Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/bb7335-b8c9-4e41-b124-bf9e37b7b870/1/wFLV2TVyLCxcxJ8FLNWlqPFFc2s.mft
File:                     wFLV2TVyLCxcxJ8FLNWlqPFFc2s.mft (raw, json)
Hash identifier:          MyYE5uZcHlTyXQPsf6/dbBYXgcM75cxFd/T4dRSCtmA=
Subject key identifier:   19:9F:C9:1B:BC:6E:D0:67:DC:94:9E:BF:5F:4E:8C:2A:33:A6:CA:27
Authority key identifier: C0:52:D5:D9:35:72:2C:2C:5C:C4:9F:05:2C:D5:A5:A8:F1:45:73:6B
Certificate issuer:       /CN=c052d5d935722c2c5cc49f052cd5a5a8f145736b
Certificate serial:       01976C989E8CF0F7FADDC334315BA63D4DCA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wFLV2TVyLCxcxJ8FLNWlqPFFc2s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/bb7335-b8c9-4e41-b124-bf9e37b7b870/1/wFLV2TVyLCxcxJ8FLNWlqPFFc2s.mft
Manifest number:          145D
Signing time:             Sat 14 Jun 2025 04:00:30 +0000
Manifest this update:     Sat 14 Jun 2025 04:00:30 +0000
Manifest next update:     Sun 15 Jun 2025 04:00:30 +0000
Files and hashes:         1: wFLV2TVyLCxcxJ8FLNWlqPFFc2s.crl (hash: 2K58cBQTVmkm0luNsRYgqgTUlrXoCV6Nk8qOiVneJNM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/bb7335-b8c9-4e41-b124-bf9e37b7b870/1/wFLV2TVyLCxcxJ8FLNWlqPFFc2s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/bb7335-b8c9-4e41-b124-bf9e37b7b870/1/wFLV2TVyLCxcxJ8FLNWlqPFFc2s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wFLV2TVyLCxcxJ8FLNWlqPFFc2s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:98:9e:8c:f0:f7:fa:dd:c3:34:31:5b:a6:3d:4d:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c052d5d935722c2c5cc49f052cd5a5a8f145736b
        Validity
            Not Before: Jun 14 04:00:30 2025 GMT
            Not After : Jun 15 04:00:30 2025 GMT
        Subject: CN=199fc91bbc6ed067dc949ebf5f4e8c2a33a6ca27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:55:e4:4e:b2:7a:77:91:62:87:63:6a:7c:d3:
                    57:0c:c1:fb:61:00:05:6f:56:56:67:15:32:db:25:
                    6a:bd:12:34:aa:9c:b0:f8:a4:14:12:64:8d:b5:b9:
                    6c:2b:0a:88:5b:e2:c1:ed:80:87:9a:1d:62:cf:cb:
                    c4:b0:0c:40:ac:ee:0b:2c:8a:b5:a4:50:fe:b9:65:
                    04:e8:25:ba:93:9c:31:3e:c9:42:d7:d5:88:b7:fe:
                    3b:39:3d:f6:c4:5c:b7:c0:62:fc:53:7f:b0:fd:46:
                    fa:77:89:3f:37:d2:1e:fb:81:54:ef:90:dd:47:71:
                    e0:db:da:f4:af:35:b2:08:0c:60:9a:c4:69:17:b0:
                    8e:15:82:dc:6d:e7:74:d4:2f:3e:a7:93:9f:4b:07:
                    03:b5:c3:9f:e6:c0:f0:da:0b:c8:db:94:19:7c:f8:
                    d3:f0:da:50:d8:a3:c0:9e:78:5d:e1:c4:39:e5:ef:
                    6d:1b:57:79:19:bc:84:38:32:f1:02:29:d7:e6:85:
                    c2:86:8d:45:f3:b1:f2:94:3e:28:d3:d2:0f:2e:91:
                    57:bc:27:2e:9a:5c:cd:02:22:7a:4b:01:8a:be:12:
                    46:91:d9:04:b4:b2:b3:83:40:29:22:51:52:56:8c:
                    bc:64:41:26:f0:aa:f1:6b:cd:4d:72:e0:3e:cc:4f:
                    42:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:9F:C9:1B:BC:6E:D0:67:DC:94:9E:BF:5F:4E:8C:2A:33:A6:CA:27
