Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/dc430d-3779-4989-b872-33644059e866/1/Wq93TsnCcwJusRfkjnP-9CiN3sg.mft
File:                     Wq93TsnCcwJusRfkjnP-9CiN3sg.mft (raw, json)
Hash identifier:          TaVe2lhaeZnGP1jtEIDRmeEPo375IqJAMov7sVWpJF8=
Subject key identifier:   08:19:6B:98:50:D5:6F:A4:34:8B:91:5A:2B:EE:F8:60:E5:D3:AF:DE
Authority key identifier: 5A:AF:77:4E:C9:C2:73:02:6E:B1:17:E4:8E:73:FE:F4:28:8D:DE:C8
Certificate issuer:       /CN=5aaf774ec9c273026eb117e48e73fef4288ddec8
Certificate serial:       01975A5B8554E35DB0B93F3E75B5F4C34137
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wq93TsnCcwJusRfkjnP-9CiN3sg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/dc430d-3779-4989-b872-33644059e866/1/Wq93TsnCcwJusRfkjnP-9CiN3sg.mft
Manifest number:          1587
Signing time:             Tue 10 Jun 2025 15:00:36 +0000
Manifest this update:     Tue 10 Jun 2025 15:00:36 +0000
Manifest next update:     Wed 11 Jun 2025 15:00:36 +0000
Files and hashes:         1: 1-hXj5YRn-WVx35eduoI7efVZjNc.roa (hash: g7NKwujdPr7Nz8jyHPpB050pI0MnKX60Je4aNLZ7Vwc=)
                          2: Wq93TsnCcwJusRfkjnP-9CiN3sg.crl (hash: aJxWZERitH5fNECdYGhmadWCJxD5iOQGIeN6WNdUffs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9e/dc430d-3779-4989-b872-33644059e866/1/Wq93TsnCcwJusRfkjnP-9CiN3sg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9e/dc430d-3779-4989-b872-33644059e866/1/Wq93TsnCcwJusRfkjnP-9CiN3sg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Wq93TsnCcwJusRfkjnP-9CiN3sg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 11 Jun 2025 14:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5a:5b:85:54:e3:5d:b0:b9:3f:3e:75:b5:f4:c3:41:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5aaf774ec9c273026eb117e48e73fef4288ddec8
        Validity
            Not Before: Jun 10 15:00:36 2025 GMT
            Not After : Jun 11 15:00:36 2025 GMT
        Subject: CN=08196b9850d56fa4348b915a2beef860e5d3afde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d5:ea:f1:15:f6:3e:02:4e:fe:d8:64:51:b6:
                    5d:76:d9:fd:77:11:1c:a8:7f:a3:5a:5e:71:ad:65:
                    3d:43:6f:98:4a:35:b0:98:98:01:81:45:f1:f1:9f:
                    9f:22:67:c7:1b:aa:dd:5a:95:96:7f:ad:9c:8a:b9:
                    c6:a4:5f:f8:61:96:74:b5:4f:2d:1a:bd:4c:fd:d3:
                    7e:88:33:ce:16:fd:b6:97:a5:63:88:72:72:52:06:
                    60:4c:82:09:82:35:39:5a:cb:cb:a2:07:94:50:46:
                    43:29:bd:21:fa:01:a8:87:a2:14:7b:ad:01:b3:c9:
                    8a:12:e4:a4:83:5d:cd:dd:52:5e:fb:7c:96:bf:e3:
                    15:d0:27:95:e0:c5:80:a5:b4:20:83:bb:b1:ce:6e:
                    76:64:8a:db:d2:ab:91:25:e8:95:4a:9d:14:d9:7a:
                    3d:43:45:73:66:2d:41:9e:24:48:0a:56:db:0d:9b:
                    77:28:16:c8:b1:b9:ea:cd:15:40:af:08:ef:f1:56:
                    0d:a4:5f:69:a4:32:30:be:5a:52:1a:25:90:5c:7a:
                    c3:02:6b:9c:b3:a8:6a:c2:06:a7:28:91:39:a3:d1:
                    ce:29:82:2d:b8:0f:fe:43:29:7d:27:86:f0:96:8e:
                    4c:11:4c:9f:4b:12:43:b5:de:e6:fb:4c:3d:d1:0f:
                    3a:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:19:6B:98:50:D5:6F:A4:34:8B:91:5A:2B:EE:F8:60:E5:D3:AF:DE
            X509v3 Authority Key Identifier:
                keyid:5A:AF:77:4E:C9:C2:73:02:6E:B1:17:E4:8E:73:FE:F4:28:8D:DE:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wq93TsnCcwJusRfkjnP-9CiN3sg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/dc430d-3779-4989-b872-33644059e866/1/Wq93TsnCcwJusRfkjnP-9CiN3sg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/dc430d-3779-4989-b872-33644059e866/1/Wq93TsnCcwJusRfkjnP-9CiN3sg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:02:af:6d:a4:66:73:ce:28:34:bf:fc:61:49:d6:fb:04:01:
         ad:92:4e:33:ba:a7:32:c5:e9:f2:7c:ce:6e:e1:e7:cc:38:b2:
         82:6f:f4:8f:12:c8:78:df:4b:76:ba:bd:76:50:cb:4d:56:6d:
         2b:73:cc:98:7e:3f:0f:7a:7f:7e:1b:fe:04:8b:9a:e4:e9:b9:
         c2:2b:f6:42:e8:60:8e:6c:cc:e8:f9:17:11:4a:41:66:ea:b2:
         97:22:0c:3d:c3:2b:34:86:c0:e3:36:ec:bd:cf:a5:1e:34:32:
         f7:8c:93:dd:c1:f4:ec:cb:9f:c8:2a:63:68:bf:96:fa:30:5d:
         4d:42:f6:e4:f5:6b:16:5e:23:4f:12:53:7d:9d:65:dd:23:72:
         68:b1:06:cc:44:f8:8b:fb:f7:ea:c4:a6:c8:d5:bf:4c:90:a9:
         d3:e3:83:d5:e1:aa:4c:6c:a1:f4:74:2a:91:2b:9d:9c:e9:9e:
         bf:26:cb:72:96:3d:d5:af:1d:6f:0b:bd:fc:7a:3d:03:63:ef:
         51:11:db:ba:ba:bf:dd:70:8f:47:aa:17:f6:cc:0b:f6:57:a8:
         55:26:3e:fa:3f:0b:f8:30:90:1d:d2:8f:27:0a:ed:8e:68:25:
         eb:1f:ba:db:30:83:9a:12:a0:99:2d:c0:79:20:1f:a4:d7:28:
         ab:65:56:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdaW4VU412wuT8+dbX0w0E3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhYWY3NzRlYzljMjczMDI2ZWIxMTdlNDhlNzNmZWY0Mjg4
ZGRlYzgwHhcNMjUwNjEwMTUwMDM2WhcNMjUwNjExMTUwMDM2WjAzMTEwLwYDVQQD
EygwODE5NmI5ODUwZDU2ZmE0MzQ4YjkxNWEyYmVlZjg2MGU1ZDNhZmRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtXq8RX2PgJO/thkUbZddtn9dxEc
qH+jWl5xrWU9Q2+YSjWwmJgBgUXx8Z+fImfHG6rdWpWWf62cirnGpF/4YZZ0tU8t
Gr1M/dN+iDPOFv22l6VjiHJyUgZgTIIJgjU5WsvLogeUUEZDKb0h+gGoh6IUe60B
s8mKEuSkg13N3VJe+3yWv+MV0CeV4MWApbQgg7uxzm52ZIrb0quRJeiVSp0U2Xo9
Q0VzZi1BniRIClbbDZt3KBbIsbnqzRVArwjv8VYNpF9ppDIwvlpSGiWQXHrDAmuc
s6hqwganKJE5o9HOKYItuA/+Qyl9J4bwlo5MEUyfSxJDtd7m+0w90Q86VQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAgZa5hQ1W+kNIuRWivu+GDl06/eMB8GA1UdIwQY
MBaAFFqvd07JwnMCbrEX5I5z/vQojd7IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3E5M1RzbkNjd0p1c1Jma2puUC05Q2lOM3NnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9kYzQzMGQtMzc3OS00OTg5LWI4NzIt
MzM2NDQwNTllODY2LzEvV3E5M1RzbkNjd0p1c1Jma2puUC05Q2lOM3NnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS9kYzQzMGQtMzc3OS00OTg5LWI4NzItMzM2NDQwNTllODY2
LzEvV3E5M1RzbkNjd0p1c1Jma2puUC05Q2lOM3NnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWwKvbaRm
c84oNL/8YUnW+wQBrZJOM7qnMsXp8nzObuHnzDiygm/0jxLIeN9Ldrq9dlDLTVZt
K3PMmH4/D3p/fhv+BIua5Om5wiv2QuhgjmzM6PkXEUpBZuqylyIMPcMrNIbA4zbs
vc+lHjQy94yT3cH07MufyCpjaL+W+jBdTUL25PVrFl4jTxJTfZ1l3SNyaLEGzET4
i/v36sSmyNW/TJCp0+OD1eGqTGyh9HQqkSudnOmevybLcpY91a8dbwu9/Ho9A2Pv
URHburq/3XCPR6oX9swL9leoVSY++j8L+DCQHdKPJwrtjmgl6x+62zCDmhKgmS3A
eSAfpNcoq2VW5Q==
-----END CERTIFICATE-----
Generated at Tue Jun 10 22:31:38 2025 by rpki-client