Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/90033c-5b03-4709-b6d3-a865e189ed8a/1/wvypREWGBrEBfibDyhdDD3_5JLM.mft
File:                     wvypREWGBrEBfibDyhdDD3_5JLM.mft (raw, json)
Hash identifier:          EPJ671omSbrtXAUcdpBzKei7VWk7nNqPs1dWLgZrDzg=
Subject key identifier:   4B:4F:42:A1:D7:50:C9:CF:FB:EF:C8:71:49:8F:02:E8:04:CF:8B:82
Authority key identifier: C2:FC:A9:44:45:86:06:B1:01:7E:26:C3:CA:17:43:0F:7F:F9:24:B3
Certificate issuer:       /CN=c2fca944458606b1017e26c3ca17430f7ff924b3
Certificate serial:       01969E9A84D0ED5E3DDB7FE02FB1C153CBD5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wvypREWGBrEBfibDyhdDD3_5JLM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/90033c-5b03-4709-b6d3-a865e189ed8a/1/wvypREWGBrEBfibDyhdDD3_5JLM.mft
Manifest number:          1524
Signing time:             Mon 05 May 2025 04:00:48 +0000
Manifest this update:     Mon 05 May 2025 04:00:48 +0000
Manifest next update:     Tue 06 May 2025 04:00:48 +0000
Files and hashes:         1: hWs8BC_h3pk307welYbUg7knJ4s.roa (hash: dB9CucoPV9UQVFmYpgxFuKafR8O28SK4AMzI4d3GC5o=)
                          2: wvypREWGBrEBfibDyhdDD3_5JLM.crl (hash: GMHz3H+Dos6cbBc0A4KDkfIl0xqa99oBFu9xiE3aeOM=)
                          3: zsnDAUQ9OWrVKsrixNM64UubPEE.roa (hash: 8s4+Ar8E4qPe68moGEzfuFe9b4Z1MTv6KsbZ2gEaOyo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/90033c-5b03-4709-b6d3-a865e189ed8a/1/wvypREWGBrEBfibDyhdDD3_5JLM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/90033c-5b03-4709-b6d3-a865e189ed8a/1/wvypREWGBrEBfibDyhdDD3_5JLM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wvypREWGBrEBfibDyhdDD3_5JLM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9e:9a:84:d0:ed:5e:3d:db:7f:e0:2f:b1:c1:53:cb:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2fca944458606b1017e26c3ca17430f7ff924b3
        Validity
            Not Before: May  5 04:00:48 2025 GMT
            Not After : May  6 04:00:48 2025 GMT
        Subject: CN=4b4f42a1d750c9cffbefc871498f02e804cf8b82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e0:6d:9a:c3:99:ee:48:e7:a7:d7:a8:d9:2e:
                    0e:bc:0a:b1:bc:52:1b:7e:7c:cc:b2:f0:f0:5b:f6:
                    b9:d2:4d:e5:ab:ab:32:11:cc:0d:f8:d7:8f:cb:c6:
                    98:3e:28:cb:02:d3:a3:b7:6b:1c:a9:13:04:c7:c0:
                    58:6a:f9:16:5a:39:f8:89:ef:2f:67:54:6d:70:8b:
                    ec:c0:75:f9:e3:2f:ac:b4:3b:b9:fc:1d:d8:2c:a4:
                    0c:52:30:6c:89:6d:bc:00:88:d8:d9:4c:dc:16:2b:
                    9a:e0:a9:65:5f:5b:41:3b:68:b7:5e:13:e7:85:88:
                    91:fc:fb:2a:7e:90:e6:e6:c3:00:57:55:23:ea:4d:
                    66:6c:fe:91:e6:83:77:ff:d4:55:43:6e:65:17:09:
                    90:b1:7f:f9:92:7a:e0:2c:4e:c9:86:c7:89:54:a0:
                    27:9d:03:12:89:f2:ed:a8:a6:c6:b6:cb:e0:23:87:
                    92:ee:fb:a2:f4:b8:fc:9c:86:b2:c5:60:dc:81:92:
                    99:89:45:15:d8:29:8e:29:ca:b9:ae:c6:65:97:d3:
                    d7:14:0e:b4:1e:af:fc:c4:2f:97:18:5f:a3:0e:b7:
                    ef:16:fe:9d:15:ba:f7:fd:4a:4f:fb:85:fd:e8:dc:
                    30:47:e7:94:f1:f1:45:a3:ac:6d:a7:bf:89:bc:be:
                    ef:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:4F:42:A1:D7:50:C9:CF:FB:EF:C8:71:49:8F:02:E8:04:CF:8B:82
            X509v3 Authority Key Identifier:
                keyid:C2:FC:A9:44:45:86:06:B1:01:7E:26:C3:CA:17:43:0F:7F:F9:24:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wvypREWGBrEBfibDyhdDD3_5JLM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/90033c-5b03-4709-b6d3-a865e189ed8a/1/wvypREWGBrEBfibDyhdDD3_5JLM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/90033c-5b03-4709-b6d3-a865e189ed8a/1/wvypREWGBrEBfibDyhdDD3_5JLM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:49:92:a6:d1:8d:b5:b5:59:b6:7b:21:5b:c5:55:81:7b:d9:
         f2:11:d4:d9:58:39:c1:a0:03:8b:93:ab:8a:33:39:01:e9:5b:
         2e:1d:fc:8c:dd:2c:e8:10:b1:79:a5:a7:9f:8b:0f:63:ba:5b:
         f2:58:a3:08:4f:d7:12:2f:09:f9:54:9a:fc:23:8b:91:4e:31:
         5f:d9:84:09:89:64:0f:ce:f7:17:93:0d:77:99:7f:2b:4d:3f:
         68:79:f6:52:f2:cb:b1:9a:60:d4:e5:ec:4c:52:8c:d4:ec:a1:
         4e:a0:f5:d0:64:7b:66:2a:e7:c8:86:7a:c3:fd:e0:55:22:9d:
         d2:b9:02:5d:ea:2c:51:0b:eb:af:a2:64:7c:51:f8:87:53:7b:
         a3:c4:df:c7:57:d5:6a:4f:53:89:7e:98:a6:72:a2:bf:90:fd:
         0f:00:18:78:cb:11:51:4e:5f:66:40:07:9f:76:84:93:04:37:
         f9:5c:80:9a:6d:70:3a:91:54:55:7d:b5:85:07:ff:27:be:00:
         89:6e:ee:ee:fe:ca:de:35:4f:00:18:79:af:04:d4:b6:79:d0:
         2f:2f:9c:69:47:1b:4f:08:11:ad:4c:99:f2:81:d7:15:44:53:
         bb:44:e8:49:d1:48:ae:d0:8a:9b:fd:d1:37:bb:86:28:fe:f0:
         ff:b1:1a:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaemoTQ7V4923/gL7HBU8vVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyZmNhOTQ0NDU4NjA2YjEwMTdlMjZjM2NhMTc0MzBmN2Zm
OTI0YjMwHhcNMjUwNTA1MDQwMDQ4WhcNMjUwNTA2MDQwMDQ4WjAzMTEwLwYDVQQD
Eyg0YjRmNDJhMWQ3NTBjOWNmZmJlZmM4NzE0OThmMDJlODA0Y2Y4YjgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxuBtmsOZ7kjnp9eo2S4OvAqxvFIb
fnzMsvDwW/a50k3lq6syEcwN+NePy8aYPijLAtOjt2scqRMEx8BYavkWWjn4ie8v
Z1RtcIvswHX54y+stDu5/B3YLKQMUjBsiW28AIjY2UzcFiua4KllX1tBO2i3XhPn
hYiR/PsqfpDm5sMAV1Uj6k1mbP6R5oN3/9RVQ25lFwmQsX/5knrgLE7JhseJVKAn
nQMSifLtqKbGtsvgI4eS7vui9Lj8nIayxWDcgZKZiUUV2CmOKcq5rsZll9PXFA60
Hq/8xC+XGF+jDrfvFv6dFbr3/UpP+4X96NwwR+eU8fFFo6xtp7+JvL7vhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEtPQqHXUMnP++/IcUmPAugEz4uCMB8GA1UdIwQY
MBaAFML8qURFhgaxAX4mw8oXQw9/+SSzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3Z5cFJFV0dCckVCZmliRHloZEREM181SkxNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS85MDAzM2MtNWIwMy00NzA5LWI2ZDMt
YTg2NWUxODllZDhhLzEvd3Z5cFJFV0dCckVCZmliRHloZEREM181SkxNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS85MDAzM2MtNWIwMy00NzA5LWI2ZDMtYTg2NWUxODllZDhh
LzEvd3Z5cFJFV0dCckVCZmliRHloZEREM181SkxNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa0mSptGN
tbVZtnshW8VVgXvZ8hHU2Vg5waADi5OrijM5AelbLh38jN0s6BCxeaWnn4sPY7pb
8lijCE/XEi8J+VSa/COLkU4xX9mECYlkD873F5MNd5l/K00/aHn2UvLLsZpg1OXs
TFKM1OyhTqD10GR7ZirnyIZ6w/3gVSKd0rkCXeosUQvrr6JkfFH4h1N7o8Tfx1fV
ak9TiX6YpnKiv5D9DwAYeMsRUU5fZkAHn3aEkwQ3+VyAmm1wOpFUVX21hQf/J74A
iW7u7v7K3jVPABh5rwTUtnnQLy+caUcbTwgRrUyZ8oHXFURTu0ToSdFIrtCKm/3R
N7uGKP7w/7Ea9A==
-----END CERTIFICATE-----
Generated at Mon May 5 09:45:45 2025 by rpki-client