Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/b361cb-e610-4e8c-9b22-dd61b7e44baf/1/WBGrl6rJhLdSTv-tX6xo6x4Zzc4.mft
File:                     WBGrl6rJhLdSTv-tX6xo6x4Zzc4.mft (raw, json)
Hash identifier:          RcK6jJeknn8yfniZLSnNOQjyWVS+T1YbMxC6RtTP0nY=
Subject key identifier:   48:69:C0:46:B4:13:76:FE:4D:AB:46:3A:65:5D:31:CE:26:8B:B3:7F
Authority key identifier: 58:11:AB:97:AA:C9:84:B7:52:4E:FF:AD:5F:AC:68:EB:1E:19:CD:CE
Certificate issuer:       /CN=5811ab97aac984b7524effad5fac68eb1e19cdce
Certificate serial:       01974C324507A9054CDFA8F20D92079E3981
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WBGrl6rJhLdSTv-tX6xo6x4Zzc4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/b361cb-e610-4e8c-9b22-dd61b7e44baf/1/WBGrl6rJhLdSTv-tX6xo6x4Zzc4.mft
Manifest number:          135F
Signing time:             Sat 07 Jun 2025 21:00:52 +0000
Manifest this update:     Sat 07 Jun 2025 21:00:52 +0000
Manifest next update:     Sun 08 Jun 2025 21:00:52 +0000
Files and hashes:         1: WBGrl6rJhLdSTv-tX6xo6x4Zzc4.crl (hash: kDxt1AXdIaQBI7+oOnyKZdhlovz64QYkWtwkBdwz8CY=)
                          2: pHVWgJuGe-4SCUP5TXdZ2HWcQDo.roa (hash: gAsEJftS+Uf8/0GhnyryHodqA1ekHyKsg54eRC3EHGg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/b361cb-e610-4e8c-9b22-dd61b7e44baf/1/WBGrl6rJhLdSTv-tX6xo6x4Zzc4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/b361cb-e610-4e8c-9b22-dd61b7e44baf/1/WBGrl6rJhLdSTv-tX6xo6x4Zzc4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WBGrl6rJhLdSTv-tX6xo6x4Zzc4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4c:32:45:07:a9:05:4c:df:a8:f2:0d:92:07:9e:39:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5811ab97aac984b7524effad5fac68eb1e19cdce
        Validity
            Not Before: Jun  7 21:00:52 2025 GMT
            Not After : Jun  8 21:00:52 2025 GMT
        Subject: CN=4869c046b41376fe4dab463a655d31ce268bb37f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:07:72:c0:fa:de:c4:30:c4:43:90:0b:f8:00:
                    78:e1:d1:69:42:30:a6:23:a8:d9:d5:f5:71:e9:e6:
                    63:fb:e3:b7:36:69:39:53:39:3a:4f:12:5b:2e:6d:
                    a2:e5:53:c2:82:52:7c:1c:33:58:e4:6f:45:ac:c8:
                    f8:c7:24:04:42:b9:da:4d:e3:5c:a9:4c:a0:a8:e1:
                    ce:ca:dd:ee:c1:db:f9:60:1e:c5:61:28:6a:07:41:
                    51:0f:b8:6d:a8:4d:f9:29:e3:17:5d:8f:8a:08:e6:
                    1c:74:d3:68:cd:45:3b:d1:a6:5f:b8:fb:d0:c1:40:
                    b5:de:51:5e:98:90:68:ad:4c:ca:65:93:71:db:44:
                    3d:46:24:b7:2a:a6:21:05:2b:00:1b:3e:5d:f9:35:
                    1c:50:c0:1d:26:c7:80:ec:33:9a:84:fc:da:53:7e:
                    c2:18:c3:20:52:76:6d:10:84:6b:56:71:07:e3:d6:
                    85:35:39:5a:cf:0e:cf:60:f6:83:30:0e:d7:bd:db:
                    b4:da:9b:08:27:b4:98:a1:e8:c5:8e:e3:c4:1e:91:
                    8d:93:fa:cd:08:63:54:6b:78:d9:67:89:b1:41:d0:
                    eb:ca:ae:59:cd:18:b4:3c:3a:54:5d:41:bc:4d:46:
                    55:91:33:37:f4:83:58:ed:4a:b5:df:5b:75:48:3a:
                    14:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:69:C0:46:B4:13:76:FE:4D:AB:46:3A:65:5D:31:CE:26:8B:B3:7F
