Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/03bd39-f9e6-4e39-baff-c2941214cb96/1/WyUo3AddUec-4NCQ4dKh9c-uj_s.mft
File:                     WyUo3AddUec-4NCQ4dKh9c-uj_s.mft (raw, json)
Hash identifier:          /9eTXG3EkR++Pv1SvgyobQloxsmq/v7zNjGWk7o1OMQ=
Subject key identifier:   03:64:17:4F:D4:5E:98:70:01:A0:82:47:6C:C0:7C:B3:B0:0F:27:23
Authority key identifier: 5B:25:28:DC:07:5D:51:E7:3E:E0:D0:90:E1:D2:A1:F5:CF:AE:8F:FB
Certificate issuer:       /CN=5b2528dc075d51e73ee0d090e1d2a1f5cfae8ffb
Certificate serial:       0197B632EA4D533A323CF788F02E364BAB12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WyUo3AddUec-4NCQ4dKh9c-uj_s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/03bd39-f9e6-4e39-baff-c2941214cb96/1/WyUo3AddUec-4NCQ4dKh9c-uj_s.mft
Manifest number:          BA
Signing time:             Sat 28 Jun 2025 11:01:19 +0000
Manifest this update:     Sat 28 Jun 2025 11:01:19 +0000
Manifest next update:     Sun 29 Jun 2025 11:01:19 +0000
Files and hashes:         1: WyUo3AddUec-4NCQ4dKh9c-uj_s.crl (hash: bOMU41H/Ni53rgxudZ2VFz/gmgoTA53vbR4UNHPVrt8=)
                          2: yJQwQMARRrVe9vIkjsREE8o5TT8.roa (hash: eXLzlsDPHHeDqRfh3yuG7C5MD8Da8VfpIofRm28xfrE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/03bd39-f9e6-4e39-baff-c2941214cb96/1/WyUo3AddUec-4NCQ4dKh9c-uj_s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/03bd39-f9e6-4e39-baff-c2941214cb96/1/WyUo3AddUec-4NCQ4dKh9c-uj_s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WyUo3AddUec-4NCQ4dKh9c-uj_s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:32:ea:4d:53:3a:32:3c:f7:88:f0:2e:36:4b:ab:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b2528dc075d51e73ee0d090e1d2a1f5cfae8ffb
        Validity
            Not Before: Jun 28 11:01:19 2025 GMT
            Not After : Jun 29 11:01:19 2025 GMT
        Subject: CN=0364174fd45e987001a082476cc07cb3b00f2723
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:87:9a:9b:95:0d:65:5b:86:ef:d4:6a:d9:ee:
                    26:52:4f:e5:74:6f:d1:a3:87:20:e3:80:5c:77:7f:
                    3a:f4:49:fd:90:44:d0:f6:d8:94:23:84:c2:c9:c4:
                    a8:af:d0:1d:fc:83:ef:33:4f:3a:fc:a3:f6:ee:ca:
                    30:1b:4e:7e:a5:55:4c:6f:3c:04:13:0b:11:20:48:
                    3a:09:97:11:ba:83:c3:96:53:42:6f:23:4d:51:64:
                    37:53:73:dd:88:f5:8f:fe:da:0e:ba:d7:59:fc:d9:
                    ea:06:3c:88:21:72:64:ff:7a:3c:02:6a:a0:4a:ef:
                    13:5f:7a:26:c0:19:bc:5b:b5:f0:c5:54:c2:12:56:
                    09:5d:13:e8:1a:18:9b:2f:8f:1b:0d:01:32:73:23:
                    de:7b:6b:0b:fe:7d:a8:5c:bb:a7:df:73:74:28:14:
                    18:73:bf:b3:02:47:ff:13:45:62:b6:3a:1e:22:f7:
                    67:9b:7a:72:b8:a4:fc:ec:36:14:b7:49:19:12:c4:
                    b1:c5:03:51:34:81:39:b3:d9:2b:d5:c3:c0:34:ff:
                    b1:f5:b0:27:c4:e9:e9:61:a8:51:63:bc:c9:8c:db:
                    99:cf:42:3d:88:6d:fd:c0:56:5e:fd:86:71:4e:d9:
                    f3:5f:06:86:7c:1e:9b:ed:6e:bc:ee:fe:f7:cd:6f:
                    b5:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:64:17:4F:D4:5E:98:70:01:A0:82:47:6C:C0:7C:B3:B0:0F:27:23
