Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/026f16-5c4c-49ad-a030-812bbeec51df/1/W-rKvp_cy7VH7V6plEr9ed3zUZc.mft
File:                     W-rKvp_cy7VH7V6plEr9ed3zUZc.mft (raw, json)
Hash identifier:          /oAAlrvAHCyHU8JXEDjFD6ILiUdFnH2YUA0DKLtme+s=
Subject key identifier:   54:CA:D9:50:2E:E9:84:37:51:45:0E:4E:1D:84:1A:24:4E:C8:8C:56
Authority key identifier: 5B:EA:CA:BE:9F:DC:CB:B5:47:ED:5E:A9:94:4A:FD:79:DD:F3:51:97
Certificate issuer:       /CN=5beacabe9fdccbb547ed5ea9944afd79ddf35197
Certificate serial:       01969FE404627F0830009CE94C6C5E4E32F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W-rKvp_cy7VH7V6plEr9ed3zUZc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/026f16-5c4c-49ad-a030-812bbeec51df/1/W-rKvp_cy7VH7V6plEr9ed3zUZc.mft
Manifest number:          08E8
Signing time:             Mon 05 May 2025 10:00:42 +0000
Manifest this update:     Mon 05 May 2025 10:00:42 +0000
Manifest next update:     Tue 06 May 2025 10:00:42 +0000
Files and hashes:         1: Fp8qUQCiFpg7_XS_cRTNvORhpUI.roa (hash: DyvJm1MsNLqanW4GtBFAMBVCCMC4YL7VCe+zTPcnzYg=)
                          2: W-rKvp_cy7VH7V6plEr9ed3zUZc.crl (hash: 8aagL43nxIVVHJ/P0A4esK/IoB4r6ljezMCTZm95pIA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/026f16-5c4c-49ad-a030-812bbeec51df/1/W-rKvp_cy7VH7V6plEr9ed3zUZc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/026f16-5c4c-49ad-a030-812bbeec51df/1/W-rKvp_cy7VH7V6plEr9ed3zUZc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W-rKvp_cy7VH7V6plEr9ed3zUZc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 08:37:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9f:e4:04:62:7f:08:30:00:9c:e9:4c:6c:5e:4e:32:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5beacabe9fdccbb547ed5ea9944afd79ddf35197
        Validity
            Not Before: May  5 10:00:42 2025 GMT
            Not After : May  6 10:00:42 2025 GMT
        Subject: CN=54cad9502ee9843751450e4e1d841a244ec88c56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:1f:28:75:77:7a:1c:ed:ea:18:4e:76:a8:ce:
                    93:b8:f6:30:ad:3a:00:3d:32:60:10:85:da:36:56:
                    88:63:bd:b8:f0:7d:1e:db:8a:d6:aa:71:6a:84:db:
                    e4:2e:9a:fb:69:43:90:1a:a3:3e:dd:48:e4:fb:98:
                    91:30:55:77:73:22:c2:cc:4a:5a:68:a7:e2:08:08:
                    7d:f1:26:99:08:2c:92:2c:e4:79:df:45:f4:6c:e8:
                    42:f2:83:0e:64:70:19:f8:ae:e0:19:69:36:a7:2d:
                    93:b9:a8:5f:8c:1f:d6:32:16:cf:ef:bd:8e:dc:80:
                    46:23:fb:eb:54:e9:af:a4:af:d6:4e:67:03:d7:5d:
                    ad:f3:bd:d5:e5:79:5a:9a:42:0a:39:2b:90:1b:23:
                    6d:1f:ce:c3:4a:cc:04:0a:6e:bf:16:81:01:7c:23:
                    85:3a:75:ff:5a:0d:29:3a:14:3a:6a:ff:89:b1:74:
                    bf:a6:b9:d6:9a:81:d5:21:aa:44:a1:7a:80:72:91:
                    95:bd:e3:16:86:de:32:ed:04:60:84:5f:8c:c5:b2:
                    f5:3f:ba:9f:2e:55:c1:94:7b:82:ef:e5:45:bc:9f:
                    e5:ed:20:87:cb:4a:73:f2:c5:82:3f:c9:c7:99:68:
                    e1:7d:be:0a:46:6b:66:38:f9:c4:7e:85:2b:13:3f:
