Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/8c918e-3aaf-4aa6-8c4d-24ed40c9f389/1/DwxSlP25wrH3QxZPyWDAB-a_5gE.mft
File:                     DwxSlP25wrH3QxZPyWDAB-a_5gE.mft (raw, json)
Hash identifier:          L3jDGRb9AFv9IOCq7I9l8TEf5sJbxgCO9iXb5tBGmnk=
Subject key identifier:   1B:C0:81:92:B5:CB:AC:16:AC:4F:85:7F:5A:2F:38:93:84:01:68:E0
Authority key identifier: 0F:0C:52:94:FD:B9:C2:B1:F7:43:16:4F:C9:60:C0:07:E6:BF:E6:01
Certificate issuer:       /CN=0f0c5294fdb9c2b1f743164fc960c007e6bfe601
Certificate serial:       019875D17E2753CCC3D5A881DFEB2C09F0E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DwxSlP25wrH3QxZPyWDAB-a_5gE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/8c918e-3aaf-4aa6-8c4d-24ed40c9f389/1/DwxSlP25wrH3QxZPyWDAB-a_5gE.mft
Manifest number:          1615
Signing time:             Mon 04 Aug 2025 16:02:00 +0000
Manifest this update:     Mon 04 Aug 2025 16:02:00 +0000
Manifest next update:     Tue 05 Aug 2025 16:02:00 +0000
Files and hashes:         1: DwxSlP25wrH3QxZPyWDAB-a_5gE.crl (hash: N/PeFl3IIeupEla+54lUfIAvhP0v2AEE/SNcU5zNo2U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/8c918e-3aaf-4aa6-8c4d-24ed40c9f389/1/DwxSlP25wrH3QxZPyWDAB-a_5gE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/8c918e-3aaf-4aa6-8c4d-24ed40c9f389/1/DwxSlP25wrH3QxZPyWDAB-a_5gE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DwxSlP25wrH3QxZPyWDAB-a_5gE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 12:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:75:d1:7e:27:53:cc:c3:d5:a8:81:df:eb:2c:09:f0:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f0c5294fdb9c2b1f743164fc960c007e6bfe601
        Validity
            Not Before: Aug  4 16:02:00 2025 GMT
            Not After : Aug  5 16:02:00 2025 GMT
        Subject: CN=1bc08192b5cbac16ac4f857f5a2f3893840168e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:75:0d:bb:6f:14:35:fb:fd:0f:2d:73:b3:8f:
                    1d:b5:05:04:b2:f8:49:e3:6c:9f:c7:32:f8:36:a5:
                    d9:b2:c1:42:57:9f:53:d0:01:35:f8:67:4a:b1:4d:
                    d8:cb:79:61:f3:37:4e:ed:cd:d5:ba:45:e6:93:eb:
                    65:fa:52:0f:8b:4b:59:56:11:d7:2a:cd:e2:5c:28:
                    59:85:3b:e7:ad:a0:1e:ca:ac:37:91:31:9e:a9:c6:
                    00:ba:11:9a:96:14:40:ac:7d:56:43:39:1f:6b:4e:
                    c2:3f:c8:7c:bf:ea:1e:9f:0d:80:08:df:17:69:27:
                    19:90:01:46:db:56:58:09:e6:e5:90:1d:dd:d2:8d:
                    b9:fb:a8:f0:b0:81:7c:80:61:af:31:5d:ef:5a:66:
                    7c:ee:9f:21:bc:36:30:d4:79:fa:73:fc:37:6d:be:
                    02:d5:33:69:d4:79:b4:0f:e3:42:08:d5:39:ab:46:
                    7d:10:64:2f:72:49:6f:24:42:3d:ab:ed:92:8a:e1:
                    1a:e1:fc:33:f4:ed:f8:6e:ff:9f:7c:ab:27:ee:14:
                    24:1a:b8:50:41:9c:2d:06:3f:55:16:0a:75:e8:a6:
                    f4:37:ec:84:05:fb:d1:ab:61:2f:b0:3c:f1:f0:bd:
                    75:41:40:60:03:66:d9:71:17:f3:ff:40:40:df:e0:
                    6a:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:C0:81:92:B5:CB:AC:16:AC:4F:85:7F:5A:2F:38:93:84:01:68:E0
