Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/e1b20f-4d6d-40e0-af8a-3f17cbcba5ca/1/WyWQnzuU5V9e8zaifSdKff0NlrI.mft
File:                     WyWQnzuU5V9e8zaifSdKff0NlrI.mft (raw, json)
Hash identifier:          uLUlimPkSYCCkTN7Uwod3QintwBaoe1wNyX25Gdf8wo=
Subject key identifier:   D5:7A:6C:76:86:8F:1E:A2:52:39:A9:C0:5F:62:5F:7D:A3:14:C9:8A
Authority key identifier: 5B:25:90:9F:3B:94:E5:5F:5E:F3:36:A2:7D:27:4A:7D:FD:0D:96:B2
Certificate issuer:       /CN=5b25909f3b94e55f5ef336a27d274a7dfd0d96b2
Certificate serial:       0196B74772F147A9BDBAF00176ED1FD7CB13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WyWQnzuU5V9e8zaifSdKff0NlrI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/e1b20f-4d6d-40e0-af8a-3f17cbcba5ca/1/WyWQnzuU5V9e8zaifSdKff0NlrI.mft
Manifest number:          13E6
Signing time:             Fri 09 May 2025 23:00:35 +0000
Manifest this update:     Fri 09 May 2025 23:00:35 +0000
Manifest next update:     Sat 10 May 2025 23:00:35 +0000
Files and hashes:         1: FEdxURaOUkYL0WbDVp9BT5YoCGg.roa (hash: V1bhzQdOv21eP2L8drvzUoPqsAJ8/f8TJjg7qCBB23Q=)
                          2: WyWQnzuU5V9e8zaifSdKff0NlrI.crl (hash: pWGEh9rdXnh/ojLzYjcj/YqgqbrbKm0cEvjabbThVDY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/e1b20f-4d6d-40e0-af8a-3f17cbcba5ca/1/WyWQnzuU5V9e8zaifSdKff0NlrI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/e1b20f-4d6d-40e0-af8a-3f17cbcba5ca/1/WyWQnzuU5V9e8zaifSdKff0NlrI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WyWQnzuU5V9e8zaifSdKff0NlrI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 May 2025 23:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b7:47:72:f1:47:a9:bd:ba:f0:01:76:ed:1f:d7:cb:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b25909f3b94e55f5ef336a27d274a7dfd0d96b2
        Validity
            Not Before: May  9 23:00:35 2025 GMT
            Not After : May 10 23:00:35 2025 GMT
        Subject: CN=d57a6c76868f1ea25239a9c05f625f7da314c98a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:cc:9d:23:08:25:15:12:b2:10:7e:b7:cf:55:
                    e0:ea:5a:7b:30:00:8b:6b:67:64:89:01:da:cf:df:
                    8c:e6:2f:6b:86:31:d2:24:3c:46:09:d4:6c:f8:7a:
                    6c:8c:1a:ee:b6:6a:bd:bf:a0:b6:f1:50:ee:fa:ca:
                    2b:74:dd:22:d5:7a:71:fb:40:4f:b5:b6:a1:dc:ff:
                    39:63:3a:f7:eb:48:3d:1d:44:b2:52:56:33:ab:1f:
                    39:07:8e:48:9f:26:22:92:7a:31:59:81:e2:97:89:
                    b8:f0:0d:68:a8:51:f7:c9:c6:89:94:25:ed:3e:c9:
                    8c:26:4c:2e:86:fa:4d:b8:b3:8e:0a:e2:b6:5a:1b:
                    50:14:49:3d:89:91:7b:a2:9f:c0:90:5b:4a:77:49:
                    fd:cb:a9:2a:cd:26:6c:01:a1:ca:06:fa:ab:8a:d0:
                    c2:92:50:8c:b8:ce:10:cb:01:e6:10:66:c6:78:5f:
                    2f:b4:76:42:af:00:54:ff:9b:e5:92:24:13:73:03:
                    d4:d1:33:00:38:34:64:95:9c:f6:6e:85:25:e5:d2:
                    15:f8:7a:d8:35:6b:f7:e4:af:74:2b:39:17:ea:e9:
                    07:ea:c5:c7:6a:a4:83:c0:9d:e4:27:6b:16:c8:52:
                    21:24:c2:0c:bc:06:a6:6b:93:53:47:2e:51:bc:a2:
