Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9c0278-542c-4467-ac7c-24aee2b0e82b/1/W-cZ-YXfOUpCrBHly8j4K0t67F0.mft
File:                     W-cZ-YXfOUpCrBHly8j4K0t67F0.mft (raw, json)
Hash identifier:          VAvt6gji5DIR3uDbrYvXuzgzjx2WjLp1OtOew9XoUYs=
Subject key identifier:   61:2E:60:B0:42:6C:B5:4F:0A:0B:5A:CD:CF:77:32:FC:42:C5:22:C4
Authority key identifier: 5B:E7:19:F9:85:DF:39:4A:42:AC:11:E5:CB:C8:F8:2B:4B:7A:EC:5D
Certificate issuer:       /CN=5be719f985df394a42ac11e5cbc8f82b4b7aec5d
Certificate serial:       019894B7EA28C47EC7952DD55CBB7CE5D653
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W-cZ-YXfOUpCrBHly8j4K0t67F0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/9c0278-542c-4467-ac7c-24aee2b0e82b/1/W-cZ-YXfOUpCrBHly8j4K0t67F0.mft
Manifest number:          1629
Signing time:             Sun 10 Aug 2025 16:02:17 +0000
Manifest this update:     Sun 10 Aug 2025 16:02:17 +0000
Manifest next update:     Mon 11 Aug 2025 16:02:17 +0000
Files and hashes:         1: W-cZ-YXfOUpCrBHly8j4K0t67F0.crl (hash: CY/YGOwaEW1hTbhy7qIIdxlcxQCmDOHFVQ2bPgi5M1w=)
                          2: qfFhbPzEEV7-3fOF8iI3mosl_gc.roa (hash: eNrgqVa+1D+OMy3T6aNIQjkftemLm7/l9HKfq0aM6Lw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/9c0278-542c-4467-ac7c-24aee2b0e82b/1/W-cZ-YXfOUpCrBHly8j4K0t67F0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/9c0278-542c-4467-ac7c-24aee2b0e82b/1/W-cZ-YXfOUpCrBHly8j4K0t67F0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W-cZ-YXfOUpCrBHly8j4K0t67F0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 16:02:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:94:b7:ea:28:c4:7e:c7:95:2d:d5:5c:bb:7c:e5:d6:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5be719f985df394a42ac11e5cbc8f82b4b7aec5d
        Validity
            Not Before: Aug 10 16:02:17 2025 GMT
            Not After : Aug 11 16:02:17 2025 GMT
        Subject: CN=612e60b0426cb54f0a0b5acdcf7732fc42c522c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:6e:b3:a4:dc:11:94:62:d6:bb:01:a2:39:d6:
                    28:45:6a:75:e1:26:26:56:78:75:eb:87:bd:2b:9e:
                    80:c1:c8:02:0d:d4:65:08:0e:c6:fc:2b:e8:f0:16:
                    2c:d4:c0:33:5a:d9:a2:a2:aa:f8:a6:38:d1:fc:d3:
                    e4:d7:58:72:e7:95:80:58:d0:f0:79:7d:5e:b0:2e:
                    ab:66:3d:01:25:13:5a:e7:78:4a:10:ce:b4:5f:46:
                    3e:d0:30:ef:5b:c3:ce:c9:74:2e:a8:08:3e:34:31:
                    c1:e8:0f:4e:59:2d:c7:3e:96:91:33:0f:a7:f4:c9:
                    b6:58:12:e5:57:69:13:67:24:1a:fe:66:56:33:aa:
                    d4:ca:95:fd:34:d5:92:f4:7f:62:a5:2c:eb:64:be:
                    45:3f:bd:a5:c0:dd:06:f4:9a:1e:d7:1e:05:fb:02:
                    3d:13:2f:f7:e9:fd:5c:58:72:3a:49:ab:0f:16:8c:
                    77:cd:62:3b:de:65:de:3a:89:81:a8:d8:3c:35:05:
                    15:2e:92:3a:1b:c2:0e:fb:46:b2:c9:2f:14:64:83:
                    d9:9b:01:7f:34:10:e9:f9:48:ce:74:50:df:54:c2:
                    e9:6f:d4:23:3f:13:69:ce:5c:c5:b2:45:78:78:77:
                    c0:30:ec:48:39:12:a3:63:a6:72:f9:5d:92:52:fa:
                    9b:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:2E:60:B0:42:6C:B5:4F:0A:0B:5A:CD:CF:77:32:FC:42:C5:22:C4
            X509v3 Authority Key Identifier:
                keyid:5B:E7:19:F9:85:DF:39:4A:42:AC:11:E5:CB:C8:F8:2B:4B:7A:EC:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-cZ-YXfOUpCrBHly8j4K0t67F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9c0278-542c-4467-ac7c-24aee2b0e82b/1/W-cZ-YXfOUpCrBHly8j4K0t67F0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9c0278-542c-4467-ac7c-24aee2b0e82b/1/W-cZ-YXfOUpCrBHly8j4K0t67F0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:5b:ad:f8:4c:a0:3b:dc:81:df:13:cd:a5:1d:43:fb:94:ab:
         a2:99:88:26:39:e4:94:16:71:f6:59:77:be:32:33:b9:65:c7:
         07:33:da:63:51:f3:db:c1:e2:1e:f9:58:21:93:95:56:2e:a2:
         f9:05:a7:25:1c:25:52:42:3d:73:a0:fe:c6:ac:db:41:6f:d9:
         4e:6f:aa:6d:51:65:6b:1d:fc:f7:81:2d:0c:76:f3:fe:20:16:
         12:cc:85:5c:77:fc:24:0a:fc:f7:23:b5:b2:02:5f:28:13:47:
         0e:d3:65:4e:7e:9a:1b:70:de:d6:6b:e2:ef:1b:1c:66:a4:64:
         60:9c:13:3f:a4:a1:3a:73:55:1b:2e:4f:e6:74:54:c0:f8:7e:
         94:10:94:f6:e6:da:62:80:b2:a0:c4:02:5e:87:6c:3c:ef:fe:
         80:43:be:67:0e:29:ac:12:15:33:a9:c3:81:a4:69:df:86:c8:
         86:fa:78:2e:e5:c1:5a:d8:9d:5c:f1:45:b5:dd:75:fa:f9:86:
         a9:c5:44:78:68:85:57:86:80:82:6b:dc:2d:c0:7b:7c:d6:52:
         69:9c:06:83:d4:50:73:ad:4c:65:5c:ed:b7:47:54:43:6e:e1:
         86:d4:2f:4e:e2:6b:76:45:4a:ec:f3:37:15:76:bc:42:38:e3:
         99:e2:28:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiUt+ooxH7HlS3VXLt85dZTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViZTcxOWY5ODVkZjM5NGE0MmFjMTFlNWNiYzhmODJiNGI3
YWVjNWQwHhcNMjUwODEwMTYwMjE3WhcNMjUwODExMTYwMjE3WjAzMTEwLwYDVQQD
Eyg2MTJlNjBiMDQyNmNiNTRmMGEwYjVhY2RjZjc3MzJmYzQyYzUyMmM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgW6zpNwRlGLWuwGiOdYoRWp14SYm
Vnh164e9K56AwcgCDdRlCA7G/Cvo8BYs1MAzWtmioqr4pjjR/NPk11hy55WAWNDw
eX1esC6rZj0BJRNa53hKEM60X0Y+0DDvW8POyXQuqAg+NDHB6A9OWS3HPpaRMw+n
9Mm2WBLlV2kTZyQa/mZWM6rUypX9NNWS9H9ipSzrZL5FP72lwN0G9Joe1x4F+wI9
Ey/36f1cWHI6SasPFox3zWI73mXeOomBqNg8NQUVLpI6G8IO+0ayyS8UZIPZmwF/
NBDp+UjOdFDfVMLpb9QjPxNpzlzFskV4eHfAMOxIORKjY6Zy+V2SUvqbOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGEuYLBCbLVPCgtazc93MvxCxSLEMB8GA1UdIwQY
MBaAFFvnGfmF3zlKQqwR5cvI+CtLeuxdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVy1jWi1ZWGZPVXBDckJIbHk4ajRLMHQ2N0YwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85YzAyNzgtNTQyYy00NDY3LWFjN2Mt
MjRhZWUyYjBlODJiLzEvVy1jWi1ZWGZPVXBDckJIbHk4ajRLMHQ2N0YwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS85YzAyNzgtNTQyYy00NDY3LWFjN2MtMjRhZWUyYjBlODJi
LzEvVy1jWi1ZWGZPVXBDckJIbHk4ajRLMHQ2N0YwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT1ut+Eyg
O9yB3xPNpR1D+5SropmIJjnklBZx9ll3vjIzuWXHBzPaY1Hz28HiHvlYIZOVVi6i
+QWnJRwlUkI9c6D+xqzbQW/ZTm+qbVFlax3894EtDHbz/iAWEsyFXHf8JAr89yO1
sgJfKBNHDtNlTn6aG3De1mvi7xscZqRkYJwTP6ShOnNVGy5P5nRUwPh+lBCU9uba
YoCyoMQCXodsPO/+gEO+Zw4prBIVM6nDgaRp34bIhvp4LuXBWtidXPFFtd11+vmG
qcVEeGiFV4aAgmvcLcB7fNZSaZwGg9RQc61MZVztt0dUQ27hhtQvTuJrdkVK7PM3
FXa8QjjjmeIoJQ==
-----END CERTIFICATE-----
Generated at Sun Aug 10 18:11:41 2025 by rpki-client