Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.mft
File:                     wzWOXE-AqCBszFEDvy6-Ok6WoPE.mft (raw, json)
Hash identifier:          otvvedONUTTw+VcOid+yMGzlr+sySIwL4OXx2p/jM2Y=
Subject key identifier:   23:C4:72:6D:7C:91:C0:64:F3:CB:38:3A:CC:E8:26:24:3F:5F:CE:F4
Authority key identifier: C3:35:8E:5C:4F:80:A8:20:6C:CC:51:03:BF:2E:BE:3A:4E:96:A0:F1
Certificate issuer:       /CN=c3358e5c4f80a8206ccc5103bf2ebe3a4e96a0f1
Certificate serial:       01964C6B9D3EFE45B501ADACC04BF0BC5236
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wzWOXE-AqCBszFEDvy6-Ok6WoPE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.mft
Manifest number:          0317
Signing time:             Sat 19 Apr 2025 05:00:43 +0000
Manifest this update:     Sat 19 Apr 2025 05:00:43 +0000
Manifest next update:     Sun 20 Apr 2025 05:00:43 +0000
Files and hashes:         1: jQ35y5JqdtG9WdmH02jLEjnZC4E.roa (hash: FipHH6QD7PJQoRtOLX5VjgWSjY2BOLQCjuClzQsUWi8=)
                          2: wzWOXE-AqCBszFEDvy6-Ok6WoPE.crl (hash: 8Ax5yPTAz63CNGpZdLo/CR92eagN0Mkr/3xy/JFzB9k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wzWOXE-AqCBszFEDvy6-Ok6WoPE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 05:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4c:6b:9d:3e:fe:45:b5:01:ad:ac:c0:4b:f0:bc:52:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3358e5c4f80a8206ccc5103bf2ebe3a4e96a0f1
        Validity
            Not Before: Apr 19 05:00:43 2025 GMT
            Not After : Apr 20 05:00:43 2025 GMT
        Subject: CN=23c4726d7c91c064f3cb383acce826243f5fcef4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b8:6d:e7:97:6b:ef:85:80:f4:2c:f4:30:46:
                    cf:7a:5a:2e:0b:8f:d8:35:42:65:21:b8:ef:4f:8f:
                    75:97:2a:3d:51:60:02:b0:e5:89:1f:cf:ff:c6:df:
                    0b:3e:61:03:de:29:d0:f7:fc:b2:8e:96:fa:69:e1:
                    26:a7:60:42:56:38:9e:43:42:05:33:e6:a4:23:d3:
                    6c:7e:18:43:fd:b7:df:b6:90:30:bc:68:93:89:f3:
                    17:d6:6f:91:8e:cb:cf:cd:3c:45:bc:af:da:dc:98:
                    c7:40:79:60:41:96:d3:8f:df:d8:72:ed:c2:6a:1f:
                    74:9f:31:69:d4:8f:0b:5e:ef:22:75:11:09:28:80:
                    87:de:02:45:20:92:e2:fe:13:e0:2b:37:d6:22:db:
                    9f:6b:4f:f6:81:87:86:2f:b2:86:51:aa:a9:72:da:
                    db:7a:2b:09:4a:6d:fe:c7:89:fd:aa:ff:1d:84:e8:
                    f5:f7:68:7e:94:ff:0e:ca:00:89:4f:23:5e:29:cd:
                    34:00:57:59:3f:c8:b2:64:74:a9:6a:cb:98:d5:53:
                    a5:22:f2:12:99:59:c9:c5:38:a3:a4:7a:64:eb:8a:
                    ed:ab:d0:f0:7d:53:12:2a:56:ba:62:d8:ac:68:4a:
                    b7:83:9f:d9:c0:15:59:49:f3:48:f6:e2:40:b7:59:
                    f3:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:C4:72:6D:7C:91:C0:64:F3:CB:38:3A:CC:E8:26:24:3F:5F:CE:F4
            X509v3 Authority Key Identifier:
                keyid:C3:35:8E:5C:4F:80:A8:20:6C:CC:51:03:BF:2E:BE:3A:4E:96:A0:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wzWOXE-AqCBszFEDvy6-Ok6WoPE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/650c41-7804-4a24-934e-0dba7fa6a403/1/wzWOXE-AqCBszFEDvy6-Ok6WoPE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:7b:a4:94:f1:13:f4:8f:f1:61:03:cc:33:28:3e:de:5f:53:
         8d:35:a8:9d:77:8c:45:25:fe:2c:47:2b:a6:fb:84:59:bf:16:
         a6:40:0c:03:37:77:a6:12:1c:f5:11:9a:66:55:43:20:50:96:
         08:ec:56:aa:16:50:a4:de:89:64:ae:ec:e4:9b:ae:9b:f2:60:
         32:6c:e0:f4:a9:7d:af:b6:6d:b2:a2:d6:b5:7e:fa:c5:c3:b3:
         5f:ef:54:de:a1:b6:d6:c3:45:bc:d8:32:ee:9c:b1:09:e6:7b:
         29:aa:fd:5b:c8:db:64:b4:9b:66:3a:2e:09:42:49:3d:87:97:
         81:88:09:77:38:e9:23:58:01:fc:27:b7:72:a9:b7:29:57:21:
         4f:ab:db:2b:ce:f7:52:72:ec:fc:a4:9c:b9:6a:10:3e:eb:83:
         df:3e:c0:e2:03:63:38:6c:03:b6:9c:1c:bb:c6:ee:c4:9c:12:
         c7:8d:1c:fa:ce:87:71:8a:c0:b8:3b:00:a8:e1:78:2c:39:39:
         e0:f8:b9:64:5c:14:03:67:3f:32:4a:84:bb:27:2a:c3:ba:a0:
         55:2b:e3:41:9b:2c:ec:14:b9:8c:50:9e:7b:78:86:db:85:12:
         be:d9:a6:c7:d0:f3:2d:34:d7:44:8f:40:6a:ec:9d:46:e6:92:
         aa:c2:d7:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZMa50+/kW1Aa2swEvwvFI2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzMzU4ZTVjNGY4MGE4MjA2Y2NjNTEwM2JmMmViZTNhNGU5
NmEwZjEwHhcNMjUwNDE5MDUwMDQzWhcNMjUwNDIwMDUwMDQzWjAzMTEwLwYDVQQD
EygyM2M0NzI2ZDdjOTFjMDY0ZjNjYjM4M2FjY2U4MjYyNDNmNWZjZWY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubht55dr74WA9Cz0MEbPelouC4/Y
NUJlIbjvT491lyo9UWACsOWJH8//xt8LPmED3inQ9/yyjpb6aeEmp2BCVjieQ0IF
M+akI9NsfhhD/bfftpAwvGiTifMX1m+RjsvPzTxFvK/a3JjHQHlgQZbTj9/Ycu3C
ah90nzFp1I8LXu8idREJKICH3gJFIJLi/hPgKzfWItufa0/2gYeGL7KGUaqpctrb
eisJSm3+x4n9qv8dhOj192h+lP8OygCJTyNeKc00AFdZP8iyZHSpasuY1VOlIvIS
mVnJxTijpHpk64rtq9DwfVMSKla6YtisaEq3g5/ZwBVZSfNI9uJAt1nz1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCPEcm18kcBk88s4OszoJiQ/X870MB8GA1UdIwQY
MBaAFMM1jlxPgKggbMxRA78uvjpOlqDxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3pXT1hFLUFxQ0JzekZFRHZ5Ni1PazZXb1BFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC82NTBjNDEtNzgwNC00YTI0LTkzNGUt
MGRiYTdmYTZhNDAzLzEvd3pXT1hFLUFxQ0JzekZFRHZ5Ni1PazZXb1BFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC82NTBjNDEtNzgwNC00YTI0LTkzNGUtMGRiYTdmYTZhNDAz
LzEvd3pXT1hFLUFxQ0JzekZFRHZ5Ni1PazZXb1BFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU3uklPET
9I/xYQPMMyg+3l9TjTWonXeMRSX+LEcrpvuEWb8WpkAMAzd3phIc9RGaZlVDIFCW
COxWqhZQpN6JZK7s5Juum/JgMmzg9Kl9r7ZtsqLWtX76xcOzX+9U3qG21sNFvNgy
7pyxCeZ7Kar9W8jbZLSbZjouCUJJPYeXgYgJdzjpI1gB/Ce3cqm3KVchT6vbK873
UnLs/KScuWoQPuuD3z7A4gNjOGwDtpwcu8buxJwSx40c+s6HcYrAuDsAqOF4LDk5
4Pi5ZFwUA2c/MkqEuycqw7qgVSvjQZss7BS5jFCee3iG24USvtmmx9DzLTTXRI9A
auydRuaSqsLXkQ==
-----END CERTIFICATE-----
Generated at Sat Apr 19 16:03:15 2025 by rpki-client