Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/f4d345-5ff3-4b0a-8dd9-7a4e3340a491/1/WROOPbd2QL6t8dpbFRlLk4ShRE4.mft
File:                     WROOPbd2QL6t8dpbFRlLk4ShRE4.mft (raw, json)
Hash identifier:          cMdyLG2MPx0QhDEymqCXa6z65ljqXpCIS5FnRZwaZGc=
Subject key identifier:   BB:99:50:9E:D5:12:C3:C8:CD:94:9C:D7:84:71:5B:7C:DA:1A:61:D4
Authority key identifier: 59:13:8E:3D:B7:76:40:BE:AD:F1:DA:5B:15:19:4B:93:84:A1:44:4E
Certificate issuer:       /CN=59138e3db77640beadf1da5b15194b9384a1444e
Certificate serial:       0197462FFEE348F178FC4587754C15E4699E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WROOPbd2QL6t8dpbFRlLk4ShRE4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/f4d345-5ff3-4b0a-8dd9-7a4e3340a491/1/WROOPbd2QL6t8dpbFRlLk4ShRE4.mft
Manifest number:          09DD
Signing time:             Fri 06 Jun 2025 17:00:39 +0000
Manifest this update:     Fri 06 Jun 2025 17:00:39 +0000
Manifest next update:     Sat 07 Jun 2025 17:00:39 +0000
Files and hashes:         1: WROOPbd2QL6t8dpbFRlLk4ShRE4.crl (hash: om4Qjk0XJpIG9ZWd83bld7dUSqlHxbhX/pE2clRgcLY=)
                          2: XxQYUuyDfDmvEH-_h4xcYdCTTls.roa (hash: sOyHTNSLK1nXbLPuDkiUpZ37v4YFW/N/3OvLA+CjJUA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/f4d345-5ff3-4b0a-8dd9-7a4e3340a491/1/WROOPbd2QL6t8dpbFRlLk4ShRE4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/f4d345-5ff3-4b0a-8dd9-7a4e3340a491/1/WROOPbd2QL6t8dpbFRlLk4ShRE4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WROOPbd2QL6t8dpbFRlLk4ShRE4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:2f:fe:e3:48:f1:78:fc:45:87:75:4c:15:e4:69:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59138e3db77640beadf1da5b15194b9384a1444e
        Validity
            Not Before: Jun  6 17:00:39 2025 GMT
            Not After : Jun  7 17:00:39 2025 GMT
        Subject: CN=bb99509ed512c3c8cd949cd784715b7cda1a61d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d6:4b:89:78:a2:5b:a4:37:a1:c0:18:02:b6:
                    16:ab:1e:5e:99:75:c0:de:6d:00:f2:ed:4b:42:81:
                    21:45:c1:16:7e:fd:8f:d1:ff:eb:ae:a7:11:87:e4:
                    8f:43:14:c5:03:d3:ac:02:4e:ac:97:7a:74:38:ee:
                    42:fc:c2:ad:c3:87:b9:ef:da:d0:a6:99:0b:59:4f:
                    78:5a:f2:76:44:fd:5c:b0:0f:0d:b7:f7:4b:7b:99:
                    de:ea:94:3d:23:ad:01:c2:0f:13:86:a5:f7:16:c0:
                    9c:2b:7b:71:cc:81:c7:ed:f2:0a:2a:dd:02:10:be:
                    92:76:d0:40:02:29:62:cc:c3:6d:1e:de:27:d2:db:
                    a7:95:6b:ea:49:1d:22:5b:f9:b5:59:a1:12:57:02:
                    a2:52:a2:18:76:c8:94:0c:7b:1c:da:42:cb:be:06:
                    70:d6:be:cd:df:e7:56:b0:a7:b5:9c:19:17:90:e6:
                    4e:7a:98:15:12:c0:de:12:14:a1:78:99:61:d1:6c:
                    dc:cc:48:b6:c8:66:77:2e:8d:7d:f8:5d:e6:52:28:
                    1b:32:71:e3:08:e0:36:68:9d:f9:ab:56:2a:a1:5a:
                    6f:d1:71:a9:a6:52:fc:fb:69:fa:15:52:8a:05:cc:
                    00:18:e6:35:00:53:34:ed:8e:c4:df:ec:99:d6:aa:
                    1c:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:99:50:9E:D5:12:C3:C8:CD:94:9C:D7:84:71:5B:7C:DA:1A:61:D4
