Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/7a0b3f-8942-4d47-86dc-7c2d409ac89a/1/wAVeMuzXcq4oA6TDVtd2h4fnLiA.mft
File:                     wAVeMuzXcq4oA6TDVtd2h4fnLiA.mft (raw, json)
Hash identifier:          O5tOelNc7E2O9DzR8qaTXLG1+LCGjp37siuohRqbiTI=
Subject key identifier:   BF:7C:B6:03:54:CE:5D:44:07:AC:87:3E:EE:8D:2E:A9:71:19:90:44
Authority key identifier: C0:05:5E:32:EC:D7:72:AE:28:03:A4:C3:56:D7:76:87:87:E7:2E:20
Certificate issuer:       /CN=c0055e32ecd772ae2803a4c356d7768787e72e20
Certificate serial:       0197469E475E8FDD4743D528C50D2DAEE3B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wAVeMuzXcq4oA6TDVtd2h4fnLiA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/7a0b3f-8942-4d47-86dc-7c2d409ac89a/1/wAVeMuzXcq4oA6TDVtd2h4fnLiA.mft
Manifest number:          1024
Signing time:             Fri 06 Jun 2025 19:01:07 +0000
Manifest this update:     Fri 06 Jun 2025 19:01:07 +0000
Manifest next update:     Sat 07 Jun 2025 19:01:07 +0000
Files and hashes:         1: wAVeMuzXcq4oA6TDVtd2h4fnLiA.crl (hash: oZL834FOWEIF14nce37sqxos2m/KNV8aUrU+vQcPmq0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/7a0b3f-8942-4d47-86dc-7c2d409ac89a/1/wAVeMuzXcq4oA6TDVtd2h4fnLiA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/7a0b3f-8942-4d47-86dc-7c2d409ac89a/1/wAVeMuzXcq4oA6TDVtd2h4fnLiA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wAVeMuzXcq4oA6TDVtd2h4fnLiA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:9e:47:5e:8f:dd:47:43:d5:28:c5:0d:2d:ae:e3:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0055e32ecd772ae2803a4c356d7768787e72e20
        Validity
            Not Before: Jun  6 19:01:07 2025 GMT
            Not After : Jun  7 19:01:07 2025 GMT
        Subject: CN=bf7cb60354ce5d4407ac873eee8d2ea971199044
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ec:eb:03:83:c5:d6:bb:9b:e5:57:c6:ff:a1:
                    eb:67:bb:c7:20:77:56:27:1f:d6:fe:fe:07:70:0a:
                    78:3a:9c:b3:dd:b7:72:8b:5d:ee:7a:eb:fe:99:10:
                    65:c1:77:e4:d3:f2:05:17:e7:15:48:5b:4a:92:48:
                    be:02:07:fe:79:13:1f:9b:61:22:dc:77:18:2f:6a:
                    1e:d6:1d:db:8c:52:21:8c:1c:16:40:b0:97:2a:db:
                    41:ff:8e:4c:08:23:56:c3:9b:26:05:7e:36:02:2c:
                    84:84:82:24:1d:66:4f:b0:3d:99:fa:78:83:df:a6:
                    25:75:fd:8a:9d:e4:32:38:b8:58:d9:cc:d5:8f:47:
                    f3:b6:04:03:5c:c3:54:a7:ad:0d:ba:97:09:72:5d:
                    76:9a:70:5b:01:cb:a5:e6:e2:ad:df:cd:4e:f9:01:
                    c7:d7:c6:31:e3:bc:db:0f:7b:ec:f3:1d:2f:1a:bf:
                    d2:ad:d2:dc:cf:dd:40:50:58:01:0f:1d:36:04:b7:
                    37:5d:74:9e:98:78:83:73:7c:71:ec:8d:4a:61:5b:
                    68:76:d4:7b:07:ee:6f:9b:8f:ce:25:49:ca:0a:5c:
                    54:c7:e9:0e:ed:d7:21:cb:76:66:f5:c6:24:12:50:
                    68:6e:6f:5c:de:87:f5:7d:bc:a1:a2:08:77:a7:73:
                    64:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:7C:B6:03:54:CE:5D:44:07:AC:87:3E:EE:8D:2E:A9:71:19:90:44
