Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/e0559d-abe6-443b-a978-5e7ded1421da/1/WzgltIs1me_6oLyBqN3bmPHYAsQ.mft
File:                     WzgltIs1me_6oLyBqN3bmPHYAsQ.mft (raw, json)
Hash identifier:          AxT6UyVMEZg6NIr5aFeSY9bEEk+r0lXV33RAaLWrUGM=
Subject key identifier:   BC:7B:11:BB:AE:79:11:37:17:23:9C:72:93:FE:00:55:EB:33:C6:48
Authority key identifier: 5B:38:25:B4:8B:35:99:EF:FA:A0:BC:81:A8:DD:DB:98:F1:D8:02:C4
Certificate issuer:       /CN=5b3825b48b3599effaa0bc81a8dddb98f1d802c4
Certificate serial:       0197B70EAE7D74F717725AC5004D4614378E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WzgltIs1me_6oLyBqN3bmPHYAsQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/e0559d-abe6-443b-a978-5e7ded1421da/1/WzgltIs1me_6oLyBqN3bmPHYAsQ.mft
Manifest number:          1546
Signing time:             Sat 28 Jun 2025 15:01:22 +0000
Manifest this update:     Sat 28 Jun 2025 15:01:22 +0000
Manifest next update:     Sun 29 Jun 2025 15:01:22 +0000
Files and hashes:         1: WzgltIs1me_6oLyBqN3bmPHYAsQ.crl (hash: JRJQvt5q1yXhOUeL+ZN25AXJ0/mLi1OMKEA8I8P+qzA=)
                          2: iiZidHMAHkbcf8XyOTt3Z_vw0jE.roa (hash: xKnilsXqPSaJ4FjR+VlNoOzanS4pqyzg7Ofj3A9rVOQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/e0559d-abe6-443b-a978-5e7ded1421da/1/WzgltIs1me_6oLyBqN3bmPHYAsQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/e0559d-abe6-443b-a978-5e7ded1421da/1/WzgltIs1me_6oLyBqN3bmPHYAsQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WzgltIs1me_6oLyBqN3bmPHYAsQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:0e:ae:7d:74:f7:17:72:5a:c5:00:4d:46:14:37:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b3825b48b3599effaa0bc81a8dddb98f1d802c4
        Validity
            Not Before: Jun 28 15:01:22 2025 GMT
            Not After : Jun 29 15:01:22 2025 GMT
        Subject: CN=bc7b11bbae79113717239c7293fe0055eb33c648
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:56:d2:75:68:c7:70:20:5e:61:fd:29:15:ac:
                    ae:29:7d:07:5c:da:bb:de:d0:1c:d3:e8:bd:da:a8:
                    e6:e3:52:b1:3e:a4:64:50:3e:0f:f3:85:6c:67:76:
                    a7:22:da:6a:56:76:54:11:2b:f5:9c:bc:34:4d:ca:
                    e1:80:ee:72:51:95:f8:09:5f:d7:14:6a:d5:e7:18:
                    47:f6:60:f2:fe:78:61:9f:09:a7:a5:f8:f5:42:8c:
                    b5:0b:0f:8e:82:1b:80:6a:62:0e:c7:42:74:78:7a:
                    3a:27:57:2b:a2:13:d3:6b:49:01:e0:76:01:96:e1:
                    38:9c:4b:86:9c:dd:f1:cf:1b:c3:59:3a:97:b0:f2:
                    fc:2b:a3:d2:50:e8:d8:12:40:f4:03:c3:b0:3b:10:
                    2f:b4:c2:76:c4:ce:b5:0c:4f:e9:ff:ba:b3:c5:7f:
                    1c:30:3f:5d:46:01:31:a4:ce:fd:ce:2f:c6:b4:4d:
                    f6:af:2b:84:b0:23:4d:a5:b5:de:f1:10:d2:da:3f:
                    7f:f9:31:c4:a7:15:7a:b4:88:17:68:07:59:6d:7f:
                    8c:7e:d0:eb:f7:a7:02:89:c6:85:22:22:62:90:27:
                    2d:1e:d2:46:99:d8:86:2f:0c:11:90:c0:a7:ab:8d:
                    52:a0:5e:d5:c1:db:b6:29:51:39:c1:1b:11:d4:25:
                    54:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:7B:11:BB:AE:79:11:37:17:23:9C:72:93:FE:00:55:EB:33:C6:48
