Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/b6aa96-aa8f-4fd4-b9e8-373a0d3c4534/1/wRXxNBqHFAoSLcj5ZQK3JEkFfmA.mft
File:                     wRXxNBqHFAoSLcj5ZQK3JEkFfmA.mft (raw, json)
Hash identifier:          pXXlCuhM95FkGzY4Z0EPFQz2OPY6WfpCtd3bfxdKOM4=
Subject key identifier:   E1:E4:0C:49:74:77:08:88:E1:B7:F7:10:02:2E:83:FC:59:A0:AD:00
Authority key identifier: C1:15:F1:34:1A:87:14:0A:12:2D:C8:F9:65:02:B7:24:49:05:7E:60
Certificate issuer:       /CN=c115f1341a87140a122dc8f96502b72449057e60
Certificate serial:       019749314A1ACD7ACEF233CC308A3FCB0BE3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wRXxNBqHFAoSLcj5ZQK3JEkFfmA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/b6aa96-aa8f-4fd4-b9e8-373a0d3c4534/1/wRXxNBqHFAoSLcj5ZQK3JEkFfmA.mft
Manifest number:          139A
Signing time:             Sat 07 Jun 2025 07:00:56 +0000
Manifest this update:     Sat 07 Jun 2025 07:00:56 +0000
Manifest next update:     Sun 08 Jun 2025 07:00:56 +0000
Files and hashes:         1: OZdY9tsN8gFkESVtIbXza917_a0.roa (hash: izbPKaAtrUogn7SQSKm/hKiliCifOlraqF2HZIB4lps=)
                          2: wRXxNBqHFAoSLcj5ZQK3JEkFfmA.crl (hash: ZTjlx9I70r0AoLmAo/WoTBGs5qCL2rZt2lnnA33bk+U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/b6aa96-aa8f-4fd4-b9e8-373a0d3c4534/1/wRXxNBqHFAoSLcj5ZQK3JEkFfmA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/b6aa96-aa8f-4fd4-b9e8-373a0d3c4534/1/wRXxNBqHFAoSLcj5ZQK3JEkFfmA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wRXxNBqHFAoSLcj5ZQK3JEkFfmA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 07:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:31:4a:1a:cd:7a:ce:f2:33:cc:30:8a:3f:cb:0b:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c115f1341a87140a122dc8f96502b72449057e60
        Validity
            Not Before: Jun  7 07:00:56 2025 GMT
            Not After : Jun  8 07:00:56 2025 GMT
        Subject: CN=e1e40c4974770888e1b7f710022e83fc59a0ad00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:53:6b:97:9e:d6:0d:55:97:33:61:88:1b:39:
                    5a:04:6d:6f:ee:a4:74:2d:0a:d1:b4:bd:be:15:76:
                    6c:ff:b9:97:da:13:af:3d:48:be:d0:5a:88:61:64:
                    b7:84:a9:44:75:b4:b8:25:84:1a:9e:f0:e7:59:dc:
                    7a:36:85:68:e2:46:74:54:d9:41:ed:c8:a4:f4:2a:
                    c6:c6:46:34:b6:3c:6a:4f:e6:50:43:ce:ff:68:15:
                    60:66:e2:c7:3f:78:4d:d0:c0:ac:c3:0f:5b:e6:da:
                    61:8b:f0:6b:5e:6b:28:d5:0b:da:db:3c:2a:68:2e:
                    32:8f:7c:36:38:ff:c6:e9:d7:87:1d:98:6c:5e:a0:
                    a9:ab:b4:85:99:69:35:0b:85:0c:c5:5f:7d:c4:2b:
                    87:d5:e4:e2:8a:8d:da:3a:cc:aa:36:9c:83:cd:74:
                    ec:79:91:6c:5c:77:ab:fc:c4:f9:c1:c6:a6:d5:38:
                    03:ee:a3:b4:c5:84:cb:96:55:3b:1d:49:db:86:cd:
                    25:27:68:4f:50:4a:b9:0e:89:ff:12:fe:80:4e:8f:
                    bb:5a:8d:31:5e:53:d1:62:74:04:12:14:3e:fd:15:
                    9d:de:a2:fa:81:eb:26:b9:67:7b:46:a7:d6:da:e1:
                    9f:61:9f:fa:4f:7b:e5:37:0c:81:4d:e3:b8:e6:c1:
                    6d:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:E4:0C:49:74:77:08:88:E1:B7:F7:10:02:2E:83:FC:59:A0:AD:00
            X509v3 Authority Key Identifier:
                keyid:C1:15:F1:34:1A:87:14:0A:12:2D:C8:F9:65:02:B7:24:49:05:7E:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wRXxNBqHFAoSLcj5ZQK3JEkFfmA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b6aa96-aa8f-4fd4-b9e8-373a0d3c4534/1/wRXxNBqHFAoSLcj5ZQK3JEkFfmA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b6aa96-aa8f-4fd4-b9e8-373a0d3c4534/1/wRXxNBqHFAoSLcj5ZQK3JEkFfmA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:6f:38:99:72:20:5d:f1:f7:e8:69:dc:f6:b4:af:b2:3e:c1:
         2c:76:f1:bb:b7:61:e2:1b:84:6a:85:3d:a4:df:12:d5:f6:60:
         39:00:3d:f9:1b:a5:65:79:74:6d:58:3f:34:7c:38:9b:13:e3:
         81:b1:b7:d9:1c:6b:73:54:63:68:28:34:3e:64:8d:2f:d0:09:
         c7:d3:50:e7:ee:6e:f4:3f:58:c7:a5:71:36:20:2b:bb:12:5b:
         dc:57:68:13:4f:ca:d1:18:4d:d9:aa:a7:46:1d:18:59:6b:c5:
         33:60:ab:fb:e4:d5:dd:28:b7:c7:74:86:04:57:24:58:5f:cb:
         15:62:c5:57:6b:f9:2e:5e:6c:ff:cb:91:c9:2b:05:4d:bd:ab:
         06:2b:2e:b0:ce:a4:33:49:d9:f1:aa:6d:43:63:6c:aa:f3:66:
         18:e9:75:59:9f:3e:7c:ab:31:44:22:65:c0:0c:98:13:6e:df:
         9f:25:4f:73:7b:53:2b:78:bc:f0:a3:22:d5:48:46:31:93:03:
         0a:2d:70:17:f5:64:bb:ab:56:66:01:88:1f:41:50:99:2a:55:
         7a:c8:10:f3:24:64:6f:2f:09:cf:69:b2:2f:73:fe:96:0c:2d:
         bb:89:c3:f4:45:7b:3d:20:99:cd:23:a7:97:cf:2a:e1:ff:0f:
         8e:fb:c6:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJMUoazXrO8jPMMIo/ywvjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxMTVmMTM0MWE4NzE0MGExMjJkYzhmOTY1MDJiNzI0NDkw
NTdlNjAwHhcNMjUwNjA3MDcwMDU2WhcNMjUwNjA4MDcwMDU2WjAzMTEwLwYDVQQD
EyhlMWU0MGM0OTc0NzcwODg4ZTFiN2Y3MTAwMjJlODNmYzU5YTBhZDAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslNrl57WDVWXM2GIGzlaBG1v7qR0
LQrRtL2+FXZs/7mX2hOvPUi+0FqIYWS3hKlEdbS4JYQanvDnWdx6NoVo4kZ0VNlB
7cik9CrGxkY0tjxqT+ZQQ87/aBVgZuLHP3hN0MCsww9b5tphi/BrXmso1Qva2zwq
aC4yj3w2OP/G6deHHZhsXqCpq7SFmWk1C4UMxV99xCuH1eTiio3aOsyqNpyDzXTs
eZFsXHer/MT5wcam1TgD7qO0xYTLllU7HUnbhs0lJ2hPUEq5Don/Ev6ATo+7Wo0x
XlPRYnQEEhQ+/RWd3qL6gesmuWd7RqfW2uGfYZ/6T3vlNwyBTeO45sFtlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOHkDEl0dwiI4bf3EAIug/xZoK0AMB8GA1UdIwQY
MBaAFMEV8TQahxQKEi3I+WUCtyRJBX5gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1JYeE5CcUhGQW9TTGNqNVpRSzNKRWtGZm1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9iNmFhOTYtYWE4Zi00ZmQ0LWI5ZTgt
MzczYTBkM2M0NTM0LzEvd1JYeE5CcUhGQW9TTGNqNVpRSzNKRWtGZm1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS9iNmFhOTYtYWE4Zi00ZmQ0LWI5ZTgtMzczYTBkM2M0NTM0
LzEvd1JYeE5CcUhGQW9TTGNqNVpRSzNKRWtGZm1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgG84mXIg
XfH36Gnc9rSvsj7BLHbxu7dh4huEaoU9pN8S1fZgOQA9+RulZXl0bVg/NHw4mxPj
gbG32Rxrc1RjaCg0PmSNL9AJx9NQ5+5u9D9Yx6VxNiAruxJb3FdoE0/K0RhN2aqn
Rh0YWWvFM2Cr++TV3Si3x3SGBFckWF/LFWLFV2v5Ll5s/8uRySsFTb2rBisusM6k
M0nZ8aptQ2NsqvNmGOl1WZ8+fKsxRCJlwAyYE27fnyVPc3tTK3i88KMi1UhGMZMD
Ci1wF/Vku6tWZgGIH0FQmSpVesgQ8yRkby8Jz2myL3P+lgwtu4nD9EV7PSCZzSOn
l88q4f8PjvvG6Q==
-----END CERTIFICATE-----
Generated at Sat Jun 7 13:54:17 2025 by rpki-client