Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/78b1a7-9fbd-4f6f-8eb4-7b622ddf84f4/1/WIOU45ENlKe_Cnig8wLQKumQcnM.mft
File:                     WIOU45ENlKe_Cnig8wLQKumQcnM.mft (raw, json)
Hash identifier:          xKhjglpDxU6ifjCwmU2uZNPQQTnVxqpiPoJYfcXoi7Q=
Subject key identifier:   75:BB:D9:61:6E:27:05:D2:DB:5D:CC:6D:EA:3C:C3:72:3A:90:40:F7
Authority key identifier: 58:83:94:E3:91:0D:94:A7:BF:0A:78:A0:F3:02:D0:2A:E9:90:72:73
Certificate issuer:       /CN=588394e3910d94a7bf0a78a0f302d02ae9907273
Certificate serial:       0197B7454DB4975E93ACA605D100313B8FEA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WIOU45ENlKe_Cnig8wLQKumQcnM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/78b1a7-9fbd-4f6f-8eb4-7b622ddf84f4/1/WIOU45ENlKe_Cnig8wLQKumQcnM.mft
Manifest number:          15B4
Signing time:             Sat 28 Jun 2025 16:01:01 +0000
Manifest this update:     Sat 28 Jun 2025 16:01:01 +0000
Manifest next update:     Sun 29 Jun 2025 16:01:01 +0000
Files and hashes:         1: WIOU45ENlKe_Cnig8wLQKumQcnM.crl (hash: e6b1BEi36FzKArKMJssIQZvq7ZhIAWpcRb9WZtTSRJw=)
                          2: pkgQahpzHWh56tzgd9d98n8d-uM.roa (hash: YQurlMI/tTqNmD2eoDZiGf6050yJ+e+y29w7dKL/U9c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/78b1a7-9fbd-4f6f-8eb4-7b622ddf84f4/1/WIOU45ENlKe_Cnig8wLQKumQcnM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/78b1a7-9fbd-4f6f-8eb4-7b622ddf84f4/1/WIOU45ENlKe_Cnig8wLQKumQcnM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WIOU45ENlKe_Cnig8wLQKumQcnM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:45:4d:b4:97:5e:93:ac:a6:05:d1:00:31:3b:8f:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=588394e3910d94a7bf0a78a0f302d02ae9907273
        Validity
            Not Before: Jun 28 16:01:01 2025 GMT
            Not After : Jun 29 16:01:01 2025 GMT
        Subject: CN=75bbd9616e2705d2db5dcc6dea3cc3723a9040f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:e7:42:11:95:9d:d9:6f:55:0e:27:b9:71:79:
                    74:ea:1e:91:95:61:68:e4:33:ce:43:fe:e5:ea:5c:
                    ad:7b:95:72:8e:e6:6c:8a:af:a1:6b:61:43:36:69:
                    32:8d:aa:e7:c3:34:90:3a:d8:86:cb:9c:c4:02:06:
                    28:e2:c7:98:77:24:a6:a6:85:13:67:bc:61:da:27:
                    fa:b7:6c:a3:d3:0e:d5:7d:2b:3d:68:5d:a7:d6:37:
                    87:5b:e1:27:a1:e5:cc:a6:3a:8c:a6:9b:45:ec:5e:
                    5c:6f:34:94:d9:b4:69:cf:58:a0:62:7d:50:20:29:
                    72:d8:ba:08:f0:c6:0c:22:da:c3:27:5b:26:b8:1f:
                    d9:24:d7:17:2a:95:5e:84:7c:e8:22:b9:a5:09:18:
                    fb:28:7b:f3:aa:45:ce:d7:6f:a2:7f:f5:c8:0b:7a:
                    4a:52:dd:dc:93:8b:e4:9a:6c:4b:e6:75:eb:b4:bf:
                    0f:9c:ff:41:4a:f0:96:02:3c:71:ca:d4:03:6e:d7:
                    2d:fe:e5:c9:e9:c0:f5:51:34:53:9a:74:e0:8b:47:
                    8a:b3:35:f7:3a:ad:c3:ab:ce:f1:f6:d1:53:e6:32:
                    9d:0e:d2:8c:7f:9d:41:e0:6e:85:8e:52:e9:48:3c:
                    70:13:7e:98:1b:08:d0:df:c4:9d:0f:fb:89:de:00:
                    af:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:BB:D9:61:6E:27:05:D2:DB:5D:CC:6D:EA:3C:C3:72:3A:90:40:F7
