89:66:9d:c8:
         cc:05:d6:ea:16:e9:b0:e7:8d:b2:4b:d6:2e:14:f1:54:fb:66:
         c8:82:27:0b:af:8a:85:03:4d:e3:89:44:ec:c3:25:19:76:8f:
         68:5f:33:6a:6d:c4:31:50:bc:a7:51:d4:c0:53:22:90:cd:85:
         06:63:30:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJn2FvSenRlOLcb4Q1cAtsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4YTI2YzJiYzUwM2E3YzY4MTI4ZDJhZTFhYjRjZDM3ZGVi
OTkzMjUwHhcNMjUwNjA3MDkwMTExWhcNMjUwNjA4MDkwMTExWjAzMTEwLwYDVQQD
EyhlNTdlZWQ1YzRjOTE1NTE5ZDU0Njc0ODM2NmZkYzRkZGViMDcwOTMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Ja2W9/mAWut8ByiRKO4nTqj0RYx
Of3dn5bzKefrdH4bawkPgRaHtEqtVLTIWei40ZzAa06V128VELseI2LoSh3lNnpy
bX8PVb+DeR3HfxhRkhTsPYkfYF20r8GGTemkMcxLc7eex12D7M+BRwu9c7BXcuc+
aOr87exgXXtTQS7RbXoOfPy8PNkASKd/nW1QvXeO1zLxJ0lTxGuocBj/T0g7D54g
HqP+CrmeBYOSyzpno+afy+yKYj+47sy8yjFZzrEnG3Sny9F0XXFMqdzUucZiMh2p
6YfwBHXoBTjW9vNRoFc9r3BmfYzcFXKwxwS+qaJwxA6lU60tXnxR3q37hQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOV+7VxMkVUZ1UZ0g2b9xN3rBwkyMB8GA1UdIwQY
MBaAFFiibCvFA6fGgSjSrhq0zTfeuZMlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0tKc0s4VURwOGFCS05LdUdyVE5OOTY1a3lVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy80ODUzMDUtNGMyMy00ZjM3LTg1NGIt
YTlkM2VlZjA2YzY3LzEvV0tKc0s4VURwOGFCS05LdUdyVE5OOTY1a3lVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy80ODUzMDUtNGMyMy00ZjM3LTg1NGItYTlkM2VlZjA2YzY3
LzEvV0tKc0s4VURwOGFCS05LdUdyVE5OOTY1a3lVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASsk2GV+4
H4gF81hQmJ3Kf0uCMhkW0HfflTCszjXvGSQ7j2NqFjRfHh9J6teb/5hHO9EzEY/h
nO/01VJSrDFB/8QjfAJhNkwDrXPAM5mWXbbkq2FnSZTsFkFQ5V/7YwZ/kTVC86ru
8PXvnYJmVL1iXr3JnjKw82I4SlWc57KGTxesoeCnM1As9UEIgLa8dXpLFiSKJXrj
ReT7x3QyJPqTbNafTq7SFSxsgNbX2uzEATUO9lplgVeTPT75Vnugff4EFUWJZp3I
zAXW6hbpsOeNskvWLhTxVPtmyIInC6+KhQNN44lE7MMlGXaPaF8zam3EMVC8p1HU
wFMikM2FBmMwmQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 15:29:57 2025 by rpki-client