                    49:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:7A:6C:76:86:8F:1E:A2:52:39:A9:C0:5F:62:5F:7D:A3:14:C9:8A
            X509v3 Authority Key Identifier:
                keyid:5B:25:90:9F:3B:94:E5:5F:5E:F3:36:A2:7D:27:4A:7D:FD:0D:96:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WyWQnzuU5V9e8zaifSdKff0NlrI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/e1b20f-4d6d-40e0-af8a-3f17cbcba5ca/1/WyWQnzuU5V9e8zaifSdKff0NlrI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/e1b20f-4d6d-40e0-af8a-3f17cbcba5ca/1/WyWQnzuU5V9e8zaifSdKff0NlrI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:20:df:3d:65:6c:e2:b3:80:6c:d7:f6:3d:b5:64:2c:20:b6:
         e6:3d:bb:a8:1e:4b:4d:7a:0f:7a:bf:b6:c5:c3:ad:ca:ad:e6:
         f7:ef:d2:f7:04:7a:ff:54:63:94:75:7d:a9:8b:f2:40:2f:ea:
         c2:41:6e:21:2f:0a:c3:26:97:7c:7b:ac:03:f5:71:e8:d0:5f:
         12:09:5d:de:97:af:f6:ee:0b:88:e3:4f:2e:84:26:27:e7:5e:
         07:cf:f7:ec:f6:38:ef:8e:a7:23:6a:b8:e0:a0:e6:b7:5e:4f:
         49:66:b6:cc:01:0c:91:da:ef:76:ea:79:b4:5c:ea:10:ce:4b:
         8e:d6:03:b1:0e:c8:ca:09:20:e0:5c:92:f4:31:25:09:2a:d0:
         94:f4:be:7d:6c:ad:13:8d:70:64:eb:ea:8d:5d:83:bc:69:b3:
         f1:01:9a:fe:01:16:16:cc:3a:00:4d:30:1d:4b:67:92:ae:d2:
         df:fd:f2:e2:39:7a:b2:b6:a0:28:6f:55:77:29:ff:af:18:a2:
         67:c7:f1:2b:d0:d5:b9:61:ca:fc:3a:2c:07:c2:34:25:37:c9:
         9b:cf:c9:4f:d2:84:6a:e2:e8:2e:9a:f1:74:9e:57:9b:d4:74:
         85:8b:a9:ee:95:5c:5a:93:11:65:2f:db:da:60:47:54:af:e6:
         90:aa:d3:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa3R3LxR6m9uvABdu0f18sTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViMjU5MDlmM2I5NGU1NWY1ZWYzMzZhMjdkMjc0YTdkZmQw
ZDk2YjIwHhcNMjUwNTA5MjMwMDM1WhcNMjUwNTEwMjMwMDM1WjAzMTEwLwYDVQQD
EyhkNTdhNmM3Njg2OGYxZWEyNTIzOWE5YzA1ZjYyNWY3ZGEzMTRjOThhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA28ydIwglFRKyEH63z1Xg6lp7MACL
a2dkiQHaz9+M5i9rhjHSJDxGCdRs+HpsjBrutmq9v6C28VDu+sordN0i1Xpx+0BP
tbah3P85Yzr360g9HUSyUlYzqx85B45InyYiknoxWYHil4m48A1oqFH3ycaJlCXt
PsmMJkwuhvpNuLOOCuK2WhtQFEk9iZF7op/AkFtKd0n9y6kqzSZsAaHKBvqritDC
klCMuM4QywHmEGbGeF8vtHZCrwBU/5vlkiQTcwPU0TMAODRklZz2boUl5dIV+HrY
NWv35K90KzkX6ukH6sXHaqSDwJ3kJ2sWyFIhJMIMvAama5NTRy5RvKJJuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNV6bHaGjx6iUjmpwF9iX32jFMmKMB8GA1UdIwQY
MBaAFFslkJ87lOVfXvM2on0nSn39DZayMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3lXUW56dVU1VjllOHphaWZTZEtmZjBObHJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9lMWIyMGYtNGQ2ZC00MGUwLWFmOGEt
M2YxN2NiY2JhNWNhLzEvV3lXUW56dVU1VjllOHphaWZTZEtmZjBObHJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi9lMWIyMGYtNGQ2ZC00MGUwLWFmOGEtM2YxN2NiY2JhNWNh
LzEvV3lXUW56dVU1VjllOHphaWZTZEtmZjBObHJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHSDfPWVs
4rOAbNf2PbVkLCC25j27qB5LTXoPer+2xcOtyq3m9+/S9wR6/1RjlHV9qYvyQC/q
wkFuIS8KwyaXfHusA/Vx6NBfEgld3pev9u4LiONPLoQmJ+deB8/37PY4746nI2q4
4KDmt15PSWa2zAEMkdrvdup5tFzqEM5LjtYDsQ7Iygkg4FyS9DElCSrQlPS+fWyt
E41wZOvqjV2DvGmz8QGa/gEWFsw6AE0wHUtnkq7S3/3y4jl6sragKG9Vdyn/rxii
Z8fxK9DVuWHK/DosB8I0JTfJm8/JT9KEauLoLprxdJ5Xm9R0hYup7pVcWpMRZS/b
2mBHVK/mkKrTGA==
-----END CERTIFICATE-----
Generated at Sat May 10 06:38:16 2025 by rpki-client