Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/7006f5-f2f8-4b8d-80a7-412adcdbb71b/1/wj_7f9rDV5zXAB3FBjAgFT3s56U.mft
File:                     wj_7f9rDV5zXAB3FBjAgFT3s56U.mft (raw, json)
Hash identifier:          nFicD12E51ENO6nLRLRjf5nB+I7ssjMAvIUM+j7Nphc=
Subject key identifier:   00:16:19:8B:9B:57:B0:D8:96:46:D7:4E:16:9F:01:48:64:EF:80:EC
Authority key identifier: C2:3F:FB:7F:DA:C3:57:9C:D7:00:1D:C5:06:30:20:15:3D:EC:E7:A5
Certificate issuer:       /CN=c23ffb7fdac3579cd7001dc5063020153dece7a5
Certificate serial:       019894B65F72673D00EBEB848B7210B857DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wj_7f9rDV5zXAB3FBjAgFT3s56U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/7006f5-f2f8-4b8d-80a7-412adcdbb71b/1/wj_7f9rDV5zXAB3FBjAgFT3s56U.mft
Manifest number:          1625
Signing time:             Sun 10 Aug 2025 16:00:36 +0000
Manifest this update:     Sun 10 Aug 2025 16:00:36 +0000
Manifest next update:     Mon 11 Aug 2025 16:00:36 +0000
Files and hashes:         1: wj_7f9rDV5zXAB3FBjAgFT3s56U.crl (hash: 2gxL4ZvTPWl2ukAnEgChynVnMnHXoWfNcCTzqDYWqc4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/7006f5-f2f8-4b8d-80a7-412adcdbb71b/1/wj_7f9rDV5zXAB3FBjAgFT3s56U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/7006f5-f2f8-4b8d-80a7-412adcdbb71b/1/wj_7f9rDV5zXAB3FBjAgFT3s56U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wj_7f9rDV5zXAB3FBjAgFT3s56U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 16:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:94:b6:5f:72:67:3d:00:eb:eb:84:8b:72:10:b8:57:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c23ffb7fdac3579cd7001dc5063020153dece7a5
        Validity
            Not Before: Aug 10 16:00:36 2025 GMT
            Not After : Aug 11 16:00:36 2025 GMT
        Subject: CN=0016198b9b57b0d89646d74e169f014864ef80ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f9:f6:f9:54:e6:e3:81:e5:28:6c:9c:04:8f:
                    24:a1:87:9d:2a:31:a7:30:8d:33:72:1d:cf:00:18:
                    5a:3d:de:ad:63:b1:35:4d:e4:ab:03:50:f4:f9:de:
                    d3:0a:02:b1:7e:47:e1:af:1f:38:98:cc:c2:b1:d4:
                    30:1e:81:f4:68:06:1d:b2:61:88:0a:c8:68:1c:4d:
                    bf:52:97:06:b3:cc:ea:7d:ea:84:a9:d2:e0:f0:4c:
                    d9:5e:84:0b:67:ca:8b:44:81:09:9a:4a:1d:42:a3:
                    50:13:1d:52:7e:40:d3:07:e2:86:39:88:44:31:ef:
                    46:dd:c0:0f:23:19:f3:9a:33:0f:8e:99:79:85:6e:
                    87:1e:47:d6:c1:4f:69:7a:8b:38:80:f4:8f:b4:77:
                    bb:6f:86:3a:6a:cd:77:87:40:0c:f3:cc:2f:d6:ba:
                    70:d1:8b:e6:05:f9:17:2c:08:46:9b:fa:4f:b4:d7:
                    e8:6a:ac:5d:2d:ab:ef:e6:55:e7:6b:32:6d:ab:84:
                    fa:21:97:08:63:38:e0:b0:01:e3:ef:07:31:fc:c8:
                    f1:79:bc:aa:89:0a:48:3c:4e:75:00:37:a7:8d:74:
                    6a:98:6e:99:44:52:27:3e:9e:f3:3f:d8:e4:67:0a:
                    65:b0:ef:ea:5e:00:67:5b:c3:e3:41:8a:ad:b3:50:
                    fc:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:16:19:8B:9B:57:B0:D8:96:46:D7:4E:16:9F:01:48:64:EF:80:EC