            X509v3 Authority Key Identifier:
                keyid:58:83:94:E3:91:0D:94:A7:BF:0A:78:A0:F3:02:D0:2A:E9:90:72:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIOU45ENlKe_Cnig8wLQKumQcnM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/78b1a7-9fbd-4f6f-8eb4-7b622ddf84f4/1/WIOU45ENlKe_Cnig8wLQKumQcnM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/78b1a7-9fbd-4f6f-8eb4-7b622ddf84f4/1/WIOU45ENlKe_Cnig8wLQKumQcnM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:1e:69:a5:e4:94:5f:45:04:00:5b:31:0b:47:19:1e:27:1d:
         3c:55:3f:7b:7b:54:a3:0f:80:56:7d:6f:93:5a:59:5b:a2:21:
         3c:5b:a1:93:4c:78:3f:39:58:72:b5:46:b3:48:1e:74:b4:ea:
         62:ec:79:7c:94:0f:ba:e4:ae:ea:d7:0b:a9:a6:12:e2:8e:92:
         f2:a6:e9:5c:ea:b0:41:d8:ef:d7:90:6d:b2:e6:be:e7:20:73:
         b1:1b:1b:58:b2:a3:70:92:d3:b6:f0:ed:99:29:e9:0c:ff:1f:
         1c:5c:a5:3c:1b:0f:57:5b:54:9b:51:5e:a1:7f:51:bc:73:ab:
         98:e7:43:ec:4e:72:63:e4:d5:54:58:de:01:5f:19:7a:1f:16:
         67:a9:77:83:fc:4d:11:bb:7d:f6:c3:c9:f1:62:5c:44:a3:12:
         8c:38:28:cf:a7:be:c3:b1:1a:66:40:9b:2d:80:1f:69:26:fb:
         d9:90:ea:38:34:7d:37:c1:12:23:0d:02:8e:62:82:cf:7c:23:
         5b:ca:f3:4a:ac:2e:7b:99:15:fa:06:55:4a:1d:e9:97:9e:4c:
         84:63:b5:42:71:d4:21:36:11:f4:58:9d:09:75:dd:d5:c1:99:
         c9:8f:c7:e3:07:22:31:be:c1:86:6b:74:68:9f:f1:f0:0e:89:
         af:e2:34:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3RU20l16TrKYF0QAxO4/qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4ODM5NGUzOTEwZDk0YTdiZjBhNzhhMGYzMDJkMDJhZTk5
MDcyNzMwHhcNMjUwNjI4MTYwMTAxWhcNMjUwNjI5MTYwMTAxWjAzMTEwLwYDVQQD
Eyg3NWJiZDk2MTZlMjcwNWQyZGI1ZGNjNmRlYTNjYzM3MjNhOTA0MGY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzudCEZWd2W9VDie5cXl06h6RlWFo
5DPOQ/7l6lyte5VyjuZsiq+ha2FDNmkyjarnwzSQOtiGy5zEAgYo4seYdySmpoUT
Z7xh2if6t2yj0w7VfSs9aF2n1jeHW+EnoeXMpjqMpptF7F5cbzSU2bRpz1igYn1Q
ICly2LoI8MYMItrDJ1smuB/ZJNcXKpVehHzoIrmlCRj7KHvzqkXO12+if/XIC3pK
Ut3ck4vkmmxL5nXrtL8PnP9BSvCWAjxxytQDbtct/uXJ6cD1UTRTmnTgi0eKszX3
Oq3Dq87x9tFT5jKdDtKMf51B4G6FjlLpSDxwE36YGwjQ38SdD/uJ3gCvkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHW72WFuJwXS213Mbeo8w3I6kED3MB8GA1UdIwQY
MBaAFFiDlOORDZSnvwp4oPMC0CrpkHJzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0lPVTQ1RU5sS2VfQ25pZzh3TFFLdW1RY25NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS83OGIxYTctOWZiZC00ZjZmLThlYjQt
N2I2MjJkZGY4NGY0LzEvV0lPVTQ1RU5sS2VfQ25pZzh3TFFLdW1RY25NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS83OGIxYTctOWZiZC00ZjZmLThlYjQtN2I2MjJkZGY4NGY0
LzEvV0lPVTQ1RU5sS2VfQ25pZzh3TFFLdW1RY25NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArx5ppeSU
X0UEAFsxC0cZHicdPFU/e3tUow+AVn1vk1pZW6IhPFuhk0x4PzlYcrVGs0gedLTq
Yux5fJQPuuSu6tcLqaYS4o6S8qbpXOqwQdjv15Btsua+5yBzsRsbWLKjcJLTtvDt
mSnpDP8fHFylPBsPV1tUm1FeoX9RvHOrmOdD7E5yY+TVVFjeAV8Zeh8WZ6l3g/xN
Ebt99sPJ8WJcRKMSjDgoz6e+w7EaZkCbLYAfaSb72ZDqODR9N8ESIw0CjmKCz3wj
W8rzSqwue5kV+gZVSh3pl55MhGO1QnHUITYR9FidCXXd1cGZyY/H4wciMb7Bhmt0
aJ/x8A6Jr+I09w==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:57:03 2025 by rpki-client