            X509v3 Authority Key Identifier:
                keyid:C0:52:D5:D9:35:72:2C:2C:5C:C4:9F:05:2C:D5:A5:A8:F1:45:73:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wFLV2TVyLCxcxJ8FLNWlqPFFc2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/bb7335-b8c9-4e41-b124-bf9e37b7b870/1/wFLV2TVyLCxcxJ8FLNWlqPFFc2s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/bb7335-b8c9-4e41-b124-bf9e37b7b870/1/wFLV2TVyLCxcxJ8FLNWlqPFFc2s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:c9:0b:45:ac:52:bb:0f:ee:73:3d:31:d3:29:c5:9c:af:47:
         03:ba:88:fd:28:7e:22:cc:62:86:d5:15:d1:3a:eb:e5:96:ca:
         6f:16:5c:5c:ef:8f:d7:11:e0:a1:b6:ec:69:6a:ca:25:a6:e0:
         c2:13:d3:e8:f4:2a:cb:4f:16:89:b5:c1:94:43:3b:f9:d8:a7:
         91:67:ee:a9:f3:2f:7e:e2:b3:2d:cf:86:be:02:de:dd:f1:c0:
         7c:d6:08:4a:45:bf:46:a6:7b:a3:09:15:0e:4f:8b:36:1c:dc:
         55:c6:ca:a6:91:2e:dc:77:fb:ee:a4:7b:9a:f6:77:88:bc:bb:
         dd:ed:e2:e5:8a:03:b4:29:87:2e:5d:ec:61:e2:50:d3:96:66:
         af:54:e8:70:a8:e9:f0:cc:23:8b:a8:9e:b8:d8:c3:6a:24:8d:
         c6:72:02:ce:09:99:5d:bc:90:ff:a3:31:34:25:1c:e1:5e:33:
         e5:7f:cb:69:bf:32:11:1f:eb:89:67:79:54:51:85:00:79:bb:
         7d:50:6a:f8:fd:28:6f:f2:be:b3:23:04:4b:f1:0d:e1:33:c0:
         d6:a9:16:fd:c4:a6:c4:57:65:7e:e5:8b:28:1d:e2:46:91:55:
         d8:2e:d7:dd:bf:01:34:34:64:06:2c:1a:76:19:8f:dc:18:0d:
         0a:15:81:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsmJ6M8Pf63cM0MVumPU3KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwNTJkNWQ5MzU3MjJjMmM1Y2M0OWYwNTJjZDVhNWE4ZjE0
NTczNmIwHhcNMjUwNjE0MDQwMDMwWhcNMjUwNjE1MDQwMDMwWjAzMTEwLwYDVQQD
EygxOTlmYzkxYmJjNmVkMDY3ZGM5NDllYmY1ZjRlOGMyYTMzYTZjYTI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVXkTrJ6d5Fih2NqfNNXDMH7YQAF
b1ZWZxUy2yVqvRI0qpyw+KQUEmSNtblsKwqIW+LB7YCHmh1iz8vEsAxArO4LLIq1
pFD+uWUE6CW6k5wxPslC19WIt/47OT32xFy3wGL8U3+w/Ub6d4k/N9Ie+4FU75Dd
R3Hg29r0rzWyCAxgmsRpF7COFYLcbed01C8+p5OfSwcDtcOf5sDw2gvI25QZfPjT
8NpQ2KPAnnhd4cQ55e9tG1d5GbyEODLxAinX5oXCho1F87HylD4o09IPLpFXvCcu
mlzNAiJ6SwGKvhJGkdkEtLKzg0ApIlFSVoy8ZEEm8Krxa81NcuA+zE9C7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBmfyRu8btBn3JSev19OjCozpsonMB8GA1UdIwQY
MBaAFMBS1dk1ciwsXMSfBSzVpajxRXNrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0ZMVjJUVnlMQ3hjeEo4RkxOV2xxUEZGYzJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9iYjczMzUtYjhjOS00ZTQxLWIxMjQt
YmY5ZTM3YjdiODcwLzEvd0ZMVjJUVnlMQ3hjeEo4RkxOV2xxUEZGYzJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni9iYjczMzUtYjhjOS00ZTQxLWIxMjQtYmY5ZTM3YjdiODcw
LzEvd0ZMVjJUVnlMQ3hjeEo4RkxOV2xxUEZGYzJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKckLRaxS
uw/ucz0x0ynFnK9HA7qI/Sh+IsxihtUV0Trr5ZbKbxZcXO+P1xHgobbsaWrKJabg
whPT6PQqy08WibXBlEM7+dinkWfuqfMvfuKzLc+GvgLe3fHAfNYISkW/RqZ7owkV
Dk+LNhzcVcbKppEu3Hf77qR7mvZ3iLy73e3i5YoDtCmHLl3sYeJQ05Zmr1TocKjp
8Mwji6ieuNjDaiSNxnICzgmZXbyQ/6MxNCUc4V4z5X/Lab8yER/riWd5VFGFAHm7
fVBq+P0ob/K+syMES/EN4TPA1qkW/cSmxFdlfuWLKB3iRpFV2C7X3b8BNDRkBiwa
dhmP3BgNChWBQA==
-----END CERTIFICATE-----
Generated at Sat Jun 14 10:05:20 2025 by rpki-client