Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.mft
File:                     WD12BRAX0K-pFfz7eQoA9GZ7Cog.mft (raw, json)
Hash identifier:          TdSoz3e+pQVuBcDrM8ekZu2slGeFMtLKmcV93NKrIWI=
Subject key identifier:   3D:E1:C9:59:01:25:27:B6:AB:5B:DB:D2:45:99:04:EB:EA:B7:A8:4A
Authority key identifier: 58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
Certificate issuer:       /CN=583d76051017d0afa915fcfb790a00f4667b0a88
Certificate serial:       0196BA11AF0DC0ED66C53C454EEA542EEBC5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.mft
Manifest number:          1545
Signing time:             Sat 10 May 2025 12:00:43 +0000
Manifest this update:     Sat 10 May 2025 12:00:43 +0000
Manifest next update:     Sun 11 May 2025 12:00:43 +0000
Files and hashes:         1: 4hbMBM1nzDwcq0Z5poawjitTY60.roa (hash: XP1CU+CY23GAE6mFffgmeePRICbliFurLSIMPRQ5f40=)
                          2: 7WcUp7VboIfJPuJw_2eN0YJowc0.roa (hash: hMptUTx/SKmaFCbNu4ZMxGpB4nXnLhPIpWMOPwFNEdE=)
                          3: 83DWjPDI0qHPOk7NLbQWjtD2D1c.roa (hash: AxnYuoBRuJSqvAH9Bx3fTRR+QoVXwEkv5G6gCkg2Bao=)
                          4: 9IywKX9fS2qo6y4BwiBKFOJ_RRo.roa (hash: Ac1uBlsnhCZRDyKHF7yrUh45o1zwGsvgTvH8xD0tKfw=)
                          5: D1fRR18dq9Gv4qp3l9TcLZyyEDI.roa (hash: +8YA8GsmgHc3axYa2P7GfhxaqtQ7FE/tjUAeHRPwr9g=)
                          6: GKke9u-g19ORaszjeZzhH6pAcUM.roa (hash: xdtY9xo6gnGlpB3ETcBJ3YBkjHIlQqwLDRHWq8GtahI=)
                          7: Ig1WTTEJWSAB8ImVaoKPLwHQgbc.roa (hash: UMRsVJllHBv632Y31OJYoImld0QNRvOFUdYe6AzQydE=)
                          8: IwPxKQ0cH2VtiVJXXV7lwrIiVdY.roa (hash: Vp7I9HovJoiuEC9VCO+6KWFaSrjYJto9LxrxlUDp/FE=)
                          9: N5rVf1hY_OzEZp1xY8pg3j4it1A.roa (hash: Ue3CSgwWVTQ+G81bsGOQJFm164xkm8Ru6ylUCKhvmpA=)
                          10: PcjnIOs0xHAadMUPf6vwApxUGPI.roa (hash: ahUECt5ec83Dg9RUG/tnn3VXtR+x9lfVVXmvWME9edo=)
                          11: SOIu77MViH9HrW2wOhBa4ctl-s4.roa (hash: EeJItN2QFTFRmLAW0Mvz7rV5W+XgeuLcsUy4tvkAsoI=)
                          12: TDV0BLKDE1p7Ns450Mfu7Kq6ad8.roa (hash: lTO5embQ4JVR03qf/66D4vxj/cbH77aYRTX0QvQ4wLY=)
                          13: TaAWX6RunIkoavVYyto4LyLZbsg.roa (hash: LLRLNHFstGywhUJHWDeOxplmy9vdy8UuI67N0/rWKkI=)
                          14: UQnmCoONwiJ5kPJipbbPRWpehRQ.roa (hash: R7SJq+v1gPef9CcZYgNLA5yueggHvGhRS4pnX+i+42s=)
                          15: WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl (hash: Eq7SavAmyvaS65pivjkUXnATi5dRJpgVpf77BRK6cC8=)
                          16: WJFDvIJS5VxJPhXMRZ7xWWjaaEY.roa (hash: OpV4tgEanecwJP3L/2htD3wFwFErrWLFYPu5S83daZo=)
