Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/2c6590-ab29-46b4-a6ae-da388bc34efb/1/wMfxuj-ucTZOkysFYNYCxXJd2o4.mft
File:                     wMfxuj-ucTZOkysFYNYCxXJd2o4.mft (raw, json)
Hash identifier:          ZsCQlPQsMC47FLZ2vrcDXlsSeVvP4v+WUz0N+L6gwTI=
Subject key identifier:   E5:99:EC:35:CD:68:C8:FD:E4:BF:8E:2F:F9:25:A8:14:28:EA:BB:F7
Authority key identifier: C0:C7:F1:BA:3F:AE:71:36:4E:93:2B:05:60:D6:02:C5:72:5D:DA:8E
Certificate issuer:       /CN=c0c7f1ba3fae71364e932b0560d602c5725dda8e
Certificate serial:       0196C64CC98B1238C643AAFC083C6D98800F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wMfxuj-ucTZOkysFYNYCxXJd2o4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/2c6590-ab29-46b4-a6ae-da388bc34efb/1/wMfxuj-ucTZOkysFYNYCxXJd2o4.mft
Manifest number:          09B1
Signing time:             Mon 12 May 2025 21:00:42 +0000
Manifest this update:     Mon 12 May 2025 21:00:42 +0000
Manifest next update:     Tue 13 May 2025 21:00:42 +0000
Files and hashes:         1: Ts1wD-6dXK6YF6lbWc4Bp6qGGOU.roa (hash: l6AYzjv5b4VOeQIHxSNacHxCFNVxW6gn4dbeXJ7uQKA=)
                          2: wMfxuj-ucTZOkysFYNYCxXJd2o4.crl (hash: EQ8Vq+xMRmk9STYngk8Gh7ssSyhPvUdNZp+ohOd9dpU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/2c6590-ab29-46b4-a6ae-da388bc34efb/1/wMfxuj-ucTZOkysFYNYCxXJd2o4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/2c6590-ab29-46b4-a6ae-da388bc34efb/1/wMfxuj-ucTZOkysFYNYCxXJd2o4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wMfxuj-ucTZOkysFYNYCxXJd2o4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 21:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c6:4c:c9:8b:12:38:c6:43:aa:fc:08:3c:6d:98:80:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0c7f1ba3fae71364e932b0560d602c5725dda8e
        Validity
            Not Before: May 12 21:00:42 2025 GMT
            Not After : May 13 21:00:42 2025 GMT
        Subject: CN=e599ec35cd68c8fde4bf8e2ff925a81428eabbf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:29:40:3a:49:df:ac:ca:de:f9:bb:f7:59:df:
                    3f:1e:81:cb:5a:80:f4:c4:1a:95:9e:6e:7a:14:22:
                    c3:ae:d9:2e:65:f6:ca:e8:33:59:05:64:a0:60:e1:
                    0a:6e:ca:90:0e:27:e6:8f:a7:33:35:de:e2:8a:0f:
                    8a:c0:06:a1:58:6c:29:c1:14:7e:a2:ef:03:84:3d:
                    7a:0c:89:95:40:aa:b0:0c:22:fe:a7:65:ad:10:01:
                    ec:66:62:b8:18:d4:bc:8c:39:a7:49:4b:48:40:29:
                    5b:45:f0:7d:bf:f8:3c:fa:4d:f4:94:51:aa:8e:d3:
                    3a:01:89:1e:d8:6d:9b:b9:cf:36:fa:c7:fb:50:25:
                    37:3d:d8:1c:71:f7:0b:4f:d3:c8:c9:d7:d6:81:65:
                    b6:49:64:0f:77:be:0b:26:e3:13:7c:a0:c5:7f:06:
                    34:be:7b:4f:6b:ad:a1:e5:c7:22:b6:e6:8a:99:1c:
                    de:95:06:aa:27:dc:0b:92:19:13:59:21:07:4a:9d:
                    f9:bb:1c:8c:ea:dc:43:30:c1:71:b2:6e:3e:50:ec:
                    59:60:d5:a1:ba:01:75:69:c0:bf:15:12:09:b8:fd:
                    72:7d:e6:7c:09:92:a3:d7:80:ae:43:72:df:91:86:
                    ab:dc:a7:84:5d:66:01:55:f5:e9:13:80:03:cf:c3:
                    8b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:99:EC:35:CD:68:C8:FD:E4:BF:8E:2F:F9:25:A8:14:28:EA:BB:F7
            X509v3 Authority Key Identifier:
                keyid:C0:C7:F1:BA:3F:AE:71:36:4E:93:2B:05:60:D6:02:C5:72:5D:DA:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wMfxuj-ucTZOkysFYNYCxXJd2o4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2c6590-ab29-46b4-a6ae-da388bc34efb/1/wMfxuj-ucTZOkysFYNYCxXJd2o4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/2c6590-ab29-46b4-a6ae-da388bc34efb/1/wMfxuj-ucTZOkysFYNYCxXJd2o4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:39:c1:32:bc:ae:40:4f:9d:31:16:1e:bb:be:11:71:d8:94:
         57:aa:57:af:70:4f:df:a9:4f:a8:99:73:b0:7b:e7:bc:b1:fb:
         41:bd:81:5e:a6:ad:ad:1f:be:91:2e:4b:fd:f7:55:8e:74:e0:
         58:0c:81:6e:44:b0:3d:35:88:0b:ac:d0:c3:fc:de:5b:24:b0:
         e9:2e:05:b6:a8:ed:e4:29:57:0a:b6:bb:2f:58:fd:27:e6:56:
         22:7f:1b:dd:92:72:c6:f3:38:bc:bd:03:15:b4:bf:8e:f7:09:
         7a:9f:f8:3c:aa:b2:56:5c:dd:5e:66:31:84:cc:a2:ac:13:da:
         38:04:77:be:be:df:08:17:bb:53:10:e5:26:d0:19:58:5f:d6:
         45:2e:ae:2d:c7:7c:d3:8f:b4:1f:9b:e2:df:f8:6d:6c:5d:6c:
         23:09:c4:9b:60:14:5f:8b:a5:fe:f8:37:1a:a5:f2:88:7e:8d:
         d6:9f:fb:03:e2:12:39:cf:4c:e8:e4:3d:24:c0:29:b7:f1:0a:
         0c:ee:3a:73:fd:1c:c9:0d:aa:ed:00:c6:20:3f:8b:49:96:3f:
         68:c7:0f:4e:49:28:10:29:80:21:86:d0:c5:47:84:5e:4b:b7:
         55:52:4e:8d:5d:ec:73:5a:2b:c8:d8:c2:b2:8e:f4:f7:43:3c:
         31:ec:eb:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbGTMmLEjjGQ6r8CDxtmIAPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwYzdmMWJhM2ZhZTcxMzY0ZTkzMmIwNTYwZDYwMmM1NzI1
ZGRhOGUwHhcNMjUwNTEyMjEwMDQyWhcNMjUwNTEzMjEwMDQyWjAzMTEwLwYDVQQD
EyhlNTk5ZWMzNWNkNjhjOGZkZTRiZjhlMmZmOTI1YTgxNDI4ZWFiYmY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ilAOknfrMre+bv3Wd8/HoHLWoD0
xBqVnm56FCLDrtkuZfbK6DNZBWSgYOEKbsqQDifmj6czNd7iig+KwAahWGwpwRR+
ou8DhD16DImVQKqwDCL+p2WtEAHsZmK4GNS8jDmnSUtIQClbRfB9v/g8+k30lFGq
jtM6AYke2G2buc82+sf7UCU3PdgccfcLT9PIydfWgWW2SWQPd74LJuMTfKDFfwY0
vntPa62h5ccituaKmRzelQaqJ9wLkhkTWSEHSp35uxyM6txDMMFxsm4+UOxZYNWh
ugF1acC/FRIJuP1yfeZ8CZKj14CuQ3LfkYar3KeEXWYBVfXpE4ADz8OLdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOWZ7DXNaMj95L+OL/klqBQo6rv3MB8GA1UdIwQY
MBaAFMDH8bo/rnE2TpMrBWDWAsVyXdqOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd01meHVqLXVjVFpPa3lzRllOWUN4WEpkMm80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8yYzY1OTAtYWIyOS00NmI0LWE2YWUt
ZGEzODhiYzM0ZWZiLzEvd01meHVqLXVjVFpPa3lzRllOWUN4WEpkMm80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8yYzY1OTAtYWIyOS00NmI0LWE2YWUtZGEzODhiYzM0ZWZi
LzEvd01meHVqLXVjVFpPa3lzRllOWUN4WEpkMm80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkznBMryu
QE+dMRYeu74RcdiUV6pXr3BP36lPqJlzsHvnvLH7Qb2BXqatrR++kS5L/fdVjnTg
WAyBbkSwPTWIC6zQw/zeWySw6S4Ftqjt5ClXCra7L1j9J+ZWIn8b3ZJyxvM4vL0D
FbS/jvcJep/4PKqyVlzdXmYxhMyirBPaOAR3vr7fCBe7UxDlJtAZWF/WRS6uLcd8
04+0H5vi3/htbF1sIwnEm2AUX4ul/vg3GqXyiH6N1p/7A+ISOc9M6OQ9JMApt/EK
DO46c/0cyQ2q7QDGID+LSZY/aMcPTkkoECmAIYbQxUeEXku3VVJOjV3sc1oryNjC
so7090M8Mezr+A==
-----END CERTIFICATE-----
Generated at Tue May 13 06:32:05 2025 by rpki-client