            X509v3 Authority Key Identifier:
                keyid:58:11:AB:97:AA:C9:84:B7:52:4E:FF:AD:5F:AC:68:EB:1E:19:CD:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WBGrl6rJhLdSTv-tX6xo6x4Zzc4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/b361cb-e610-4e8c-9b22-dd61b7e44baf/1/WBGrl6rJhLdSTv-tX6xo6x4Zzc4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/b361cb-e610-4e8c-9b22-dd61b7e44baf/1/WBGrl6rJhLdSTv-tX6xo6x4Zzc4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:f7:38:7e:ba:21:f4:31:db:53:0c:bf:63:08:ca:b6:be:f8:
         fa:ae:4d:bd:d1:94:d0:31:ce:4f:f3:e5:13:57:2d:a7:a5:96:
         69:5e:dc:e1:44:04:98:be:b6:be:32:cf:3d:11:79:9d:3b:21:
         0a:c3:48:b0:20:55:09:b6:9e:16:3d:70:fb:72:71:aa:bf:cd:
         f7:34:0b:44:64:9b:89:f2:bb:d7:58:99:e2:f0:c5:34:7b:a7:
         f6:e6:b5:53:d7:c2:a9:5d:23:d2:90:97:5b:8d:a6:4a:a2:b2:
         4e:36:30:5a:74:20:41:7f:54:11:68:54:d6:dd:1d:1c:2f:5f:
         43:44:1f:ef:58:19:73:7e:84:67:30:fa:5d:a1:0d:ee:cf:9c:
         1e:9c:ab:6d:42:24:cf:65:e8:31:8e:0f:da:98:a6:18:85:4e:
         e1:e0:6f:77:f0:25:54:ef:0a:d1:b3:82:03:62:9c:7b:d2:64:
         9b:17:76:9e:43:df:bb:af:ea:11:28:92:9e:38:d1:16:83:7a:
         e6:c3:0e:45:89:30:5b:a4:d7:4a:02:7a:a9:63:1d:76:6a:29:
         59:81:3f:f2:e1:88:d3:f5:87:de:57:b3:0a:9e:4f:00:53:df:
         e3:44:d7:20:67:6d:07:17:10:aa:ab:28:8f:94:25:56:6f:8a:
         13:76:14:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdMMkUHqQVM36jyDZIHnjmBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4MTFhYjk3YWFjOTg0Yjc1MjRlZmZhZDVmYWM2OGViMWUx
OWNkY2UwHhcNMjUwNjA3MjEwMDUyWhcNMjUwNjA4MjEwMDUyWjAzMTEwLwYDVQQD
Eyg0ODY5YzA0NmI0MTM3NmZlNGRhYjQ2M2E2NTVkMzFjZTI2OGJiMzdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwdywPrexDDEQ5AL+AB44dFpQjCm
I6jZ1fVx6eZj++O3Nmk5Uzk6TxJbLm2i5VPCglJ8HDNY5G9FrMj4xyQEQrnaTeNc
qUygqOHOyt3uwdv5YB7FYShqB0FRD7htqE35KeMXXY+KCOYcdNNozUU70aZfuPvQ
wUC13lFemJBorUzKZZNx20Q9RiS3KqYhBSsAGz5d+TUcUMAdJseA7DOahPzaU37C
GMMgUnZtEIRrVnEH49aFNTlazw7PYPaDMA7Xvdu02psIJ7SYoejFjuPEHpGNk/rN
CGNUa3jZZ4mxQdDryq5ZzRi0PDpUXUG8TUZVkTM39INY7Uq131t1SDoUnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEhpwEa0E3b+TatGOmVdMc4mi7N/MB8GA1UdIwQY
MBaAFFgRq5eqyYS3Uk7/rV+saOseGc3OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0JHcmw2ckpoTGRTVHYtdFg2eG82eDRaemM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9iMzYxY2ItZTYxMC00ZThjLTliMjIt
ZGQ2MWI3ZTQ0YmFmLzEvV0JHcmw2ckpoTGRTVHYtdFg2eG82eDRaemM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9iMzYxY2ItZTYxMC00ZThjLTliMjItZGQ2MWI3ZTQ0YmFm
LzEvV0JHcmw2ckpoTGRTVHYtdFg2eG82eDRaemM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlfc4froh
9DHbUwy/YwjKtr74+q5NvdGU0DHOT/PlE1ctp6WWaV7c4UQEmL62vjLPPRF5nTsh
CsNIsCBVCbaeFj1w+3Jxqr/N9zQLRGSbifK711iZ4vDFNHun9ua1U9fCqV0j0pCX
W42mSqKyTjYwWnQgQX9UEWhU1t0dHC9fQ0Qf71gZc36EZzD6XaEN7s+cHpyrbUIk
z2XoMY4P2pimGIVO4eBvd/AlVO8K0bOCA2Kce9Jkmxd2nkPfu6/qESiSnjjRFoN6
5sMORYkwW6TXSgJ6qWMddmopWYE/8uGI0/WH3lezCp5PAFPf40TXIGdtBxcQqqso
j5QlVm+KE3YU6A==
-----END CERTIFICATE-----
Generated at Sun Jun 8 04:59:38 2025 by rpki-client