Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/a3b8cd-56fa-43a1-8dc1-2e5af5b68781/1/wSgWX47uGF-q-aozh19O5BKxD4w.mft
File:                     wSgWX47uGF-q-aozh19O5BKxD4w.mft (raw, json)
Hash identifier:          38hiTBTc26QpSgqDrVkO2JnNpVuhhOwsY9YzK2PXuUY=
Subject key identifier:   E7:03:94:A2:DA:60:85:50:E8:D8:03:66:68:3C:C8:0E:7B:26:E5:13
Authority key identifier: C1:28:16:5F:8E:EE:18:5F:AA:F9:AA:33:87:5F:4E:E4:12:B1:0F:8C
Certificate issuer:       /CN=c128165f8eee185faaf9aa33875f4ee412b10f8c
Certificate serial:       0196B5C759C74090ADB2C314497259E87419
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wSgWX47uGF-q-aozh19O5BKxD4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b8cd-56fa-43a1-8dc1-2e5af5b68781/1/wSgWX47uGF-q-aozh19O5BKxD4w.mft
Manifest number:          0F2A
Signing time:             Fri 09 May 2025 16:01:02 +0000
Manifest this update:     Fri 09 May 2025 16:01:02 +0000
Manifest next update:     Sat 10 May 2025 16:01:02 +0000
Files and hashes:         1: IGaAmqWaXDC8Jd-8Qa85p2QBKSs.roa (hash: m3bXj57F8BUs8aS9v6HaMmQ2fB5Rx7CSbbCBnNNdBUY=)
                          2: wSgWX47uGF-q-aozh19O5BKxD4w.crl (hash: zC6qJZ2Tw6YW1v45mScHScBPAcjLhiASWZwR3x4wSj0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b8cd-56fa-43a1-8dc1-2e5af5b68781/1/wSgWX47uGF-q-aozh19O5BKxD4w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b8cd-56fa-43a1-8dc1-2e5af5b68781/1/wSgWX47uGF-q-aozh19O5BKxD4w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wSgWX47uGF-q-aozh19O5BKxD4w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 May 2025 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b5:c7:59:c7:40:90:ad:b2:c3:14:49:72:59:e8:74:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c128165f8eee185faaf9aa33875f4ee412b10f8c
        Validity
            Not Before: May  9 16:01:02 2025 GMT
            Not After : May 10 16:01:02 2025 GMT
        Subject: CN=e70394a2da608550e8d80366683cc80e7b26e513
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f8:c0:8a:b6:5c:e4:1f:16:81:47:6d:2b:8f:
                    4a:46:84:c3:e6:30:c7:c1:21:39:a3:3f:c0:5a:fc:
                    9e:87:5b:3a:60:dd:f7:0d:b4:e3:4d:c7:ca:85:dc:
                    de:fb:cc:f7:8b:d8:bf:a6:26:41:b9:16:91:99:b6:
                    08:9b:b0:40:dc:b2:37:0f:e4:a5:97:d1:bf:64:4e:
                    5d:66:ee:1d:fc:1d:30:a2:d7:c8:db:ae:95:de:01:
                    d5:3f:33:d3:b3:a2:56:66:67:72:6d:bc:86:03:02:
                    6f:a4:50:6a:09:84:eb:09:e1:58:fc:e5:cd:52:59:
                    e1:3a:e8:c0:61:d3:7b:19:d3:91:f1:5c:75:1b:91:
                    b4:6f:98:8e:26:e2:39:65:c8:67:c8:95:ee:3b:06:
                    f5:05:3a:be:0d:b4:7c:42:65:82:33:0b:b4:41:0d:
                    01:b8:50:ef:4d:31:6e:5f:b9:38:e9:4e:0e:68:3e:
                    00:40:80:65:ba:a7:ab:e3:f0:82:99:fd:3c:42:c4:
                    ab:79:60:b1:d0:dc:3e:8a:b8:96:52:11:58:40:9c:
                    eb:99:21:05:9b:99:d1:71:f0:9f:49:72:65:34:15:
                    ea:88:f8:80:18:e4:6d:1a:e2:ce:6b:42:46:16:8a:
                    10:50:89:7e:1c:6a:c4:3d:f8:07:21:88:de:b3:50:
                    90:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:03:94:A2:DA:60:85:50:E8:D8:03:66:68:3C:C8:0E:7B:26:E5:13
            X509v3 Authority Key Identifier:
                keyid:C1:28:16:5F:8E:EE:18:5F:AA:F9:AA:33:87:5F:4E:E4:12:B1:0F:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSgWX47uGF-q-aozh19O5BKxD4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b8cd-56fa-43a1-8dc1-2e5af5b68781/1/wSgWX47uGF-q-aozh19O5BKxD4w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b8cd-56fa-43a1-8dc1-2e5af5b68781/1/wSgWX47uGF-q-aozh19O5BKxD4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:da:ff:f5:51:84:67:3d:26:81:35:76:fb:8d:06:d4:4a:ca:
         2a:db:f9:82:10:73:40:74:b5:c7:ed:68:3f:a4:cf:79:d3:ec:
         3d:67:ea:67:59:fe:f0:33:3a:a3:ab:40:54:d2:1d:31:56:6c:
         0e:e8:aa:d9:7e:52:f2:8d:7a:07:4c:b1:10:d9:85:b1:e2:3b:
         62:08:12:1b:33:44:0e:af:ed:e4:51:7c:5e:7a:9e:5f:59:59:
         45:2d:d6:32:9f:8d:2d:dd:81:95:26:09:5f:e4:43:95:b1:af:
         a6:92:cc:2b:d6:0b:59:1a:fd:85:dd:89:32:2d:c2:1e:a0:bf:
         29:a6:5f:68:86:4c:16:8c:d7:fb:dc:3b:e5:d4:73:fa:28:cc:
         b8:52:09:07:db:64:0e:0f:77:0c:c4:39:03:32:ba:12:82:f3:
         61:5a:e2:ec:c1:87:2d:59:87:ca:8a:db:8a:b2:f1:d1:c1:bf:
         82:e1:06:52:91:a7:54:32:9b:7d:ea:96:66:84:e7:58:dd:82:
         be:19:8c:62:d7:ca:16:24:59:dd:dd:2c:62:fb:f0:c0:b3:1b:
         ab:d1:21:b6:36:6f:04:ee:5d:fd:91:66:5e:ba:83:3b:fd:c1:
         4a:80:4a:d9:88:30:3b:8c:ed:16:b4:08:dc:db:c8:6e:8e:0b:
         4b:55:aa:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa1x1nHQJCtssMUSXJZ6HQZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxMjgxNjVmOGVlZTE4NWZhYWY5YWEzMzg3NWY0ZWU0MTJi
MTBmOGMwHhcNMjUwNTA5MTYwMTAyWhcNMjUwNTEwMTYwMTAyWjAzMTEwLwYDVQQD
EyhlNzAzOTRhMmRhNjA4NTUwZThkODAzNjY2ODNjYzgwZTdiMjZlNTEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/jAirZc5B8WgUdtK49KRoTD5jDH
wSE5oz/AWvyeh1s6YN33DbTjTcfKhdze+8z3i9i/piZBuRaRmbYIm7BA3LI3D+Sl
l9G/ZE5dZu4d/B0wotfI266V3gHVPzPTs6JWZmdybbyGAwJvpFBqCYTrCeFY/OXN
UlnhOujAYdN7GdOR8Vx1G5G0b5iOJuI5ZchnyJXuOwb1BTq+DbR8QmWCMwu0QQ0B
uFDvTTFuX7k46U4OaD4AQIBluqer4/CCmf08QsSreWCx0Nw+iriWUhFYQJzrmSEF
m5nRcfCfSXJlNBXqiPiAGORtGuLOa0JGFooQUIl+HGrEPfgHIYjes1CQzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOcDlKLaYIVQ6NgDZmg8yA57JuUTMB8GA1UdIwQY
MBaAFMEoFl+O7hhfqvmqM4dfTuQSsQ+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1NnV1g0N3VHRi1xLWFvemgxOU81Qkt4RDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9hM2I4Y2QtNTZmYS00M2ExLThkYzEt
MmU1YWY1YjY4NzgxLzEvd1NnV1g0N3VHRi1xLWFvemgxOU81Qkt4RDR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9hM2I4Y2QtNTZmYS00M2ExLThkYzEtMmU1YWY1YjY4Nzgx
LzEvd1NnV1g0N3VHRi1xLWFvemgxOU81Qkt4RDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGdr/9VGE
Zz0mgTV2+40G1ErKKtv5ghBzQHS1x+1oP6TPedPsPWfqZ1n+8DM6o6tAVNIdMVZs
Duiq2X5S8o16B0yxENmFseI7YggSGzNEDq/t5FF8XnqeX1lZRS3WMp+NLd2BlSYJ
X+RDlbGvppLMK9YLWRr9hd2JMi3CHqC/KaZfaIZMFozX+9w75dRz+ijMuFIJB9tk
Dg93DMQ5AzK6EoLzYVri7MGHLVmHyorbirLx0cG/guEGUpGnVDKbfeqWZoTnWN2C
vhmMYtfKFiRZ3d0sYvvwwLMbq9EhtjZvBO5d/ZFmXrqDO/3BSoBK2YgwO4ztFrQI
3NvIbo4LS1WqtQ==
-----END CERTIFICATE-----
Generated at Fri May 9 18:49:51 2025 by rpki-client