Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/8c7247-8592-44ae-82b1-100e5b65e672/1/W6vKoQozYHLrwIIKbfC_pNxc_ao.mft
File:                     W6vKoQozYHLrwIIKbfC_pNxc_ao.mft (raw, json)
Hash identifier:          J24ZxsAn8yrV7oPoMCvgknIUwH5DmFnoFtOkqbal5wQ=
Subject key identifier:   66:7B:0E:30:1C:EE:8E:DA:4B:15:30:A5:5A:B1:7D:4C:2D:74:E9:BD
Authority key identifier: 5B:AB:CA:A1:0A:33:60:72:EB:C0:82:0A:6D:F0:BF:A4:DC:5C:FD:AA
Certificate issuer:       /CN=5babcaa10a336072ebc0820a6df0bfa4dc5cfdaa
Certificate serial:       0197BA7DF91BC481DF0A563F9978843CA40D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W6vKoQozYHLrwIIKbfC_pNxc_ao.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/8c7247-8592-44ae-82b1-100e5b65e672/1/W6vKoQozYHLrwIIKbfC_pNxc_ao.mft
Manifest number:          098F
Signing time:             Sun 29 Jun 2025 07:01:47 +0000
Manifest this update:     Sun 29 Jun 2025 07:01:47 +0000
Manifest next update:     Mon 30 Jun 2025 07:01:47 +0000
Files and hashes:         1: B2n18W6FZZHyRPgmArtbq0-BQHI.roa (hash: sGRiT/dWrEM0f4SVXVnUW/pThWPm0EW+IVYQygpGhOY=)
                          2: W6vKoQozYHLrwIIKbfC_pNxc_ao.crl (hash: Hr/OhmMRrE6dNyoUuEPWlbIw6PGVjIZKAQn3z1rzmrc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/8c7247-8592-44ae-82b1-100e5b65e672/1/W6vKoQozYHLrwIIKbfC_pNxc_ao.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/8c7247-8592-44ae-82b1-100e5b65e672/1/W6vKoQozYHLrwIIKbfC_pNxc_ao.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W6vKoQozYHLrwIIKbfC_pNxc_ao.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Jun 2025 07:01:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:ba:7d:f9:1b:c4:81:df:0a:56:3f:99:78:84:3c:a4:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5babcaa10a336072ebc0820a6df0bfa4dc5cfdaa
        Validity
            Not Before: Jun 29 07:01:47 2025 GMT
            Not After : Jun 30 07:01:47 2025 GMT
        Subject: CN=667b0e301cee8eda4b1530a55ab17d4c2d74e9bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:22:31:d2:67:3f:b6:4e:8f:bc:22:8d:49:41:
                    a8:6e:d3:cc:40:cd:e9:73:93:21:9d:d2:d2:b0:49:
                    0e:ac:9b:0e:2c:50:03:ea:08:c4:dd:3c:0a:ac:7b:
                    7a:41:54:30:6c:72:0a:e6:71:b9:3b:35:5e:72:5e:
                    f3:41:76:01:1d:af:9f:9c:ab:33:75:35:e6:35:09:
                    dc:f4:12:38:78:10:4a:3a:1e:18:44:78:fd:f5:9e:
                    8f:aa:0a:0e:71:18:ff:d4:84:e8:fa:9d:6c:dd:72:
                    8a:5f:86:2f:ca:1d:6d:bd:98:ef:07:f8:6f:f2:0c:
                    89:a0:2a:84:a7:69:45:a6:67:4a:bd:86:f7:6f:58:
                    af:f0:a3:ba:50:57:65:7f:39:7d:3f:61:73:56:8d:
                    b4:ff:8a:99:23:6a:1c:34:c5:b3:83:d2:e2:ab:bb:
                    7c:ba:cf:30:70:0a:25:4d:79:7c:82:af:e3:d2:0c:
                    23:b4:63:46:f9:d7:7b:9a:94:e9:40:90:50:1c:3d:
                    09:22:84:3c:9b:ca:93:53:12:24:6e:20:71:03:79:
                    5c:ab:c9:3a:a4:7a:9b:d0:c5:38:0b:cd:14:f7:5a:
                    e0:1c:9a:84:0e:e4:17:75:f3:f5:ee:b0:c3:ec:40:
                    5f:4a:36:4e:0c:9d:55:c0:a2:88:fc:17:58:ba:74:
                    6b:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:7B:0E:30:1C:EE:8E:DA:4B:15:30:A5:5A:B1:7D:4C:2D:74:E9:BD
            X509v3 Authority Key Identifier:
                keyid:5B:AB:CA:A1:0A:33:60:72:EB:C0:82:0A:6D:F0:BF:A4:DC:5C:FD:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W6vKoQozYHLrwIIKbfC_pNxc_ao.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/8c7247-8592-44ae-82b1-100e5b65e672/1/W6vKoQozYHLrwIIKbfC_pNxc_ao.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/8c7247-8592-44ae-82b1-100e5b65e672/1/W6vKoQozYHLrwIIKbfC_pNxc_ao.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:41:61:b8:47:26:1b:15:d4:c1:df:3a:ed:f8:6b:21:47:94:
         b6:5e:0a:85:a8:d3:a4:39:cd:81:ca:71:b9:53:a4:99:d9:35:
         bd:83:39:86:5e:b9:38:ec:30:f0:27:6d:b6:8c:a6:03:55:c6:
         b5:ec:f0:01:d7:de:6d:07:01:76:94:9e:f6:62:94:d8:55:0e:
         e7:5a:67:91:d8:62:fb:4c:da:06:06:f0:7e:c7:ad:9b:cd:cc:
         ae:8d:a2:02:1e:a4:e5:57:0d:ec:e6:9e:3c:7b:49:f3:08:06:
         f0:c9:4c:3f:d8:c4:fd:bf:35:2b:c5:2b:9c:e4:e7:fb:98:6e:
         ce:10:17:e4:87:2b:8d:7a:81:d9:a0:e7:d2:1f:9b:87:84:fa:
         81:11:b4:36:10:51:26:34:b5:b1:38:c1:db:59:f5:20:62:a7:
         f8:f2:17:22:2d:e5:3d:c9:7f:9f:13:47:13:81:83:f2:85:1b:
         49:c8:8e:ba:49:e9:e3:04:66:34:fc:c2:3e:9b:7e:f5:ef:1e:
         95:67:11:52:b9:23:d4:75:9e:26:9f:18:1c:35:a0:b1:4f:87:
         10:4c:7e:d1:be:67:11:e7:d5:69:87:84:11:73:99:f8:e0:7d:
         fc:67:3a:8f:9f:c9:6d:29:22:f5:0b:62:e8:26:d0:db:f5:0c:
         76:74:2f:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe6ffkbxIHfClY/mXiEPKQNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViYWJjYWExMGEzMzYwNzJlYmMwODIwYTZkZjBiZmE0ZGM1
Y2ZkYWEwHhcNMjUwNjI5MDcwMTQ3WhcNMjUwNjMwMDcwMTQ3WjAzMTEwLwYDVQQD
Eyg2NjdiMGUzMDFjZWU4ZWRhNGIxNTMwYTU1YWIxN2Q0YzJkNzRlOWJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7CIx0mc/tk6PvCKNSUGobtPMQM3p
c5MhndLSsEkOrJsOLFAD6gjE3TwKrHt6QVQwbHIK5nG5OzVecl7zQXYBHa+fnKsz
dTXmNQnc9BI4eBBKOh4YRHj99Z6PqgoOcRj/1ITo+p1s3XKKX4Yvyh1tvZjvB/hv
8gyJoCqEp2lFpmdKvYb3b1iv8KO6UFdlfzl9P2FzVo20/4qZI2ocNMWzg9Liq7t8
us8wcAolTXl8gq/j0gwjtGNG+dd7mpTpQJBQHD0JIoQ8m8qTUxIkbiBxA3lcq8k6
pHqb0MU4C80U91rgHJqEDuQXdfP17rDD7EBfSjZODJ1VwKKI/BdYunRrXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGZ7DjAc7o7aSxUwpVqxfUwtdOm9MB8GA1UdIwQY
MBaAFFuryqEKM2By68CCCm3wv6TcXP2qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzZ2S29Rb3pZSExyd0lJS2JmQ19wTnhjX2FvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC84YzcyNDctODU5Mi00NGFlLTgyYjEt
MTAwZTViNjVlNjcyLzEvVzZ2S29Rb3pZSExyd0lJS2JmQ19wTnhjX2FvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC84YzcyNDctODU5Mi00NGFlLTgyYjEtMTAwZTViNjVlNjcy
LzEvVzZ2S29Rb3pZSExyd0lJS2JmQ19wTnhjX2FvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAckFhuEcm
GxXUwd867fhrIUeUtl4KhajTpDnNgcpxuVOkmdk1vYM5hl65OOww8CdttoymA1XG
tezwAdfebQcBdpSe9mKU2FUO51pnkdhi+0zaBgbwfsetm83Mro2iAh6k5VcN7Oae
PHtJ8wgG8MlMP9jE/b81K8UrnOTn+5huzhAX5IcrjXqB2aDn0h+bh4T6gRG0NhBR
JjS1sTjB21n1IGKn+PIXIi3lPcl/nxNHE4GD8oUbSciOuknp4wRmNPzCPpt+9e8e
lWcRUrkj1HWeJp8YHDWgsU+HEEx+0b5nEefVaYeEEXOZ+OB9/Gc6j5/JbSki9Qti
6CbQ2/UMdnQvXg==
-----END CERTIFICATE-----
Generated at Sun Jun 29 17:01:32 2025 by rpki-client