Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/9b6d9b-8541-44bc-961a-cee5be87a46b/1/we5gO3itcrp4VWgsorgGrA5-mP0.mft
File:                     we5gO3itcrp4VWgsorgGrA5-mP0.mft (raw, json)
Hash identifier:          poCj/G9gTVfeVpUwvcbZflTOps30XQWhvhff93eyuHo=
Subject key identifier:   EF:24:BE:75:9D:FA:39:A8:41:84:A6:BF:B2:62:0B:EB:EF:F2:50:93
Authority key identifier: C1:EE:60:3B:78:AD:72:BA:78:55:68:2C:A2:B8:06:AC:0E:7E:98:FD
Certificate issuer:       /CN=c1ee603b78ad72ba7855682ca2b806ac0e7e98fd
Certificate serial:       0196C5DE78C6DC65508BEF34EFE2D11EE4B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/we5gO3itcrp4VWgsorgGrA5-mP0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/9b6d9b-8541-44bc-961a-cee5be87a46b/1/we5gO3itcrp4VWgsorgGrA5-mP0.mft
Manifest number:          1538
Signing time:             Mon 12 May 2025 19:00:13 +0000
Manifest this update:     Mon 12 May 2025 19:00:13 +0000
Manifest next update:     Tue 13 May 2025 19:00:13 +0000
Files and hashes:         1: 8P5ffqPLJKYYNJnQChMlI7ALdn8.roa (hash: HRZiFpkQQ+Nr6MCSY7lvsFCZFVTwCo1gLy31/BQbop0=)
                          2: we5gO3itcrp4VWgsorgGrA5-mP0.crl (hash: emPRR7wtSowajeSAGxADcWlBKxc6/VjmAyQuo4kkDhQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/9b6d9b-8541-44bc-961a-cee5be87a46b/1/we5gO3itcrp4VWgsorgGrA5-mP0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/9b6d9b-8541-44bc-961a-cee5be87a46b/1/we5gO3itcrp4VWgsorgGrA5-mP0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/we5gO3itcrp4VWgsorgGrA5-mP0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 14:31:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c5:de:78:c6:dc:65:50:8b:ef:34:ef:e2:d1:1e:e4:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1ee603b78ad72ba7855682ca2b806ac0e7e98fd
        Validity
            Not Before: May 12 19:00:13 2025 GMT
            Not After : May 13 19:00:13 2025 GMT
        Subject: CN=ef24be759dfa39a84184a6bfb2620bebeff25093
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:b2:d4:12:71:63:51:72:e0:15:2e:b0:be:5d:
                    07:9c:45:02:46:0d:36:4c:40:87:d4:3f:80:8d:95:
                    ff:ba:54:11:9f:bd:02:b9:e1:8c:68:12:79:ab:4a:
                    e4:8a:99:b3:85:51:83:55:ca:9f:5c:1c:c2:fc:30:
                    9a:8d:43:58:98:06:ce:1c:e2:3a:1f:67:2d:75:43:
                    60:0a:0e:76:d9:e6:3a:b8:c2:ed:03:3a:70:cc:a8:
                    2c:7c:68:38:5f:6d:3a:01:07:b1:9e:cb:50:83:9d:
                    4d:2f:48:92:b6:63:98:30:83:06:2f:f9:83:78:02:
                    80:1a:d7:f8:1b:3a:fd:3f:cd:e1:3b:fc:29:b6:cf:
                    b6:74:f7:9a:07:76:ea:68:33:79:0a:35:c6:90:c8:
                    c2:4d:77:45:8f:b0:f0:f8:0c:54:87:07:af:8b:18:
                    dc:af:b5:ee:84:26:43:39:ad:14:ff:8f:7d:04:8e:
                    02:69:7d:9b:ab:71:3e:7d:43:04:b5:27:76:bc:ef:
                    ac:68:a0:8d:f0:40:c6:1f:dc:f9:3f:df:a5:11:2b:
                    6e:c4:e1:11:e9:6f:a7:bb:d7:7b:d0:fb:2f:c5:99:
                    81:1b:0a:f3:3b:89:2b:d4:ed:42:8a:a5:c6:ca:29:
                    11:f1:22:f5:16:b0:66:49:17:3d:eb:4e:38:5e:32:
                    06:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:24:BE:75:9D:FA:39:A8:41:84:A6:BF:B2:62:0B:EB:EF:F2:50:93
            X509v3 Authority Key Identifier:
                keyid:C1:EE:60:3B:78:AD:72:BA:78:55:68:2C:A2:B8:06:AC:0E:7E:98:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/we5gO3itcrp4VWgsorgGrA5-mP0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/9b6d9b-8541-44bc-961a-cee5be87a46b/1/we5gO3itcrp4VWgsorgGrA5-mP0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/9b6d9b-8541-44bc-961a-cee5be87a46b/1/we5gO3itcrp4VWgsorgGrA5-mP0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:4a:51:57:44:17:4e:bb:1b:d9:7c:ed:79:7b:19:52:ee:70:
         23:69:47:fa:22:fd:33:6a:a6:98:f6:01:6b:2c:88:bd:f9:e4:
         4a:d9:56:54:ad:bd:29:b0:e2:f7:64:24:a3:33:94:fe:36:a6:
         9a:93:32:1e:54:34:81:3d:cf:41:17:2a:ac:8b:4d:c7:be:bd:
         8f:e2:81:35:83:97:7d:11:ed:c4:98:30:d8:7a:ad:14:fb:1f:
         fe:06:48:8a:ec:2c:54:29:5c:4f:a1:8f:46:35:2e:de:46:52:
         3f:fd:1b:56:2c:f0:b2:01:37:27:0d:9d:a7:b6:30:1a:84:ee:
         71:82:ab:62:24:39:82:bb:42:f9:03:0c:2b:9f:62:70:6d:c5:
         a0:7d:23:1a:1b:1b:43:1c:ab:d7:b7:fa:16:1a:a7:56:99:f6:
         b4:86:bc:f6:62:9d:36:11:65:2b:35:93:8c:8e:96:4d:e7:e6:
         2d:0d:b8:b3:8d:f2:df:56:2c:01:f2:0f:58:ae:76:5d:21:b4:
         0d:53:2f:02:b0:cd:da:0b:7c:4e:f3:1e:90:82:cd:56:16:93:
         b5:68:79:be:bf:69:47:10:cb:4a:cb:42:1c:bb:5e:f4:b1:ce:
         e5:f3:bd:92:8e:42:a9:09:64:aa:de:b4:c5:b5:10:bc:08:92:
         73:ef:39:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbF3njG3GVQi+807+LRHuS2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxZWU2MDNiNzhhZDcyYmE3ODU1NjgyY2EyYjgwNmFjMGU3
ZTk4ZmQwHhcNMjUwNTEyMTkwMDEzWhcNMjUwNTEzMTkwMDEzWjAzMTEwLwYDVQQD
EyhlZjI0YmU3NTlkZmEzOWE4NDE4NGE2YmZiMjYyMGJlYmVmZjI1MDkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjLLUEnFjUXLgFS6wvl0HnEUCRg02
TECH1D+AjZX/ulQRn70CueGMaBJ5q0rkipmzhVGDVcqfXBzC/DCajUNYmAbOHOI6
H2ctdUNgCg522eY6uMLtAzpwzKgsfGg4X206AQexnstQg51NL0iStmOYMIMGL/mD
eAKAGtf4Gzr9P83hO/wpts+2dPeaB3bqaDN5CjXGkMjCTXdFj7Dw+AxUhwevixjc
r7XuhCZDOa0U/499BI4CaX2bq3E+fUMEtSd2vO+saKCN8EDGH9z5P9+lEStuxOER
6W+nu9d70PsvxZmBGwrzO4kr1O1CiqXGyikR8SL1FrBmSRc96044XjIGZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO8kvnWd+jmoQYSmv7JiC+vv8lCTMB8GA1UdIwQY
MBaAFMHuYDt4rXK6eFVoLKK4BqwOfpj9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2U1Z08zaXRjcnA0Vldnc29yZ0dyQTUtbVAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy85YjZkOWItODU0MS00NGJjLTk2MWEt
Y2VlNWJlODdhNDZiLzEvd2U1Z08zaXRjcnA0Vldnc29yZ0dyQTUtbVAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy85YjZkOWItODU0MS00NGJjLTk2MWEtY2VlNWJlODdhNDZi
LzEvd2U1Z08zaXRjcnA0Vldnc29yZ0dyQTUtbVAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGkpRV0QX
Trsb2XzteXsZUu5wI2lH+iL9M2qmmPYBayyIvfnkStlWVK29KbDi92QkozOU/jam
mpMyHlQ0gT3PQRcqrItNx769j+KBNYOXfRHtxJgw2HqtFPsf/gZIiuwsVClcT6GP
RjUu3kZSP/0bVizwsgE3Jw2dp7YwGoTucYKrYiQ5grtC+QMMK59icG3FoH0jGhsb
Qxyr17f6FhqnVpn2tIa89mKdNhFlKzWTjI6WTefmLQ24s43y31YsAfIPWK52XSG0
DVMvArDN2gt8TvMekILNVhaTtWh5vr9pRxDLSstCHLte9LHO5fO9ko5CqQlkqt60
xbUQvAiSc+85dA==
-----END CERTIFICATE-----
Generated at Tue May 13 00:29:03 2025 by rpki-client