            X509v3 Authority Key Identifier:
                keyid:C2:3F:FB:7F:DA:C3:57:9C:D7:00:1D:C5:06:30:20:15:3D:EC:E7:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wj_7f9rDV5zXAB3FBjAgFT3s56U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/7006f5-f2f8-4b8d-80a7-412adcdbb71b/1/wj_7f9rDV5zXAB3FBjAgFT3s56U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/7006f5-f2f8-4b8d-80a7-412adcdbb71b/1/wj_7f9rDV5zXAB3FBjAgFT3s56U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:24:63:e6:82:ef:85:ed:00:e4:e9:0a:fa:97:3b:54:22:86:
         8b:69:9a:11:a2:d8:69:2c:e9:dc:57:e3:80:f8:68:05:50:4b:
         15:68:78:2e:55:d7:61:63:d8:cb:98:b4:fc:38:52:db:37:4c:
         c2:18:3d:34:e3:e2:59:84:aa:0b:6d:e5:e5:61:8b:4d:e4:3e:
         d5:73:67:04:8d:ed:a7:6a:5e:18:59:bd:d5:97:3c:6c:bd:1e:
         3d:29:e3:d0:75:de:41:f0:aa:8a:ba:db:3f:94:96:85:bc:2a:
         87:d4:49:c4:3a:e6:03:84:45:72:74:01:12:89:39:26:c7:68:
         7d:92:c6:7c:99:69:7c:12:c7:b5:6e:78:ff:9b:2c:29:38:6d:
         50:60:57:eb:9b:e6:03:6f:c9:2e:4c:e2:2d:64:72:56:bc:2b:
         35:1c:d3:fc:1b:65:d7:8c:52:bc:0a:75:50:8a:d5:f1:a8:b1:
         d5:2f:e8:96:e0:6e:a9:18:03:51:18:b7:49:a6:40:32:ca:75:
         9e:a4:8e:c1:62:eb:fb:3e:12:4b:38:02:6f:17:5a:70:5e:41:
         17:c9:a1:38:d7:6d:93:cc:f3:f7:7f:5f:c5:87:28:ad:e7:1d:
         62:22:e7:d3:ad:03:30:77:64:6e:46:c8:13:ef:f3:7b:af:4b:
         81:7d:8b:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiUtl9yZz0A6+uEi3IQuFfcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyM2ZmYjdmZGFjMzU3OWNkNzAwMWRjNTA2MzAyMDE1M2Rl
Y2U3YTUwHhcNMjUwODEwMTYwMDM2WhcNMjUwODExMTYwMDM2WjAzMTEwLwYDVQQD
EygwMDE2MTk4YjliNTdiMGQ4OTY0NmQ3NGUxNjlmMDE0ODY0ZWY4MGVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPn2+VTm44HlKGycBI8koYedKjGn
MI0zch3PABhaPd6tY7E1TeSrA1D0+d7TCgKxfkfhrx84mMzCsdQwHoH0aAYdsmGI
CshoHE2/UpcGs8zqfeqEqdLg8EzZXoQLZ8qLRIEJmkodQqNQEx1SfkDTB+KGOYhE
Me9G3cAPIxnzmjMPjpl5hW6HHkfWwU9peos4gPSPtHe7b4Y6as13h0AM88wv1rpw
0YvmBfkXLAhGm/pPtNfoaqxdLavv5lXnazJtq4T6IZcIYzjgsAHj7wcx/Mjxebyq
iQpIPE51ADenjXRqmG6ZRFInPp7zP9jkZwplsO/qXgBnW8PjQYqts1D8GQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAAWGYubV7DYlkbXThafAUhk74DsMB8GA1UdIwQY
MBaAFMI/+3/aw1ec1wAdxQYwIBU97OelMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2pfN2Y5ckRWNXpYQUIzRkJqQWdGVDNzNTZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC83MDA2ZjUtZjJmOC00YjhkLTgwYTct
NDEyYWRjZGJiNzFiLzEvd2pfN2Y5ckRWNXpYQUIzRkJqQWdGVDNzNTZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC83MDA2ZjUtZjJmOC00YjhkLTgwYTctNDEyYWRjZGJiNzFi
LzEvd2pfN2Y5ckRWNXpYQUIzRkJqQWdGVDNzNTZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARiRj5oLv
he0A5OkK+pc7VCKGi2maEaLYaSzp3FfjgPhoBVBLFWh4LlXXYWPYy5i0/DhS2zdM
whg9NOPiWYSqC23l5WGLTeQ+1XNnBI3tp2peGFm91Zc8bL0ePSnj0HXeQfCqirrb
P5SWhbwqh9RJxDrmA4RFcnQBEok5JsdofZLGfJlpfBLHtW54/5ssKThtUGBX65vm
A2/JLkziLWRyVrwrNRzT/Btl14xSvAp1UIrV8aix1S/oluBuqRgDURi3SaZAMsp1
nqSOwWLr+z4SSzgCbxdacF5BF8mhONdtk8zz939fxYcorecdYiLn060DMHdkbkbI
E+/ze69LgX2L1Q==
-----END CERTIFICATE-----
Generated at Sun Aug 10 18:14:15 2025 by rpki-client