Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/396890-e96c-4d1f-936c-8fee7ec7c3cd/1/wBV0y54ONb-XVO-RdQFLx0YAjw4.mft
File:                     wBV0y54ONb-XVO-RdQFLx0YAjw4.mft (raw, json)
Hash identifier:          ZFq5oPUlFncL+p93rAVl7RBmwz21lap6jdVdqy2Mdik=
Subject key identifier:   98:09:34:FD:C8:24:99:73:40:9D:77:F9:C5:2A:EC:20:E4:E1:49:3F
Authority key identifier: C0:15:74:CB:9E:0E:35:BF:97:54:EF:91:75:01:4B:C7:46:00:8F:0E
Certificate issuer:       /CN=c01574cb9e0e35bf9754ef9175014bc746008f0e
Certificate serial:       0197B8C60C45674D1C3FF4D418F9E880F456
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wBV0y54ONb-XVO-RdQFLx0YAjw4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/396890-e96c-4d1f-936c-8fee7ec7c3cd/1/wBV0y54ONb-XVO-RdQFLx0YAjw4.mft
Manifest number:          0278
Signing time:             Sat 28 Jun 2025 23:01:16 +0000
Manifest this update:     Sat 28 Jun 2025 23:01:16 +0000
Manifest next update:     Sun 29 Jun 2025 23:01:16 +0000
Files and hashes:         1: nEKK32oFQy3X2Yzvdv8fEhGcazg.roa (hash: LMYqTrguswdi0QtX9F4iCp/SyY8hGayYOolliB1rgCg=)
                          2: wBV0y54ONb-XVO-RdQFLx0YAjw4.crl (hash: yEhnrMnWN8NyZquk9PHIjR9v18kbnK3lPWT6tkrsDn4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/396890-e96c-4d1f-936c-8fee7ec7c3cd/1/wBV0y54ONb-XVO-RdQFLx0YAjw4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/396890-e96c-4d1f-936c-8fee7ec7c3cd/1/wBV0y54ONb-XVO-RdQFLx0YAjw4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wBV0y54ONb-XVO-RdQFLx0YAjw4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 23:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:c6:0c:45:67:4d:1c:3f:f4:d4:18:f9:e8:80:f4:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c01574cb9e0e35bf9754ef9175014bc746008f0e
        Validity
            Not Before: Jun 28 23:01:16 2025 GMT
            Not After : Jun 29 23:01:16 2025 GMT
        Subject: CN=980934fdc8249973409d77f9c52aec20e4e1493f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:d5:f2:8e:71:de:cd:7a:f7:d3:8b:4d:bd:e7:
                    27:fa:c9:84:00:fc:a0:7e:91:43:7a:16:4e:e4:64:
                    09:cd:12:66:1a:91:f5:40:bf:4d:03:f4:b4:8c:4f:
                    be:e7:46:9d:10:45:da:8c:52:1b:fa:3f:d8:11:b1:
                    7b:a3:62:2f:cd:a3:ad:d8:9c:a2:b2:01:25:ab:09:
                    3f:10:d0:3d:95:40:93:0b:12:b3:41:d8:0a:57:30:
                    55:1b:bd:67:cd:bc:92:2d:1b:b7:73:1f:2a:f9:83:
                    03:98:08:bc:c8:6a:a4:32:61:36:19:e1:91:aa:a3:
                    34:de:c5:26:d7:37:ea:b7:48:eb:09:72:31:53:db:
                    31:38:ce:cb:85:cf:aa:cc:e8:ce:7b:5c:14:09:f9:
                    f3:33:9d:e0:b7:59:23:f9:57:4f:c9:76:2a:d8:80:
                    f8:43:82:57:eb:4f:b7:f1:4c:c6:e5:8a:27:19:3f:
                    9e:a0:00:a5:45:ca:33:02:67:7f:b4:1e:0a:cf:53:
                    00:1b:36:a6:3d:ab:5d:2e:14:b7:02:a2:a2:7d:48:
                    cb:44:dd:7e:72:a2:f7:6b:9b:c9:54:26:87:fd:6e:
                    a1:b7:9c:db:93:57:25:e5:42:d8:4d:4c:92:90:92:
                    e1:36:cf:15:a3:90:26:a5:d8:79:fe:1d:ad:44:d4:
                    b7:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:09:34:FD:C8:24:99:73:40:9D:77:F9:C5:2A:EC:20:E4:E1:49:3F
            X509v3 Authority Key Identifier:
                keyid:C0:15:74:CB:9E:0E:35:BF:97:54:EF:91:75:01:4B:C7:46:00:8F:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wBV0y54ONb-XVO-RdQFLx0YAjw4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/396890-e96c-4d1f-936c-8fee7ec7c3cd/1/wBV0y54ONb-XVO-RdQFLx0YAjw4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/396890-e96c-4d1f-936c-8fee7ec7c3cd/1/wBV0y54ONb-XVO-RdQFLx0YAjw4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d1:49:87:db:20:6e:a1:a3:fb:9c:7c:73:dc:7d:2c:ac:85:ce:
         5b:a8:57:8b:92:e9:af:63:5a:78:f3:07:e3:e0:42:6e:c2:39:
         39:3c:8f:10:74:bd:49:36:14:1a:db:96:36:17:58:48:2a:a2:
         1d:bd:63:72:de:21:41:cd:d0:47:24:2b:db:e4:07:5e:8b:0f:
         da:67:4a:8e:3e:00:0e:a5:38:d8:dd:0d:70:38:a0:03:c5:b2:
         c0:5a:4b:4a:9d:39:9c:23:54:4b:f5:3a:ff:2f:18:2a:33:6a:
         ba:6e:d1:05:1a:6e:b2:88:22:0f:fe:68:de:67:6c:70:b1:13:
         16:e0:90:0e:cf:95:67:38:d0:25:92:3b:22:09:56:0a:1a:f4:
         92:bb:b8:22:eb:aa:0d:df:54:c6:ac:eb:8e:d0:4b:e5:3b:ac:
         bb:41:35:34:1d:9c:23:b5:4c:81:7d:90:7c:30:f3:ee:73:63:
         53:65:bb:1f:e9:b4:2a:a6:82:ca:41:02:2b:63:74:33:bd:59:
         55:ee:69:1e:d9:a1:38:61:62:9a:e5:53:5f:77:fc:e9:bd:9a:
         f3:3e:e1:83:0a:4b:c3:dd:f3:2e:cb:8d:dd:ee:50:4b:e2:b8:
         f8:ae:f1:e1:93:3f:ea:13:cb:8b:84:33:80:8d:0f:ed:1b:e8:
         f5:4c:f9:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4xgxFZ00cP/TUGPnogPRWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwMTU3NGNiOWUwZTM1YmY5NzU0ZWY5MTc1MDE0YmM3NDYw
MDhmMGUwHhcNMjUwNjI4MjMwMTE2WhcNMjUwNjI5MjMwMTE2WjAzMTEwLwYDVQQD
Eyg5ODA5MzRmZGM4MjQ5OTczNDA5ZDc3ZjljNTJhZWMyMGU0ZTE0OTNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+NXyjnHezXr304tNvecn+smEAPyg
fpFDehZO5GQJzRJmGpH1QL9NA/S0jE++50adEEXajFIb+j/YEbF7o2IvzaOt2Jyi
sgElqwk/ENA9lUCTCxKzQdgKVzBVG71nzbySLRu3cx8q+YMDmAi8yGqkMmE2GeGR
qqM03sUm1zfqt0jrCXIxU9sxOM7Lhc+qzOjOe1wUCfnzM53gt1kj+VdPyXYq2ID4
Q4JX60+38UzG5YonGT+eoAClRcozAmd/tB4Kz1MAGzamPatdLhS3AqKifUjLRN1+
cqL3a5vJVCaH/W6ht5zbk1cl5ULYTUySkJLhNs8Vo5Ampdh5/h2tRNS3HQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJgJNP3IJJlzQJ13+cUq7CDk4Uk/MB8GA1UdIwQY
MBaAFMAVdMueDjW/l1TvkXUBS8dGAI8OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0JWMHk1NE9OYi1YVk8tUmRRRkx4MFlBanc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8zOTY4OTAtZTk2Yy00ZDFmLTkzNmMt
OGZlZTdlYzdjM2NkLzEvd0JWMHk1NE9OYi1YVk8tUmRRRkx4MFlBanc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC8zOTY4OTAtZTk2Yy00ZDFmLTkzNmMtOGZlZTdlYzdjM2Nk
LzEvd0JWMHk1NE9OYi1YVk8tUmRRRkx4MFlBanc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0UmH2yBu
oaP7nHxz3H0srIXOW6hXi5Lpr2NaePMH4+BCbsI5OTyPEHS9STYUGtuWNhdYSCqi
Hb1jct4hQc3QRyQr2+QHXosP2mdKjj4ADqU42N0NcDigA8WywFpLSp05nCNUS/U6
/y8YKjNqum7RBRpusogiD/5o3mdscLETFuCQDs+VZzjQJZI7IglWChr0kru4Iuuq
Dd9UxqzrjtBL5Tusu0E1NB2cI7VMgX2QfDDz7nNjU2W7H+m0KqaCykECK2N0M71Z
Ve5pHtmhOGFimuVTX3f86b2a8z7hgwpLw93zLsuN3e5QS+K4+K7x4ZM/6hPLi4Qz
gI0P7Rvo9Uz5Pg==
-----END CERTIFICATE-----
Generated at Sun Jun 29 07:57:40 2025 by rpki-client