Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/365d98-5d48-43b8-9794-b1ea087b9525/1/wbYHxYUVNn03yfPmmUguV6M8c_U.mft
File:                     wbYHxYUVNn03yfPmmUguV6M8c_U.mft (raw, json)
Hash identifier:          nJmSk8/vtz+9vthNPyCE3b3zF2To6g1kOiHsBaaXPtE=
Subject key identifier:   1C:37:4B:48:30:29:7E:9F:59:7D:3A:0C:32:30:BD:CD:91:BC:35:73
Authority key identifier: C1:B6:07:C5:85:15:36:7D:37:C9:F3:E6:99:48:2E:57:A3:3C:73:F5
Certificate issuer:       /CN=c1b607c58515367d37c9f3e699482e57a33c73f5
Certificate serial:       01974AE8B44011B431B697EDCC377FC26305
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wbYHxYUVNn03yfPmmUguV6M8c_U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/365d98-5d48-43b8-9794-b1ea087b9525/1/wbYHxYUVNn03yfPmmUguV6M8c_U.mft
Manifest number:          128A
Signing time:             Sat 07 Jun 2025 15:00:53 +0000
Manifest this update:     Sat 07 Jun 2025 15:00:53 +0000
Manifest next update:     Sun 08 Jun 2025 15:00:53 +0000
Files and hashes:         1: MnIaRmi-qtJjMOo5DcZACYHEh7Q.roa (hash: DOu8g3e2V+bo5Ia9CdK+7hGNXc1/nocclAIwTEkGmxQ=)
                          2: wbYHxYUVNn03yfPmmUguV6M8c_U.crl (hash: PXRxC1l0dMVvgr1pUG5PV0vpcMilBDdSOyfLS0Bq8So=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/365d98-5d48-43b8-9794-b1ea087b9525/1/wbYHxYUVNn03yfPmmUguV6M8c_U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/365d98-5d48-43b8-9794-b1ea087b9525/1/wbYHxYUVNn03yfPmmUguV6M8c_U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wbYHxYUVNn03yfPmmUguV6M8c_U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:e8:b4:40:11:b4:31:b6:97:ed:cc:37:7f:c2:63:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1b607c58515367d37c9f3e699482e57a33c73f5
        Validity
            Not Before: Jun  7 15:00:53 2025 GMT
            Not After : Jun  8 15:00:53 2025 GMT
        Subject: CN=1c374b4830297e9f597d3a0c3230bdcd91bc3573
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:c9:8f:19:0f:c6:ce:a3:5d:bd:77:c6:b9:de:
                    c6:62:c6:3c:26:ed:75:8f:f9:0d:ad:99:fe:9d:53:
                    21:a2:2e:19:93:0a:cb:a8:db:a8:30:72:12:74:73:
                    02:38:19:5c:2a:f8:d1:8c:37:36:1c:9e:18:16:cd:
                    57:41:f7:96:fd:22:06:d6:4a:c9:ed:af:1a:4d:7c:
                    f3:77:55:bf:30:17:05:fa:b1:f0:df:c0:8c:3b:77:
                    70:3b:52:dc:e4:95:01:4f:0d:81:54:79:c9:ac:87:
                    4f:d7:da:00:ed:a5:13:98:15:8c:f0:1b:b9:e8:ec:
                    aa:55:19:d1:6d:32:17:d0:7a:e7:60:b2:ad:36:10:
                    91:45:a6:70:ae:33:36:86:95:80:36:08:4d:b5:a3:
                    0e:cc:d5:e5:48:dd:03:92:1a:91:66:ab:04:02:ab:
                    65:23:37:21:87:7a:18:95:09:d1:b1:54:a1:f5:bb:
                    c0:84:39:ad:46:36:93:a5:cd:35:30:61:97:36:31:
                    50:c3:46:dd:67:e7:5a:a0:f8:e3:fa:02:49:32:5c:
                    f9:88:2f:17:4b:43:52:41:7d:0b:9e:06:fd:b6:8e:
                    61:97:b6:66:f2:d5:9d:40:ce:35:1a:ae:21:f4:fc:
                    a5:82:0e:3a:80:35:a8:f5:b5:5b:f0:c9:d0:09:ed:
                    7d:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:37:4B:48:30:29:7E:9F:59:7D:3A:0C:32:30:BD:CD:91:BC:35:73
