Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/wSXvTcnT7N9IZlXC3SMenLuwoLc.mft
File:                     wSXvTcnT7N9IZlXC3SMenLuwoLc.mft (raw, json)
Hash identifier:          xiH5T3m6F3uEq+9cHjY6XJP6kRzHJojcqMMUd9zZTPY=
Subject key identifier:   94:19:1C:61:3E:28:86:71:BB:93:C1:9D:E3:C6:4F:52:23:2C:A5:FB
Authority key identifier: C1:25:EF:4D:C9:D3:EC:DF:48:66:55:C2:DD:23:1E:9C:BB:B0:A0:B7
Certificate issuer:       /CN=c125ef4dc9d3ecdf486655c2dd231e9cbbb0a0b7
Certificate serial:       0197CA5E876251D7B22C7DEA3A451637DD6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wSXvTcnT7N9IZlXC3SMenLuwoLc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/wSXvTcnT7N9IZlXC3SMenLuwoLc.mft
Manifest number:          15C0
Signing time:             Wed 02 Jul 2025 09:01:22 +0000
Manifest this update:     Wed 02 Jul 2025 09:01:22 +0000
Manifest next update:     Thu 03 Jul 2025 09:01:22 +0000
Files and hashes:         1: uR-Qt3k3bfM3gqD_iPwjYus1OKg.roa (hash: wvva5AnG6XL5jcw7hAwIwlMKF+/vvms/lQ+w5Fd0MJA=)
                          2: wSXvTcnT7N9IZlXC3SMenLuwoLc.crl (hash: EG3mT6b4HUutq/Be7KEAj+8zjoPpiU8mIDjpCFtHmIs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/wSXvTcnT7N9IZlXC3SMenLuwoLc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/wSXvTcnT7N9IZlXC3SMenLuwoLc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wSXvTcnT7N9IZlXC3SMenLuwoLc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 03 Jul 2025 09:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:ca:5e:87:62:51:d7:b2:2c:7d:ea:3a:45:16:37:dd:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c125ef4dc9d3ecdf486655c2dd231e9cbbb0a0b7
        Validity
            Not Before: Jul  2 09:01:22 2025 GMT
            Not After : Jul  3 09:01:22 2025 GMT
        Subject: CN=94191c613e288671bb93c19de3c64f52232ca5fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:a6:87:cb:07:3d:1a:2b:2d:49:bf:67:b6:8a:
                    c7:e0:bb:e0:91:3a:a2:4d:09:4b:37:2f:78:72:b2:
                    f1:c0:ca:ad:dd:8c:66:bd:23:e3:70:c9:2a:ec:38:
                    f3:9b:f5:64:a2:37:a0:51:c4:e9:68:17:ec:49:36:
                    aa:90:81:a8:a5:a5:13:74:54:5a:0a:cb:26:cb:ac:
                    56:9f:f4:9d:3b:7a:1c:2a:d1:3b:74:14:d1:ab:80:
                    a6:fc:4a:fb:01:e6:af:95:fe:21:21:34:6b:86:a3:
                    e5:00:f1:2b:ce:52:d2:fc:6e:86:53:6d:1e:75:c8:
                    05:7b:61:7b:39:c1:1a:4b:8e:5b:be:04:d2:e2:6f:
                    d1:5f:8a:e3:e9:4d:21:b2:21:17:e7:a2:72:09:de:
                    a1:3d:46:0c:bb:9e:5f:79:de:11:dc:ca:b2:94:f9:
                    ec:75:c6:c1:3c:62:d5:ee:5a:dd:97:81:c6:aa:d5:
                    fa:6e:fe:f5:16:6c:c2:a2:f5:44:9c:ed:92:6d:63:
                    3a:47:4b:18:b1:a9:2d:91:c4:84:c4:0c:b8:4c:b8:
                    32:7b:7f:40:ba:12:68:90:11:3e:98:1b:b1:73:a1:
                    69:5e:4a:a5:c0:7a:92:81:be:02:44:91:fe:a1:33:
                    0c:08:44:d3:95:c8:98:c8:c9:83:74:a4:50:48:58:
                    c6:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:19:1C:61:3E:28:86:71:BB:93:C1:9D:E3:C6:4F:52:23:2C:A5:FB
