Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/04a0f2-9b24-4491-b9ad-30fc6baf85f5/1/wTqNfjVJ-t9WtOg_pJwWtzyZQLU.mft
File:                     wTqNfjVJ-t9WtOg_pJwWtzyZQLU.mft (raw, json)
Hash identifier:          A6Wos1tHajGtDa9byEoLip0D2WzjzB3DGhxhoTcwwsY=
Subject key identifier:   33:BD:7A:A7:1B:07:E8:33:35:C7:62:64:C1:F3:F6:04:43:45:27:65
Authority key identifier: C1:3A:8D:7E:35:49:FA:DF:56:B4:E8:3F:A4:9C:16:B7:3C:99:40:B5
Certificate issuer:       /CN=c13a8d7e3549fadf56b4e83fa49c16b73c9940b5
Certificate serial:       0196496A79360F1D952B4BE72FF2574447FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wTqNfjVJ-t9WtOg_pJwWtzyZQLU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/04a0f2-9b24-4491-b9ad-30fc6baf85f5/1/wTqNfjVJ-t9WtOg_pJwWtzyZQLU.mft
Manifest number:          14F5
Signing time:             Fri 18 Apr 2025 15:00:36 +0000
Manifest this update:     Fri 18 Apr 2025 15:00:36 +0000
Manifest next update:     Sat 19 Apr 2025 15:00:36 +0000
Files and hashes:         1: _As1hISE4fUwVCAvs0BVnXhQCD4.roa (hash: zJ5RP70+pw8LBg5tY/zUbPYLP4843KODSCoOJ4Zx6TY=)
                          2: wTqNfjVJ-t9WtOg_pJwWtzyZQLU.crl (hash: FSPWZHQkOCWrihFbSjbtEVEzRDu2gTNf7XrFlU5g4Ao=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/04a0f2-9b24-4491-b9ad-30fc6baf85f5/1/wTqNfjVJ-t9WtOg_pJwWtzyZQLU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/04a0f2-9b24-4491-b9ad-30fc6baf85f5/1/wTqNfjVJ-t9WtOg_pJwWtzyZQLU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wTqNfjVJ-t9WtOg_pJwWtzyZQLU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Apr 2025 15:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:49:6a:79:36:0f:1d:95:2b:4b:e7:2f:f2:57:44:47:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c13a8d7e3549fadf56b4e83fa49c16b73c9940b5
        Validity
            Not Before: Apr 18 15:00:36 2025 GMT
            Not After : Apr 19 15:00:36 2025 GMT
        Subject: CN=33bd7aa71b07e83335c76264c1f3f60443452765
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:dd:5b:1d:34:f1:08:d3:76:48:27:5c:b4:92:
                    28:d8:27:a7:99:86:df:3b:97:14:df:6b:a1:a7:81:
                    84:d8:c4:b9:79:d2:2a:96:b2:a0:55:4f:58:0c:31:
                    2c:74:ff:63:1d:f7:9b:84:08:59:69:85:58:75:1a:
                    53:36:29:41:c7:12:48:4a:44:1d:03:a7:fd:33:a9:
                    68:e1:2e:29:3b:e1:66:32:45:97:c8:54:81:d6:69:
                    1c:56:e3:14:e0:b2:db:63:e4:9f:85:3e:1f:9a:c4:
                    cf:9d:7f:62:b9:81:a1:e2:2c:29:83:2f:4a:89:1e:
                    54:21:bd:5c:f7:84:0e:b8:fe:fc:48:59:c6:77:55:
                    86:3b:c5:1a:49:eb:aa:6a:6e:20:6b:4b:24:bb:c3:
                    60:be:81:d1:21:6d:3a:00:b5:52:93:3a:1a:aa:25:
                    3f:c4:e7:37:0d:c5:c9:9b:20:31:9b:3e:24:6b:f9:
                    0d:cc:20:4f:71:7e:13:f7:66:dd:87:47:87:dc:be:
                    3b:c5:96:10:54:0e:95:4e:84:96:3d:7c:ed:92:77:
                    62:89:a3:9b:fb:33:8e:4a:8f:fd:26:45:e5:24:b1:
                    ce:61:ce:ac:06:d1:80:9e:f4:10:b8:33:ac:fa:6c:
                    1f:3a:c0:85:bf:45:3a:0c:ff:76:6c:b4:c7:3f:b4:
                    1c:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:BD:7A:A7:1B:07:E8:33:35:C7:62:64:C1:F3:F6:04:43:45:27:65
            X509v3 Authority Key Identifier:
                keyid:C1:3A:8D:7E:35:49:FA:DF:56:B4:E8:3F:A4:9C:16:B7:3C:99:40:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wTqNfjVJ-t9WtOg_pJwWtzyZQLU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/04a0f2-9b24-4491-b9ad-30fc6baf85f5/1/wTqNfjVJ-t9WtOg_pJwWtzyZQLU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/04a0f2-9b24-4491-b9ad-30fc6baf85f5/1/wTqNfjVJ-t9WtOg_pJwWtzyZQLU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:b4:7a:23:15:95:59:02:ba:e9:35:d8:07:04:ce:aa:fd:16:
         4d:3d:a4:33:a9:b5:59:76:35:5e:4e:74:69:aa:22:95:fc:4a:
         1e:25:f2:bf:17:dd:b0:0b:b7:f6:53:cd:54:98:6a:c8:ab:d1:
         71:6d:50:12:09:3b:c1:6e:59:73:7c:8f:f9:d6:57:af:35:8d:
         ad:53:e9:26:4c:26:19:11:9b:ca:81:e7:dc:f6:00:66:4f:10:
         24:12:ad:f2:b4:7d:71:65:66:c1:f8:0d:21:46:8f:78:3a:c7:
         53:4b:47:29:d3:9b:b0:7e:09:e3:80:87:2f:0e:96:61:d9:d1:
         9b:70:f7:fa:77:5f:b2:4f:42:9c:f1:b5:9d:4a:52:fc:06:5d:
         ea:8a:cd:49:cf:27:52:24:36:03:7e:ed:f5:84:0b:7f:52:10:
         62:ae:0d:92:49:56:ed:df:59:a6:7d:e7:f8:74:fa:e0:d0:1b:
         35:33:d9:84:cb:0a:af:57:b7:df:c7:d2:c1:5c:6e:45:06:7c:
         31:70:bd:bf:b7:8e:aa:66:e5:2d:44:c0:fa:89:6b:94:22:d8:
         7b:e9:74:a4:ef:68:d7:c3:c8:51:e8:16:66:f1:85:39:75:13:
         b6:a6:30:6b:c0:b0:4a:c0:ee:fc:77:09:46:c2:9c:6b:69:60:
         2c:92:1a:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZJank2Dx2VK0vnL/JXREf9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxM2E4ZDdlMzU0OWZhZGY1NmI0ZTgzZmE0OWMxNmI3M2M5
OTQwYjUwHhcNMjUwNDE4MTUwMDM2WhcNMjUwNDE5MTUwMDM2WjAzMTEwLwYDVQQD
EygzM2JkN2FhNzFiMDdlODMzMzVjNzYyNjRjMWYzZjYwNDQzNDUyNzY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr91bHTTxCNN2SCdctJIo2CenmYbf
O5cU32uhp4GE2MS5edIqlrKgVU9YDDEsdP9jHfebhAhZaYVYdRpTNilBxxJISkQd
A6f9M6lo4S4pO+FmMkWXyFSB1mkcVuMU4LLbY+SfhT4fmsTPnX9iuYGh4iwpgy9K
iR5UIb1c94QOuP78SFnGd1WGO8UaSeuqam4ga0sku8NgvoHRIW06ALVSkzoaqiU/
xOc3DcXJmyAxmz4ka/kNzCBPcX4T92bdh0eH3L47xZYQVA6VToSWPXztkndiiaOb
+zOOSo/9JkXlJLHOYc6sBtGAnvQQuDOs+mwfOsCFv0U6DP92bLTHP7QcdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDO9eqcbB+gzNcdiZMHz9gRDRSdlMB8GA1UdIwQY
MBaAFME6jX41SfrfVrToP6ScFrc8mUC1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1RxTmZqVkotdDlXdE9nX3BKd1d0enlaUUxVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi8wNGEwZjItOWIyNC00NDkxLWI5YWQt
MzBmYzZiYWY4NWY1LzEvd1RxTmZqVkotdDlXdE9nX3BKd1d0enlaUUxVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi8wNGEwZjItOWIyNC00NDkxLWI5YWQtMzBmYzZiYWY4NWY1
LzEvd1RxTmZqVkotdDlXdE9nX3BKd1d0enlaUUxVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqbR6IxWV
WQK66TXYBwTOqv0WTT2kM6m1WXY1Xk50aaoilfxKHiXyvxfdsAu39lPNVJhqyKvR
cW1QEgk7wW5Zc3yP+dZXrzWNrVPpJkwmGRGbyoHn3PYAZk8QJBKt8rR9cWVmwfgN
IUaPeDrHU0tHKdObsH4J44CHLw6WYdnRm3D3+ndfsk9CnPG1nUpS/AZd6orNSc8n
UiQ2A37t9YQLf1IQYq4NkklW7d9Zpn3n+HT64NAbNTPZhMsKr1e338fSwVxuRQZ8
MXC9v7eOqmblLUTA+olrlCLYe+l0pO9o18PIUegWZvGFOXUTtqYwa8CwSsDu/HcJ
RsKca2lgLJIaLA==
-----END CERTIFICATE-----
Generated at Sat Apr 19 00:50:20 2025 by rpki-client