Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/0b58a8-6553-4f07-b0b7-2ffaed04738a/1/WIM97GVeGohzOhei3z2gmFq2YNU.mft
File:                     WIM97GVeGohzOhei3z2gmFq2YNU.mft (raw, json)
Hash identifier:          6lcp1CWFXds8gI3104tJb+Chc+tQx2DN5k00qqr8ESY=
Subject key identifier:   0C:D7:E1:86:23:65:4F:06:A1:EF:61:7D:12:F9:BB:C5:C4:3C:D7:B1
Authority key identifier: 58:83:3D:EC:65:5E:1A:88:73:3A:17:A2:DF:3D:A0:98:5A:B6:60:D5
Certificate issuer:       /CN=58833dec655e1a88733a17a2df3da0985ab660d5
Certificate serial:       01974BC40004691EED4878560779A4060972
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WIM97GVeGohzOhei3z2gmFq2YNU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/0b58a8-6553-4f07-b0b7-2ffaed04738a/1/WIM97GVeGohzOhei3z2gmFq2YNU.mft
Manifest number:          157F
Signing time:             Sat 07 Jun 2025 19:00:25 +0000
Manifest this update:     Sat 07 Jun 2025 19:00:25 +0000
Manifest next update:     Sun 08 Jun 2025 19:00:25 +0000
Files and hashes:         1: B7Qe81-ujU6G37VntbWN3M7mmsU.roa (hash: HF+QNapcX0mnNM1QFFRETe22RTTFyu/iH5tzGUEdttU=)
                          2: WIM97GVeGohzOhei3z2gmFq2YNU.crl (hash: PG7ff1TbgjXhCnDjUkVB/uEZc6dDFsMM91HlWSIUOgA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/0b58a8-6553-4f07-b0b7-2ffaed04738a/1/WIM97GVeGohzOhei3z2gmFq2YNU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/0b58a8-6553-4f07-b0b7-2ffaed04738a/1/WIM97GVeGohzOhei3z2gmFq2YNU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WIM97GVeGohzOhei3z2gmFq2YNU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 18:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:c4:00:04:69:1e:ed:48:78:56:07:79:a4:06:09:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58833dec655e1a88733a17a2df3da0985ab660d5
        Validity
            Not Before: Jun  7 19:00:25 2025 GMT
            Not After : Jun  8 19:00:25 2025 GMT
        Subject: CN=0cd7e18623654f06a1ef617d12f9bbc5c43cd7b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:a6:58:1c:c3:be:fd:56:cd:65:d2:11:ec:31:
                    0e:35:2e:e1:dc:46:a8:2d:79:19:61:3b:f3:29:9f:
                    50:16:08:05:23:46:e6:b2:6a:3e:e4:3b:c1:3b:97:
                    e4:04:21:0c:32:f2:c1:06:73:5e:ca:69:81:f9:d2:
                    49:e9:cf:03:13:b5:6b:ff:3d:50:f3:a5:67:7d:fc:
                    8d:b4:7a:76:fd:b1:e6:6d:e5:5d:30:6b:a8:70:e5:
                    95:af:d5:d0:05:ec:d0:2c:da:e2:58:1d:76:8f:88:
                    a7:0f:27:2f:a7:1a:c5:5b:7d:1b:d9:2d:62:56:47:
                    0b:61:f3:f5:b5:a2:2f:32:c8:fc:46:4e:dc:76:e1:
                    4a:3b:99:88:66:ba:b9:c4:4c:33:aa:01:dc:b6:ba:
                    b2:86:a1:fa:41:b1:52:68:ba:6c:76:81:35:be:a5:
                    2d:b6:8d:ad:87:5a:6e:35:4f:c3:58:53:13:49:1a:
                    81:86:62:7e:17:34:2b:6d:ba:2d:4b:b4:20:39:46:
                    6a:08:9e:2c:a5:b0:b7:55:45:34:6a:02:7f:a9:54:
                    c8:34:93:dd:17:cf:b9:82:72:26:b0:9d:c3:50:23:
                    06:5d:4a:ac:01:5e:38:9c:e3:1b:85:e9:62:61:c8:
                    5b:60:54:63:d7:a3:98:d3:f4:92:08:00:03:44:d3:
                    8a:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:D7:E1:86:23:65:4F:06:A1:EF:61:7D:12:F9:BB:C5:C4:3C:D7:B1
            X509v3 Authority Key Identifier:
                keyid:58:83:3D:EC:65:5E:1A:88:73:3A:17:A2:DF:3D:A0:98:5A:B6:60:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIM97GVeGohzOhei3z2gmFq2YNU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/0b58a8-6553-4f07-b0b7-2ffaed04738a/1/WIM97GVeGohzOhei3z2gmFq2YNU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/0b58a8-6553-4f07-b0b7-2ffaed04738a/1/WIM97GVeGohzOhei3z2gmFq2YNU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:a2:27:c1:55:01:05:6a:e1:a4:b6:8e:c4:b3:68:c0:ac:d9:
         2f:b7:5f:6a:d3:7d:dc:c3:ee:ec:46:55:4e:0c:be:30:76:27:
         8e:e4:b8:e2:f8:ab:de:dc:cc:56:1b:9f:b7:fd:21:af:0a:e6:
         23:49:fc:19:4f:f0:2d:ff:13:bd:26:15:6c:2f:98:97:2b:0b:
         4b:b8:63:d2:ce:de:e5:06:b9:5d:77:7a:9b:0b:ef:27:c2:c9:
         be:c7:bd:04:58:dd:23:46:b9:e6:e3:7a:20:ff:61:17:31:cd:
         b3:85:d4:4d:05:39:af:49:37:d9:7b:dc:0f:4d:f7:35:fc:b6:
         9c:ce:dd:d7:89:bf:a0:fd:fc:89:28:21:1b:0c:c5:97:3e:b4:
         99:48:15:1d:d3:d0:63:9a:c3:1b:7a:4f:b6:7f:52:ba:2a:a4:
         fa:12:17:2b:26:c2:c9:a9:fa:4d:9e:82:41:f8:96:8a:89:84:
         4b:9a:5a:b1:32:80:5e:fa:dd:6a:77:17:80:ec:1d:76:69:70:
         da:7a:2b:a5:24:62:b6:8e:aa:61:0e:5c:0b:1c:57:49:0d:9f:
         b2:47:de:ea:21:51:84:da:e1:17:de:da:b9:84:f0:bb:86:6d:
         65:a3:d0:27:ba:3e:c4:d5:59:27:e2:b9:1a:71:18:92:78:97:
         31:b1:00:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdLxAAEaR7tSHhWB3mkBglyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4ODMzZGVjNjU1ZTFhODg3MzNhMTdhMmRmM2RhMDk4NWFi
NjYwZDUwHhcNMjUwNjA3MTkwMDI1WhcNMjUwNjA4MTkwMDI1WjAzMTEwLwYDVQQD
EygwY2Q3ZTE4NjIzNjU0ZjA2YTFlZjYxN2QxMmY5YmJjNWM0M2NkN2IxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1qZYHMO+/VbNZdIR7DEONS7h3Eao
LXkZYTvzKZ9QFggFI0bmsmo+5DvBO5fkBCEMMvLBBnNeymmB+dJJ6c8DE7Vr/z1Q
86VnffyNtHp2/bHmbeVdMGuocOWVr9XQBezQLNriWB12j4inDycvpxrFW30b2S1i
VkcLYfP1taIvMsj8Rk7cduFKO5mIZrq5xEwzqgHctrqyhqH6QbFSaLpsdoE1vqUt
to2th1puNU/DWFMTSRqBhmJ+FzQrbbotS7QgOUZqCJ4spbC3VUU0agJ/qVTINJPd
F8+5gnImsJ3DUCMGXUqsAV44nOMbheliYchbYFRj16OY0/SSCAADRNOKhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAzX4YYjZU8Goe9hfRL5u8XEPNexMB8GA1UdIwQY
MBaAFFiDPexlXhqIczoXot89oJhatmDVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0lNOTdHVmVHb2h6T2hlaTN6MmdtRnEyWU5VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi8wYjU4YTgtNjU1My00ZjA3LWIwYjct
MmZmYWVkMDQ3MzhhLzEvV0lNOTdHVmVHb2h6T2hlaTN6MmdtRnEyWU5VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi8wYjU4YTgtNjU1My00ZjA3LWIwYjctMmZmYWVkMDQ3Mzhh
LzEvV0lNOTdHVmVHb2h6T2hlaTN6MmdtRnEyWU5VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQKInwVUB
BWrhpLaOxLNowKzZL7dfatN93MPu7EZVTgy+MHYnjuS44vir3tzMVhuft/0hrwrm
I0n8GU/wLf8TvSYVbC+YlysLS7hj0s7e5Qa5XXd6mwvvJ8LJvse9BFjdI0a55uN6
IP9hFzHNs4XUTQU5r0k32XvcD033Nfy2nM7d14m/oP38iSghGwzFlz60mUgVHdPQ
Y5rDG3pPtn9Suiqk+hIXKybCyan6TZ6CQfiWiomES5pasTKAXvrdancXgOwddmlw
2norpSRito6qYQ5cCxxXSQ2fskfe6iFRhNrhF97auYTwu4ZtZaPQJ7o+xNVZJ+K5
GnEYkniXMbEAkg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:18:27 2025 by rpki-client