Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/28fce4-81f1-4cd3-a8ed-ab94affb903a/1/P_WN_7pN9qw0vZ9IEZrhHP74p2w.mft
File:                     P_WN_7pN9qw0vZ9IEZrhHP74p2w.mft (raw, json)
Hash identifier:          xZdQscby9GWE5/NvUVzCmJn2uiP5x6G0zgPz9KrlFBU=
Subject key identifier:   41:89:5E:E9:17:71:A8:01:CA:69:62:B7:B8:44:25:BE:2A:7F:DB:C9
Authority key identifier: 3F:F5:8D:FF:BA:4D:F6:AC:34:BD:9F:48:11:9A:E1:1C:FE:F8:A7:6C
Certificate issuer:       /CN=3ff58dffba4df6ac34bd9f48119ae11cfef8a76c
Certificate serial:       0196BB5AF2350E1D274B4C5C34BEA5314AF1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/P_WN_7pN9qw0vZ9IEZrhHP74p2w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/28fce4-81f1-4cd3-a8ed-ab94affb903a/1/P_WN_7pN9qw0vZ9IEZrhHP74p2w.mft
Manifest number:          12C4
Signing time:             Sat 10 May 2025 18:00:21 +0000
Manifest this update:     Sat 10 May 2025 18:00:21 +0000
Manifest next update:     Sun 11 May 2025 18:00:21 +0000
Files and hashes:         1: P_WN_7pN9qw0vZ9IEZrhHP74p2w.crl (hash: SFPqhOTQ4H4WZUC0sTiWidlRLKDanoOOsXvkpMFFG+U=)
                          2: Q0NTavEWJ5qlzhM0Gok-q7D_kpE.roa (hash: 38GOGOOApNFSuUu3tueeEDSFag3IGEHi/vwKyUqguXY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/28fce4-81f1-4cd3-a8ed-ab94affb903a/1/P_WN_7pN9qw0vZ9IEZrhHP74p2w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/28fce4-81f1-4cd3-a8ed-ab94affb903a/1/P_WN_7pN9qw0vZ9IEZrhHP74p2w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/P_WN_7pN9qw0vZ9IEZrhHP74p2w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 13:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bb:5a:f2:35:0e:1d:27:4b:4c:5c:34:be:a5:31:4a:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ff58dffba4df6ac34bd9f48119ae11cfef8a76c
        Validity
            Not Before: May 10 18:00:21 2025 GMT
            Not After : May 11 18:00:21 2025 GMT
        Subject: CN=41895ee91771a801ca6962b7b84425be2a7fdbc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e4:50:e0:cb:ea:af:a1:24:15:4d:e2:19:13:
                    21:58:d1:13:23:e8:f0:51:73:0f:79:53:11:f8:05:
                    51:4d:b9:44:e4:6f:23:5a:85:eb:fb:54:f0:f2:61:
                    3b:90:a1:3f:4e:66:f1:0a:36:ad:e3:d8:dd:08:a5:
                    28:97:05:4e:fe:cb:4f:d7:fb:3c:a6:33:8b:6b:31:
                    9c:3b:c5:bb:1c:8a:8f:fa:6c:89:05:64:93:e2:4b:
                    ff:0f:1f:3c:34:8f:89:22:97:ee:4a:ab:3c:b1:58:
                    63:50:ff:28:8a:50:e3:38:b5:7f:1c:e4:a2:d9:fc:
                    e4:d8:0e:6c:37:9d:45:a2:19:4d:ac:36:54:79:51:
                    3e:fe:28:84:51:34:10:37:c3:8f:52:67:7e:73:52:
                    66:59:3c:ec:3c:88:bb:54:f7:09:62:33:fb:6e:3f:
                    c4:92:10:95:f1:88:d6:ce:ac:59:74:99:0a:ab:0b:
                    cc:8b:4d:0e:09:49:c0:8d:f3:2c:0d:c4:59:bb:04:
                    84:d3:1e:2b:94:fc:b5:a1:3c:6b:1d:28:b7:1c:f2:
                    42:78:43:5b:c5:d6:6d:e8:78:66:11:74:84:b5:76:
                    74:97:c9:a7:30:78:90:0e:16:dc:83:86:7c:f8:0f:
                    12:e7:0e:6d:4e:f8:13:dc:0f:72:2d:f8:7f:5a:c6:
                    91:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:89:5E:E9:17:71:A8:01:CA:69:62:B7:B8:44:25:BE:2A:7F:DB:C9
            X509v3 Authority Key Identifier:
                keyid:3F:F5:8D:FF:BA:4D:F6:AC:34:BD:9F:48:11:9A:E1:1C:FE:F8:A7:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P_WN_7pN9qw0vZ9IEZrhHP74p2w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/28fce4-81f1-4cd3-a8ed-ab94affb903a/1/P_WN_7pN9qw0vZ9IEZrhHP74p2w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/28fce4-81f1-4cd3-a8ed-ab94affb903a/1/P_WN_7pN9qw0vZ9IEZrhHP74p2w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:f9:d5:b0:67:bc:7c:1b:c7:dd:7b:31:12:c3:47:3a:9c:37:
         2c:1b:54:7c:70:29:b5:0d:0a:58:67:db:4f:27:6f:99:df:f4:
         dc:14:e5:43:84:64:1b:ec:2d:76:25:be:dc:35:0e:8e:aa:8d:
         fa:da:e9:ca:a2:a8:3a:9a:b4:bf:02:ae:19:05:b5:b3:dc:bd:
         04:b5:9f:63:f5:ff:54:d7:b5:24:04:af:30:00:56:23:00:4e:
         62:61:e0:a7:35:06:54:35:f2:55:13:a3:0d:29:f6:de:cc:27:
         b8:d0:89:66:58:5e:75:8b:d9:e2:da:00:49:50:2f:bf:1a:22:
         d8:c0:2d:26:d0:a8:23:10:7f:fe:f8:bd:ad:1f:a4:7f:e5:8e:
         92:2c:ac:4d:68:11:ae:df:34:37:39:02:01:38:86:ba:03:32:
         40:06:88:bc:19:e0:20:51:93:87:9d:e3:23:1c:17:ee:67:79:
         29:c7:3c:b0:eb:3b:5f:40:1e:3a:99:50:bf:e3:b7:e4:9d:19:
         a1:c0:27:03:b3:7b:bd:62:1b:65:9f:6d:59:77:12:ba:85:d5:
         98:4e:3d:3e:b8:32:62:98:e4:4b:ef:e9:6c:f1:8e:80:c5:5d:
         07:8b:c0:95:86:f5:32:33:67:5a:c4:d9:bd:b5:9b:5a:91:55:
         75:05:36:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa7WvI1Dh0nS0xcNL6lMUrxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZjU4ZGZmYmE0ZGY2YWMzNGJkOWY0ODExOWFlMTFjZmVm
OGE3NmMwHhcNMjUwNTEwMTgwMDIxWhcNMjUwNTExMTgwMDIxWjAzMTEwLwYDVQQD
Eyg0MTg5NWVlOTE3NzFhODAxY2E2OTYyYjdiODQ0MjViZTJhN2ZkYmM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxORQ4Mvqr6EkFU3iGRMhWNETI+jw
UXMPeVMR+AVRTblE5G8jWoXr+1Tw8mE7kKE/TmbxCjat49jdCKUolwVO/stP1/s8
pjOLazGcO8W7HIqP+myJBWST4kv/Dx88NI+JIpfuSqs8sVhjUP8oilDjOLV/HOSi
2fzk2A5sN51FohlNrDZUeVE+/iiEUTQQN8OPUmd+c1JmWTzsPIi7VPcJYjP7bj/E
khCV8YjWzqxZdJkKqwvMi00OCUnAjfMsDcRZuwSE0x4rlPy1oTxrHSi3HPJCeENb
xdZt6HhmEXSEtXZ0l8mnMHiQDhbcg4Z8+A8S5w5tTvgT3A9yLfh/WsaROwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEGJXukXcagBymlit7hEJb4qf9vJMB8GA1UdIwQY
MBaAFD/1jf+6TfasNL2fSBGa4Rz++KdsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUF9XTl83cE45cXcwdlo5SUVacmhIUDc0cDJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny8yOGZjZTQtODFmMS00Y2QzLWE4ZWQt
YWI5NGFmZmI5MDNhLzEvUF9XTl83cE45cXcwdlo5SUVacmhIUDc0cDJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny8yOGZjZTQtODFmMS00Y2QzLWE4ZWQtYWI5NGFmZmI5MDNh
LzEvUF9XTl83cE45cXcwdlo5SUVacmhIUDc0cDJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfvnVsGe8
fBvH3XsxEsNHOpw3LBtUfHAptQ0KWGfbTydvmd/03BTlQ4RkG+wtdiW+3DUOjqqN
+trpyqKoOpq0vwKuGQW1s9y9BLWfY/X/VNe1JASvMABWIwBOYmHgpzUGVDXyVROj
DSn23swnuNCJZlhedYvZ4toASVAvvxoi2MAtJtCoIxB//vi9rR+kf+WOkiysTWgR
rt80NzkCATiGugMyQAaIvBngIFGTh53jIxwX7md5Kcc8sOs7X0AeOplQv+O35J0Z
ocAnA7N7vWIbZZ9tWXcSuoXVmE49PrgyYpjkS+/pbPGOgMVdB4vAlYb1MjNnWsTZ
vbWbWpFVdQU2EQ==
-----END CERTIFICATE-----
Generated at Sat May 10 23:13:44 2025 by rpki-client