Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/df38da-75cd-4e21-ad38-f2a2a5d5045e/1/wcJrtXS4m4wYZvhHS7HLADJk7CA.mft
File:                     wcJrtXS4m4wYZvhHS7HLADJk7CA.mft (raw, json)
Hash identifier:          T6LkRJvPd/iHnuA8a675/VL4/uH5EGpQnDTJELuhSp0=
Subject key identifier:   88:85:CB:06:4B:4E:12:58:55:C2:EB:65:9E:47:CA:64:55:1E:13:81
Authority key identifier: C1:C2:6B:B5:74:B8:9B:8C:18:66:F8:47:4B:B1:CB:00:32:64:EC:20
Certificate issuer:       /CN=c1c26bb574b89b8c1866f8474bb1cb003264ec20
Certificate serial:       0196B258BE386FAACEEBE99792A310619D8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wcJrtXS4m4wYZvhHS7HLADJk7CA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/df38da-75cd-4e21-ad38-f2a2a5d5045e/1/wcJrtXS4m4wYZvhHS7HLADJk7CA.mft
Manifest number:          05BC
Signing time:             Fri 09 May 2025 00:01:22 +0000
Manifest this update:     Fri 09 May 2025 00:01:22 +0000
Manifest next update:     Sat 10 May 2025 00:01:22 +0000
Files and hashes:         1: H8Cq2hKbd_raQeCt0efxgfoaB4I.roa (hash: RUeP+naWIGNfUeaNzoap2yVUas20CdFw2eVfjen4R5E=)
                          2: XfKLRFVMoC15KLcrzjJhZWM3w8Q.roa (hash: 25hZw2F6xwasOHU65AIF0S+NpXK61ycgU51PVxUloRM=)
                          3: jWpsvTVNS1Ff638kpa7ScxTuuk4.roa (hash: 63THTjmppr49Yj/Ay+jWsinwc396xB57u7trQc+8Nhg=)
                          4: wcJrtXS4m4wYZvhHS7HLADJk7CA.crl (hash: xba3uNt0mzSvBKbPrafRWnnDwdZ0ENGObVikGWXivn0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/df38da-75cd-4e21-ad38-f2a2a5d5045e/1/wcJrtXS4m4wYZvhHS7HLADJk7CA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/df38da-75cd-4e21-ad38-f2a2a5d5045e/1/wcJrtXS4m4wYZvhHS7HLADJk7CA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wcJrtXS4m4wYZvhHS7HLADJk7CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 May 2025 16:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b2:58:be:38:6f:aa:ce:eb:e9:97:92:a3:10:61:9d:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c26bb574b89b8c1866f8474bb1cb003264ec20
        Validity
            Not Before: May  9 00:01:22 2025 GMT
            Not After : May 10 00:01:22 2025 GMT
        Subject: CN=8885cb064b4e125855c2eb659e47ca64551e1381
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:20:76:7c:fd:5d:a5:e2:77:45:ea:80:54:93:
                    6f:a5:3d:28:08:5a:65:d6:0f:d9:5e:88:22:cc:5a:
                    3f:15:83:f4:2d:4d:3b:24:6b:d4:77:1f:65:34:d3:
                    aa:e4:e3:7c:42:23:14:f1:12:59:8e:5b:59:50:07:
                    37:18:0c:2a:f8:d2:91:a0:9a:48:03:bc:00:ea:eb:
                    04:0f:23:a6:04:3f:0e:06:f6:8b:d9:c1:9a:bc:80:
                    84:d0:32:0a:a5:8d:d4:14:d5:ca:84:48:6e:0e:fc:
                    77:a1:ea:5b:d4:70:90:b1:ef:99:87:a1:7f:ac:92:
                    c2:50:ee:f1:cb:d8:3c:94:40:64:45:c8:bc:27:58:
                    41:e7:b5:f5:b5:81:f3:33:03:80:5d:c7:5c:b3:d4:
                    6d:da:ff:32:f3:dc:4d:b1:52:7b:22:45:6f:24:91:
                    7a:c3:b3:d2:06:2f:20:39:c2:37:1e:9a:9b:61:d8:
                    b1:70:d3:32:93:21:44:59:93:fd:03:9c:56:47:64:
                    91:64:ba:d7:7a:86:21:fb:dd:f6:fa:a5:bb:58:e3:
                    94:39:23:f6:95:0c:d4:f9:f2:93:90:da:43:2a:6a:
                    82:fc:5d:78:b1:62:ac:56:f1:ec:ce:c2:32:2d:1c:
                    ee:47:f7:ee:4e:7c:46:99:e0:86:4b:4a:ec:20:46:
                    29:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:85:CB:06:4B:4E:12:58:55:C2:EB:65:9E:47:CA:64:55:1E:13:81
            X509v3 Authority Key Identifier:
                keyid:C1:C2:6B:B5:74:B8:9B:8C:18:66:F8:47:4B:B1:CB:00:32:64:EC:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wcJrtXS4m4wYZvhHS7HLADJk7CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/df38da-75cd-4e21-ad38-f2a2a5d5045e/1/wcJrtXS4m4wYZvhHS7HLADJk7CA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/df38da-75cd-4e21-ad38-f2a2a5d5045e/1/wcJrtXS4m4wYZvhHS7HLADJk7CA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:19:95:16:32:b4:19:61:79:66:2c:b0:87:9b:a9:74:1a:a6:
         80:38:e8:3b:65:68:8d:d3:bb:74:13:ca:1d:69:fb:4c:f3:30:
         98:ac:65:10:cd:96:0b:0e:35:24:e7:71:aa:6f:6a:e3:9f:c1:
         33:7e:fc:ad:5e:75:a6:0e:a7:68:59:dd:17:cd:d0:8f:21:93:
         1a:7d:6d:b0:60:45:38:0c:44:c2:56:fe:2e:a7:07:fe:b6:be:
         66:95:29:f1:60:a2:3f:5a:c4:63:91:29:70:13:b3:5d:50:d3:
         10:4a:61:55:9e:63:71:fe:77:65:ad:55:4e:eb:b1:b6:12:f0:
         f5:a2:ad:65:b8:7c:82:10:b3:77:15:fd:92:c7:59:ed:26:55:
         38:07:fb:7a:6e:d1:47:01:a5:6e:cc:c0:0d:44:44:7b:8b:7e:
         d9:99:d3:6e:b8:96:5f:a1:ec:e3:15:4a:57:12:61:15:fc:1e:
         35:29:4f:44:f4:08:69:c0:8a:51:0f:8a:b5:a7:20:d3:06:52:
         b5:4e:6b:c2:8a:72:7b:d5:42:74:47:e0:60:c4:cb:53:a6:be:
         77:9e:a4:23:ab:4d:38:fe:6f:5b:de:2a:fd:12:57:a5:4c:0b:
         f3:2f:88:e1:0a:10:b9:24:d9:fd:1a:2a:1b:08:2f:97:46:c5:
         7c:01:4e:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZayWL44b6rO6+mXkqMQYZ2PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxYzI2YmI1NzRiODliOGMxODY2Zjg0NzRiYjFjYjAwMzI2
NGVjMjAwHhcNMjUwNTA5MDAwMTIyWhcNMjUwNTEwMDAwMTIyWjAzMTEwLwYDVQQD
Eyg4ODg1Y2IwNjRiNGUxMjU4NTVjMmViNjU5ZTQ3Y2E2NDU1MWUxMzgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3CB2fP1dpeJ3ReqAVJNvpT0oCFpl
1g/ZXogizFo/FYP0LU07JGvUdx9lNNOq5ON8QiMU8RJZjltZUAc3GAwq+NKRoJpI
A7wA6usEDyOmBD8OBvaL2cGavICE0DIKpY3UFNXKhEhuDvx3oepb1HCQse+Zh6F/
rJLCUO7xy9g8lEBkRci8J1hB57X1tYHzMwOAXcdcs9Rt2v8y89xNsVJ7IkVvJJF6
w7PSBi8gOcI3HpqbYdixcNMykyFEWZP9A5xWR2SRZLrXeoYh+932+qW7WOOUOSP2
lQzU+fKTkNpDKmqC/F14sWKsVvHszsIyLRzuR/fuTnxGmeCGS0rsIEYpPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIiFywZLThJYVcLrZZ5HymRVHhOBMB8GA1UdIwQY
MBaAFMHCa7V0uJuMGGb4R0uxywAyZOwgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2NKcnRYUzRtNHdZWnZoSFM3SExBREprN0NBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9kZjM4ZGEtNzVjZC00ZTIxLWFkMzgt
ZjJhMmE1ZDUwNDVlLzEvd2NKcnRYUzRtNHdZWnZoSFM3SExBREprN0NBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9kZjM4ZGEtNzVjZC00ZTIxLWFkMzgtZjJhMmE1ZDUwNDVl
LzEvd2NKcnRYUzRtNHdZWnZoSFM3SExBREprN0NBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADBmVFjK0
GWF5Ziywh5updBqmgDjoO2VojdO7dBPKHWn7TPMwmKxlEM2WCw41JOdxqm9q45/B
M378rV51pg6naFndF83QjyGTGn1tsGBFOAxEwlb+LqcH/ra+ZpUp8WCiP1rEY5Ep
cBOzXVDTEEphVZ5jcf53Za1VTuuxthLw9aKtZbh8ghCzdxX9ksdZ7SZVOAf7em7R
RwGlbszADUREe4t+2ZnTbriWX6Hs4xVKVxJhFfweNSlPRPQIacCKUQ+Ktacg0wZS
tU5rwopye9VCdEfgYMTLU6a+d56kI6tNOP5vW94q/RJXpUwL8y+I4QoQuSTZ/Roq
Gwgvl0bFfAFODg==
-----END CERTIFICATE-----
Generated at Fri May 9 02:58:30 2025 by rpki-client