
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/e47b35-3ff5-4ba3-97d6-676d37f3a29a/1/wW_hAJ--ZJH3sVze8Y75bA69RZs.mft
File:                     wW_hAJ--ZJH3sVze8Y75bA69RZs.mft (raw, json)
Hash identifier:          9hH73XrdScEvd7cbHwhZolV/7oP1Aq06GminFbjkTmE=
Subject key identifier:   16:E0:AE:B8:9E:17:39:77:DA:30:6B:34:11:F0:E8:A5:86:3F:48:F5
Authority key identifier: C1:6F:E1:00:9F:BE:64:91:F7:B1:5C:DE:F1:8E:F9:6C:0E:BD:45:9B
Certificate issuer:       /CN=c16fe1009fbe6491f7b15cdef18ef96c0ebd459b
Certificate serial:       019A4DAAD106F5D8FE253BFCD03582FF4901
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wW_hAJ--ZJH3sVze8Y75bA69RZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/e47b35-3ff5-4ba3-97d6-676d37f3a29a/1/wW_hAJ--ZJH3sVze8Y75bA69RZs.mft
Manifest number:          1709
Signing time:             Tue 04 Nov 2025 07:00:31 +0000
Manifest this update:     Tue 04 Nov 2025 07:00:31 +0000
Manifest next update:     Wed 05 Nov 2025 07:00:31 +0000
Files and hashes:         1: wW_hAJ--ZJH3sVze8Y75bA69RZs.crl (hash: 8dyFXAjzPWASCefxiiXKGmt6EfZbOZRK1GKYvdKf7Ok=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/e47b35-3ff5-4ba3-97d6-676d37f3a29a/1/wW_hAJ--ZJH3sVze8Y75bA69RZs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/e47b35-3ff5-4ba3-97d6-676d37f3a29a/1/wW_hAJ--ZJH3sVze8Y75bA69RZs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wW_hAJ--ZJH3sVze8Y75bA69RZs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 07:00:31 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4d:aa:d1:06:f5:d8:fe:25:3b:fc:d0:35:82:ff:49:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c16fe1009fbe6491f7b15cdef18ef96c0ebd459b
        Validity
            Not Before: Nov  4 07:00:31 2025 GMT
            Not After : Nov  5 07:00:31 2025 GMT
        Subject: CN=16e0aeb89e173977da306b3411f0e8a5863f48f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:18:b2:14:a4:f4:9a:e7:c4:6f:d7:7e:ee:c9:
                    79:41:a1:64:e5:3b:48:17:e2:9c:c4:d3:66:21:cb:
                    cc:31:aa:da:0b:ad:39:59:fd:cd:20:25:01:07:03:
                    52:04:7f:0b:d2:de:2a:54:73:6f:ff:a5:e5:99:77:
                    8f:1d:63:15:10:3d:af:d3:e2:d7:14:e5:65:1a:9f:
                    98:17:c5:b2:57:ec:4d:09:cb:6f:fe:cf:f5:29:fb:
                    52:d7:da:86:6d:6e:71:dc:f6:aa:3c:d1:e5:05:63:
                    fb:e8:b0:eb:d4:3a:85:cd:c0:01:38:19:f6:41:76:
                    5d:44:a2:20:42:86:8b:6b:e4:b6:a1:88:22:89:11:
                    ef:5a:90:f4:23:ec:ec:19:9d:ab:80:9f:59:60:d0:
                    c4:a0:ba:ae:81:78:e1:2f:b1:db:ca:93:14:0e:0c:
                    19:3d:06:c9:89:5e:0d:ad:58:c1:92:11:37:6d:aa:
                    24:e4:e5:d7:9d:5a:c6:dc:0c:16:5e:86:34:86:ac:
                    01:85:b4:43:30:4d:3f:fe:28:e5:b1:08:03:bd:4c:
                    76:93:9a:5d:12:ec:9c:6d:16:1a:9a:f0:94:03:f9:
                    b9:58:69:9b:a5:8e:45:fd:01:c5:b3:93:e1:c5:f5:
                    b9:5c:8d:81:51:3d:6b:41:bc:88:82:27:34:82:10:
                    37:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:E0:AE:B8:9E:17:39:77:DA:30:6B:34:11:F0:E8:A5:86:3F:48:F5
