Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/2eed24-0dff-4400-a57c-459ddc631bcc/1/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.mft
File:                     WgLKgbnwqXE7CZaH3IFVHEXj-Pw.mft (raw, json)
Hash identifier:          fVAIi3gC9YUICYW4S4Gi3dlqGPRhQ/IQ8UYGZTyB93M=
Subject key identifier:   44:F8:F0:12:50:4A:A9:C3:B2:E9:26:BC:DD:94:E9:E4:7D:F5:B3:13
Authority key identifier: 5A:02:CA:81:B9:F0:A9:71:3B:09:96:87:DC:81:55:1C:45:E3:F8:FC
Certificate issuer:       /CN=5a02ca81b9f0a9713b099687dc81551c45e3f8fc
Certificate serial:       0196C9F250A09B17B620A917BFFD58AB1490
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/2eed24-0dff-4400-a57c-459ddc631bcc/1/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.mft
Manifest number:          080B
Signing time:             Tue 13 May 2025 14:00:22 +0000
Manifest this update:     Tue 13 May 2025 14:00:22 +0000
Manifest next update:     Wed 14 May 2025 14:00:22 +0000
Files and hashes:         1: WgLKgbnwqXE7CZaH3IFVHEXj-Pw.crl (hash: cifR+/wUIuu6vVxgqhSt/fRPk4d3g1GpNrnAFYQLe3U=)
                          2: fPdaDi8Q6kMa2if35eGudsLEQ8o.roa (hash: vc9oGx1t9ju95rv1gQobwnbtC4KxraULnnXmJJ4pSRU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/2eed24-0dff-4400-a57c-459ddc631bcc/1/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/2eed24-0dff-4400-a57c-459ddc631bcc/1/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 May 2025 14:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c9:f2:50:a0:9b:17:b6:20:a9:17:bf:fd:58:ab:14:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a02ca81b9f0a9713b099687dc81551c45e3f8fc
        Validity
            Not Before: May 13 14:00:22 2025 GMT
            Not After : May 14 14:00:22 2025 GMT
        Subject: CN=44f8f012504aa9c3b2e926bcdd94e9e47df5b313
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b7:ea:7a:78:3a:02:7e:77:a5:b0:a4:fa:24:
                    f7:9f:4f:fe:7b:f1:b8:98:3a:4a:52:b0:01:00:5d:
                    79:cc:7d:9a:08:d1:88:04:c0:5b:a0:f2:1d:cb:52:
                    7b:60:4d:70:c9:c7:e0:d0:60:91:a8:31:f7:5c:83:
                    18:67:c5:df:88:a7:1a:62:54:cb:05:41:98:52:38:
                    8b:3c:0e:75:b9:6c:5e:02:70:df:ee:f1:57:93:7b:
                    b3:39:72:d1:50:b9:74:79:95:41:05:68:95:ff:57:
                    1d:9d:83:b2:2c:cb:16:da:13:a4:16:20:ee:e2:1d:
                    06:ee:57:04:38:13:33:86:af:a0:90:49:5d:1a:6d:
                    f2:20:14:09:30:27:3b:da:58:4c:ac:64:f4:3c:b1:
                    47:4d:0c:54:6a:5d:e5:09:40:ee:e0:ea:7a:82:31:
                    f3:cf:51:85:40:da:16:84:da:82:c0:f6:4b:87:2d:
                    c9:d9:22:d8:d0:1d:68:c2:30:fc:da:94:68:58:74:
                    74:7a:e6:cd:8f:91:9b:7c:f0:38:49:3f:85:22:cd:
                    84:1a:a2:c2:71:49:a6:d0:bd:2d:d2:09:c9:45:2b:
                    b4:28:4e:51:19:ab:ab:3c:b2:cb:de:47:33:6a:63:
                    b7:6a:b5:97:fd:f1:84:47:f5:97:fb:28:a2:44:bd:
                    27:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:F8:F0:12:50:4A:A9:C3:B2:E9:26:BC:DD:94:E9:E4:7D:F5:B3:13
