Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/264f9a-13ea-4c50-a6a9-712d5e17a6f6/1/leiDWblaOWSub5oM2q4H9Xn5jDU.mft
File:                     leiDWblaOWSub5oM2q4H9Xn5jDU.mft (raw, json)
Hash identifier:          SD/OfMlfCcHQvtIiuzsVK3n/RZSePGmJqrQbnO95PbQ=
Subject key identifier:   56:A2:A4:C9:FD:08:98:83:F8:31:2E:5A:FD:D8:47:83:B7:8F:35:0F
Authority key identifier: 95:E8:83:59:B9:5A:39:64:AE:6F:9A:0C:DA:AE:07:F5:79:F9:8C:35
Certificate issuer:       /CN=95e88359b95a3964ae6f9a0cdaae07f579f98c35
Certificate serial:       0196A6C16BFB97A610623325CAB9FD6147A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/leiDWblaOWSub5oM2q4H9Xn5jDU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/264f9a-13ea-4c50-a6a9-712d5e17a6f6/1/leiDWblaOWSub5oM2q4H9Xn5jDU.mft
Manifest number:          02EA
Signing time:             Tue 06 May 2025 18:00:16 +0000
Manifest this update:     Tue 06 May 2025 18:00:16 +0000
Manifest next update:     Wed 07 May 2025 18:00:16 +0000
Files and hashes:         1: leiDWblaOWSub5oM2q4H9Xn5jDU.crl (hash: Kt6vrJHtrtFyD31Ox+HhtfE+mYLnijAAU13SWY+NHZY=)
                          2: pe1o9e3jWHQk95p2Ei_dXirE0kc.roa (hash: 7nIBr99cFeZBlfuF7+XYt3ntEwToRh90vxok7wcdM9Q=)
                          3: rzPMwtKJbrfVAK2tZQ7ho2lMTko.roa (hash: 6lSfgp9VWZJODBNAF2r5pCybLvr4sFR9bMz2OJU8t8k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/264f9a-13ea-4c50-a6a9-712d5e17a6f6/1/leiDWblaOWSub5oM2q4H9Xn5jDU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/264f9a-13ea-4c50-a6a9-712d5e17a6f6/1/leiDWblaOWSub5oM2q4H9Xn5jDU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/leiDWblaOWSub5oM2q4H9Xn5jDU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 14:16:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a6:c1:6b:fb:97:a6:10:62:33:25:ca:b9:fd:61:47:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95e88359b95a3964ae6f9a0cdaae07f579f98c35
        Validity
            Not Before: May  6 18:00:16 2025 GMT
            Not After : May  7 18:00:16 2025 GMT
        Subject: CN=56a2a4c9fd089883f8312e5afdd84783b78f350f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:94:66:76:10:25:8b:8f:dc:fe:20:b6:78:04:
                    5e:45:94:36:cd:98:85:15:66:55:cd:55:82:88:4c:
                    c7:b0:5e:34:01:e0:86:77:1d:d2:92:55:ad:78:49:
                    cd:47:c4:00:41:8c:03:c6:bc:bd:ac:40:73:10:6a:
                    32:bf:a8:80:81:90:bd:20:b1:5c:7e:c5:9c:70:c9:
                    14:aa:34:a8:57:c2:f6:f7:cd:83:03:45:fc:95:2a:
                    95:32:d0:2d:a0:1b:a9:80:7b:45:05:c3:cf:a6:10:
                    43:7c:68:26:68:fc:8e:54:10:40:62:79:4f:04:e4:
                    fe:3c:0a:46:76:e3:b8:3c:26:ed:21:85:fa:8a:e7:
                    de:ca:6b:bb:5b:b4:59:f0:2d:07:bb:f7:4f:3f:c3:
                    d4:df:5d:8e:78:de:27:4e:1a:48:2d:38:2b:95:83:
                    93:2a:07:a4:4c:7c:e0:85:65:52:d1:d7:42:af:2a:
                    35:22:21:dd:c5:6a:fd:8a:4b:84:c6:37:dc:60:53:
                    c7:d5:25:81:1d:43:3d:62:d2:8c:d5:1b:23:80:87:
                    50:82:09:c7:ce:d6:e5:a3:bb:4f:be:f5:f4:b5:ba:
                    8a:d9:9c:a7:46:34:66:ad:e4:8d:c5:33:2e:0e:c8:
                    d0:7d:41:8d:03:e6:ce:8b:ba:2d:59:9f:d9:b3:38:
                    37:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:A2:A4:C9:FD:08:98:83:F8:31:2E:5A:FD:D8:47:83:B7:8F:35:0F
            X509v3 Authority Key Identifier:
                keyid:95:E8:83:59:B9:5A:39:64:AE:6F:9A:0C:DA:AE:07:F5:79:F9:8C:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/leiDWblaOWSub5oM2q4H9Xn5jDU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/264f9a-13ea-4c50-a6a9-712d5e17a6f6/1/leiDWblaOWSub5oM2q4H9Xn5jDU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/264f9a-13ea-4c50-a6a9-712d5e17a6f6/1/leiDWblaOWSub5oM2q4H9Xn5jDU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:33:43:0c:cf:c6:38:bf:21:67:76:71:c9:3b:dd:32:e1:07:
         df:8b:79:64:fe:85:d4:25:fb:36:70:e2:88:dc:48:c9:f1:fb:
         42:52:3b:71:85:85:e0:61:48:7d:59:dc:d0:ad:ed:93:51:c4:
         1d:4c:90:3a:33:c4:59:f0:37:6c:7e:c0:4a:4d:8f:c5:59:2c:
         a8:8e:19:b7:18:ee:c9:4d:e9:69:99:e6:8b:f3:90:99:d7:5d:
         7c:d8:96:f2:9d:c5:f4:45:e5:5e:8f:fa:45:cc:06:17:4a:df:
         8f:d5:be:8b:ad:b0:4b:f4:0e:a3:27:71:6a:b8:f8:91:c4:89:
         4f:5e:96:c2:03:17:ce:8b:84:00:b5:9d:97:e4:fc:24:d9:e8:
         02:2d:47:96:97:b1:24:ac:a9:2a:da:d4:e1:cb:d2:33:80:b9:
         4c:8a:c6:09:da:d0:21:c3:4e:21:7d:4e:4a:f9:02:9c:80:58:
         41:31:28:9a:67:e5:f2:bb:88:ac:f7:7f:54:33:93:67:34:32:
         97:1f:75:35:16:9d:46:c3:61:5c:c7:75:04:ff:80:a0:02:a8:
         66:90:2b:71:a2:e3:06:5e:3b:77:f4:8d:6e:bf:7f:60:a8:dd:
         00:89:eb:1d:46:d2:76:ef:0d:46:ed:c5:b7:47:a5:59:a6:b6:
         8b:c9:d3:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZamwWv7l6YQYjMlyrn9YUepMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1ZTg4MzU5Yjk1YTM5NjRhZTZmOWEwY2RhYWUwN2Y1Nzlm
OThjMzUwHhcNMjUwNTA2MTgwMDE2WhcNMjUwNTA3MTgwMDE2WjAzMTEwLwYDVQQD
Eyg1NmEyYTRjOWZkMDg5ODgzZjgzMTJlNWFmZGQ4NDc4M2I3OGYzNTBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ZRmdhAli4/c/iC2eAReRZQ2zZiF
FWZVzVWCiEzHsF40AeCGdx3SklWteEnNR8QAQYwDxry9rEBzEGoyv6iAgZC9ILFc
fsWccMkUqjSoV8L2982DA0X8lSqVMtAtoBupgHtFBcPPphBDfGgmaPyOVBBAYnlP
BOT+PApGduO4PCbtIYX6iufeymu7W7RZ8C0Hu/dPP8PU312OeN4nThpILTgrlYOT
KgekTHzghWVS0ddCryo1IiHdxWr9ikuExjfcYFPH1SWBHUM9YtKM1RsjgIdQggnH
ztblo7tPvvX0tbqK2ZynRjRmreSNxTMuDsjQfUGNA+bOi7otWZ/Zszg3VQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFaipMn9CJiD+DEuWv3YR4O3jzUPMB8GA1UdIwQY
MBaAFJXog1m5Wjlkrm+aDNquB/V5+Yw1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGVpRFdibGFPV1N1YjVvTTJxNEg5WG41akRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8yNjRmOWEtMTNlYS00YzUwLWE2YTkt
NzEyZDVlMTdhNmY2LzEvbGVpRFdibGFPV1N1YjVvTTJxNEg5WG41akRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC8yNjRmOWEtMTNlYS00YzUwLWE2YTktNzEyZDVlMTdhNmY2
LzEvbGVpRFdibGFPV1N1YjVvTTJxNEg5WG41akRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbjNDDM/G
OL8hZ3ZxyTvdMuEH34t5ZP6F1CX7NnDiiNxIyfH7QlI7cYWF4GFIfVnc0K3tk1HE
HUyQOjPEWfA3bH7ASk2PxVksqI4ZtxjuyU3paZnmi/OQmdddfNiW8p3F9EXlXo/6
RcwGF0rfj9W+i62wS/QOoydxarj4kcSJT16WwgMXzouEALWdl+T8JNnoAi1Hlpex
JKypKtrU4cvSM4C5TIrGCdrQIcNOIX1OSvkCnIBYQTEommfl8ruIrPd/VDOTZzQy
lx91NRadRsNhXMd1BP+AoAKoZpArcaLjBl47d/SNbr9/YKjdAInrHUbSdu8NRu3F
t0elWaa2i8nTNw==
-----END CERTIFICATE-----
Generated at Tue May 6 21:45:46 2025 by rpki-client