Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/e28ba6-aaaf-4d33-b8dc-0aee360b0ba4/1/WmjWmdGpRXx4rPvsAE-YZ3qkzBY.mft
File:                     WmjWmdGpRXx4rPvsAE-YZ3qkzBY.mft (raw, json)
Hash identifier:          Rcbzw6HJ5WMiJwsgnucFNeS5fDDUh9Isn7O3+4P+cuQ=
Subject key identifier:   72:5C:E5:3B:54:75:A4:85:7A:F7:C5:C9:FB:8A:98:5E:37:B7:D1:9D
Authority key identifier: 5A:68:D6:99:D1:A9:45:7C:78:AC:FB:EC:00:4F:98:67:7A:A4:CC:16
Certificate issuer:       /CN=5a68d699d1a9457c78acfbec004f98677aa4cc16
Certificate serial:       0196BF6FABF13A0CA01F7E5151DE71D7F9FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WmjWmdGpRXx4rPvsAE-YZ3qkzBY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/e28ba6-aaaf-4d33-b8dc-0aee360b0ba4/1/WmjWmdGpRXx4rPvsAE-YZ3qkzBY.mft
Manifest number:          1539
Signing time:             Sun 11 May 2025 13:01:28 +0000
Manifest this update:     Sun 11 May 2025 13:01:28 +0000
Manifest next update:     Mon 12 May 2025 13:01:28 +0000
Files and hashes:         1: 3kN5HczaKLC1vDzc4T6OQ767Uq0.roa (hash: ZGwS+xHk4JSopWZ3QlH5/tdsWooS6ScieKAhsK9alu4=)
                          2: KOtOprlo9eWM-S3ee18Bkra0s7U.roa (hash: YzsVJr77Droy7DJXTIqItUpDk3Xa+3GyD3WsTRtaj84=)
                          3: VJASrMOyLg85AblR9YiVSWxHxZs.roa (hash: REvGVujT8OfpbkY6GeJPSg8UwmOkMcFqkev3bGvsPwQ=)
                          4: WmjWmdGpRXx4rPvsAE-YZ3qkzBY.crl (hash: D0XhJ8pfDbDXhrUV1vYnrklfCtJ2CZWhW1Y1BDFnGMU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/e28ba6-aaaf-4d33-b8dc-0aee360b0ba4/1/WmjWmdGpRXx4rPvsAE-YZ3qkzBY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/e28ba6-aaaf-4d33-b8dc-0aee360b0ba4/1/WmjWmdGpRXx4rPvsAE-YZ3qkzBY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WmjWmdGpRXx4rPvsAE-YZ3qkzBY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 13:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bf:6f:ab:f1:3a:0c:a0:1f:7e:51:51:de:71:d7:f9:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a68d699d1a9457c78acfbec004f98677aa4cc16
        Validity
            Not Before: May 11 13:01:28 2025 GMT
            Not After : May 12 13:01:28 2025 GMT
        Subject: CN=725ce53b5475a4857af7c5c9fb8a985e37b7d19d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:53:97:8b:30:91:a6:d1:34:d4:49:9c:0f:86:
                    96:7d:89:ca:50:9d:8e:83:1d:b3:a2:7e:30:16:b1:
                    8b:64:b7:a4:34:0b:fc:8d:c4:49:a5:c5:d0:17:15:
                    e0:44:12:5a:e7:f4:f1:7f:15:1e:4c:c7:ae:71:c8:
                    dd:09:dc:31:94:f6:51:9e:ae:2d:21:88:5f:68:8c:
                    9b:e7:18:cf:4b:df:1c:86:71:a6:2e:e6:5e:fa:90:
                    32:8f:4f:14:af:81:4e:5f:12:3c:ca:b2:3a:6a:22:
                    f4:35:7c:d5:aa:96:87:04:da:9f:16:8b:3c:b5:9e:
                    a1:73:5b:76:46:b8:87:1f:0b:0a:12:c3:12:96:05:
                    6b:d0:69:cb:8e:f8:14:f7:4c:60:3b:1d:a8:1d:2b:
                    0d:46:ad:5d:5f:62:2d:ae:4c:05:d1:a8:6d:36:7f:
                    01:fe:07:bf:cf:37:b5:53:8a:4f:66:54:1b:8c:f1:
                    7d:78:4b:fa:68:33:53:c4:62:bc:2f:02:74:85:ca:
                    5d:01:af:5c:1c:0b:53:76:8d:9d:d8:bf:ea:76:5f:
                    6b:98:92:45:4f:f1:84:30:13:f0:ed:d6:d8:ab:c5:
                    fb:f2:9b:59:7b:7b:81:06:5b:fb:1f:ee:f9:30:0a:
                    88:76:a4:a3:d0:aa:55:c3:df:aa:30:c8:ad:42:6f:
                    8e:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:5C:E5:3B:54:75:A4:85:7A:F7:C5:C9:FB:8A:98:5E:37:B7:D1:9D
            X509v3 Authority Key Identifier:
                keyid:5A:68:D6:99:D1:A9:45:7C:78:AC:FB:EC:00:4F:98:67:7A:A4:CC:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WmjWmdGpRXx4rPvsAE-YZ3qkzBY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e28ba6-aaaf-4d33-b8dc-0aee360b0ba4/1/WmjWmdGpRXx4rPvsAE-YZ3qkzBY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e28ba6-aaaf-4d33-b8dc-0aee360b0ba4/1/WmjWmdGpRXx4rPvsAE-YZ3qkzBY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:21:c1:9a:12:b3:66:de:86:b1:33:95:64:59:94:d6:41:38:
         c6:ca:93:69:e1:ad:c4:92:23:87:dd:23:0f:9f:24:09:39:38:
         d0:54:bc:fb:a3:9b:dc:1e:91:88:12:06:70:05:66:e7:d4:77:
         8e:e3:c4:1f:14:6a:a9:83:ff:31:39:40:46:ad:71:8e:87:4b:
         be:73:de:14:2b:39:0b:0d:0c:5f:a7:41:d2:ca:36:89:d2:8c:
         3e:5b:3b:64:80:f8:3e:24:7d:1e:70:8c:0d:08:4b:64:b7:18:
         12:40:14:22:72:52:21:6c:76:d8:bd:f9:f7:a2:17:46:0f:89:
         05:c7:88:93:9f:c0:79:24:13:62:c2:dc:9b:c6:82:be:b5:c3:
         88:59:67:da:80:85:1a:16:09:59:b6:20:d9:f6:57:fd:96:06:
         aa:31:68:5e:4f:44:43:ba:fd:19:71:06:50:4e:43:7c:0d:7d:
         73:bd:ee:db:1c:fb:b0:4f:a6:df:f2:af:24:d3:0c:91:8e:a9:
         4c:4a:35:0f:36:ed:6d:65:8d:21:33:e3:a8:01:30:2b:96:a8:
         cc:94:d4:74:0e:5d:59:d2:63:cf:ea:d2:d6:da:04:34:e9:2f:
         f5:4f:6c:0f:02:52:1d:4e:e4:f7:a8:10:b3:4e:b8:72:95:aa:
         60:74:c1:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa/b6vxOgygH35RUd5x1/n7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhNjhkNjk5ZDFhOTQ1N2M3OGFjZmJlYzAwNGY5ODY3N2Fh
NGNjMTYwHhcNMjUwNTExMTMwMTI4WhcNMjUwNTEyMTMwMTI4WjAzMTEwLwYDVQQD
Eyg3MjVjZTUzYjU0NzVhNDg1N2FmN2M1YzlmYjhhOTg1ZTM3YjdkMTlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFOXizCRptE01EmcD4aWfYnKUJ2O
gx2zon4wFrGLZLekNAv8jcRJpcXQFxXgRBJa5/TxfxUeTMeuccjdCdwxlPZRnq4t
IYhfaIyb5xjPS98chnGmLuZe+pAyj08Ur4FOXxI8yrI6aiL0NXzVqpaHBNqfFos8
tZ6hc1t2RriHHwsKEsMSlgVr0GnLjvgU90xgOx2oHSsNRq1dX2ItrkwF0ahtNn8B
/ge/zze1U4pPZlQbjPF9eEv6aDNTxGK8LwJ0hcpdAa9cHAtTdo2d2L/qdl9rmJJF
T/GEMBPw7dbYq8X78ptZe3uBBlv7H+75MAqIdqSj0KpVw9+qMMitQm+O2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHJc5TtUdaSFevfFyfuKmF43t9GdMB8GA1UdIwQY
MBaAFFpo1pnRqUV8eKz77ABPmGd6pMwWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV21qV21kR3BSWHg0clB2c0FFLVlaM3FrekJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9lMjhiYTYtYWFhZi00ZDMzLWI4ZGMt
MGFlZTM2MGIwYmE0LzEvV21qV21kR3BSWHg0clB2c0FFLVlaM3FrekJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9lMjhiYTYtYWFhZi00ZDMzLWI4ZGMtMGFlZTM2MGIwYmE0
LzEvV21qV21kR3BSWHg0clB2c0FFLVlaM3FrekJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhSHBmhKz
Zt6GsTOVZFmU1kE4xsqTaeGtxJIjh90jD58kCTk40FS8+6Ob3B6RiBIGcAVm59R3
juPEHxRqqYP/MTlARq1xjodLvnPeFCs5Cw0MX6dB0so2idKMPls7ZID4PiR9HnCM
DQhLZLcYEkAUInJSIWx22L3596IXRg+JBceIk5/AeSQTYsLcm8aCvrXDiFln2oCF
GhYJWbYg2fZX/ZYGqjFoXk9EQ7r9GXEGUE5DfA19c73u2xz7sE+m3/KvJNMMkY6p
TEo1DzbtbWWNITPjqAEwK5aozJTUdA5dWdJjz+rS1toENOkv9U9sDwJSHU7k96gQ
s064cpWqYHTBVg==
-----END CERTIFICATE-----
Generated at Sun May 11 22:57:37 2025 by rpki-client