Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/a43c6e-349c-4914-8da3-6c32a6ab1ef2/1/wesHbRZwLH2-qXLily71dqHyyHM.mft
File:                     wesHbRZwLH2-qXLily71dqHyyHM.mft (raw, json)
Hash identifier:          fVgvM+gwRgj7hXr+0QRIb2uUUN6CYHgCptjxf26h3XE=
Subject key identifier:   F1:DC:26:22:59:A5:0E:F5:D5:39:C4:DB:5F:78:99:D2:05:77:DD:2B
Authority key identifier: C1:EB:07:6D:16:70:2C:7D:BE:A9:72:E2:97:2E:F5:76:A1:F2:C8:73
Certificate issuer:       /CN=c1eb076d16702c7dbea972e2972ef576a1f2c873
Certificate serial:       0197B74564609B2A89C119CA0E4A0A4242DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wesHbRZwLH2-qXLily71dqHyyHM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/a43c6e-349c-4914-8da3-6c32a6ab1ef2/1/wesHbRZwLH2-qXLily71dqHyyHM.mft
Manifest number:          15B7
Signing time:             Sat 28 Jun 2025 16:01:07 +0000
Manifest this update:     Sat 28 Jun 2025 16:01:07 +0000
Manifest next update:     Sun 29 Jun 2025 16:01:07 +0000
Files and hashes:         1: 2UZkcfvHBD0nlLVShbBCdFbgaEM.roa (hash: HqtlmZWEJIZpNtC58lOjwfZX2SNzuDVgWAhhp7ppdfQ=)
                          2: frLrA0keoZHqLNQ6H6mr7HttS6s.roa (hash: Mfy5d8aC18pzCzwCyFVqYxGvs9LiQ6tdwOia7qFz85A=)
                          3: suBVFY86lLLNw-jyyfI-FYfhvNA.roa (hash: 81WEqdV7PNWoCGw6D45g6WF3xPhoMsG1WXe8GERJGtA=)
                          4: twmga9_E_KzkAm9sOwBfykbdGZk.roa (hash: BS47sv4rbsHbtLhVm7asDcUh2pqMrmQZsTAWkFmOWjE=)
                          5: wesHbRZwLH2-qXLily71dqHyyHM.crl (hash: fvC3Ehcai8jnOabk5f3A+dUv7osga5BExSSTvQsnOdE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/a43c6e-349c-4914-8da3-6c32a6ab1ef2/1/wesHbRZwLH2-qXLily71dqHyyHM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/a43c6e-349c-4914-8da3-6c32a6ab1ef2/1/wesHbRZwLH2-qXLily71dqHyyHM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wesHbRZwLH2-qXLily71dqHyyHM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:45:64:60:9b:2a:89:c1:19:ca:0e:4a:0a:42:42:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1eb076d16702c7dbea972e2972ef576a1f2c873
        Validity
            Not Before: Jun 28 16:01:07 2025 GMT
            Not After : Jun 29 16:01:07 2025 GMT
        Subject: CN=f1dc262259a50ef5d539c4db5f7899d20577dd2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:41:79:c6:c3:a0:3e:50:86:5a:00:74:9e:63:
                    65:f2:8b:3c:43:de:f2:58:18:d5:38:20:16:8d:3b:
                    79:15:70:14:7c:0f:a5:59:7f:55:92:88:f0:6a:95:
                    71:51:33:49:39:e6:51:38:83:2f:5b:c2:03:80:4f:
                    3c:27:75:77:e1:7e:98:c6:71:33:6f:7e:9f:09:8f:
                    78:d7:6e:d4:1e:08:ed:39:6e:16:bc:d1:77:1a:6f:
                    3e:cf:dc:26:5c:ca:0d:58:9c:a0:f2:11:dd:b0:60:
                    0a:8d:00:d3:a5:9c:ab:e2:9a:07:68:4b:70:2e:35:
                    76:1b:74:9c:df:a0:e1:9b:98:7e:80:37:f6:d9:9e:
                    d4:fe:a5:36:cc:9a:74:92:bb:22:75:61:97:fe:da:
                    e2:9f:d5:e8:0b:d1:81:bd:b5:f4:80:09:78:37:68:
                    16:3a:ae:c4:c7:67:29:0a:74:9f:f2:67:ae:5e:89:
                    46:60:cf:22:3f:cc:97:27:ae:8a:a9:5e:df:9f:95:
                    c8:74:15:12:0e:de:8d:9a:65:87:6a:39:87:81:5d:
                    eb:48:3b:91:1f:0f:55:be:ec:8e:0a:30:ea:20:69:
                    23:8a:48:d4:c0:c1:87:be:79:00:40:46:41:99:f5:
                    71:49:e7:54:b8:6e:32:15:56:8a:8b:d0:a3:10:22:
                    1c:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:DC:26:22:59:A5:0E:F5:D5:39:C4:DB:5F:78:99:D2:05:77:DD:2B
            X509v3 Authority Key Identifier:
                keyid:C1:EB:07:6D:16:70:2C:7D:BE:A9:72:E2:97:2E:F5:76:A1:F2:C8:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wesHbRZwLH2-qXLily71dqHyyHM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a43c6e-349c-4914-8da3-6c32a6ab1ef2/1/wesHbRZwLH2-qXLily71dqHyyHM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a43c6e-349c-4914-8da3-6c32a6ab1ef2/1/wesHbRZwLH2-qXLily71dqHyyHM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:59:ab:b5:01:26:5c:09:0a:4c:e7:7f:76:48:a5:de:2b:6e:
         fe:2b:76:ee:62:6b:4b:02:54:a1:38:90:ee:bb:3b:27:ba:2b:
         7b:63:64:f5:cb:91:4a:dc:f3:42:38:d4:42:07:ac:33:5d:e9:
         48:b6:c2:6b:13:f2:a6:f5:71:08:9b:48:3b:95:59:46:3c:94:
         10:c7:e6:e6:7d:df:a5:a3:d6:e9:2b:05:ee:df:46:b4:36:9c:
         11:85:c1:13:95:4f:63:5e:6a:2f:8a:ed:4e:10:2c:39:b4:b6:
         e1:33:72:11:38:6a:cf:14:b0:08:70:95:36:46:f7:6f:36:9d:
         d3:2a:f0:0f:c3:4e:a4:0f:43:3a:77:b2:49:ec:6e:70:8f:8e:
         64:c3:74:b5:db:f1:9b:d3:db:a1:14:d6:28:d9:9e:e4:5b:99:
         c0:de:ed:4a:1b:df:26:fb:1d:95:11:44:d4:23:58:15:15:8e:
         ba:ff:a0:cd:e7:86:31:87:88:c5:a0:39:c4:21:6c:4f:92:c8:
         e0:77:b2:6f:94:f9:2c:48:58:6a:6c:f4:bb:d6:1d:81:40:1e:
         9d:0d:5e:30:35:53:3f:9a:09:a9:23:92:ad:87:df:3c:8d:86:
         36:90:3b:d7:1d:fe:b3:1b:ee:8f:e8:54:65:30:2c:2c:a1:26:
         f7:a4:1e:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3RWRgmyqJwRnKDkoKQkLcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxZWIwNzZkMTY3MDJjN2RiZWE5NzJlMjk3MmVmNTc2YTFm
MmM4NzMwHhcNMjUwNjI4MTYwMTA3WhcNMjUwNjI5MTYwMTA3WjAzMTEwLwYDVQQD
EyhmMWRjMjYyMjU5YTUwZWY1ZDUzOWM0ZGI1Zjc4OTlkMjA1NzdkZDJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUF5xsOgPlCGWgB0nmNl8os8Q97y
WBjVOCAWjTt5FXAUfA+lWX9VkojwapVxUTNJOeZROIMvW8IDgE88J3V34X6YxnEz
b36fCY94127UHgjtOW4WvNF3Gm8+z9wmXMoNWJyg8hHdsGAKjQDTpZyr4poHaEtw
LjV2G3Sc36Dhm5h+gDf22Z7U/qU2zJp0krsidWGX/trin9XoC9GBvbX0gAl4N2gW
Oq7Ex2cpCnSf8meuXolGYM8iP8yXJ66KqV7fn5XIdBUSDt6NmmWHajmHgV3rSDuR
Hw9VvuyOCjDqIGkjikjUwMGHvnkAQEZBmfVxSedUuG4yFVaKi9CjECIceQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPHcJiJZpQ711TnE2194mdIFd90rMB8GA1UdIwQY
MBaAFMHrB20WcCx9vqly4pcu9Xah8shzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2VzSGJSWndMSDItcVhMaWx5NzFkcUh5eUhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9hNDNjNmUtMzQ5Yy00OTE0LThkYTMt
NmMzMmE2YWIxZWYyLzEvd2VzSGJSWndMSDItcVhMaWx5NzFkcUh5eUhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi9hNDNjNmUtMzQ5Yy00OTE0LThkYTMtNmMzMmE2YWIxZWYy
LzEvd2VzSGJSWndMSDItcVhMaWx5NzFkcUh5eUhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV1mrtQEm
XAkKTOd/dkil3itu/it27mJrSwJUoTiQ7rs7J7ore2Nk9cuRStzzQjjUQgesM13p
SLbCaxPypvVxCJtIO5VZRjyUEMfm5n3fpaPW6SsF7t9GtDacEYXBE5VPY15qL4rt
ThAsObS24TNyEThqzxSwCHCVNkb3bzad0yrwD8NOpA9DOneySexucI+OZMN0tdvx
m9PboRTWKNme5FuZwN7tShvfJvsdlRFE1CNYFRWOuv+gzeeGMYeIxaA5xCFsT5LI
4Heyb5T5LEhYamz0u9YdgUAenQ1eMDVTP5oJqSOSrYffPI2GNpA71x3+sxvuj+hU
ZTAsLKEm96QeLg==
-----END CERTIFICATE-----
Generated at Sun Jun 29 01:10:53 2025 by rpki-client