Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/d197d3-53c5-4ed1-9873-c45b28aabc1a/1/wdTOjjP3CEsIxFqhd_LjP2kIF6A.mft
File:                     wdTOjjP3CEsIxFqhd_LjP2kIF6A.mft (raw, json)
Hash identifier:          kr/InliaXHyaNPLe/4TFIdRW6r80KAhvDtw1eTqYVsU=
Subject key identifier:   50:BB:C6:A9:3E:9D:3E:96:A8:2D:AA:DB:E1:78:13:F7:2B:65:C9:1E
Authority key identifier: C1:D4:CE:8E:33:F7:08:4B:08:C4:5A:A1:77:F2:E3:3F:69:08:17:A0
Certificate issuer:       /CN=c1d4ce8e33f7084b08c45aa177f2e33f690817a0
Certificate serial:       0196B96CC799C430E65AEE5169FF27EAC198
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wdTOjjP3CEsIxFqhd_LjP2kIF6A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/d197d3-53c5-4ed1-9873-c45b28aabc1a/1/wdTOjjP3CEsIxFqhd_LjP2kIF6A.mft
Manifest number:          06CB
Signing time:             Sat 10 May 2025 09:00:36 +0000
Manifest this update:     Sat 10 May 2025 09:00:36 +0000
Manifest next update:     Sun 11 May 2025 09:00:36 +0000
Files and hashes:         1: 1cyPcd2Vnsepj_sQsmBQuIKwJG4.roa (hash: T6hhaFtSwM402ZP8Qb9OKu3BkFQRH+gZ6KFIIvNDI0M=)
                          2: wdTOjjP3CEsIxFqhd_LjP2kIF6A.crl (hash: fItjsebOcQLc2i9OZ86jKd3wTY1awFpgOBa+nqmNsao=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/d197d3-53c5-4ed1-9873-c45b28aabc1a/1/wdTOjjP3CEsIxFqhd_LjP2kIF6A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/d197d3-53c5-4ed1-9873-c45b28aabc1a/1/wdTOjjP3CEsIxFqhd_LjP2kIF6A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wdTOjjP3CEsIxFqhd_LjP2kIF6A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 09:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b9:6c:c7:99:c4:30:e6:5a:ee:51:69:ff:27:ea:c1:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1d4ce8e33f7084b08c45aa177f2e33f690817a0
        Validity
            Not Before: May 10 09:00:36 2025 GMT
            Not After : May 11 09:00:36 2025 GMT
        Subject: CN=50bbc6a93e9d3e96a82daadbe17813f72b65c91e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d2:38:1a:00:86:b7:b1:68:a3:a8:65:2d:8a:
                    d0:47:70:62:4f:61:cd:ab:49:5c:92:01:68:83:fd:
                    2e:85:d7:bf:4b:0e:ac:38:3f:8e:11:0d:a2:a2:7f:
                    b7:77:ed:1b:70:5c:00:07:46:a1:ae:d5:54:7e:fd:
                    f9:40:26:51:1d:ff:b6:d9:57:ed:1e:ae:f9:59:8b:
                    5c:e9:7b:73:ef:47:e0:0d:a5:e9:5e:c5:84:42:40:
                    9a:e1:04:bc:0a:cd:79:7f:12:71:75:64:14:b8:49:
                    5f:37:da:87:88:2b:b3:82:ce:d1:ca:7b:00:6c:6f:
                    17:52:2f:ac:4e:ee:25:d4:b1:30:ff:f2:af:46:bc:
                    cc:4c:af:1c:ef:30:96:0a:d4:7c:dd:df:f0:b2:25:
                    f0:89:1c:6f:fa:fc:0b:4c:86:67:2b:a3:3b:2f:69:
                    0e:bb:77:14:78:3d:94:af:96:c3:66:76:4f:79:b2:
                    4e:94:8e:29:35:57:10:52:77:f2:77:52:23:8a:91:
                    14:16:eb:56:d1:51:65:6e:20:57:6e:ab:17:ab:26:
                    90:27:6f:40:4f:96:d2:1a:74:a7:3e:ca:16:eb:40:
                    84:08:e6:a0:69:d5:38:01:f9:3b:0a:c4:85:1d:86:
                    30:f4:dd:79:43:2b:74:93:f9:5d:f8:72:b1:0c:c5:
