Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/748741-870d-4770-83e5-1af3965717f7/1/WeyKWvo-2Ou4VtTYIfaW0Vf4p1c.mft
File:                     WeyKWvo-2Ou4VtTYIfaW0Vf4p1c.mft (raw, json)
Hash identifier:          qh+eEx/RHKr70hNTKT4+TxjxJ2rqFnbPRRx+cyAo38Y=
Subject key identifier:   7E:98:06:60:91:58:61:45:4B:CF:4E:41:8A:06:8B:DF:02:6F:2A:D6
Authority key identifier: 59:EC:8A:5A:FA:3E:D8:EB:B8:56:D4:D8:21:F6:96:D1:57:F8:A7:57
Certificate issuer:       /CN=59ec8a5afa3ed8ebb856d4d821f696d157f8a757
Certificate serial:       0196CDCFE504E816FDB550517BB1F08503D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WeyKWvo-2Ou4VtTYIfaW0Vf4p1c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/748741-870d-4770-83e5-1af3965717f7/1/WeyKWvo-2Ou4VtTYIfaW0Vf4p1c.mft
Manifest number:          153E
Signing time:             Wed 14 May 2025 08:01:15 +0000
Manifest this update:     Wed 14 May 2025 08:01:15 +0000
Manifest next update:     Thu 15 May 2025 08:01:15 +0000
Files and hashes:         1: A1IHvzr80p19NJwiJMcDQphdaaM.roa (hash: 8TEFqh69arr6lwHcUIob0787g8rOpyOuebdTkdVTUag=)
                          2: WeyKWvo-2Ou4VtTYIfaW0Vf4p1c.crl (hash: bfv8tZ1JmcZsLg1PkTVxMRjBcCRq3ns1Q1q2MUQwt0U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/748741-870d-4770-83e5-1af3965717f7/1/WeyKWvo-2Ou4VtTYIfaW0Vf4p1c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/748741-870d-4770-83e5-1af3965717f7/1/WeyKWvo-2Ou4VtTYIfaW0Vf4p1c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WeyKWvo-2Ou4VtTYIfaW0Vf4p1c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 May 2025 08:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:cd:cf:e5:04:e8:16:fd:b5:50:51:7b:b1:f0:85:03:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59ec8a5afa3ed8ebb856d4d821f696d157f8a757
        Validity
            Not Before: May 14 08:01:15 2025 GMT
            Not After : May 15 08:01:15 2025 GMT
        Subject: CN=7e980660915861454bcf4e418a068bdf026f2ad6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:67:ec:f9:da:91:0c:31:bd:a6:8a:f3:70:a5:
                    d9:be:96:61:bf:1f:fc:da:e0:84:38:58:50:88:50:
                    da:11:8d:d1:3b:37:4a:92:ae:ce:a8:95:96:b2:49:
                    db:9c:36:ce:6f:f3:a6:6c:9f:b7:8d:be:34:75:da:
                    73:1b:38:93:bd:af:9b:a9:e6:d9:97:b3:db:50:ac:
                    96:28:22:ce:df:a2:d3:e7:1d:b8:90:56:37:bb:a5:
                    f2:76:b1:83:e8:b0:54:5a:9c:47:39:e1:ca:ae:c2:
                    5c:30:ce:fe:d5:b8:94:74:bd:4c:75:9c:e5:30:82:
                    cf:99:16:16:ad:56:ca:76:f7:ad:9e:b0:9d:9e:ad:
                    74:5c:62:32:48:27:af:d1:94:7e:36:35:06:3f:3e:
                    4d:45:fd:99:5a:33:82:38:e1:97:4d:fe:23:3f:15:
                    14:14:8e:ba:4c:ea:cc:3b:0e:97:10:00:66:24:8b:
                    3e:d8:92:e1:94:b1:4f:01:02:db:87:1a:90:41:30:
                    79:14:82:d4:60:ea:0d:37:02:67:c9:d5:41:48:b5:
                    6a:a7:ab:33:1e:94:ad:dc:bf:01:a9:be:4e:0c:65:
                    50:9f:d8:8e:49:9b:7c:c9:b9:b1:22:ff:8c:50:8d:
                    bc:b0:53:d2:7e:a0:e5:48:d5:6a:2a:fc:48:ad:52:
                    0d:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:98:06:60:91:58:61:45:4B:CF:4E:41:8A:06:8B:DF:02:6F:2A:D6
            X509v3 Authority Key Identifier:
                keyid:59:EC:8A:5A:FA:3E:D8:EB:B8:56:D4:D8:21:F6:96:D1:57:F8:A7:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WeyKWvo-2Ou4VtTYIfaW0Vf4p1c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/748741-870d-4770-83e5-1af3965717f7/1/WeyKWvo-2Ou4VtTYIfaW0Vf4p1c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/748741-870d-4770-83e5-1af3965717f7/1/WeyKWvo-2Ou4VtTYIfaW0Vf4p1c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:dc:1b:73:62:65:d5:26:8a:e9:2e:1f:3c:70:d8:58:43:aa:
         13:49:83:dd:d5:f1:eb:2a:64:fd:af:3b:f1:d7:1a:4c:3e:32:
         cf:7c:51:c3:e7:88:ab:94:bd:34:eb:0b:0b:90:26:c5:be:cf:
         3a:8f:4a:6a:c2:f2:64:84:bc:33:9b:6e:a0:75:72:91:c2:15:
         4d:ab:57:4e:72:95:34:56:8f:6b:e1:e2:a6:a8:46:7a:74:25:
         bb:43:e6:8e:cd:f5:9e:44:ba:cf:73:a1:12:81:6f:c4:8f:01:
         eb:36:2e:24:79:e1:87:cd:c2:53:c0:f7:65:d2:8b:12:1e:dd:
         f2:ff:06:2e:4a:71:45:fa:17:d8:6e:3c:65:8f:4a:24:fd:ff:
         e7:cd:38:ea:cb:81:59:9f:aa:f7:05:5e:cc:29:53:07:5a:1a:
         c7:4c:9f:16:21:d1:91:91:6f:5f:11:dd:29:33:81:04:6b:32:
         69:d0:29:db:7a:4e:85:fa:7b:2f:8d:6f:5d:23:7c:2e:37:3c:
         4e:d1:38:eb:25:a4:a2:de:d8:50:6d:03:12:e7:92:59:3b:b5:
         73:78:2f:9d:fa:68:04:f4:f5:70:4d:85:66:63:f1:c1:4e:67:
         e5:49:8d:29:16:20:4c:ac:d9:69:0c:22:d9:ec:91:a6:a7:ca:
         8c:cd:8d:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbNz+UE6Bb9tVBRe7HwhQPQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5ZWM4YTVhZmEzZWQ4ZWJiODU2ZDRkODIxZjY5NmQxNTdm
OGE3NTcwHhcNMjUwNTE0MDgwMTE1WhcNMjUwNTE1MDgwMTE1WjAzMTEwLwYDVQQD
Eyg3ZTk4MDY2MDkxNTg2MTQ1NGJjZjRlNDE4YTA2OGJkZjAyNmYyYWQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomfs+dqRDDG9porzcKXZvpZhvx/8
2uCEOFhQiFDaEY3ROzdKkq7OqJWWsknbnDbOb/OmbJ+3jb40ddpzGziTva+bqebZ
l7PbUKyWKCLO36LT5x24kFY3u6XydrGD6LBUWpxHOeHKrsJcMM7+1biUdL1MdZzl
MILPmRYWrVbKdvetnrCdnq10XGIySCev0ZR+NjUGPz5NRf2ZWjOCOOGXTf4jPxUU
FI66TOrMOw6XEABmJIs+2JLhlLFPAQLbhxqQQTB5FILUYOoNNwJnydVBSLVqp6sz
HpSt3L8Bqb5ODGVQn9iOSZt8ybmxIv+MUI28sFPSfqDlSNVqKvxIrVINOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH6YBmCRWGFFS89OQYoGi98CbyrWMB8GA1UdIwQY
MBaAFFnsilr6PtjruFbU2CH2ltFX+KdXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2V5S1d2by0yT3U0VnRUWUlmYVcwVmY0cDFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS83NDg3NDEtODcwZC00NzcwLTgzZTUt
MWFmMzk2NTcxN2Y3LzEvV2V5S1d2by0yT3U0VnRUWUlmYVcwVmY0cDFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS83NDg3NDEtODcwZC00NzcwLTgzZTUtMWFmMzk2NTcxN2Y3
LzEvV2V5S1d2by0yT3U0VnRUWUlmYVcwVmY0cDFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqtwbc2Jl
1SaK6S4fPHDYWEOqE0mD3dXx6ypk/a878dcaTD4yz3xRw+eIq5S9NOsLC5Amxb7P
Oo9KasLyZIS8M5tuoHVykcIVTatXTnKVNFaPa+HipqhGenQlu0Pmjs31nkS6z3Oh
EoFvxI8B6zYuJHnhh83CU8D3ZdKLEh7d8v8GLkpxRfoX2G48ZY9KJP3/58046suB
WZ+q9wVezClTB1oax0yfFiHRkZFvXxHdKTOBBGsyadAp23pOhfp7L41vXSN8Ljc8
TtE46yWkot7YUG0DEueSWTu1c3gvnfpoBPT1cE2FZmPxwU5n5UmNKRYgTKzZaQwi
2eyRpqfKjM2NPQ==
-----END CERTIFICATE-----
Generated at Wed May 14 16:08:09 2025 by rpki-client