            X509v3 Authority Key Identifier:
                keyid:C1:B6:07:C5:85:15:36:7D:37:C9:F3:E6:99:48:2E:57:A3:3C:73:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wbYHxYUVNn03yfPmmUguV6M8c_U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/365d98-5d48-43b8-9794-b1ea087b9525/1/wbYHxYUVNn03yfPmmUguV6M8c_U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/365d98-5d48-43b8-9794-b1ea087b9525/1/wbYHxYUVNn03yfPmmUguV6M8c_U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:a6:ff:51:cb:78:b3:a2:6d:5f:a7:68:cb:89:04:e4:b5:a9:
         88:a0:26:16:06:05:ab:5f:d7:86:75:ed:b6:0b:55:33:59:61:
         ea:49:0c:75:22:1a:62:a8:0c:57:ef:2d:58:7e:38:2d:2f:71:
         e7:a3:c2:3e:9d:65:f4:ce:d8:95:38:62:5a:61:3b:f8:8e:c8:
         bf:a8:07:d9:5a:1a:50:7d:32:f7:b9:99:77:ad:9a:b9:02:81:
         3e:13:b1:ec:f6:e5:cc:66:9d:55:8a:b2:37:d5:dd:f1:87:d7:
         c1:d8:25:14:82:35:8a:32:c0:11:01:cc:1a:0b:5d:93:7e:74:
         e8:86:5c:61:d9:3a:e1:11:af:18:27:c9:3d:8a:d1:e1:a9:6c:
         dc:d0:07:ee:a6:09:9e:67:d8:21:ab:e5:1d:a8:13:45:eb:bd:
         fd:d3:da:c8:8c:00:53:48:55:78:f5:44:27:68:1e:c0:51:28:
         22:4a:9c:c1:37:0d:f5:a6:cf:d4:d7:b4:48:d3:3e:f5:d6:4f:
         7b:a7:93:2f:11:25:5c:8a:45:d2:7a:24:e2:c3:ed:ad:c1:a5:
         ed:8e:d3:52:66:fb:f9:2d:25:82:5e:3c:6c:76:33:28:18:95:
         5e:d7:29:3e:02:a4:39:a3:46:13:e1:7b:29:0b:8b:72:a6:16:
         3e:02:21:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdK6LRAEbQxtpftzDd/wmMFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxYjYwN2M1ODUxNTM2N2QzN2M5ZjNlNjk5NDgyZTU3YTMz
YzczZjUwHhcNMjUwNjA3MTUwMDUzWhcNMjUwNjA4MTUwMDUzWjAzMTEwLwYDVQQD
EygxYzM3NGI0ODMwMjk3ZTlmNTk3ZDNhMGMzMjMwYmRjZDkxYmMzNTczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5cmPGQ/GzqNdvXfGud7GYsY8Ju11
j/kNrZn+nVMhoi4ZkwrLqNuoMHISdHMCOBlcKvjRjDc2HJ4YFs1XQfeW/SIG1krJ
7a8aTXzzd1W/MBcF+rHw38CMO3dwO1Lc5JUBTw2BVHnJrIdP19oA7aUTmBWM8Bu5
6OyqVRnRbTIX0HrnYLKtNhCRRaZwrjM2hpWANghNtaMOzNXlSN0DkhqRZqsEAqtl
Izchh3oYlQnRsVSh9bvAhDmtRjaTpc01MGGXNjFQw0bdZ+daoPjj+gJJMlz5iC8X
S0NSQX0Lngb9to5hl7Zm8tWdQM41Gq4h9Pylgg46gDWo9bVb8MnQCe196wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBw3S0gwKX6fWX06DDIwvc2RvDVzMB8GA1UdIwQY
MBaAFMG2B8WFFTZ9N8nz5plILlejPHP1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2JZSHhZVVZObjAzeWZQbW1VZ3VWNk04Y19VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8zNjVkOTgtNWQ0OC00M2I4LTk3OTQt
YjFlYTA4N2I5NTI1LzEvd2JZSHhZVVZObjAzeWZQbW1VZ3VWNk04Y19VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC8zNjVkOTgtNWQ0OC00M2I4LTk3OTQtYjFlYTA4N2I5NTI1
LzEvd2JZSHhZVVZObjAzeWZQbW1VZ3VWNk04Y19VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdqb/Uct4
s6JtX6doy4kE5LWpiKAmFgYFq1/XhnXttgtVM1lh6kkMdSIaYqgMV+8tWH44LS9x
56PCPp1l9M7YlThiWmE7+I7Iv6gH2VoaUH0y97mZd62auQKBPhOx7PblzGadVYqy
N9Xd8YfXwdglFII1ijLAEQHMGgtdk3506IZcYdk64RGvGCfJPYrR4als3NAH7qYJ
nmfYIavlHagTReu9/dPayIwAU0hVePVEJ2gewFEoIkqcwTcN9abP1Ne0SNM+9dZP
e6eTLxElXIpF0nok4sPtrcGl7Y7TUmb7+S0lgl48bHYzKBiVXtcpPgKkOaNGE+F7
KQuLcqYWPgIheg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 19:49:04 2025 by rpki-client