            X509v3 Authority Key Identifier:
                keyid:C0:05:5E:32:EC:D7:72:AE:28:03:A4:C3:56:D7:76:87:87:E7:2E:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wAVeMuzXcq4oA6TDVtd2h4fnLiA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/7a0b3f-8942-4d47-86dc-7c2d409ac89a/1/wAVeMuzXcq4oA6TDVtd2h4fnLiA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/7a0b3f-8942-4d47-86dc-7c2d409ac89a/1/wAVeMuzXcq4oA6TDVtd2h4fnLiA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:d7:4a:6a:d1:5b:16:18:49:88:91:b0:66:02:47:61:31:34:
         58:c3:6e:30:7c:ac:77:59:14:7a:59:db:14:53:3b:ee:36:80:
         a0:4e:fc:12:03:b9:73:6a:c5:16:0d:0a:99:e6:3b:44:c5:f3:
         bb:f9:25:6b:ee:07:2d:a3:cf:02:06:24:51:79:09:85:18:e6:
         76:29:7b:4e:b7:d6:24:ae:2a:c6:1d:de:5d:f6:e5:ea:da:6e:
         8d:0b:4c:e4:8c:e1:1d:2f:45:f1:bd:f9:6b:7a:29:d0:57:75:
         a7:65:73:f9:d1:df:98:ee:cf:f6:71:eb:e4:a5:f8:1d:df:1d:
         d5:64:e0:b0:da:de:ca:ac:04:72:47:c6:c5:c8:32:81:d9:92:
         a5:88:86:f4:df:a0:40:03:f8:e4:d0:f2:58:0c:cc:fc:a5:12:
         ea:76:ee:bb:48:c3:82:6d:3c:ca:f6:ad:cb:0e:1a:78:36:49:
         65:69:ec:62:8b:e9:89:ba:d3:2a:93:2c:a9:5b:ea:71:a3:a5:
         de:ef:71:44:e3:1b:6c:16:92:e9:39:88:2f:07:db:35:aa:f3:
         31:93:d8:ed:b6:79:f8:8a:83:06:4b:60:ec:03:ab:ac:15:22:
         0a:20:5c:a2:37:86:db:33:74:66:81:9e:fe:3d:ee:c1:27:cb:
         c1:cc:fe:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdGnkdej91HQ9UoxQ0truO1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwMDU1ZTMyZWNkNzcyYWUyODAzYTRjMzU2ZDc3Njg3ODdl
NzJlMjAwHhcNMjUwNjA2MTkwMTA3WhcNMjUwNjA3MTkwMTA3WjAzMTEwLwYDVQQD
EyhiZjdjYjYwMzU0Y2U1ZDQ0MDdhYzg3M2VlZThkMmVhOTcxMTk5MDQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsezrA4PF1rub5VfG/6HrZ7vHIHdW
Jx/W/v4HcAp4Opyz3bdyi13ueuv+mRBlwXfk0/IFF+cVSFtKkki+Agf+eRMfm2Ei
3HcYL2oe1h3bjFIhjBwWQLCXKttB/45MCCNWw5smBX42AiyEhIIkHWZPsD2Z+niD
36Yldf2KneQyOLhY2czVj0fztgQDXMNUp60NupcJcl12mnBbAcul5uKt381O+QHH
18Yx47zbD3vs8x0vGr/SrdLcz91AUFgBDx02BLc3XXSemHiDc3xx7I1KYVtodtR7
B+5vm4/OJUnKClxUx+kO7dchy3Zm9cYkElBobm9c3of1fbyhogh3p3NkeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL98tgNUzl1EB6yHPu6NLqlxGZBEMB8GA1UdIwQY
MBaAFMAFXjLs13KuKAOkw1bXdoeH5y4gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0FWZU11elhjcTRvQTZURFZ0ZDJoNGZuTGlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS83YTBiM2YtODk0Mi00ZDQ3LTg2ZGMt
N2MyZDQwOWFjODlhLzEvd0FWZU11elhjcTRvQTZURFZ0ZDJoNGZuTGlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS83YTBiM2YtODk0Mi00ZDQ3LTg2ZGMtN2MyZDQwOWFjODlh
LzEvd0FWZU11elhjcTRvQTZURFZ0ZDJoNGZuTGlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjddKatFb
FhhJiJGwZgJHYTE0WMNuMHysd1kUelnbFFM77jaAoE78EgO5c2rFFg0KmeY7RMXz
u/kla+4HLaPPAgYkUXkJhRjmdil7TrfWJK4qxh3eXfbl6tpujQtM5IzhHS9F8b35
a3op0Fd1p2Vz+dHfmO7P9nHr5KX4Hd8d1WTgsNreyqwEckfGxcgygdmSpYiG9N+g
QAP45NDyWAzM/KUS6nbuu0jDgm08yvatyw4aeDZJZWnsYovpibrTKpMsqVvqcaOl
3u9xROMbbBaS6TmILwfbNarzMZPY7bZ5+IqDBktg7AOrrBUiCiBcojeG2zN0ZoGe
/j3uwSfLwcz+LQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 01:23:53 2025 by rpki-client