                          17: Wj9UBZ8lyGpizZyCVs5Soop7w2k.roa (hash: nghObD8IVMMvgf7Cs34GYm/ZtGFtMr/E9cOGO8F0TDk=)
                          18: dy952eRiBCdIkDatCGm3tM-NtSw.roa (hash: oIhly5TECVRnL4ipTnAWtgg017FDltluQ713TVuz5pw=)
                          19: j8S8_OZUpxB9k7LHRFPXRAKfkWU.roa (hash: k8mQUf/NuQPokL0zcpiZfvFdtMY/J1/bRRQuRB+KB/M=)
                          20: qMr-LBReCBqYRhVBoJttXFZAERs.roa (hash: +wcj7meQsd/DFjEen1Pm4EtbrLhEFNBjzasK/qwIzFY=)
                          21: skag_VnN9GBJjb3tko75iVexHSM.roa (hash: C1SS1bYL61kZQdi8QWgGkq7ptTOfGOQLi9q7iiXlFU0=)
                          22: sqtDA5C4zTAF8EU1UanGLhNGqBE.roa (hash: mht2D+EpFezejVvclFV759gknFNR6V1vy0XD94YDkwU=)
                          23: vWXWhkktZWC2_i0zKz5vdi-IvuE.roa (hash: D7lRMIA1f5sBgefITMxbK3yGHotRr10qyY6m4yVQx28=)
                          24: xPuYo9ZNVfEwjuZRks156sTPvCs.roa (hash: jIHvOq1mFiR09GABf7ziDZ9sAzswkVSjcgAC+i6z4yU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 12:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ba:11:af:0d:c0:ed:66:c5:3c:45:4e:ea:54:2e:eb:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=583d76051017d0afa915fcfb790a00f4667b0a88
        Validity
            Not Before: May 10 12:00:43 2025 GMT
            Not After : May 11 12:00:43 2025 GMT
        Subject: CN=3de1c959012527b6ab5bdbd2459904ebeab7a84a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:9c:ae:27:18:61:2d:c7:11:a2:47:f5:d9:6b:
                    3c:e6:44:17:f5:5c:b1:93:c5:40:e9:2a:e7:2e:42:
                    af:d3:94:85:18:17:d0:90:00:b2:ae:72:01:5a:55:
                    88:1e:68:19:9b:3e:bb:28:41:5d:3d:88:37:5c:11:
                    bb:97:2a:72:d1:f7:5e:45:12:da:cc:98:d5:49:38:
                    a7:06:38:a6:f3:1d:f4:ac:1c:0c:8b:93:05:f1:94:
                    50:e0:8d:79:35:bf:00:f6:c2:6e:00:91:a2:16:3f:
                    e0:87:f3:fd:38:07:39:43:f6:17:4f:d5:76:84:7c:
                    0a:df:25:85:40:98:7d:ae:5a:23:7f:38:8c:f7:b8:
                    1b:af:16:17:d5:c7:88:56:db:c3:18:52:39:19:bf:
                    10:75:eb:40:e4:f4:a6:22:3a:7b:95:c1:64:fb:fd:
                    cf:8c:25:4f:de:82:5f:fd:b5:89:88:8b:0d:ec:9f:
                    03:9e:46:b7:de:fa:34:ed:4a:bb:9c:79:c0:5a:9b:
                    6f:24:60:15:5c:dd:ff:30:3f:da:5f:f2:f5:c2:87:
                    66:de:14:3d:b4:43:c9:dd:c3:66:a5:24:09:4d:1b:
                    ee:ca:a1:b1:52:f8:a4:cd:7b:85:14:9b:56:2a:6c:
                    58:43:8c:55:5f:87:1e:e2:f7:da:52:e4:b2:17:26:
                    9e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:E1:C9:59:01:25:27:B6:AB:5B:DB:D2:45:99:04:EB:EA:B7:A8:4A
            X509v3 Authority Key Identifier:
                keyid:58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:d7:68:42:cd:df:5b:38:45:34:9b:bd:97:08:09:05:6d:06:
         33:fa:8e:7f:4b:80:ce:d6:d8:43:13:79:4a:6a:61:46:07:0f:
         3b:74:f8:af:77:45:82:60:6b:89:8a:63:ec:c9:22:63:48:6b:
         64:f5:92:df:2f:e0:00:d5:59:ff:c6:00:7b:d3:a2:c8:3f:ad:
         7a:d3:92:61:49:3b:a7:1e:bd:19:ca:2c:66:41:4a:4c:ae:de:
         a5:b2:16:b1:68:f8:9d:e1:8b:15:98:22:96:66:05:7f:ab:fb:
         71:97:09:92:10:0d:e7:c9:e0:c4:29:b5:2b:21:de:d2:4e:c9:
         91:cf:58:bf:72:c3:90:8b:24:ad:bc:b3:ae:81:c0:cd:08:21:
         73:b4:7c:ae:4c:d8:f1:6d:88:54:bb:77:44:b3:0e:35:c1:dc:
         39:69:33:06:30:f9:a9:34:a7:28:c6:c7:8c:61:d3:bf:9d:07:
         6c:3f:86:57:00:48:aa:63:b4:db:c6:e8:a0:60:89:d5:19:f5:
         d0:12:ea:21:70:e3:48:60:82:0e:e3:89:f0:00:ab:cf:c2:35:
         ed:f0:b8:fc:fd:bb:cb:b8:bc:5d:81:41:26:72:63:75:40:46:
         f9:a0:20:69:82:01:b0:69:f8:e1:e8:41:37:43:cf:ac:79:96:
         be:37:9f:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa6Ea8NwO1mxTxFTupULuvFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4M2Q3NjA1MTAxN2QwYWZhOTE1ZmNmYjc5MGEwMGY0NjY3
YjBhODgwHhcNMjUwNTEwMTIwMDQzWhcNMjUwNTExMTIwMDQzWjAzMTEwLwYDVQQD
EygzZGUxYzk1OTAxMjUyN2I2YWI1YmRiZDI0NTk5MDRlYmVhYjdhODRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpyuJxhhLccRokf12Ws85kQX9Vyx
k8VA6SrnLkKv05SFGBfQkACyrnIBWlWIHmgZmz67KEFdPYg3XBG7lypy0fdeRRLa
zJjVSTinBjim8x30rBwMi5MF8ZRQ4I15Nb8A9sJuAJGiFj/gh/P9OAc5Q/YXT9V2
hHwK3yWFQJh9rlojfziM97gbrxYX1ceIVtvDGFI5Gb8QdetA5PSmIjp7lcFk+/3P
jCVP3oJf/bWJiIsN7J8Dnka33vo07Uq7nHnAWptvJGAVXN3/MD/aX/L1wodm3hQ9
tEPJ3cNmpSQJTRvuyqGxUvikzXuFFJtWKmxYQ4xVX4ce4vfaUuSyFyae+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD3hyVkBJSe2q1vb0kWZBOvqt6hKMB8GA1UdIwQY
MBaAFFg9dgUQF9CvqRX8+3kKAPRmewqIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0QxMkJSQVgwSy1wRmZ6N2VRb0E5R1o3Q29nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC80ZjFiMjctMzI2YS00Njc5LWE2NGIt
ZGE2MTUzODg1ZjNiLzEvV0QxMkJSQVgwSy1wRmZ6N2VRb0E5R1o3Q29nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC80ZjFiMjctMzI2YS00Njc5LWE2NGItZGE2MTUzODg1ZjNi
LzEvV0QxMkJSQVgwSy1wRmZ6N2VRb0E5R1o3Q29nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKddoQs3f
WzhFNJu9lwgJBW0GM/qOf0uAztbYQxN5SmphRgcPO3T4r3dFgmBriYpj7MkiY0hr
ZPWS3y/gANVZ/8YAe9OiyD+tetOSYUk7px69GcosZkFKTK7epbIWsWj4neGLFZgi
lmYFf6v7cZcJkhAN58ngxCm1KyHe0k7Jkc9Yv3LDkIskrbyzroHAzQghc7R8rkzY
8W2IVLt3RLMONcHcOWkzBjD5qTSnKMbHjGHTv50HbD+GVwBIqmO028booGCJ1Rn1
0BLqIXDjSGCCDuOJ8ACrz8I17fC4/P27y7i8XYFBJnJjdUBG+aAgaYIBsGn44ehB
N0PPrHmWvjefAQ==
-----END CERTIFICATE-----
Generated at Sat May 10 20:47:38 2025 by rpki-client