            X509v3 Authority Key Identifier:
                keyid:0F:0C:52:94:FD:B9:C2:B1:F7:43:16:4F:C9:60:C0:07:E6:BF:E6:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DwxSlP25wrH3QxZPyWDAB-a_5gE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8c918e-3aaf-4aa6-8c4d-24ed40c9f389/1/DwxSlP25wrH3QxZPyWDAB-a_5gE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8c918e-3aaf-4aa6-8c4d-24ed40c9f389/1/DwxSlP25wrH3QxZPyWDAB-a_5gE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:5c:6f:be:fc:1c:34:25:45:2d:9c:41:15:29:63:4b:78:f6:
         59:e1:2b:0b:3d:98:22:ef:5f:dc:77:ea:f7:7e:e6:e9:dd:ea:
         b1:dc:75:7a:10:59:05:e5:b1:86:7d:a4:60:cf:fc:fd:1f:7a:
         f3:ba:ea:29:f5:7d:4f:90:9f:9d:3b:46:63:f4:35:ca:fb:00:
         61:48:18:14:3f:3c:2d:83:ea:27:e7:f3:96:4b:8f:c2:d1:62:
         46:f8:99:34:d3:06:41:31:2c:3e:c9:2b:c3:e8:9c:b4:91:45:
         ae:3b:e9:f2:dd:3e:dc:0e:5a:5a:51:10:0e:c9:84:7a:8a:72:
         f8:a0:2c:da:37:11:a4:2f:e1:5e:6c:2f:60:01:f6:48:f2:82:
         9d:f4:aa:15:cf:c3:67:e0:8f:bc:c3:7c:2b:86:f0:2e:83:81:
         c5:b5:0d:d3:e3:75:e4:e3:df:58:91:82:16:7b:85:2a:07:49:
         8e:09:ef:64:c5:6d:1b:00:50:23:fb:2c:a3:c1:4c:8c:6a:f2:
         a9:43:12:47:c2:fa:88:28:18:3c:d8:b9:00:a9:8e:b6:fd:c7:
         16:78:70:e7:92:b5:62:11:97:b1:f9:b3:93:d4:3f:b5:18:53:
         73:04:cc:3e:35:3f:0f:8f:79:bd:81:6d:d6:5e:f3:8c:bf:60:
         7d:b3:49:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh10X4nU8zD1aiB3+ssCfDoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmMGM1Mjk0ZmRiOWMyYjFmNzQzMTY0ZmM5NjBjMDA3ZTZi
ZmU2MDEwHhcNMjUwODA0MTYwMjAwWhcNMjUwODA1MTYwMjAwWjAzMTEwLwYDVQQD
EygxYmMwODE5MmI1Y2JhYzE2YWM0Zjg1N2Y1YTJmMzg5Mzg0MDE2OGUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnUNu28UNfv9Dy1zs48dtQUEsvhJ
42yfxzL4NqXZssFCV59T0AE1+GdKsU3Yy3lh8zdO7c3VukXmk+tl+lIPi0tZVhHX
Ks3iXChZhTvnraAeyqw3kTGeqcYAuhGalhRArH1WQzkfa07CP8h8v+oenw2ACN8X
aScZkAFG21ZYCeblkB3d0o25+6jwsIF8gGGvMV3vWmZ87p8hvDYw1Hn6c/w3bb4C
1TNp1Hm0D+NCCNU5q0Z9EGQvcklvJEI9q+2SiuEa4fwz9O34bv+ffKsn7hQkGrhQ
QZwtBj9VFgp16Kb0N+yEBfvRq2EvsDzx8L11QUBgA2bZcRfz/0BA3+BqGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBvAgZK1y6wWrE+Ff1ovOJOEAWjgMB8GA1UdIwQY
MBaAFA8MUpT9ucKx90MWT8lgwAfmv+YBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHd4U2xQMjV3ckgzUXhaUHlXREFCLWFfNWdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC84YzkxOGUtM2FhZi00YWE2LThjNGQt
MjRlZDQwYzlmMzg5LzEvRHd4U2xQMjV3ckgzUXhaUHlXREFCLWFfNWdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC84YzkxOGUtM2FhZi00YWE2LThjNGQtMjRlZDQwYzlmMzg5
LzEvRHd4U2xQMjV3ckgzUXhaUHlXREFCLWFfNWdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZVxvvvwc
NCVFLZxBFSljS3j2WeErCz2YIu9f3Hfq937m6d3qsdx1ehBZBeWxhn2kYM/8/R96
87rqKfV9T5CfnTtGY/Q1yvsAYUgYFD88LYPqJ+fzlkuPwtFiRviZNNMGQTEsPskr
w+ictJFFrjvp8t0+3A5aWlEQDsmEeopy+KAs2jcRpC/hXmwvYAH2SPKCnfSqFc/D
Z+CPvMN8K4bwLoOBxbUN0+N15OPfWJGCFnuFKgdJjgnvZMVtGwBQI/sso8FMjGry
qUMSR8L6iCgYPNi5AKmOtv3HFnhw55K1YhGXsfmzk9Q/tRhTcwTMPjU/D495vYFt
1l7zjL9gfbNJdg==
-----END CERTIFICATE-----
Generated at Mon Aug 4 18:59:05 2025 by rpki-client