Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/wV59e7ae-ssMc5ApcsdNctKb938.mft
File:                     wV59e7ae-ssMc5ApcsdNctKb938.mft (raw, json)
Hash identifier:          g1vhbSe1dpnyxyxpqMPIydJYL0CvltzZBojruvdehGA=
Subject key identifier:   FC:BC:41:C2:7D:E8:B0:CD:F6:0C:0D:26:5B:0E:FE:97:C0:8C:67:D9
Authority key identifier: C1:5E:7D:7B:B6:9E:FA:CB:0C:73:90:29:72:C7:4D:72:D2:9B:F7:7F
Certificate issuer:       /CN=c15e7d7bb69efacb0c73902972c74d72d29bf77f
Certificate serial:       01960BD68DC663232D3B88722762A2E48A1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wV59e7ae-ssMc5ApcsdNctKb938.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/wV59e7ae-ssMc5ApcsdNctKb938.mft
Manifest number:          0563
Signing time:             Sun 06 Apr 2025 16:02:12 +0000
Manifest this update:     Sun 06 Apr 2025 16:02:12 +0000
Manifest next update:     Mon 07 Apr 2025 16:02:12 +0000
Files and hashes:         1: A07rBLPAPzivhHQPWrLVL8fr4vA.roa (hash: VlcbwvEyslqH6S+MJRBxrFZy7T+nixBrVr4PtsCdFgM=)
                          2: Ew7W1lBVgJLIyCQCAyne42ycTas.roa (hash: RysgKvdqvkqP0KlE1Qc3VG7a+JllwpBR7B1FiPMxjQ4=)
                          3: _V9pWsG5mKkT0hA55j0yMIJFyYg.roa (hash: R+SUqygHtXUgXmQoQ+KnwbPjcscerG2zrxcHzWTA/qY=)
                          4: gRpdjkHl2Gq1MAKFRORb5pPq8PM.roa (hash: LY5M9Qpbq9NOsf+7d/+wVFe9puRCS44w4zFcim4Zfnw=)
                          5: l1RkBmRrPMovkJGjGAhqwG2TomQ.roa (hash: ja8aqL5wAU8Vk71Npu6WMYrryMZZjLGwpBOYQMZ/L/o=)
                          6: nOlap_eSkN0DuMkgqLYZtcf9o8o.roa (hash: satBk4ZVOcEhBt8FgPxbQTlQ/8tPeh7CEI+elm33h/g=)
                          7: p1itVAUNMpcg9efrkUlXwcxkTHc.roa (hash: lZrPbq0O52HxoU/DZm26/qI3xpj/wD998L13o21F+bc=)
                          8: u1FUL9P2Wkc4fYqdagqSagQaDdM.roa (hash: V3LfQzQEPdq88kGKzJvMGhfw6LsMIXH1yzOGmzYQ0Sw=)
                          9: wV59e7ae-ssMc5ApcsdNctKb938.crl (hash: QEppPz/FVylMAuZ5HNRm/GdUYhje+heFvtdWmIMEebA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/wV59e7ae-ssMc5ApcsdNctKb938.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/wV59e7ae-ssMc5ApcsdNctKb938.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wV59e7ae-ssMc5ApcsdNctKb938.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 07 Apr 2025 16:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:0b:d6:8d:c6:63:23:2d:3b:88:72:27:62:a2:e4:8a:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c15e7d7bb69efacb0c73902972c74d72d29bf77f
        Validity
            Not Before: Apr  6 16:02:12 2025 GMT
            Not After : Apr  7 16:02:12 2025 GMT
        Subject: CN=fcbc41c27de8b0cdf60c0d265b0efe97c08c67d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:92:e1:71:1a:26:63:32:34:ec:25:95:6b:21:
                    b3:b2:f6:57:75:1d:2f:43:00:f4:c9:34:a8:ec:7a:
                    84:16:9d:2f:31:e9:59:fe:e0:0f:b3:a8:6e:fc:fc:
                    dd:81:aa:0a:1a:98:c4:4a:96:d2:bf:4a:cf:70:44:
                    ef:41:c1:8c:5b:1e:37:10:fb:a6:d0:8c:bf:01:6a:
                    e2:1a:2e:c1:65:09:58:d6:40:12:79:33:00:42:51:
                    2c:85:d2:65:d1:b5:a5:54:8a:7d:34:e2:cf:77:ff:
                    8b:bd:9a:4b:02:ff:a3:1f:5a:c0:04:f0:f1:81:32:
                    74:17:bd:37:ad:86:0b:c7:75:9a:ab:dc:06:8c:14:
                    40:ce:b2:4e:a0:3e:17:c8:91:5c:b8:5a:02:ad:17:
                    d3:88:4e:3d:6c:09:1c:67:e0:23:23:09:03:98:7c:
                    f0:b0:eb:dd:07:f6:a7:20:f3:97:80:56:24:82:4b:
                    8b:e6:ff:d1:23:2d:07:f4:5e:1a:c2:31:6b:49:74:
                    27:be:46:31:c1:b3:12:d2:f6:2a:1c:4b:45:9c:b1:
                    60:28:ab:16:4c:2e:13:aa:88:32:1a:59:5e:77:c8:
                    31:b9:99:67:f6:f6:60:a2:e8:cd:b2:a5:49:08:7e:
                    65:8c:66:34:4c:f0:e8:bb:33:5b:ba:d1:69:22:6b:
                    db:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:BC:41:C2:7D:E8:B0:CD:F6:0C:0D:26:5B:0E:FE:97:C0:8C:67:D9
            X509v3 Authority Key Identifier:
                keyid:C1:5E:7D:7B:B6:9E:FA:CB:0C:73:90:29:72:C7:4D:72:D2:9B:F7:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wV59e7ae-ssMc5ApcsdNctKb938.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/wV59e7ae-ssMc5ApcsdNctKb938.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/wV59e7ae-ssMc5ApcsdNctKb938.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:ca:20:c4:99:cf:9a:32:79:2e:e1:61:21:bd:58:0b:ce:27:
         37:e2:08:cb:0e:83:7e:8b:84:a9:eb:5b:a0:7d:8e:4c:71:48:
         c0:24:4f:d6:e9:a0:9b:de:54:2f:21:74:a5:85:d6:a2:8a:50:
         d7:15:7a:bd:77:f6:88:97:1a:df:fe:39:9c:30:d5:3f:51:87:
         5e:61:63:c2:ef:cd:10:ac:82:40:3b:11:42:6d:e3:bc:09:e2:
         6b:61:b2:08:5f:9a:f2:86:e8:b0:e4:25:4c:24:09:4f:6d:fa:
         bd:f4:63:d4:f6:9c:6d:c7:e3:05:e4:8c:f9:b6:b7:19:dd:d1:
         57:30:2f:e0:3b:1a:60:02:fc:07:02:34:4f:cb:23:38:61:6c:
         33:4f:54:74:f1:18:97:29:16:a9:da:2c:d4:cb:43:06:79:23:
         45:59:84:dd:bb:7f:bd:1c:bd:32:a9:5e:5b:58:fc:28:1b:01:
         55:0c:f0:65:fb:18:c1:1f:e7:c2:78:29:dc:f2:b1:96:eb:8a:
         17:87:ba:f7:1a:85:8e:50:2c:53:e4:18:13:37:bb:1e:51:e8:
         51:3e:da:7e:d9:16:7f:b9:cc:e6:8d:45:6b:c5:1d:3e:33:56:
         35:ff:0f:a7:42:09:16:58:54:d8:0f:83:51:9c:69:47:4c:c5:
         7a:05:4b:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYL1o3GYyMtO4hyJ2Ki5IoaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxNWU3ZDdiYjY5ZWZhY2IwYzczOTAyOTcyYzc0ZDcyZDI5
YmY3N2YwHhcNMjUwNDA2MTYwMjEyWhcNMjUwNDA3MTYwMjEyWjAzMTEwLwYDVQQD
EyhmY2JjNDFjMjdkZThiMGNkZjYwYzBkMjY1YjBlZmU5N2MwOGM2N2Q5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ZLhcRomYzI07CWVayGzsvZXdR0v
QwD0yTSo7HqEFp0vMelZ/uAPs6hu/PzdgaoKGpjESpbSv0rPcETvQcGMWx43EPum
0Iy/AWriGi7BZQlY1kASeTMAQlEshdJl0bWlVIp9NOLPd/+LvZpLAv+jH1rABPDx
gTJ0F703rYYLx3Waq9wGjBRAzrJOoD4XyJFcuFoCrRfTiE49bAkcZ+AjIwkDmHzw
sOvdB/anIPOXgFYkgkuL5v/RIy0H9F4awjFrSXQnvkYxwbMS0vYqHEtFnLFgKKsW
TC4TqogyGlled8gxuZln9vZgoujNsqVJCH5ljGY0TPDouzNbutFpImvbCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPy8QcJ96LDN9gwNJlsO/pfAjGfZMB8GA1UdIwQY
MBaAFMFefXu2nvrLDHOQKXLHTXLSm/d/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1Y1OWU3YWUtc3NNYzVBcGNzZE5jdEtiOTM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9lYTQwMmEtMGZmNi00N2Q5LTljZDAt
MzQ3YTBmN2M1YjA4LzEvd1Y1OWU3YWUtc3NNYzVBcGNzZE5jdEtiOTM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC9lYTQwMmEtMGZmNi00N2Q5LTljZDAtMzQ3YTBmN2M1YjA4
LzEvd1Y1OWU3YWUtc3NNYzVBcGNzZE5jdEtiOTM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdMogxJnP
mjJ5LuFhIb1YC84nN+IIyw6DfouEqetboH2OTHFIwCRP1umgm95ULyF0pYXWoopQ
1xV6vXf2iJca3/45nDDVP1GHXmFjwu/NEKyCQDsRQm3jvAnia2GyCF+a8obosOQl
TCQJT236vfRj1PacbcfjBeSM+ba3Gd3RVzAv4DsaYAL8BwI0T8sjOGFsM09UdPEY
lykWqdos1MtDBnkjRVmE3bt/vRy9MqleW1j8KBsBVQzwZfsYwR/nwngp3PKxluuK
F4e69xqFjlAsU+QYEze7HlHoUT7aftkWf7nM5o1Fa8UdPjNWNf8Pp0IJFlhU2A+D
UZxpR0zFegVLsw==
-----END CERTIFICATE-----
Generated at Sun Apr 6 21:23:35 2025 by rpki-client