            X509v3 Authority Key Identifier:
                keyid:5A:02:CA:81:B9:F0:A9:71:3B:09:96:87:DC:81:55:1C:45:E3:F8:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/2eed24-0dff-4400-a57c-459ddc631bcc/1/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/2eed24-0dff-4400-a57c-459ddc631bcc/1/WgLKgbnwqXE7CZaH3IFVHEXj-Pw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:72:39:ad:20:a5:91:a0:e4:87:e6:03:05:aa:96:f9:07:cf:
         dd:6d:ec:36:73:f3:b9:88:6b:8f:b2:9b:e4:13:d6:37:34:d1:
         51:3e:4a:df:a8:5e:8a:b1:e2:c5:aa:7f:bd:2f:54:0d:5b:b7:
         66:d3:3f:f1:1a:b2:cd:54:63:8b:fd:20:5e:2e:40:33:d5:bd:
         84:c6:4a:0f:16:42:f8:38:29:09:82:dc:a4:4a:12:05:ad:df:
         a5:d8:2a:c9:97:02:a8:4b:bf:41:9a:97:9e:80:c3:5c:c3:dc:
         f8:6b:7c:fe:b0:28:ca:df:6d:65:80:4f:85:5b:53:7e:ff:46:
         af:ec:fa:75:51:37:79:f3:d3:77:e9:0c:d8:99:8a:5c:f6:b4:
         05:da:53:ba:22:ce:3c:c9:d7:79:68:ec:c0:ba:10:9a:f3:89:
         c3:1a:a5:3f:b5:37:c2:81:54:0a:64:ef:dc:00:54:61:f5:44:
         8b:10:a8:cf:90:43:64:a0:43:d4:4d:eb:cc:ba:7d:77:b6:d3:
         72:bc:74:3a:7e:fe:1b:d8:e5:3d:65:33:fd:1a:fa:e8:7e:73:
         c6:2f:c5:a8:73:7c:45:ff:a4:ec:ce:4a:06:02:47:c0:7c:3a:
         21:20:c8:19:e1:41:34:ca:93:32:27:c2:5d:c8:41:f6:fc:08:
         4f:3f:75:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbJ8lCgmxe2IKkXv/1YqxSQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhMDJjYTgxYjlmMGE5NzEzYjA5OTY4N2RjODE1NTFjNDVl
M2Y4ZmMwHhcNMjUwNTEzMTQwMDIyWhcNMjUwNTE0MTQwMDIyWjAzMTEwLwYDVQQD
Eyg0NGY4ZjAxMjUwNGFhOWMzYjJlOTI2YmNkZDk0ZTllNDdkZjViMzEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrfqeng6An53pbCk+iT3n0/+e/G4
mDpKUrABAF15zH2aCNGIBMBboPIdy1J7YE1wycfg0GCRqDH3XIMYZ8XfiKcaYlTL
BUGYUjiLPA51uWxeAnDf7vFXk3uzOXLRULl0eZVBBWiV/1cdnYOyLMsW2hOkFiDu
4h0G7lcEOBMzhq+gkEldGm3yIBQJMCc72lhMrGT0PLFHTQxUal3lCUDu4Op6gjHz
z1GFQNoWhNqCwPZLhy3J2SLY0B1owjD82pRoWHR0eubNj5GbfPA4ST+FIs2EGqLC
cUmm0L0t0gnJRSu0KE5RGaurPLLL3kczamO3arWX/fGER/WX+yiiRL0nsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFET48BJQSqnDsukmvN2U6eR99bMTMB8GA1UdIwQY
MBaAFFoCyoG58KlxOwmWh9yBVRxF4/j8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2dMS2dibndxWEU3Q1phSDNJRlZIRVhqLVB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8yZWVkMjQtMGRmZi00NDAwLWE1N2Mt
NDU5ZGRjNjMxYmNjLzEvV2dMS2dibndxWEU3Q1phSDNJRlZIRVhqLVB3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni8yZWVkMjQtMGRmZi00NDAwLWE1N2MtNDU5ZGRjNjMxYmNj
LzEvV2dMS2dibndxWEU3Q1phSDNJRlZIRVhqLVB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACHI5rSCl
kaDkh+YDBaqW+QfP3W3sNnPzuYhrj7Kb5BPWNzTRUT5K36heirHixap/vS9UDVu3
ZtM/8RqyzVRji/0gXi5AM9W9hMZKDxZC+DgpCYLcpEoSBa3fpdgqyZcCqEu/QZqX
noDDXMPc+Gt8/rAoyt9tZYBPhVtTfv9Gr+z6dVE3efPTd+kM2JmKXPa0BdpTuiLO
PMnXeWjswLoQmvOJwxqlP7U3woFUCmTv3ABUYfVEixCoz5BDZKBD1E3rzLp9d7bT
crx0On7+G9jlPWUz/Rr66H5zxi/FqHN8Rf+k7M5KBgJHwHw6ISDIGeFBNMqTMifC
XchB9vwITz91zA==
-----END CERTIFICATE-----
Generated at Tue May 13 20:39:19 2025 by rpki-client