            X509v3 Authority Key Identifier:
                keyid:C1:6F:E1:00:9F:BE:64:91:F7:B1:5C:DE:F1:8E:F9:6C:0E:BD:45:9B
            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wW_hAJ--ZJH3sVze8Y75bA69RZs.cer
            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e47b35-3ff5-4ba3-97d6-676d37f3a29a/1/wW_hAJ--ZJH3sVze8Y75bA69RZs.mft
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e47b35-3ff5-4ba3-97d6-676d37f3a29a/1/wW_hAJ--ZJH3sVze8Y75bA69RZs.crl
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         b9:c5:cc:cb:95:6c:9b:64:e9:f7:de:fe:fe:07:36:2b:07:49:
         26:c1:61:0c:45:28:21:bd:c4:e3:ee:d1:38:b6:18:13:51:b8:
         dd:a6:ab:9a:44:1a:69:32:03:bc:59:de:40:6e:8f:70:eb:52:
         da:6d:a8:08:e5:0f:a6:26:09:e7:c1:14:b5:80:0a:21:06:ee:
         d8:6e:ef:08:c6:33:11:1c:aa:0f:29:10:c9:8d:6c:b3:fb:7c:
         c7:43:71:49:b0:97:98:c9:e0:61:d6:97:df:84:ce:be:30:6e:
         fc:a6:fe:cf:f7:75:fe:79:de:65:dd:9d:34:56:83:c9:d7:a2:
         d7:ab:07:50:2e:cc:ae:98:d7:9b:9a:69:10:55:2b:e8:2f:f6:
         a1:2e:d6:b4:d7:8f:55:a1:b2:21:14:32:14:95:b3:0d:32:29:
         8f:55:14:a9:c5:d7:59:a3:48:14:63:fd:1d:54:3e:66:62:f1:
         7b:34:61:bf:64:96:73:e3:46:31:05:ff:f1:99:ff:5d:ee:b6:
         1a:5f:66:a5:6a:3b:d0:d6:2c:41:a8:9b:98:7d:df:9a:aa:80:
         03:c0:3b:9b:54:a2:8a:ac:35:82:5c:1e:92:ac:f8:61:6a:27:
         56:35:f1:07:b2:53:67:48:f6:36:4a:76:ed:22:2f:c7:5d:cf:
         6e:c1:a1:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNqtEG9dj+JTv80DWC/0kBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxNmZlMTAwOWZiZTY0OTFmN2IxNWNkZWYxOGVmOTZjMGVi
ZDQ1OWIwHhcNMjUxMTA0MDcwMDMxWhcNMjUxMTA1MDcwMDMxWjAzMTEwLwYDVQQD
EygxNmUwYWViODllMTczOTc3ZGEzMDZiMzQxMWYwZThhNTg2M2Y0OGY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBiyFKT0mufEb9d+7sl5QaFk5TtI
F+KcxNNmIcvMMaraC605Wf3NICUBBwNSBH8L0t4qVHNv/6XlmXePHWMVED2v0+LX
FOVlGp+YF8WyV+xNCctv/s/1KftS19qGbW5x3PaqPNHlBWP76LDr1DqFzcABOBn2
QXZdRKIgQoaLa+S2oYgiiRHvWpD0I+zsGZ2rgJ9ZYNDEoLqugXjhL7HbypMUDgwZ
PQbJiV4NrVjBkhE3baok5OXXnVrG3AwWXoY0hqwBhbRDME0//ijlsQgDvUx2k5pd
EuycbRYamvCUA/m5WGmbpY5F/QHFs5PhxfW5XI2BUT1rQbyIgic0ghA34wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBbgrrieFzl32jBrNBHw6KWGP0j1MB8GA1UdIwQY
MBaAFMFv4QCfvmSR97Fc3vGO+WwOvUWbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1dfaEFKLS1aSkgzc1Z6ZThZNzViQTY5UlpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9lNDdiMzUtM2ZmNS00YmEzLTk3ZDYt
Njc2ZDM3ZjNhMjlhLzEvd1dfaEFKLS1aSkgzc1Z6ZThZNzViQTY5UlpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC9lNDdiMzUtM2ZmNS00YmEzLTk3ZDYtNjc2ZDM3ZjNhMjlh
LzEvd1dfaEFKLS1aSkgzc1Z6ZThZNzViQTY5UlpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAucXMy5Vs
m2Tp997+/gc2KwdJJsFhDEUoIb3E4+7ROLYYE1G43aarmkQaaTIDvFneQG6PcOtS
2m2oCOUPpiYJ58EUtYAKIQbu2G7vCMYzERyqDykQyY1ss/t8x0NxSbCXmMngYdaX
34TOvjBu/Kb+z/d1/nneZd2dNFaDydei16sHUC7MrpjXm5ppEFUr6C/2oS7WtNeP
VaGyIRQyFJWzDTIpj1UUqcXXWaNIFGP9HVQ+ZmLxezRhv2SWc+NGMQX/8Zn/Xe62
Gl9mpWo70NYsQaibmH3fmqqAA8A7m1Siiqw1glwekqz4YWonVjXxB7JTZ0j2Nkp2
7SIvx13PbsGheg==
-----END CERTIFICATE-----
Generated at Tue Nov  4 14:53:33 2025 by rpki-client