            X509v3 Authority Key Identifier:
                keyid:5B:25:28:DC:07:5D:51:E7:3E:E0:D0:90:E1:D2:A1:F5:CF:AE:8F:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WyUo3AddUec-4NCQ4dKh9c-uj_s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/03bd39-f9e6-4e39-baff-c2941214cb96/1/WyUo3AddUec-4NCQ4dKh9c-uj_s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/03bd39-f9e6-4e39-baff-c2941214cb96/1/WyUo3AddUec-4NCQ4dKh9c-uj_s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:71:f5:9d:e7:b0:62:4e:a9:71:82:21:45:6d:64:e6:00:9e:
         22:9c:ca:2a:15:ca:e3:54:fb:3a:92:3c:49:47:25:62:b7:ec:
         71:37:ea:66:07:7e:82:a0:84:77:8c:5e:33:4f:11:6c:c7:0e:
         0a:19:f6:7f:d7:93:84:2e:01:d8:2d:24:b2:ae:4b:c5:f1:e7:
         e1:8d:9c:1c:ec:7a:bf:c4:3a:49:0c:85:5c:1a:5a:05:2e:0d:
         12:55:d9:7f:17:aa:61:e9:b2:e8:9c:9a:6c:8a:9b:c8:9b:8c:
         56:d4:eb:4a:9a:ee:78:04:5f:48:28:b4:32:6a:77:c6:60:26:
         f3:6c:7a:6e:33:a6:c3:a7:84:1c:80:d2:60:d9:21:36:88:06:
         8f:01:79:ac:6a:ab:c9:db:f0:3e:7d:77:0d:06:5c:90:69:07:
         b2:67:63:64:62:47:74:e7:b1:67:7f:68:ef:c6:3b:47:c4:97:
         57:0f:03:da:e3:ff:c2:df:fb:83:54:13:0f:24:c4:ab:dc:b4:
         c0:c2:c5:d8:9d:37:ec:05:20:90:ef:9c:18:4b:3f:e3:d8:7a:
         ca:bd:d0:2b:d8:16:e8:bb:d7:15:17:10:c9:a1:73:43:07:b4:
         54:3b:6f:88:d5:76:28:f5:ad:85:0d:65:74:a6:b3:07:7a:8d:
         24:d5:8c:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2MupNUzoyPPeI8C42S6sSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViMjUyOGRjMDc1ZDUxZTczZWUwZDA5MGUxZDJhMWY1Y2Zh
ZThmZmIwHhcNMjUwNjI4MTEwMTE5WhcNMjUwNjI5MTEwMTE5WjAzMTEwLwYDVQQD
EygwMzY0MTc0ZmQ0NWU5ODcwMDFhMDgyNDc2Y2MwN2NiM2IwMGYyNzIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIeam5UNZVuG79Rq2e4mUk/ldG/R
o4cg44Bcd3869En9kETQ9tiUI4TCycSor9Ad/IPvM086/KP27sowG05+pVVMbzwE
EwsRIEg6CZcRuoPDllNCbyNNUWQ3U3PdiPWP/toOutdZ/NnqBjyIIXJk/3o8Amqg
Su8TX3omwBm8W7XwxVTCElYJXRPoGhibL48bDQEycyPee2sL/n2oXLun33N0KBQY
c7+zAkf/E0VitjoeIvdnm3pyuKT87DYUt0kZEsSxxQNRNIE5s9kr1cPANP+x9bAn
xOnpYahRY7zJjNuZz0I9iG39wFZe/YZxTtnzXwaGfB6b7W687v73zW+13wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFANkF0/UXphwAaCCR2zAfLOwDycjMB8GA1UdIwQY
MBaAFFslKNwHXVHnPuDQkOHSofXPro/7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3lVbzNBZGRVZWMtNE5DUTRkS2g5Yy11al9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8wM2JkMzktZjllNi00ZTM5LWJhZmYt
YzI5NDEyMTRjYjk2LzEvV3lVbzNBZGRVZWMtNE5DUTRkS2g5Yy11al9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS8wM2JkMzktZjllNi00ZTM5LWJhZmYtYzI5NDEyMTRjYjk2
LzEvV3lVbzNBZGRVZWMtNE5DUTRkS2g5Yy11al9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEXH1neew
Yk6pcYIhRW1k5gCeIpzKKhXK41T7OpI8SUclYrfscTfqZgd+gqCEd4xeM08RbMcO
Chn2f9eThC4B2C0ksq5LxfHn4Y2cHOx6v8Q6SQyFXBpaBS4NElXZfxeqYemy6Jya
bIqbyJuMVtTrSprueARfSCi0Mmp3xmAm82x6bjOmw6eEHIDSYNkhNogGjwF5rGqr
ydvwPn13DQZckGkHsmdjZGJHdOexZ39o78Y7R8SXVw8D2uP/wt/7g1QTDyTEq9y0
wMLF2J037AUgkO+cGEs/49h6yr3QK9gW6LvXFRcQyaFzQwe0VDtviNV2KPWthQ1l
dKazB3qNJNWMyw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:27:41 2025 by rpki-client