                    7b:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:BB:C6:A9:3E:9D:3E:96:A8:2D:AA:DB:E1:78:13:F7:2B:65:C9:1E
            X509v3 Authority Key Identifier:
                keyid:C1:D4:CE:8E:33:F7:08:4B:08:C4:5A:A1:77:F2:E3:3F:69:08:17:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wdTOjjP3CEsIxFqhd_LjP2kIF6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d197d3-53c5-4ed1-9873-c45b28aabc1a/1/wdTOjjP3CEsIxFqhd_LjP2kIF6A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d197d3-53c5-4ed1-9873-c45b28aabc1a/1/wdTOjjP3CEsIxFqhd_LjP2kIF6A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:fa:b3:4f:af:c4:29:ca:c2:e5:ec:a7:00:1a:1c:94:7c:c0:
         0f:6a:81:78:9a:1b:1f:14:20:08:68:12:58:73:1f:27:03:de:
         c8:97:0c:50:35:9e:ee:d9:41:f0:fe:8c:38:2a:31:31:93:bf:
         f6:74:47:28:f8:cd:c0:db:1c:ae:80:23:f9:07:cc:c1:2e:7a:
         3d:8a:a1:24:13:e2:53:9f:bd:ea:1e:cc:e5:2d:b3:93:05:57:
         36:23:cd:81:29:90:f6:3a:ab:5b:51:48:cc:5d:fb:6f:c5:e5:
         5c:ec:37:06:a8:4b:2d:9f:62:bd:74:4d:ca:30:19:cb:4d:36:
         8c:3b:dc:95:84:03:60:1e:20:79:8b:7c:be:7d:b9:63:85:dc:
         12:5e:cf:31:19:21:bf:59:32:12:b6:2d:ee:b2:ec:ff:ec:60:
         75:39:30:4c:4a:07:ab:f7:fa:2c:ba:20:6c:30:f6:5f:54:b2:
         83:32:09:67:62:5f:86:c7:26:e5:db:f2:ca:1c:52:8f:c2:e6:
         3b:58:3b:41:61:f2:eb:ef:1b:d9:51:e3:7e:0d:ee:0c:e5:59:
         86:f2:81:ce:fb:d9:71:3c:99:03:98:0e:20:0b:28:6b:89:47:
         ee:91:de:4c:fd:b7:27:91:35:06:ab:37:d8:ee:fb:ef:10:72:
         b3:01:fa:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa5bMeZxDDmWu5Raf8n6sGYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxZDRjZThlMzNmNzA4NGIwOGM0NWFhMTc3ZjJlMzNmNjkw
ODE3YTAwHhcNMjUwNTEwMDkwMDM2WhcNMjUwNTExMDkwMDM2WjAzMTEwLwYDVQQD
Eyg1MGJiYzZhOTNlOWQzZTk2YTgyZGFhZGJlMTc4MTNmNzJiNjVjOTFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdI4GgCGt7Foo6hlLYrQR3BiT2HN
q0lckgFog/0uhde/Sw6sOD+OEQ2ion+3d+0bcFwAB0ahrtVUfv35QCZRHf+22Vft
Hq75WYtc6Xtz70fgDaXpXsWEQkCa4QS8Cs15fxJxdWQUuElfN9qHiCuzgs7RynsA
bG8XUi+sTu4l1LEw//KvRrzMTK8c7zCWCtR83d/wsiXwiRxv+vwLTIZnK6M7L2kO
u3cUeD2Ur5bDZnZPebJOlI4pNVcQUnfyd1IjipEUFutW0VFlbiBXbqsXqyaQJ29A
T5bSGnSnPsoW60CECOagadU4Afk7CsSFHYYw9N15Qyt0k/ld+HKxDMV7CwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFC7xqk+nT6WqC2q2+F4E/crZckeMB8GA1UdIwQY
MBaAFMHUzo4z9whLCMRaoXfy4z9pCBegMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2RUT2pqUDNDRXNJeEZxaGRfTGpQMmtJRjZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9kMTk3ZDMtNTNjNS00ZWQxLTk4NzMt
YzQ1YjI4YWFiYzFhLzEvd2RUT2pqUDNDRXNJeEZxaGRfTGpQMmtJRjZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi9kMTk3ZDMtNTNjNS00ZWQxLTk4NzMtYzQ1YjI4YWFiYzFh
LzEvd2RUT2pqUDNDRXNJeEZxaGRfTGpQMmtJRjZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVfqzT6/E
KcrC5eynABoclHzAD2qBeJobHxQgCGgSWHMfJwPeyJcMUDWe7tlB8P6MOCoxMZO/
9nRHKPjNwNscroAj+QfMwS56PYqhJBPiU5+96h7M5S2zkwVXNiPNgSmQ9jqrW1FI
zF37b8XlXOw3BqhLLZ9ivXRNyjAZy002jDvclYQDYB4geYt8vn25Y4XcEl7PMRkh
v1kyErYt7rLs/+xgdTkwTEoHq/f6LLogbDD2X1SygzIJZ2Jfhscm5dvyyhxSj8Lm
O1g7QWHy6+8b2VHjfg3uDOVZhvKBzvvZcTyZA5gOIAsoa4lH7pHeTP23J5E1Bqs3
2O777xByswH6/Q==
-----END CERTIFICATE-----
Generated at Sat May 10 16:53:51 2025 by rpki-client