Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f0ea2c-d27d-4ecf-ba25-1e08dfd235c7/1/WuQ0HiOjMV7URVpUXRpIzvKeeJM.mft
File:                     WuQ0HiOjMV7URVpUXRpIzvKeeJM.mft (raw, json)
Hash identifier:          xew1JyH5Aqbucyk/bClpiKhAVNa7uhsPOME8CggbPJc=
Subject key identifier:   27:55:FE:84:34:DE:11:C5:65:45:15:2A:58:AF:52:76:13:81:C1:74
Authority key identifier: 5A:E4:34:1E:23:A3:31:5E:D4:45:5A:54:5D:1A:48:CE:F2:9E:78:93
Certificate issuer:       /CN=5ae4341e23a3315ed4455a545d1a48cef29e7893
Certificate serial:       0197B9D915BC6BC7EBBB949194A8A33AE434
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WuQ0HiOjMV7URVpUXRpIzvKeeJM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/f0ea2c-d27d-4ecf-ba25-1e08dfd235c7/1/WuQ0HiOjMV7URVpUXRpIzvKeeJM.mft
Manifest number:          15B3
Signing time:             Sun 29 Jun 2025 04:01:41 +0000
Manifest this update:     Sun 29 Jun 2025 04:01:41 +0000
Manifest next update:     Mon 30 Jun 2025 04:01:41 +0000
Files and hashes:         1: H-w2T99zCrrlKQYxLvTqjVHNtNs.roa (hash: 8/w5H9itBFo+zRfCIM8deFlqPQ7aIcS5e5Q1K2Dc7sw=)
                          2: WuQ0HiOjMV7URVpUXRpIzvKeeJM.crl (hash: qbPyiTPfccHFITp5BZMfvvJeluU0YI5GkmFSvHW+A8c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/f0ea2c-d27d-4ecf-ba25-1e08dfd235c7/1/WuQ0HiOjMV7URVpUXRpIzvKeeJM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/f0ea2c-d27d-4ecf-ba25-1e08dfd235c7/1/WuQ0HiOjMV7URVpUXRpIzvKeeJM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WuQ0HiOjMV7URVpUXRpIzvKeeJM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Jun 2025 00:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b9:d9:15:bc:6b:c7:eb:bb:94:91:94:a8:a3:3a:e4:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ae4341e23a3315ed4455a545d1a48cef29e7893
        Validity
            Not Before: Jun 29 04:01:41 2025 GMT
            Not After : Jun 30 04:01:41 2025 GMT
        Subject: CN=2755fe8434de11c56545152a58af52761381c174
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:8c:b8:6c:41:9a:34:f3:32:18:4a:81:61:0c:
                    30:be:df:ea:dc:66:e0:dd:3c:58:60:60:3c:a8:90:
                    f5:67:f0:24:7b:b1:4e:23:fd:68:e6:c3:7d:77:43:
                    88:67:27:3e:94:09:f4:74:e6:a7:1b:67:23:2d:c1:
                    08:22:f1:16:35:b7:14:6e:a8:cc:6b:5a:bb:0b:a7:
                    e2:06:e6:7a:a0:54:ce:27:0d:fb:29:58:30:8e:01:
                    2c:17:38:dc:40:b3:df:54:ee:54:d1:48:2b:5e:46:
                    5f:c2:6b:3c:fa:7d:1e:9c:54:0d:cc:e1:19:6c:2b:
                    55:7f:6b:7b:f5:f8:74:40:72:37:77:c1:e5:4c:74:
                    14:9a:67:91:1b:f8:9a:e2:f1:2f:ad:fb:55:1d:e5:
                    22:93:e6:1b:36:38:0d:8a:fa:6e:49:8d:9b:5b:15:
                    01:af:b8:12:be:7f:bc:a1:19:76:f6:b4:23:2c:5b:
                    2a:e8:09:9c:ae:6a:b5:52:4d:04:02:2c:ff:76:df:
                    a7:e1:5d:35:19:3a:ae:80:3b:d6:83:29:02:5e:5c:
                    a1:80:fc:6d:d5:ce:70:86:0b:fd:e5:a4:95:b1:dd:
                    fa:73:0e:f4:38:87:df:38:d3:71:c2:99:0f:4b:3e:
                    77:89:cc:b5:37:c8:10:de:66:c6:f1:ae:30:b7:df:
                    46:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:55:FE:84:34:DE:11:C5:65:45:15:2A:58:AF:52:76:13:81:C1:74
            X509v3 Authority Key Identifier:
                keyid:5A:E4:34:1E:23:A3:31:5E:D4:45:5A:54:5D:1A:48:CE:F2:9E:78:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WuQ0HiOjMV7URVpUXRpIzvKeeJM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f0ea2c-d27d-4ecf-ba25-1e08dfd235c7/1/WuQ0HiOjMV7URVpUXRpIzvKeeJM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f0ea2c-d27d-4ecf-ba25-1e08dfd235c7/1/WuQ0HiOjMV7URVpUXRpIzvKeeJM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:01:e9:ab:e1:79:c8:25:6b:a5:a2:dc:a6:02:f9:15:bc:80:
         61:f5:62:9b:aa:72:1d:62:20:4f:04:35:00:31:0a:e5:c7:ac:
         56:15:a9:9d:ff:fd:74:17:1b:37:a2:07:5b:71:4d:e1:8e:2a:
         87:54:e7:d0:6b:c4:88:8f:a6:cc:db:08:ac:94:17:a3:92:58:
         f8:8c:5f:b0:c2:7e:97:76:d6:5e:8a:41:8e:fe:bb:b5:56:5f:
         cd:04:2b:a2:97:13:fd:7f:d9:17:a6:26:bf:d8:88:fd:f2:9d:
         c4:73:fc:7c:01:5f:e4:49:e8:1e:f6:57:28:57:ae:a6:dd:b4:
         33:ae:e9:18:c2:d5:bf:83:7e:38:20:c1:e6:7e:e2:5e:7c:8e:
         f7:5c:79:ce:98:16:94:86:52:72:d0:e2:20:72:7d:f7:84:8b:
         fe:b6:90:5c:7b:e5:d9:61:af:6d:16:9a:11:a1:9d:8b:a8:72:
         fa:7b:b3:65:6c:ee:fc:66:11:cd:ec:02:80:50:70:a4:8a:88:
         fc:12:9f:d5:7c:05:17:7d:56:d9:a5:bc:ff:1c:ab:b8:73:f6:
         c6:4e:ed:82:8a:63:1e:e2:1a:46:53:7f:02:fa:16:8d:de:85:
         a5:6b:14:f8:8a:2f:d7:59:41:88:77:14:ef:5d:42:6e:b2:d7:
         df:db:15:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe52RW8a8fru5SRlKijOuQ0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhZTQzNDFlMjNhMzMxNWVkNDQ1NWE1NDVkMWE0OGNlZjI5
ZTc4OTMwHhcNMjUwNjI5MDQwMTQxWhcNMjUwNjMwMDQwMTQxWjAzMTEwLwYDVQQD
EygyNzU1ZmU4NDM0ZGUxMWM1NjU0NTE1MmE1OGFmNTI3NjEzODFjMTc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYy4bEGaNPMyGEqBYQwwvt/q3Gbg
3TxYYGA8qJD1Z/Ake7FOI/1o5sN9d0OIZyc+lAn0dOanG2cjLcEIIvEWNbcUbqjM
a1q7C6fiBuZ6oFTOJw37KVgwjgEsFzjcQLPfVO5U0UgrXkZfwms8+n0enFQNzOEZ
bCtVf2t79fh0QHI3d8HlTHQUmmeRG/ia4vEvrftVHeUik+YbNjgNivpuSY2bWxUB
r7gSvn+8oRl29rQjLFsq6Amcrmq1Uk0EAiz/dt+n4V01GTqugDvWgykCXlyhgPxt
1c5whgv95aSVsd36cw70OIffONNxwpkPSz53icy1N8gQ3mbG8a4wt99G3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCdV/oQ03hHFZUUVKlivUnYTgcF0MB8GA1UdIwQY
MBaAFFrkNB4jozFe1EVaVF0aSM7ynniTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3VRMEhpT2pNVjdVUlZwVVhScEl6dktlZUpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mMGVhMmMtZDI3ZC00ZWNmLWJhMjUt
MWUwOGRmZDIzNWM3LzEvV3VRMEhpT2pNVjdVUlZwVVhScEl6dktlZUpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mMGVhMmMtZDI3ZC00ZWNmLWJhMjUtMWUwOGRmZDIzNWM3
LzEvV3VRMEhpT2pNVjdVUlZwVVhScEl6dktlZUpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYAHpq+F5
yCVrpaLcpgL5FbyAYfVim6pyHWIgTwQ1ADEK5cesVhWpnf/9dBcbN6IHW3FN4Y4q
h1Tn0GvEiI+mzNsIrJQXo5JY+IxfsMJ+l3bWXopBjv67tVZfzQQropcT/X/ZF6Ym
v9iI/fKdxHP8fAFf5EnoHvZXKFeupt20M67pGMLVv4N+OCDB5n7iXnyO91x5zpgW
lIZSctDiIHJ994SL/raQXHvl2WGvbRaaEaGdi6hy+nuzZWzu/GYRzewCgFBwpIqI
/BKf1XwFF31W2aW8/xyruHP2xk7tgopjHuIaRlN/AvoWjd6FpWsU+Iov11lBiHcU
711CbrLX39sVTw==
-----END CERTIFICATE-----
Generated at Sun Jun 29 06:22:57 2025 by rpki-client