Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/54fd84-6e96-47b2-97a5-f2b556ed6990/1/WoZV6_lEUAAlpfB1unveZBWE_aY.mft
File:                     WoZV6_lEUAAlpfB1unveZBWE_aY.mft (raw, json)
Hash identifier:          Z0iLmcYcU0NB2UO4Xw8o9RyhRsM1W46GEoh7YOoe/A4=
Subject key identifier:   3B:44:E2:F5:46:85:A8:F0:FE:E3:80:B3:23:15:0E:ED:4C:F2:9B:78
Authority key identifier: 5A:86:55:EB:F9:44:50:00:25:A5:F0:75:BA:7B:DE:64:15:84:FD:A6
Certificate issuer:       /CN=5a8655ebf944500025a5f075ba7bde641584fda6
Certificate serial:       0197CACC6A3D69FCEE8730C2C573D32B0955
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WoZV6_lEUAAlpfB1unveZBWE_aY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/54fd84-6e96-47b2-97a5-f2b556ed6990/1/WoZV6_lEUAAlpfB1unveZBWE_aY.mft
Manifest number:          1069
Signing time:             Wed 02 Jul 2025 11:01:23 +0000
Manifest this update:     Wed 02 Jul 2025 11:01:23 +0000
Manifest next update:     Thu 03 Jul 2025 11:01:23 +0000
Files and hashes:         1: WoZV6_lEUAAlpfB1unveZBWE_aY.crl (hash: 0VwmDmfb0VC8EYyz19el97mTSC+Aka/7pSBtu2fXBEE=)
                          2: whcvZpTpzvlbrJt7O3nmd0nRfXA.roa (hash: uHBrfBFZVuPLEmFMxJBXGMMbHMabPdSiEixhmy3o8Bs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/54fd84-6e96-47b2-97a5-f2b556ed6990/1/WoZV6_lEUAAlpfB1unveZBWE_aY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/54fd84-6e96-47b2-97a5-f2b556ed6990/1/WoZV6_lEUAAlpfB1unveZBWE_aY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WoZV6_lEUAAlpfB1unveZBWE_aY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 03 Jul 2025 11:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:ca:cc:6a:3d:69:fc:ee:87:30:c2:c5:73:d3:2b:09:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a8655ebf944500025a5f075ba7bde641584fda6
        Validity
            Not Before: Jul  2 11:01:23 2025 GMT
            Not After : Jul  3 11:01:23 2025 GMT
        Subject: CN=3b44e2f54685a8f0fee380b323150eed4cf29b78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:bf:22:88:95:5f:38:50:2a:ae:e8:b7:6d:69:
                    e5:34:87:91:76:e3:f1:63:63:af:6f:8f:50:64:a3:
                    82:a8:d4:1b:2d:95:79:8d:7d:88:a8:7e:f9:7a:fb:
                    57:6d:ab:77:95:1d:ff:45:78:c5:8e:30:85:95:dc:
                    5e:08:16:0c:ce:3e:ee:a5:54:ff:40:9f:81:e3:7a:
                    95:25:8b:42:20:cd:0e:06:5b:f5:e4:78:24:e0:02:
                    79:bb:8b:23:ef:ce:ad:62:c3:df:49:9a:9c:7f:1b:
                    7c:83:a1:f8:8d:47:64:2e:fd:54:05:6d:3c:43:ee:
                    a2:06:13:53:57:18:5a:24:6e:4e:d3:f6:d2:d7:64:
                    8d:fe:16:b6:38:43:da:ff:cc:82:96:d6:38:34:81:
                    e9:09:c3:10:b8:89:e8:60:07:ad:e1:d4:ff:85:62:
                    83:a0:b8:57:05:fb:2b:e8:29:77:8b:9b:eb:cc:01:
                    da:34:b8:70:72:5c:d4:14:28:b7:7d:2f:15:72:bd:
                    12:e8:0b:3a:b4:d1:1a:e2:c2:27:0e:e5:3a:ac:fc:
                    e5:e0:5b:cc:46:e2:d4:56:1c:2e:5a:9f:55:20:c9:
                    9c:a3:16:e9:06:c4:90:9b:ea:f7:07:1e:13:a6:36:
                    5f:db:ac:97:7b:90:1d:b6:1d:d5:33:1f:5c:b1:84:
                    12:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:44:E2:F5:46:85:A8:F0:FE:E3:80:B3:23:15:0E:ED:4C:F2:9B:78
            X509v3 Authority Key Identifier:
                keyid:5A:86:55:EB:F9:44:50:00:25:A5:F0:75:BA:7B:DE:64:15:84:FD:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WoZV6_lEUAAlpfB1unveZBWE_aY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/54fd84-6e96-47b2-97a5-f2b556ed6990/1/WoZV6_lEUAAlpfB1unveZBWE_aY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/54fd84-6e96-47b2-97a5-f2b556ed6990/1/WoZV6_lEUAAlpfB1unveZBWE_aY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:2c:30:24:38:38:e7:d5:8f:9c:b1:16:2c:17:dc:cf:fe:f6:
         36:1e:15:c0:32:86:2b:48:2c:89:64:32:5a:67:3d:55:70:4a:
         70:37:d9:d4:54:82:26:dd:a6:44:f0:c4:dd:8a:fc:89:19:43:
         51:98:17:c2:1c:4e:68:8b:72:06:74:c4:72:7f:fb:58:a2:7a:
         4d:22:b8:30:56:00:97:19:18:eb:04:9d:3a:70:1b:2f:c6:33:
         64:b3:31:03:e8:27:1a:d8:2f:9f:4a:a6:03:cf:7b:a0:b9:31:
         89:64:6b:c6:28:4c:c7:72:b2:9f:ef:ad:83:80:16:d8:09:80:
         f7:f1:af:7f:43:01:8d:30:e5:b6:63:8e:24:54:b7:5f:55:63:
         49:7a:27:07:cc:6e:1c:f2:d1:14:0a:de:83:a8:2e:28:98:5e:
         91:b3:6b:79:16:cf:22:ac:b8:0a:3c:5b:68:1f:ba:be:84:20:
         6f:1b:34:40:a7:cc:2a:e0:f9:33:e1:a6:a3:0d:a9:57:c8:7f:
         34:e3:5c:71:64:4a:50:e1:e4:a2:e2:ec:00:f8:5e:83:83:c4:
         30:51:48:ac:23:ed:6b:a3:42:d0:07:cb:7e:46:4c:22:02:5e:
         b3:74:05:50:7c:e9:59:03:7f:47:da:7c:38:c1:3f:12:b0:56:
         61:ad:24:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfKzGo9afzuhzDCxXPTKwlVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhODY1NWViZjk0NDUwMDAyNWE1ZjA3NWJhN2JkZTY0MTU4
NGZkYTYwHhcNMjUwNzAyMTEwMTIzWhcNMjUwNzAzMTEwMTIzWjAzMTEwLwYDVQQD
EygzYjQ0ZTJmNTQ2ODVhOGYwZmVlMzgwYjMyMzE1MGVlZDRjZjI5Yjc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoL8iiJVfOFAqrui3bWnlNIeRduPx
Y2Ovb49QZKOCqNQbLZV5jX2IqH75evtXbat3lR3/RXjFjjCFldxeCBYMzj7upVT/
QJ+B43qVJYtCIM0OBlv15Hgk4AJ5u4sj786tYsPfSZqcfxt8g6H4jUdkLv1UBW08
Q+6iBhNTVxhaJG5O0/bS12SN/ha2OEPa/8yCltY4NIHpCcMQuInoYAet4dT/hWKD
oLhXBfsr6Cl3i5vrzAHaNLhwclzUFCi3fS8Vcr0S6As6tNEa4sInDuU6rPzl4FvM
RuLUVhwuWp9VIMmcoxbpBsSQm+r3Bx4TpjZf26yXe5Adth3VMx9csYQSKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDtE4vVGhajw/uOAsyMVDu1M8pt4MB8GA1UdIwQY
MBaAFFqGVev5RFAAJaXwdbp73mQVhP2mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV29aVjZfbEVVQUFscGZCMXVudmVaQldFX2FZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC81NGZkODQtNmU5Ni00N2IyLTk3YTUt
ZjJiNTU2ZWQ2OTkwLzEvV29aVjZfbEVVQUFscGZCMXVudmVaQldFX2FZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC81NGZkODQtNmU5Ni00N2IyLTk3YTUtZjJiNTU2ZWQ2OTkw
LzEvV29aVjZfbEVVQUFscGZCMXVudmVaQldFX2FZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKywwJDg4
59WPnLEWLBfcz/72Nh4VwDKGK0gsiWQyWmc9VXBKcDfZ1FSCJt2mRPDE3Yr8iRlD
UZgXwhxOaItyBnTEcn/7WKJ6TSK4MFYAlxkY6wSdOnAbL8YzZLMxA+gnGtgvn0qm
A897oLkxiWRrxihMx3Kyn++tg4AW2AmA9/Gvf0MBjTDltmOOJFS3X1VjSXonB8xu
HPLRFAreg6guKJhekbNreRbPIqy4CjxbaB+6voQgbxs0QKfMKuD5M+Gmow2pV8h/
NONccWRKUOHkouLsAPheg4PEMFFIrCPta6NC0AfLfkZMIgJes3QFUHzpWQN/R9p8
OME/ErBWYa0k2w==
-----END CERTIFICATE-----
Generated at Wed Jul 2 13:09:11 2025 by rpki-client