Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/00314c-9660-4558-908b-399c10b3aac5/1/wADaNsWELOEw_QaJEuv8DGnnZgY.mft
File:                     wADaNsWELOEw_QaJEuv8DGnnZgY.mft (raw, json)
Hash identifier:          i+AK5pkMP9swW6XaY2qEe24wCdDoED3DBvP4BCIbVmQ=
Subject key identifier:   58:34:07:CA:9A:C0:52:B6:39:1C:83:18:56:33:B3:67:01:0F:A8:B1
Authority key identifier: C0:00:DA:36:C5:84:2C:E1:30:FD:06:89:12:EB:FC:0C:69:E7:66:06
Certificate issuer:       /CN=c000da36c5842ce130fd068912ebfc0c69e76606
Certificate serial:       01974B1F8A276132F78A50ED2FC662836021
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wADaNsWELOEw_QaJEuv8DGnnZgY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a8/00314c-9660-4558-908b-399c10b3aac5/1/wADaNsWELOEw_QaJEuv8DGnnZgY.mft
Manifest number:          0408
Signing time:             Sat 07 Jun 2025 16:00:47 +0000
Manifest this update:     Sat 07 Jun 2025 16:00:47 +0000
Manifest next update:     Sun 08 Jun 2025 16:00:47 +0000
Files and hashes:         1: YwPa7fIjOxU3w2nMuyLflIyituY.roa (hash: bzaGLCEsglB24IqcrTEilteAr5hqEsn8c1gGVkcmknA=)
                          2: wADaNsWELOEw_QaJEuv8DGnnZgY.crl (hash: VJZxSLj/Niybb1obcookY8eIbRuMnxRFOCGdDWuRBt0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a8/00314c-9660-4558-908b-399c10b3aac5/1/wADaNsWELOEw_QaJEuv8DGnnZgY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a8/00314c-9660-4558-908b-399c10b3aac5/1/wADaNsWELOEw_QaJEuv8DGnnZgY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wADaNsWELOEw_QaJEuv8DGnnZgY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 16:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:1f:8a:27:61:32:f7:8a:50:ed:2f:c6:62:83:60:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c000da36c5842ce130fd068912ebfc0c69e76606
        Validity
            Not Before: Jun  7 16:00:47 2025 GMT
            Not After : Jun  8 16:00:47 2025 GMT
        Subject: CN=583407ca9ac052b6391c83185633b367010fa8b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:ef:20:5d:4c:de:ea:52:7d:65:27:ee:eb:89:
                    93:db:87:97:f7:01:15:91:74:a3:c6:37:ec:75:8c:
                    5d:7c:6c:fa:46:4a:e4:b7:5a:1f:fc:4b:8f:86:9e:
                    9d:f6:64:cb:ba:0a:bf:2f:9d:09:b2:05:00:34:20:
                    9f:63:b8:df:f7:0f:1f:4f:ea:a9:14:07:8e:9b:05:
                    24:d5:cd:e1:b2:bd:94:ca:d3:64:6e:16:9f:40:14:
                    94:a9:03:0b:63:6d:c0:63:d6:77:53:b2:44:7b:c4:
                    78:5b:76:55:00:85:57:68:b2:42:a0:5f:ac:25:b0:
                    11:a5:9b:82:34:00:30:09:f1:92:4a:45:0f:0c:d7:
                    03:f7:70:c3:d4:2b:d7:c8:c3:41:d2:85:69:1d:c7:
                    83:d5:ba:c6:46:4d:41:f2:72:1e:7a:27:48:50:d7:
                    b7:dd:5d:25:33:96:8e:a1:a0:f9:f8:d7:fc:e7:94:
                    12:f6:7d:cb:e3:85:e7:5c:e8:df:a6:f1:2f:49:7b:
                    71:9c:da:da:a6:5d:b3:d1:14:40:d4:e0:7b:41:60:
                    64:9c:f3:c1:32:1a:ec:bc:bf:ed:4b:61:aa:e3:d0:
                    d8:c3:91:68:dd:87:58:43:d8:ad:ea:b7:d0:f1:f2:
                    00:f3:62:3e:3f:fb:75:1f:09:8c:36:7a:24:3d:c1:
                    25:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:34:07:CA:9A:C0:52:B6:39:1C:83:18:56:33:B3:67:01:0F:A8:B1
            X509v3 Authority Key Identifier:
                keyid:C0:00:DA:36:C5:84:2C:E1:30:FD:06:89:12:EB:FC:0C:69:E7:66:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wADaNsWELOEw_QaJEuv8DGnnZgY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/00314c-9660-4558-908b-399c10b3aac5/1/wADaNsWELOEw_QaJEuv8DGnnZgY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/00314c-9660-4558-908b-399c10b3aac5/1/wADaNsWELOEw_QaJEuv8DGnnZgY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:ba:84:1b:7b:69:03:e4:03:35:6c:02:34:6c:47:db:8e:7c:
         06:ef:fe:a4:d5:1e:6c:7c:2f:f8:32:6a:e0:c5:f7:4c:19:45:
         9e:42:f8:6e:a1:9d:5a:78:65:e0:ac:aa:07:a4:ba:8f:f9:f0:
         91:40:2e:ad:2b:21:8f:25:a9:43:9b:61:7a:b1:16:03:11:45:
         fd:b8:86:d8:5d:47:f2:42:95:45:0a:28:e2:79:b3:b8:a1:c5:
         09:cd:f2:ee:df:7c:e8:ca:37:63:c7:78:12:37:f0:b7:c9:57:
         2b:58:94:10:c4:dd:fe:d8:d6:bb:c7:00:2b:77:44:68:38:69:
         95:e6:c0:4f:86:c6:45:af:c8:1c:84:de:c0:a4:a5:5d:a6:59:
         80:51:d6:b7:44:f6:a9:f9:6d:bb:24:37:cd:95:6c:5c:cf:1f:
         f5:26:c4:28:e9:22:51:5b:fe:d2:c5:25:73:5c:52:0a:71:d8:
         c9:86:fd:2f:f3:0d:64:f0:dd:5a:81:07:d2:f4:17:fa:57:4a:
         4e:22:a3:ac:64:17:b3:e5:e1:a8:54:3c:d5:7a:6c:ae:8b:87:
         c7:ea:18:00:04:61:4f:5b:c4:e5:51:06:51:06:02:a5:99:59:
         62:b0:fd:5a:14:97:b6:c5:e2:c8:de:41:5d:5f:5c:df:e1:01:
         83:7b:71:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdLH4onYTL3ilDtL8Zig2AhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwMDBkYTM2YzU4NDJjZTEzMGZkMDY4OTEyZWJmYzBjNjll
NzY2MDYwHhcNMjUwNjA3MTYwMDQ3WhcNMjUwNjA4MTYwMDQ3WjAzMTEwLwYDVQQD
Eyg1ODM0MDdjYTlhYzA1MmI2MzkxYzgzMTg1NjMzYjM2NzAxMGZhOGIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3u8gXUze6lJ9ZSfu64mT24eX9wEV
kXSjxjfsdYxdfGz6Rkrkt1of/EuPhp6d9mTLugq/L50JsgUANCCfY7jf9w8fT+qp
FAeOmwUk1c3hsr2UytNkbhafQBSUqQMLY23AY9Z3U7JEe8R4W3ZVAIVXaLJCoF+s
JbARpZuCNAAwCfGSSkUPDNcD93DD1CvXyMNB0oVpHceD1brGRk1B8nIeeidIUNe3
3V0lM5aOoaD5+Nf855QS9n3L44XnXOjfpvEvSXtxnNrapl2z0RRA1OB7QWBknPPB
MhrsvL/tS2Gq49DYw5Fo3YdYQ9it6rfQ8fIA82I+P/t1HwmMNnokPcEluwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFg0B8qawFK2ORyDGFYzs2cBD6ixMB8GA1UdIwQY
MBaAFMAA2jbFhCzhMP0GiRLr/Axp52YGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0FEYU5zV0VMT0V3X1FhSkV1djhER25uWmdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC8wMDMxNGMtOTY2MC00NTU4LTkwOGIt
Mzk5YzEwYjNhYWM1LzEvd0FEYU5zV0VMT0V3X1FhSkV1djhER25uWmdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC8wMDMxNGMtOTY2MC00NTU4LTkwOGItMzk5YzEwYjNhYWM1
LzEvd0FEYU5zV0VMT0V3X1FhSkV1djhER25uWmdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI7qEG3tp
A+QDNWwCNGxH2458Bu/+pNUebHwv+DJq4MX3TBlFnkL4bqGdWnhl4KyqB6S6j/nw
kUAurSshjyWpQ5therEWAxFF/biG2F1H8kKVRQoo4nmzuKHFCc3y7t986Mo3Y8d4
Ejfwt8lXK1iUEMTd/tjWu8cAK3dEaDhplebAT4bGRa/IHITewKSlXaZZgFHWt0T2
qfltuyQ3zZVsXM8f9SbEKOkiUVv+0sUlc1xSCnHYyYb9L/MNZPDdWoEH0vQX+ldK
TiKjrGQXs+XhqFQ81XpsrouHx+oYAARhT1vE5VEGUQYCpZlZYrD9WhSXtsXiyN5B
XV9c3+EBg3tx3g==
-----END CERTIFICATE-----
Generated at Sat Jun 7 23:33:00 2025 by rpki-client