Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/1e9958-9ff2-4123-9b5f-a2ef90c9e913/1/w1VyK06KSCQKzfXzN4OKogaqAto.mft
File:                     w1VyK06KSCQKzfXzN4OKogaqAto.mft (raw, json)
Hash identifier:          Wc81sMoNOAZedtMQwoR5Y187Hv/oEY5Ez8YLcKp3qh8=
Subject key identifier:   DE:3C:92:79:EE:2A:75:CD:4F:13:44:44:A0:67:30:25:4C:1C:D9:6D
Authority key identifier: C3:55:72:2B:4E:8A:48:24:0A:CD:F5:F3:37:83:8A:A2:06:AA:02:DA
Certificate issuer:       /CN=c355722b4e8a48240acdf5f337838aa206aa02da
Certificate serial:       01987562704AD8DA3818AD4FF0A65C003463
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w1VyK06KSCQKzfXzN4OKogaqAto.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/1e9958-9ff2-4123-9b5f-a2ef90c9e913/1/w1VyK06KSCQKzfXzN4OKogaqAto.mft
Manifest number:          1616
Signing time:             Mon 04 Aug 2025 14:00:42 +0000
Manifest this update:     Mon 04 Aug 2025 14:00:42 +0000
Manifest next update:     Tue 05 Aug 2025 14:00:42 +0000
Files and hashes:         1: skK36GoSOdR0likALCjbuukKSIA.roa (hash: rM2HKFoUwc02gigzQD8leLnlbHQm3zNCncQ93i9jwp0=)
                          2: w1VyK06KSCQKzfXzN4OKogaqAto.crl (hash: rApE1hAeXvik2QJ2eRRCsjbjEXeyzCGac81ceJEREpc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/1e9958-9ff2-4123-9b5f-a2ef90c9e913/1/w1VyK06KSCQKzfXzN4OKogaqAto.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/1e9958-9ff2-4123-9b5f-a2ef90c9e913/1/w1VyK06KSCQKzfXzN4OKogaqAto.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w1VyK06KSCQKzfXzN4OKogaqAto.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 12:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:75:62:70:4a:d8:da:38:18:ad:4f:f0:a6:5c:00:34:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c355722b4e8a48240acdf5f337838aa206aa02da
        Validity
            Not Before: Aug  4 14:00:42 2025 GMT
            Not After : Aug  5 14:00:42 2025 GMT
        Subject: CN=de3c9279ee2a75cd4f134444a06730254c1cd96d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:6c:48:24:fa:28:d6:40:f2:0e:ad:e4:00:2e:
                    82:e3:3f:0e:b8:1a:4e:c5:2c:a3:88:01:3c:bd:01:
                    3a:6b:7d:60:ec:de:44:8f:bc:bf:53:23:38:fa:3e:
                    89:0f:95:82:24:a6:c9:2e:2d:dd:f6:5f:5e:bc:00:
                    2c:63:28:92:f1:39:9a:49:74:74:5f:f5:f0:61:22:
                    10:5e:04:55:11:8d:15:86:cb:0f:5e:a8:5f:ce:3b:
                    f1:73:6a:d3:80:d8:3c:5a:12:38:b3:c2:3f:34:e5:
                    75:ad:55:45:a6:50:49:ab:94:85:23:12:66:1f:ae:
                    23:00:60:34:c2:7b:41:aa:a3:88:77:15:5c:19:be:
                    f6:8b:a3:a0:d4:08:f8:0d:99:f5:ea:cb:81:fc:91:
                    cf:10:d0:4c:18:08:1c:17:70:66:a5:2c:a5:fd:33:
                    ed:a0:69:5e:42:0a:34:b7:d8:ca:87:52:f3:71:e0:
                    51:83:d8:80:99:ef:55:13:f9:6b:ac:5c:04:c5:98:
                    34:fb:d6:d2:97:6c:7c:ea:1f:46:33:07:99:da:70:
                    74:8a:b7:ca:8c:0a:bc:fe:2c:2a:50:5b:ef:94:c1:
                    22:91:31:ae:d8:82:e5:52:b4:ab:98:ae:36:e6:32:
                    82:7a:b9:32:3a:19:28:2c:d8:bc:b2:f9:1b:b2:d5:
                    90:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:3C:92:79:EE:2A:75:CD:4F:13:44:44:A0:67:30:25:4C:1C:D9:6D
            X509v3 Authority Key Identifier:
                keyid:C3:55:72:2B:4E:8A:48:24:0A:CD:F5:F3:37:83:8A:A2:06:AA:02:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w1VyK06KSCQKzfXzN4OKogaqAto.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1e9958-9ff2-4123-9b5f-a2ef90c9e913/1/w1VyK06KSCQKzfXzN4OKogaqAto.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1e9958-9ff2-4123-9b5f-a2ef90c9e913/1/w1VyK06KSCQKzfXzN4OKogaqAto.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:5c:ba:6f:a2:e7:6d:fa:98:56:89:a9:ca:b5:86:40:da:6b:
         73:94:67:d9:0a:5c:9e:14:5d:c3:14:a7:18:a3:71:0b:6d:29:
         f2:38:b8:ea:37:8c:c9:60:6f:42:e2:40:16:15:45:2d:3a:67:
         b9:85:26:8b:0d:54:09:ca:e8:99:5c:26:23:9b:fb:6b:af:52:
         71:58:91:ae:be:cb:b1:9c:6a:bb:4e:98:d3:97:83:bc:1b:f2:
         c2:09:61:70:27:cc:cd:2b:48:ba:2e:4a:9f:ee:e2:ae:93:19:
         71:8a:e1:56:ce:d0:c7:18:4f:7d:1a:60:50:4c:61:9b:7f:1f:
         83:d3:05:e6:8a:20:c8:19:0b:0f:87:35:e4:ea:69:19:b6:f2:
         91:06:da:5e:fd:1b:d4:e4:31:fb:97:43:2e:9a:dd:1c:a2:2d:
         68:cf:4c:d7:c7:05:20:d4:26:00:5b:e8:c2:ce:b7:b9:6e:35:
         1d:cb:73:17:a1:3a:b7:e1:73:ee:72:4c:0c:db:53:89:d8:93:
         40:06:6a:a5:36:eb:c7:a7:90:e1:17:44:d8:21:b2:d2:dd:91:
         bc:98:e2:79:61:cb:54:b0:16:53:27:0a:b2:e7:05:43:75:03:
         46:0d:d3:d3:b2:fa:f3:c7:9b:9d:64:06:5d:01:bd:ae:df:56:
         53:14:00:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh1YnBK2No4GK1P8KZcADRjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzNTU3MjJiNGU4YTQ4MjQwYWNkZjVmMzM3ODM4YWEyMDZh
YTAyZGEwHhcNMjUwODA0MTQwMDQyWhcNMjUwODA1MTQwMDQyWjAzMTEwLwYDVQQD
EyhkZTNjOTI3OWVlMmE3NWNkNGYxMzQ0NDRhMDY3MzAyNTRjMWNkOTZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmxIJPoo1kDyDq3kAC6C4z8OuBpO
xSyjiAE8vQE6a31g7N5Ej7y/UyM4+j6JD5WCJKbJLi3d9l9evAAsYyiS8TmaSXR0
X/XwYSIQXgRVEY0VhssPXqhfzjvxc2rTgNg8WhI4s8I/NOV1rVVFplBJq5SFIxJm
H64jAGA0wntBqqOIdxVcGb72i6Og1Aj4DZn16suB/JHPENBMGAgcF3BmpSyl/TPt
oGleQgo0t9jKh1LzceBRg9iAme9VE/lrrFwExZg0+9bSl2x86h9GMweZ2nB0irfK
jAq8/iwqUFvvlMEikTGu2ILlUrSrmK425jKCerkyOhkoLNi8svkbstWQmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN48knnuKnXNTxNERKBnMCVMHNltMB8GA1UdIwQY
MBaAFMNVcitOikgkCs318zeDiqIGqgLaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzFWeUswNktTQ1FLemZYek40T0tvZ2FxQXRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8xZTk5NTgtOWZmMi00MTIzLTliNWYt
YTJlZjkwYzllOTEzLzEvdzFWeUswNktTQ1FLemZYek40T0tvZ2FxQXRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8xZTk5NTgtOWZmMi00MTIzLTliNWYtYTJlZjkwYzllOTEz
LzEvdzFWeUswNktTQ1FLemZYek40T0tvZ2FxQXRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADly6b6Ln
bfqYVompyrWGQNprc5Rn2QpcnhRdwxSnGKNxC20p8ji46jeMyWBvQuJAFhVFLTpn
uYUmiw1UCcromVwmI5v7a69ScViRrr7LsZxqu06Y05eDvBvywglhcCfMzStIui5K
n+7irpMZcYrhVs7QxxhPfRpgUExhm38fg9MF5oogyBkLD4c15OppGbbykQbaXv0b
1OQx+5dDLprdHKItaM9M18cFINQmAFvows63uW41HctzF6E6t+Fz7nJMDNtTidiT
QAZqpTbrx6eQ4RdE2CGy0t2RvJjieWHLVLAWUycKsucFQ3UDRg3T07L688ebnWQG
XQG9rt9WUxQAFw==
-----END CERTIFICATE-----
Generated at Mon Aug 4 19:02:32 2025 by rpki-client