            X509v3 Authority Key Identifier:
                keyid:5B:38:25:B4:8B:35:99:EF:FA:A0:BC:81:A8:DD:DB:98:F1:D8:02:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WzgltIs1me_6oLyBqN3bmPHYAsQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/e0559d-abe6-443b-a978-5e7ded1421da/1/WzgltIs1me_6oLyBqN3bmPHYAsQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/e0559d-abe6-443b-a978-5e7ded1421da/1/WzgltIs1me_6oLyBqN3bmPHYAsQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:00:fb:96:9f:72:22:a9:a4:bd:eb:c6:68:63:8f:3e:de:4a:
         26:f0:4e:da:dc:60:08:52:ab:00:1c:34:6d:34:d2:d7:f1:6f:
         43:e6:c6:25:31:6e:83:78:df:77:ae:7e:e8:36:78:9b:01:2a:
         98:be:f4:11:ea:ac:0b:8d:26:86:25:71:10:e4:bc:fb:2b:a9:
         0e:99:65:c9:81:eb:8b:44:34:ac:88:7e:cc:0e:aa:ad:2f:98:
         d0:c6:38:4a:15:28:c2:6e:10:dd:d1:13:76:14:f3:f6:97:f8:
         58:ae:88:cd:79:ef:42:62:bb:68:af:a6:8c:62:22:9f:92:08:
         46:dd:03:24:dc:7f:7d:cc:6d:2a:87:68:f5:ca:dc:ca:37:9e:
         e6:66:b7:2f:20:06:04:f2:a1:b9:4c:3a:30:4d:51:03:27:ce:
         ac:a7:e9:6f:d4:ee:e9:a6:24:c7:d1:08:2a:94:01:94:46:19:
         c7:f3:f5:7c:3d:d1:b6:db:4f:ff:5f:da:e2:95:ba:90:d3:5d:
         b8:49:6b:e1:3b:61:7f:9b:79:23:f9:9b:4f:a3:40:ef:54:8b:
         74:e3:42:a3:57:87:4f:38:f4:32:21:94:0b:81:c9:7e:8b:12:
         43:dd:00:dc:a2:8a:82:ad:c0:6f:db:cc:c8:a9:1c:7c:47:78:
         e5:b5:f3:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3Dq59dPcXclrFAE1GFDeOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViMzgyNWI0OGIzNTk5ZWZmYWEwYmM4MWE4ZGRkYjk4ZjFk
ODAyYzQwHhcNMjUwNjI4MTUwMTIyWhcNMjUwNjI5MTUwMTIyWjAzMTEwLwYDVQQD
EyhiYzdiMTFiYmFlNzkxMTM3MTcyMzljNzI5M2ZlMDA1NWViMzNjNjQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFbSdWjHcCBeYf0pFayuKX0HXNq7
3tAc0+i92qjm41KxPqRkUD4P84VsZ3anItpqVnZUESv1nLw0TcrhgO5yUZX4CV/X
FGrV5xhH9mDy/nhhnwmnpfj1Qoy1Cw+OghuAamIOx0J0eHo6J1crohPTa0kB4HYB
luE4nEuGnN3xzxvDWTqXsPL8K6PSUOjYEkD0A8OwOxAvtMJ2xM61DE/p/7qzxX8c
MD9dRgExpM79zi/GtE32ryuEsCNNpbXe8RDS2j9/+THEpxV6tIgXaAdZbX+MftDr
96cCicaFIiJikCctHtJGmdiGLwwRkMCnq41SoF7Vwdu2KVE5wRsR1CVUTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLx7EbuueRE3FyOccpP+AFXrM8ZIMB8GA1UdIwQY
MBaAFFs4JbSLNZnv+qC8gajd25jx2ALEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3pnbHRJczFtZV82b0x5QnFOM2JtUEhZQXNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9lMDU1OWQtYWJlNi00NDNiLWE5Nzgt
NWU3ZGVkMTQyMWRhLzEvV3pnbHRJczFtZV82b0x5QnFOM2JtUEhZQXNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9lMDU1OWQtYWJlNi00NDNiLWE5NzgtNWU3ZGVkMTQyMWRh
LzEvV3pnbHRJczFtZV82b0x5QnFOM2JtUEhZQXNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAigD7lp9y
IqmkvevGaGOPPt5KJvBO2txgCFKrABw0bTTS1/FvQ+bGJTFug3jfd65+6DZ4mwEq
mL70EeqsC40mhiVxEOS8+yupDpllyYHri0Q0rIh+zA6qrS+Y0MY4ShUowm4Q3dET
dhTz9pf4WK6IzXnvQmK7aK+mjGIin5IIRt0DJNx/fcxtKodo9crcyjee5ma3LyAG
BPKhuUw6ME1RAyfOrKfpb9Tu6aYkx9EIKpQBlEYZx/P1fD3RtttP/1/a4pW6kNNd
uElr4Tthf5t5I/mbT6NA71SLdONCo1eHTzj0MiGUC4HJfosSQ90A3KKKgq3Ab9vM
yKkcfEd45bXz1g==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:21:01 2025 by rpki-client