                    f5:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:CA:D9:50:2E:E9:84:37:51:45:0E:4E:1D:84:1A:24:4E:C8:8C:56
            X509v3 Authority Key Identifier:
                keyid:5B:EA:CA:BE:9F:DC:CB:B5:47:ED:5E:A9:94:4A:FD:79:DD:F3:51:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-rKvp_cy7VH7V6plEr9ed3zUZc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/026f16-5c4c-49ad-a030-812bbeec51df/1/W-rKvp_cy7VH7V6plEr9ed3zUZc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/026f16-5c4c-49ad-a030-812bbeec51df/1/W-rKvp_cy7VH7V6plEr9ed3zUZc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:9b:bf:ee:65:a2:a7:a9:8b:a8:6c:56:76:29:8b:74:39:6f:
         2c:4c:94:c4:80:28:57:98:76:93:9e:da:de:ab:04:d2:14:4c:
         ed:c4:f6:d8:c0:84:bb:02:19:a9:41:2e:41:bb:e5:15:c2:46:
         96:8d:2b:f9:dc:2c:2c:72:ad:54:3d:c3:0f:84:4a:3b:36:7c:
         d9:d1:f5:bf:7a:2f:d0:6d:9d:9a:7b:e1:96:38:07:f4:05:63:
         c6:ab:93:f6:a0:36:59:91:06:54:bc:24:71:d4:e0:83:fa:67:
         a1:0c:72:49:fe:c3:6d:63:4d:12:3b:cd:b6:78:e1:90:2e:cd:
         b0:12:35:e6:2f:84:26:11:27:d9:5d:36:4a:be:9f:ed:03:f6:
         ad:55:59:68:20:ed:73:94:3f:ac:19:e3:18:5f:62:7c:b3:b6:
         b7:96:5c:c3:89:0e:e6:d9:e8:9f:28:7e:34:c1:f6:83:29:90:
         75:87:a6:4c:ed:09:cb:9e:3a:00:77:b6:66:54:2f:70:c8:44:
         7e:d5:16:0b:b9:72:6a:e1:29:93:be:f1:b6:3f:1b:37:57:40:
         63:4e:f4:5d:bf:89:3a:f1:62:1a:50:7b:62:69:cf:7d:36:ae:
         22:f0:82:2e:2f:92:0d:e4:f2:47:b0:e5:2a:7e:30:63:bf:10:
         5d:1a:8b:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaf5ARifwgwAJzpTGxeTjL2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViZWFjYWJlOWZkY2NiYjU0N2VkNWVhOTk0NGFmZDc5ZGRm
MzUxOTcwHhcNMjUwNTA1MTAwMDQyWhcNMjUwNTA2MTAwMDQyWjAzMTEwLwYDVQQD
Eyg1NGNhZDk1MDJlZTk4NDM3NTE0NTBlNGUxZDg0MWEyNDRlYzg4YzU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6x8odXd6HO3qGE52qM6TuPYwrToA
PTJgEIXaNlaIY7248H0e24rWqnFqhNvkLpr7aUOQGqM+3Ujk+5iRMFV3cyLCzEpa
aKfiCAh98SaZCCySLOR530X0bOhC8oMOZHAZ+K7gGWk2py2TuahfjB/WMhbP772O
3IBGI/vrVOmvpK/WTmcD112t873V5XlamkIKOSuQGyNtH87DSswECm6/FoEBfCOF
OnX/Wg0pOhQ6av+JsXS/prnWmoHVIapEoXqAcpGVveMWht4y7QRghF+MxbL1P7qf
LlXBlHuC7+VFvJ/l7SCHy0pz8sWCP8nHmWjhfb4KRmtmOPnEfoUrEz/1hwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFTK2VAu6YQ3UUUOTh2EGiROyIxWMB8GA1UdIwQY
MBaAFFvqyr6f3Mu1R+1eqZRK/Xnd81GXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVy1yS3ZwX2N5N1ZIN1Y2cGxFcjllZDN6VVpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8wMjZmMTYtNWM0Yy00OWFkLWEwMzAt
ODEyYmJlZWM1MWRmLzEvVy1yS3ZwX2N5N1ZIN1Y2cGxFcjllZDN6VVpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC8wMjZmMTYtNWM0Yy00OWFkLWEwMzAtODEyYmJlZWM1MWRm
LzEvVy1yS3ZwX2N5N1ZIN1Y2cGxFcjllZDN6VVpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEZu/7mWi
p6mLqGxWdimLdDlvLEyUxIAoV5h2k57a3qsE0hRM7cT22MCEuwIZqUEuQbvlFcJG
lo0r+dwsLHKtVD3DD4RKOzZ82dH1v3ov0G2dmnvhljgH9AVjxquT9qA2WZEGVLwk
cdTgg/pnoQxySf7DbWNNEjvNtnjhkC7NsBI15i+EJhEn2V02Sr6f7QP2rVVZaCDt
c5Q/rBnjGF9ifLO2t5Zcw4kO5tnonyh+NMH2gymQdYemTO0Jy546AHe2ZlQvcMhE
ftUWC7lyauEpk77xtj8bN1dAY070Xb+JOvFiGlB7YmnPfTauIvCCLi+SDeTyR7Dl
Kn4wY78QXRqLug==
-----END CERTIFICATE-----
Generated at Mon May 5 12:36:20 2025 by rpki-client