Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/6555e3-82f6-46ca-a170-48f77ee85ab9/1/W8mmyFynpWV7noroCGXRLvgWagM.mft
File:                     W8mmyFynpWV7noroCGXRLvgWagM.mft (raw, json)
Hash identifier:          qVQcGpCIkb9xGhUAJtM3CJBdShsMlpy1hwB24mHgIPc=
Subject key identifier:   27:33:23:B5:8E:0D:EF:AD:F1:FA:82:76:1B:43:0D:16:70:4B:93:76
Authority key identifier: 5B:C9:A6:C8:5C:A7:A5:65:7B:9E:8A:E8:08:65:D1:2E:F8:16:6A:03
Certificate issuer:       /CN=5bc9a6c85ca7a5657b9e8ae80865d12ef8166a03
Certificate serial:       019653EE5529D3704B276667EC4DC941138F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W8mmyFynpWV7noroCGXRLvgWagM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/6555e3-82f6-46ca-a170-48f77ee85ab9/1/W8mmyFynpWV7noroCGXRLvgWagM.mft
Manifest number:          0B44
Signing time:             Sun 20 Apr 2025 16:00:50 +0000
Manifest this update:     Sun 20 Apr 2025 16:00:50 +0000
Manifest next update:     Mon 21 Apr 2025 16:00:50 +0000
Files and hashes:         1: DkAig3sreL5BEr4m7B4017Dqunc.roa (hash: os6hbiNRGL8Q/b1fbO8kbiQWOa/7AJzjZXaqV/37DEw=)
                          2: W8mmyFynpWV7noroCGXRLvgWagM.crl (hash: 7grNjpxinRXPZIWBe35hECw/xdz6OSYfcKgYXAiR4a4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/6555e3-82f6-46ca-a170-48f77ee85ab9/1/W8mmyFynpWV7noroCGXRLvgWagM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/6555e3-82f6-46ca-a170-48f77ee85ab9/1/W8mmyFynpWV7noroCGXRLvgWagM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W8mmyFynpWV7noroCGXRLvgWagM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Apr 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:53:ee:55:29:d3:70:4b:27:66:67:ec:4d:c9:41:13:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5bc9a6c85ca7a5657b9e8ae80865d12ef8166a03
        Validity
            Not Before: Apr 20 16:00:50 2025 GMT
            Not After : Apr 21 16:00:50 2025 GMT
        Subject: CN=273323b58e0defadf1fa82761b430d16704b9376
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:bf:9d:b4:f8:1a:e7:5e:5a:4e:31:52:eb:a3:
                    6e:1e:c8:33:a9:4b:d1:58:8f:ab:bf:1c:12:55:ca:
                    60:7f:2d:10:66:cc:02:2d:fc:6d:90:20:5d:ee:d3:
                    b9:1a:ac:98:0d:e9:de:dd:b0:05:99:ea:fe:94:d1:
                    50:10:c1:fc:2d:18:74:33:06:a9:5e:6e:56:4a:db:
                    4f:5a:c1:d2:b5:ff:b9:ef:a0:e8:70:4b:90:11:17:
                    63:89:fb:a1:4b:4f:19:14:3f:3c:bb:18:79:a0:20:
                    be:1b:00:7b:3c:c7:c5:88:7a:7b:89:26:66:1b:9d:
                    70:71:4c:2d:77:d0:e9:a3:80:ba:1c:8c:0b:23:82:
                    d5:d6:73:30:92:19:af:4a:f3:ff:0f:97:88:08:04:
                    93:65:ff:e0:c0:94:a5:42:f5:05:19:47:86:ff:f6:
                    b6:62:a1:08:0e:35:39:ff:73:af:91:ab:41:82:87:
                    ef:93:37:a9:66:5f:bb:be:f1:ca:cd:01:6b:91:30:
                    c4:75:6d:a4:aa:bf:ce:89:d6:0f:85:0c:dc:7a:6b:
                    ec:3e:47:92:36:d5:f2:d0:f4:45:77:39:dd:11:3f:
                    3c:01:e7:43:57:b3:4e:05:24:ab:26:28:82:76:11:
                    85:89:c9:7e:bf:b7:6c:34:df:b4:5c:f1:b3:b8:4d:
                    a1:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:33:23:B5:8E:0D:EF:AD:F1:FA:82:76:1B:43:0D:16:70:4B:93:76
            X509v3 Authority Key Identifier:
                keyid:5B:C9:A6:C8:5C:A7:A5:65:7B:9E:8A:E8:08:65:D1:2E:F8:16:6A:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W8mmyFynpWV7noroCGXRLvgWagM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/6555e3-82f6-46ca-a170-48f77ee85ab9/1/W8mmyFynpWV7noroCGXRLvgWagM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/6555e3-82f6-46ca-a170-48f77ee85ab9/1/W8mmyFynpWV7noroCGXRLvgWagM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:6c:db:b5:53:32:58:75:15:ea:06:3d:96:8b:ae:57:a0:77:
         b9:09:75:df:5b:ab:ca:04:70:84:6f:e7:13:78:49:e9:d5:1b:
         59:0b:ef:09:99:eb:dd:7c:b9:11:b5:75:04:cf:94:61:7c:64:
         d0:83:81:99:9d:58:ce:7e:7e:08:fa:70:2e:ea:ed:08:5b:bb:
         ec:13:01:58:75:40:cd:14:1c:2d:17:f0:a2:ac:58:5b:60:01:
         f1:a5:57:81:c0:cf:c6:54:7b:c8:e2:3e:d9:8c:52:1e:26:95:
         bf:40:1c:ca:1a:0a:97:1b:7b:f5:44:92:28:46:a4:93:12:f8:
         b9:54:16:2e:7a:86:a2:d6:f0:be:d7:23:b9:4a:87:9d:e6:65:
         d1:a3:93:c0:fe:e0:4d:cf:36:63:c9:08:b1:20:17:ec:86:91:
         2c:b0:8d:02:cc:45:f3:64:e2:89:a8:c1:66:e2:65:50:29:a8:
         30:e6:86:27:19:49:70:1f:55:00:9a:42:a7:cd:fb:9a:78:5d:
         f2:c1:2e:09:2f:5a:c4:86:a6:a4:d0:50:cd:01:41:3a:16:29:
         75:01:98:96:8a:c0:8d:2d:75:c1:b3:af:1e:f7:25:ab:c3:81:
         75:1a:ae:62:2a:7c:5a:c8:bb:2f:3f:70:66:db:9b:32:d7:ba:
         b9:89:f7:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZT7lUp03BLJ2Zn7E3JQROPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViYzlhNmM4NWNhN2E1NjU3YjllOGFlODA4NjVkMTJlZjgx
NjZhMDMwHhcNMjUwNDIwMTYwMDUwWhcNMjUwNDIxMTYwMDUwWjAzMTEwLwYDVQQD
EygyNzMzMjNiNThlMGRlZmFkZjFmYTgyNzYxYjQzMGQxNjcwNGI5Mzc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzb+dtPga515aTjFS66NuHsgzqUvR
WI+rvxwSVcpgfy0QZswCLfxtkCBd7tO5GqyYDene3bAFmer+lNFQEMH8LRh0Mwap
Xm5WSttPWsHStf+576DocEuQERdjifuhS08ZFD88uxh5oCC+GwB7PMfFiHp7iSZm
G51wcUwtd9Dpo4C6HIwLI4LV1nMwkhmvSvP/D5eICASTZf/gwJSlQvUFGUeG//a2
YqEIDjU5/3OvkatBgofvkzepZl+7vvHKzQFrkTDEdW2kqr/OidYPhQzcemvsPkeS
NtXy0PRFdzndET88AedDV7NOBSSrJiiCdhGFicl+v7dsNN+0XPGzuE2huQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCczI7WODe+t8fqCdhtDDRZwS5N2MB8GA1UdIwQY
MBaAFFvJpshcp6Vle56K6Ahl0S74FmoDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzhtbXlGeW5wV1Y3bm9yb0NHWFJMdmdXYWdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS82NTU1ZTMtODJmNi00NmNhLWExNzAt
NDhmNzdlZTg1YWI5LzEvVzhtbXlGeW5wV1Y3bm9yb0NHWFJMdmdXYWdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS82NTU1ZTMtODJmNi00NmNhLWExNzAtNDhmNzdlZTg1YWI5
LzEvVzhtbXlGeW5wV1Y3bm9yb0NHWFJMdmdXYWdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATGzbtVMy
WHUV6gY9louuV6B3uQl131urygRwhG/nE3hJ6dUbWQvvCZnr3Xy5EbV1BM+UYXxk
0IOBmZ1Yzn5+CPpwLurtCFu77BMBWHVAzRQcLRfwoqxYW2AB8aVXgcDPxlR7yOI+
2YxSHiaVv0AcyhoKlxt79USSKEakkxL4uVQWLnqGotbwvtcjuUqHneZl0aOTwP7g
Tc82Y8kIsSAX7IaRLLCNAsxF82TiiajBZuJlUCmoMOaGJxlJcB9VAJpCp837mnhd
8sEuCS9axIampNBQzQFBOhYpdQGYlorAjS11wbOvHvclq8OBdRquYip8Wsi7Lz9w
ZtubMte6uYn3+Q==
-----END CERTIFICATE-----
Generated at Sun Apr 20 21:15:40 2025 by rpki-client