Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/c580f6-f0a6-4c85-b7d3-d10bebea37d0/1/w8zhZV8_ceTv_qTec6GuyCKCnWE.mft
File:                     w8zhZV8_ceTv_qTec6GuyCKCnWE.mft (raw, json)
Hash identifier:          f32WI8loAsp+OqbbR+uMuRJ+jlzTzB6r9XyftVn0wes=
Subject key identifier:   27:CF:A5:A7:A5:11:02:20:C2:4A:51:58:33:F2:68:AC:7E:2A:2C:BD
Authority key identifier: C3:CC:E1:65:5F:3F:71:E4:EF:FE:A4:DE:73:A1:AE:C8:22:82:9D:61
Certificate issuer:       /CN=c3cce1655f3f71e4effea4de73a1aec822829d61
Certificate serial:       0196C1CB8B1BF7B2D97800A6A56EBB81863A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w8zhZV8_ceTv_qTec6GuyCKCnWE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/c580f6-f0a6-4c85-b7d3-d10bebea37d0/1/w8zhZV8_ceTv_qTec6GuyCKCnWE.mft
Manifest number:          DE
Signing time:             Mon 12 May 2025 00:01:04 +0000
Manifest this update:     Mon 12 May 2025 00:01:04 +0000
Manifest next update:     Tue 13 May 2025 00:01:04 +0000
Files and hashes:         1: qel6ufOI0K0P6RzF02UdBRZmZOs.roa (hash: 0w6Fd2wQlTNYoLFBh1jxH0G1R4nWQ+6pOgjLnjgYDIc=)
                          2: w8zhZV8_ceTv_qTec6GuyCKCnWE.crl (hash: y8JtkC0XY57gCb+Ouh3G3KbYZuqHzlP6VbTQgYVoMr4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/c580f6-f0a6-4c85-b7d3-d10bebea37d0/1/w8zhZV8_ceTv_qTec6GuyCKCnWE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/c580f6-f0a6-4c85-b7d3-d10bebea37d0/1/w8zhZV8_ceTv_qTec6GuyCKCnWE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w8zhZV8_ceTv_qTec6GuyCKCnWE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 00:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c1:cb:8b:1b:f7:b2:d9:78:00:a6:a5:6e:bb:81:86:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3cce1655f3f71e4effea4de73a1aec822829d61
        Validity
            Not Before: May 12 00:01:04 2025 GMT
            Not After : May 13 00:01:04 2025 GMT
        Subject: CN=27cfa5a7a5110220c24a515833f268ac7e2a2cbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:88:bd:7c:cc:5b:1d:6b:be:e1:94:57:a3:9a:
                    4c:14:1c:ef:66:b8:14:83:50:09:d5:5a:6f:db:f0:
                    97:c4:02:d8:49:34:33:3c:65:19:4d:4b:df:fb:57:
                    09:12:d8:2e:ec:28:78:b5:e7:1b:3e:cd:e2:d7:4b:
                    92:4d:12:a9:a9:10:51:b6:44:5c:84:33:6b:28:00:
                    0b:f4:a2:18:c4:9e:29:e0:a5:26:af:96:b4:c2:41:
                    54:ac:8f:95:75:72:f9:52:02:33:2b:49:8f:c9:d8:
                    be:6d:31:0c:07:37:10:60:e2:49:fc:a1:2a:e8:7f:
                    30:60:5d:1b:c0:ee:f1:a4:d9:da:2d:df:e9:a7:ec:
                    36:9a:0f:28:e9:3b:11:68:aa:72:1f:7c:e8:6a:2c:
                    b6:de:fe:73:d6:e3:93:d6:f8:8b:51:2e:45:75:c6:
                    18:45:bb:69:59:86:44:2b:a3:ed:64:07:64:c4:71:
                    96:5e:84:dc:60:fc:06:07:39:7a:3a:53:05:78:4e:
                    04:c3:24:6d:14:ce:8e:51:68:71:37:61:42:de:99:
                    c1:0b:e7:44:82:a4:88:a9:2d:87:44:d4:d2:05:0d:
                    a1:1a:81:20:a2:bd:6a:93:7c:f0:90:b2:9c:21:c8:
                    9a:ab:e0:63:13:8a:6c:c2:d3:24:ae:0d:c5:d2:07:
                    c6:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:CF:A5:A7:A5:11:02:20:C2:4A:51:58:33:F2:68:AC:7E:2A:2C:BD
            X509v3 Authority Key Identifier:
                keyid:C3:CC:E1:65:5F:3F:71:E4:EF:FE:A4:DE:73:A1:AE:C8:22:82:9D:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8zhZV8_ceTv_qTec6GuyCKCnWE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/c580f6-f0a6-4c85-b7d3-d10bebea37d0/1/w8zhZV8_ceTv_qTec6GuyCKCnWE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/c580f6-f0a6-4c85-b7d3-d10bebea37d0/1/w8zhZV8_ceTv_qTec6GuyCKCnWE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:7d:19:a7:37:47:94:88:bf:0b:4b:25:96:a4:64:a8:cb:d5:
         ed:f6:14:cc:a1:3e:2b:c4:a6:fe:e4:07:4d:e5:ea:1d:c9:37:
         7a:26:23:a3:59:e7:da:f4:6e:ef:eb:b8:f4:9c:05:56:0c:74:
         91:0a:51:0c:c2:e5:89:a7:79:6e:3e:3f:37:fe:ea:00:b9:f3:
         5b:84:a6:f8:6d:13:97:e4:49:b1:1a:07:5d:98:d0:41:cf:f3:
         2f:32:e0:0a:d9:95:43:d8:d0:ad:74:96:b2:2f:5e:1b:9d:96:
         10:b4:f6:d6:73:a4:f4:83:59:cb:5a:f6:c2:6a:b1:15:85:4b:
         42:f1:0c:8b:5c:4c:1f:ae:bb:ab:b4:08:79:f1:fc:65:e6:91:
         27:5a:a7:8d:ab:62:6a:90:4b:38:2f:e2:01:c7:aa:2d:f1:f1:
         3e:03:05:4a:4c:ff:6b:7f:aa:2d:7c:79:1f:e7:55:35:dc:81:
         4a:65:74:20:11:e5:79:a3:52:08:9b:3c:91:82:13:56:93:aa:
         b0:d6:fe:66:b6:f3:de:01:e4:00:73:5f:c4:48:2f:51:ae:af:
         a7:c6:f4:ab:ff:2c:da:d4:03:ba:38:23:9a:76:cd:7a:6e:40:
         a1:90:1c:d9:85:8a:2c:87:2f:6d:b7:dd:7a:40:08:70:06:db:
         c8:3a:7d:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbBy4sb97LZeACmpW67gYY6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzY2NlMTY1NWYzZjcxZTRlZmZlYTRkZTczYTFhZWM4MjI4
MjlkNjEwHhcNMjUwNTEyMDAwMTA0WhcNMjUwNTEzMDAwMTA0WjAzMTEwLwYDVQQD
EygyN2NmYTVhN2E1MTEwMjIwYzI0YTUxNTgzM2YyNjhhYzdlMmEyY2JkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIi9fMxbHWu+4ZRXo5pMFBzvZrgU
g1AJ1Vpv2/CXxALYSTQzPGUZTUvf+1cJEtgu7Ch4tecbPs3i10uSTRKpqRBRtkRc
hDNrKAAL9KIYxJ4p4KUmr5a0wkFUrI+VdXL5UgIzK0mPydi+bTEMBzcQYOJJ/KEq
6H8wYF0bwO7xpNnaLd/pp+w2mg8o6TsRaKpyH3zoaiy23v5z1uOT1viLUS5FdcYY
RbtpWYZEK6PtZAdkxHGWXoTcYPwGBzl6OlMFeE4EwyRtFM6OUWhxN2FC3pnBC+dE
gqSIqS2HRNTSBQ2hGoEgor1qk3zwkLKcIciaq+BjE4pswtMkrg3F0gfGWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCfPpaelEQIgwkpRWDPyaKx+Kiy9MB8GA1UdIwQY
MBaAFMPM4WVfP3Hk7/6k3nOhrsgigp1hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzh6aFpWOF9jZVR2X3FUZWM2R3V5Q0tDbldFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9jNTgwZjYtZjBhNi00Yzg1LWI3ZDMt
ZDEwYmViZWEzN2QwLzEvdzh6aFpWOF9jZVR2X3FUZWM2R3V5Q0tDbldFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS9jNTgwZjYtZjBhNi00Yzg1LWI3ZDMtZDEwYmViZWEzN2Qw
LzEvdzh6aFpWOF9jZVR2X3FUZWM2R3V5Q0tDbldFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi30ZpzdH
lIi/C0sllqRkqMvV7fYUzKE+K8Sm/uQHTeXqHck3eiYjo1nn2vRu7+u49JwFVgx0
kQpRDMLliad5bj4/N/7qALnzW4Sm+G0Tl+RJsRoHXZjQQc/zLzLgCtmVQ9jQrXSW
si9eG52WELT21nOk9INZy1r2wmqxFYVLQvEMi1xMH667q7QIefH8ZeaRJ1qnjati
apBLOC/iAceqLfHxPgMFSkz/a3+qLXx5H+dVNdyBSmV0IBHleaNSCJs8kYITVpOq
sNb+Zrbz3gHkAHNfxEgvUa6vp8b0q/8s2tQDujgjmnbNem5AoZAc2YWKLIcvbbfd
ekAIcAbbyDp90g==
-----END CERTIFICATE-----
Generated at Mon May 12 10:44:17 2025 by rpki-client