Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/eaa7e2-8af0-4de1-8241-a55ffae2ebd0/1/WQN6n-ViXtoBCB6y6QfP2bWl3Jo.mft
File:                     WQN6n-ViXtoBCB6y6QfP2bWl3Jo.mft (raw, json)
Hash identifier:          brZb8k+ofFJO1qAIoCQyPbENG+lRzoWPgv2REe3LUnQ=
Subject key identifier:   46:E0:B9:9D:9D:8A:4B:87:93:59:68:BE:BB:D7:64:3E:E2:6C:83:EA
Authority key identifier: 59:03:7A:9F:E5:62:5E:DA:01:08:1E:B2:E9:07:CF:D9:B5:A5:DC:9A
Certificate issuer:       /CN=59037a9fe5625eda01081eb2e907cfd9b5a5dc9a
Certificate serial:       0196AA30EB5F573DC1020BF33BF303D58564
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WQN6n-ViXtoBCB6y6QfP2bWl3Jo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/eaa7e2-8af0-4de1-8241-a55ffae2ebd0/1/WQN6n-ViXtoBCB6y6QfP2bWl3Jo.mft
Manifest number:          0E5B
Signing time:             Wed 07 May 2025 10:00:54 +0000
Manifest this update:     Wed 07 May 2025 10:00:54 +0000
Manifest next update:     Thu 08 May 2025 10:00:54 +0000
Files and hashes:         1: WQN6n-ViXtoBCB6y6QfP2bWl3Jo.crl (hash: Nr1kfIcK7xMgDa92sfOBrsQrl2Go2pLwe1oFwUqesTk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/eaa7e2-8af0-4de1-8241-a55ffae2ebd0/1/WQN6n-ViXtoBCB6y6QfP2bWl3Jo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/eaa7e2-8af0-4de1-8241-a55ffae2ebd0/1/WQN6n-ViXtoBCB6y6QfP2bWl3Jo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WQN6n-ViXtoBCB6y6QfP2bWl3Jo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 May 2025 08:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:aa:30:eb:5f:57:3d:c1:02:0b:f3:3b:f3:03:d5:85:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59037a9fe5625eda01081eb2e907cfd9b5a5dc9a
        Validity
            Not Before: May  7 10:00:54 2025 GMT
            Not After : May  8 10:00:54 2025 GMT
        Subject: CN=46e0b99d9d8a4b87935968bebbd7643ee26c83ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:10:d8:31:2e:ee:45:e3:2b:e7:65:10:37:0c:
                    70:1c:02:c6:bd:ba:b1:89:c8:ff:bf:cb:82:a9:99:
                    9f:33:ba:ee:73:15:f6:88:e9:10:41:3e:a4:bb:3c:
                    8b:ea:e3:c0:d8:7c:d9:fb:4b:b8:da:b3:eb:be:f5:
                    52:dc:a4:38:24:cf:8d:8c:cf:3b:d9:0d:65:ca:b8:
                    d1:d5:87:f6:8c:99:66:e0:43:7a:25:c7:86:fd:1b:
                    f3:0a:e5:09:70:11:b2:6b:8d:26:f7:c6:cc:90:d8:
                    c8:e8:3a:6b:db:d8:a6:15:d9:ca:bc:8f:4f:aa:25:
                    a7:da:10:f8:e2:ab:9e:90:15:3f:38:73:0d:36:0d:
                    88:89:e6:61:33:c7:a9:50:60:9e:76:a5:12:6f:7c:
                    6d:18:07:13:af:1d:47:18:8c:c8:27:ed:27:64:65:
                    e6:51:43:0f:4d:60:e3:50:e0:65:fa:9b:9f:9a:c3:
                    10:88:96:6f:d1:7b:fe:b6:f7:09:a6:b1:c7:d6:06:
                    c5:eb:0e:85:40:2d:8a:37:30:79:36:d2:3c:eb:36:
                    20:cd:f3:c5:5f:fb:9c:4a:78:d8:68:bf:2b:c7:90:
                    39:7a:f3:b3:91:22:7a:e0:c6:e1:fe:77:f7:cb:cb:
                    f8:2c:07:73:4d:0c:90:ba:79:da:6d:09:5e:61:69:
                    0d:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:E0:B9:9D:9D:8A:4B:87:93:59:68:BE:BB:D7:64:3E:E2:6C:83:EA