            X509v3 Authority Key Identifier:
                keyid:59:13:8E:3D:B7:76:40:BE:AD:F1:DA:5B:15:19:4B:93:84:A1:44:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WROOPbd2QL6t8dpbFRlLk4ShRE4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/f4d345-5ff3-4b0a-8dd9-7a4e3340a491/1/WROOPbd2QL6t8dpbFRlLk4ShRE4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/f4d345-5ff3-4b0a-8dd9-7a4e3340a491/1/WROOPbd2QL6t8dpbFRlLk4ShRE4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:c8:da:92:e8:06:f4:55:57:45:50:e3:62:27:c5:4e:1c:27:
         80:f8:c0:f1:fc:f8:58:db:8f:22:4b:8e:33:c6:4d:ad:cb:5a:
         2f:03:e3:9a:23:95:5d:dc:b5:73:b2:ed:7b:87:b5:5f:e8:e4:
         a1:b1:f8:fa:84:3a:79:fe:ee:fa:a0:53:b6:c1:97:74:de:c2:
         88:4a:0e:18:c0:b9:72:af:2f:38:a8:78:ff:20:57:19:9f:36:
         5e:b6:21:88:3f:96:08:5d:27:38:6e:ab:5a:f3:34:6b:5f:82:
         35:10:6a:06:74:6d:6b:76:73:ce:96:d0:21:88:b2:b8:60:9f:
         b0:c4:f0:cc:28:4c:54:ef:fd:1e:32:b4:e1:99:d2:23:1e:82:
         9b:07:c7:a5:69:96:09:8a:de:8b:01:af:b1:ff:f2:28:cc:49:
         ed:8f:59:22:2c:7f:e6:48:8e:1e:b3:4b:89:e7:ba:8b:85:f6:
         60:b9:2c:4e:ec:b3:8b:48:d3:c5:59:cd:7e:ca:39:ce:a7:22:
         d9:5b:d5:1d:8f:a9:bb:d5:53:33:6e:6f:40:e6:d2:c9:1a:f2:
         24:b9:c2:ab:64:2e:20:88:e6:d8:8b:22:55:44:08:2d:10:ad:
         bd:ff:e7:f2:88:ff:95:ec:c2:fd:32:b4:a4:bb:a0:bd:04:0d:
         a2:d3:e3:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdGL/7jSPF4/EWHdUwV5GmeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5MTM4ZTNkYjc3NjQwYmVhZGYxZGE1YjE1MTk0YjkzODRh
MTQ0NGUwHhcNMjUwNjA2MTcwMDM5WhcNMjUwNjA3MTcwMDM5WjAzMTEwLwYDVQQD
EyhiYjk5NTA5ZWQ1MTJjM2M4Y2Q5NDljZDc4NDcxNWI3Y2RhMWE2MWQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9ZLiXiiW6Q3ocAYArYWqx5emXXA
3m0A8u1LQoEhRcEWfv2P0f/rrqcRh+SPQxTFA9OsAk6sl3p0OO5C/MKtw4e579rQ
ppkLWU94WvJ2RP1csA8Nt/dLe5ne6pQ9I60Bwg8ThqX3FsCcK3txzIHH7fIKKt0C
EL6SdtBAAilizMNtHt4n0tunlWvqSR0iW/m1WaESVwKiUqIYdsiUDHsc2kLLvgZw
1r7N3+dWsKe1nBkXkOZOepgVEsDeEhSheJlh0WzczEi2yGZ3Lo19+F3mUigbMnHj
COA2aJ35q1YqoVpv0XGpplL8+2n6FVKKBcwAGOY1AFM07Y7E3+yZ1qocGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLuZUJ7VEsPIzZSc14RxW3zaGmHUMB8GA1UdIwQY
MBaAFFkTjj23dkC+rfHaWxUZS5OEoUROMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1JPT1BiZDJRTDZ0OGRwYkZSbExrNFNoUkU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9mNGQzNDUtNWZmMy00YjBhLThkZDkt
N2E0ZTMzNDBhNDkxLzEvV1JPT1BiZDJRTDZ0OGRwYkZSbExrNFNoUkU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS9mNGQzNDUtNWZmMy00YjBhLThkZDktN2E0ZTMzNDBhNDkx
LzEvV1JPT1BiZDJRTDZ0OGRwYkZSbExrNFNoUkU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZcjakugG
9FVXRVDjYifFThwngPjA8fz4WNuPIkuOM8ZNrctaLwPjmiOVXdy1c7Lte4e1X+jk
obH4+oQ6ef7u+qBTtsGXdN7CiEoOGMC5cq8vOKh4/yBXGZ82XrYhiD+WCF0nOG6r
WvM0a1+CNRBqBnRta3ZzzpbQIYiyuGCfsMTwzChMVO/9HjK04ZnSIx6CmwfHpWmW
CYreiwGvsf/yKMxJ7Y9ZIix/5kiOHrNLiee6i4X2YLksTuyzi0jTxVnNfso5zqci
2VvVHY+pu9VTM25vQObSyRryJLnCq2QuIIjm2IsiVUQILRCtvf/n8oj/lezC/TK0
pLugvQQNotPjgA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 00:57:04 2025 by rpki-client