            X509v3 Authority Key Identifier:
                keyid:C1:25:EF:4D:C9:D3:EC:DF:48:66:55:C2:DD:23:1E:9C:BB:B0:A0:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSXvTcnT7N9IZlXC3SMenLuwoLc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/wSXvTcnT7N9IZlXC3SMenLuwoLc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/ea8170-0db3-4d02-aa8a-e744c5bef561/1/wSXvTcnT7N9IZlXC3SMenLuwoLc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:0a:56:5f:39:33:c5:7a:b3:82:48:10:1c:d6:b6:7e:f8:6d:
         57:b4:77:b7:cc:54:14:c3:81:56:44:93:24:a8:b9:93:d0:6b:
         5e:7e:b6:ba:a2:0d:f0:19:1f:25:bf:e1:cb:46:1e:92:9f:0c:
         fd:2b:6d:34:c2:2c:2c:91:b4:20:cf:74:1a:df:bb:68:a9:3a:
         d9:53:78:3e:74:c9:09:d0:7e:4f:6e:ab:04:1f:a9:1b:cc:37:
         7f:80:d6:e2:b2:05:39:96:9f:7a:6f:91:e9:58:1c:5d:5a:5c:
         05:df:47:ed:9e:3f:9c:1f:9e:a1:f8:90:97:57:12:12:38:8f:
         51:fc:26:fd:f1:8f:06:82:60:63:07:a7:09:f5:a4:28:bb:50:
         a4:aa:94:20:da:e3:b8:64:fe:f5:0d:14:6c:f9:d6:61:00:c8:
         7d:ba:34:a0:42:e3:2c:23:d0:70:31:c6:dc:91:2a:a6:55:77:
         8e:6d:bc:0b:1e:4c:9e:a3:40:d4:fe:94:22:31:ff:79:39:06:
         04:7d:ce:41:79:38:51:3b:bb:ff:8b:1c:7d:81:b9:22:8d:d3:
         77:02:ac:4a:23:e3:16:29:cb:01:12:d4:4a:b8:b9:12:81:53:
         af:de:46:8a:76:29:62:75:ca:e1:09:0e:a5:d7:15:0a:ee:50:
         2a:a6:ee:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfKXodiUdeyLH3qOkUWN91sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxMjVlZjRkYzlkM2VjZGY0ODY2NTVjMmRkMjMxZTljYmJi
MGEwYjcwHhcNMjUwNzAyMDkwMTIyWhcNMjUwNzAzMDkwMTIyWjAzMTEwLwYDVQQD
Eyg5NDE5MWM2MTNlMjg4NjcxYmI5M2MxOWRlM2M2NGY1MjIzMmNhNWZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8KaHywc9GistSb9ntorH4LvgkTqi
TQlLNy94crLxwMqt3YxmvSPjcMkq7Djzm/VkojegUcTpaBfsSTaqkIGopaUTdFRa
Cssmy6xWn/SdO3ocKtE7dBTRq4Cm/Er7Aeavlf4hITRrhqPlAPErzlLS/G6GU20e
dcgFe2F7OcEaS45bvgTS4m/RX4rj6U0hsiEX56JyCd6hPUYMu55fed4R3MqylPns
dcbBPGLV7lrdl4HGqtX6bv71FmzCovVEnO2SbWM6R0sYsaktkcSExAy4TLgye39A
uhJokBE+mBuxc6FpXkqlwHqSgb4CRJH+oTMMCETTlciYyMmDdKRQSFjGpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJQZHGE+KIZxu5PBnePGT1IjLKX7MB8GA1UdIwQY
MBaAFMEl703J0+zfSGZVwt0jHpy7sKC3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1NYdlRjblQ3TjlJWmxYQzNTTWVuTHV3b0xjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9lYTgxNzAtMGRiMy00ZDAyLWFhOGEt
ZTc0NGM1YmVmNTYxLzEvd1NYdlRjblQ3TjlJWmxYQzNTTWVuTHV3b0xjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9lYTgxNzAtMGRiMy00ZDAyLWFhOGEtZTc0NGM1YmVmNTYx
LzEvd1NYdlRjblQ3TjlJWmxYQzNTTWVuTHV3b0xjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxgpWXzkz
xXqzgkgQHNa2fvhtV7R3t8xUFMOBVkSTJKi5k9BrXn62uqIN8BkfJb/hy0Yekp8M
/SttNMIsLJG0IM90Gt+7aKk62VN4PnTJCdB+T26rBB+pG8w3f4DW4rIFOZafem+R
6VgcXVpcBd9H7Z4/nB+eofiQl1cSEjiPUfwm/fGPBoJgYwenCfWkKLtQpKqUINrj
uGT+9Q0UbPnWYQDIfbo0oELjLCPQcDHG3JEqplV3jm28Cx5MnqNA1P6UIjH/eTkG
BH3OQXk4UTu7/4scfYG5Io3TdwKsSiPjFinLARLUSri5EoFTr95GinYpYnXK4QkO
pdcVCu5QKqbuSA==
-----END CERTIFICATE-----
Generated at Wed Jul 2 15:19:33 2025 by rpki-client