            X509v3 Authority Key Identifier:
                keyid:59:03:7A:9F:E5:62:5E:DA:01:08:1E:B2:E9:07:CF:D9:B5:A5:DC:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WQN6n-ViXtoBCB6y6QfP2bWl3Jo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/eaa7e2-8af0-4de1-8241-a55ffae2ebd0/1/WQN6n-ViXtoBCB6y6QfP2bWl3Jo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/eaa7e2-8af0-4de1-8241-a55ffae2ebd0/1/WQN6n-ViXtoBCB6y6QfP2bWl3Jo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:d0:0b:96:27:49:70:45:b3:34:49:63:67:8b:24:c6:5c:ce:
         5c:22:be:26:ba:4d:d2:3a:33:22:77:02:8e:a1:f0:50:17:62:
         18:98:e2:8e:2e:ad:22:32:d8:22:ea:1e:c8:b9:82:d4:42:f7:
         3f:fa:b7:f6:d7:b6:0c:e2:31:40:84:21:4c:10:e0:3f:87:c3:
         9d:d6:18:0c:e6:0a:a2:49:06:bc:cd:87:bd:f5:aa:2d:59:48:
         36:1c:9a:53:13:ca:51:ef:b7:51:38:1b:95:76:49:70:20:0a:
         91:1a:93:27:ef:b4:80:6c:98:40:09:80:b9:ac:28:35:d5:5d:
         ad:ca:73:76:1c:14:fb:2f:60:3a:c3:e8:37:e2:06:d3:06:65:
         c0:e4:dd:0a:f2:45:bd:f7:ef:24:91:63:86:f7:12:c8:01:2f:
         04:52:bd:e0:41:02:0b:80:87:88:f6:3a:f4:56:32:cb:e1:62:
         cc:58:7a:52:ce:a9:35:5a:be:83:c8:19:10:74:65:cf:d8:39:
         dd:c5:9f:83:7f:c1:50:13:4b:94:32:55:ae:92:eb:51:9e:3e:
         fa:51:7c:6b:8d:04:4e:70:95:77:b7:86:bd:44:3c:cf:3b:4f:
         f8:51:ba:31:fc:c9:c7:f3:3e:7f:b1:92:fb:83:9b:44:56:8d:
         57:b7:87:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaqMOtfVz3BAgvzO/MD1YVkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5MDM3YTlmZTU2MjVlZGEwMTA4MWViMmU5MDdjZmQ5YjVh
NWRjOWEwHhcNMjUwNTA3MTAwMDU0WhcNMjUwNTA4MTAwMDU0WjAzMTEwLwYDVQQD
Eyg0NmUwYjk5ZDlkOGE0Yjg3OTM1OTY4YmViYmQ3NjQzZWUyNmM4M2VhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRDYMS7uReMr52UQNwxwHALGvbqx
icj/v8uCqZmfM7rucxX2iOkQQT6kuzyL6uPA2HzZ+0u42rPrvvVS3KQ4JM+NjM87
2Q1lyrjR1Yf2jJlm4EN6JceG/RvzCuUJcBGya40m98bMkNjI6Dpr29imFdnKvI9P
qiWn2hD44quekBU/OHMNNg2IieZhM8epUGCedqUSb3xtGAcTrx1HGIzIJ+0nZGXm
UUMPTWDjUOBl+pufmsMQiJZv0Xv+tvcJprHH1gbF6w6FQC2KNzB5NtI86zYgzfPF
X/ucSnjYaL8rx5A5evOzkSJ64Mbh/nf3y8v4LAdzTQyQunnabQleYWkNowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEbguZ2dikuHk1lovrvXZD7ibIPqMB8GA1UdIwQY
MBaAFFkDep/lYl7aAQgesukHz9m1pdyaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1FONm4tVmlYdG9CQ0I2eTZRZlAyYldsM0pvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9lYWE3ZTItOGFmMC00ZGUxLTgyNDEt
YTU1ZmZhZTJlYmQwLzEvV1FONm4tVmlYdG9CQ0I2eTZRZlAyYldsM0pvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi9lYWE3ZTItOGFmMC00ZGUxLTgyNDEtYTU1ZmZhZTJlYmQw
LzEvV1FONm4tVmlYdG9CQ0I2eTZRZlAyYldsM0pvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASdALlidJ
cEWzNEljZ4skxlzOXCK+JrpN0jozIncCjqHwUBdiGJjiji6tIjLYIuoeyLmC1EL3
P/q39te2DOIxQIQhTBDgP4fDndYYDOYKokkGvM2HvfWqLVlINhyaUxPKUe+3UTgb
lXZJcCAKkRqTJ++0gGyYQAmAuawoNdVdrcpzdhwU+y9gOsPoN+IG0wZlwOTdCvJF
vffvJJFjhvcSyAEvBFK94EECC4CHiPY69FYyy+FizFh6Us6pNVq+g8gZEHRlz9g5
3cWfg3/BUBNLlDJVrpLrUZ4++lF8a40ETnCVd7eGvUQ8zztP+FG6MfzJx/M+f7GS
+4ObRFaNV7eHJQ==
-----END CERTIFICATE-----
Generated at Wed May 7 14:41:19 2025 by rpki-client