Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/60eff2-7299-442b-81ce-1ea5d2e9541a/1/wATtnrWVyJu57H4g-YUp6VFznYQ.mft
File:                     wATtnrWVyJu57H4g-YUp6VFznYQ.mft (raw, json)
Hash identifier:          Tr1DENPavFjzP/bEsmFM8JrPlUaOYD0Q81dzHkSkpjY=
Subject key identifier:   48:09:8A:FF:8B:30:DE:B2:3F:8F:A2:39:3C:8B:63:32:76:3B:0B:CE
Authority key identifier: C0:04:ED:9E:B5:95:C8:9B:B9:EC:7E:20:F9:85:29:E9:51:73:9D:84
Certificate issuer:       /CN=c004ed9eb595c89bb9ec7e20f98529e951739d84
Certificate serial:       01988A69EDF0A391BEF15FFA8C6772197F81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wATtnrWVyJu57H4g-YUp6VFznYQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/60eff2-7299-442b-81ce-1ea5d2e9541a/1/wATtnrWVyJu57H4g-YUp6VFznYQ.mft
Manifest number:          037B
Signing time:             Fri 08 Aug 2025 16:00:54 +0000
Manifest this update:     Fri 08 Aug 2025 16:00:54 +0000
Manifest next update:     Sat 09 Aug 2025 16:00:54 +0000
Files and hashes:         1: wATtnrWVyJu57H4g-YUp6VFznYQ.crl (hash: PFjgroMcmPLwgZGph6IL0sR6yKquCu8nKYB2q1L4hoo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/60eff2-7299-442b-81ce-1ea5d2e9541a/1/wATtnrWVyJu57H4g-YUp6VFznYQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/60eff2-7299-442b-81ce-1ea5d2e9541a/1/wATtnrWVyJu57H4g-YUp6VFznYQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wATtnrWVyJu57H4g-YUp6VFznYQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 11:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8a:69:ed:f0:a3:91:be:f1:5f:fa:8c:67:72:19:7f:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c004ed9eb595c89bb9ec7e20f98529e951739d84
        Validity
            Not Before: Aug  8 16:00:54 2025 GMT
            Not After : Aug  9 16:00:54 2025 GMT
        Subject: CN=48098aff8b30deb23f8fa2393c8b6332763b0bce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:8a:e8:97:5e:a3:a9:12:0a:fb:0c:94:a6:26:
                    d2:dd:44:d8:3f:c0:86:e1:d7:d8:b2:ab:8b:bc:d8:
                    89:67:63:9f:c3:0e:3b:16:c4:67:18:3c:bd:e3:fe:
                    30:85:8a:a6:61:86:15:f5:3b:61:f2:81:2c:18:4a:
                    62:b5:96:00:b9:c8:1a:4a:d2:05:0d:0a:ea:48:ae:
                    41:df:17:54:a9:d2:8f:a7:cc:29:33:34:26:b1:6f:
                    4d:1f:5b:29:4f:4a:f2:4a:c8:3b:9d:5d:5a:75:13:
                    fc:33:fe:f8:7f:82:08:b3:6b:13:e6:06:dc:a8:c3:
                    8f:ee:d4:2e:ad:f8:4a:88:34:3d:f4:e9:db:72:c6:
                    65:eb:e3:71:35:9c:63:d6:16:87:9f:59:01:2f:7c:
                    8a:6e:7d:d9:f4:09:98:e1:70:e3:35:10:c8:5b:17:
                    e8:c4:dc:35:37:d8:93:53:5d:d5:02:3f:0d:11:f6:
                    7c:a3:5d:7f:12:81:46:3e:b3:60:90:9b:b4:8d:20:
                    af:41:bf:50:3b:e6:43:f6:73:24:8f:4e:64:d6:f7:
                    58:50:c3:6f:3d:4d:24:29:9f:e2:ce:f9:75:2a:ed:
                    af:a3:c0:3f:dc:91:f0:d7:b9:26:a3:ed:f1:fc:a5:
                    66:c3:16:83:59:4f:ab:81:8e:fb:e3:e6:9a:c5:6b:
                    b4:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:09:8A:FF:8B:30:DE:B2:3F:8F:A2:39:3C:8B:63:32:76:3B:0B:CE
            X509v3 Authority Key Identifier:
                keyid:C0:04:ED:9E:B5:95:C8:9B:B9:EC:7E:20:F9:85:29:E9:51:73:9D:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wATtnrWVyJu57H4g-YUp6VFznYQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/60eff2-7299-442b-81ce-1ea5d2e9541a/1/wATtnrWVyJu57H4g-YUp6VFznYQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/60eff2-7299-442b-81ce-1ea5d2e9541a/1/wATtnrWVyJu57H4g-YUp6VFznYQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:a6:f4:a5:70:d9:ba:5a:0e:0f:a5:27:3f:49:bc:be:ed:a1:
         62:1a:6c:7f:4a:52:b5:dc:5c:de:8a:d4:b6:72:d8:ef:dc:00:
         0e:70:9f:37:bc:89:00:9b:c6:54:f7:6b:07:dc:5e:e7:a7:94:
         cc:77:64:50:20:38:68:d5:b6:51:ce:b5:4b:b1:73:b9:ea:f6:
         1d:b7:af:f5:f2:48:1b:84:bd:3d:6c:63:56:72:82:44:18:76:
         a7:1d:52:c9:cd:75:5f:05:60:14:f4:3d:0c:f1:4b:7b:43:4c:
         ad:55:2e:73:6a:b0:d4:dc:8a:c5:79:e0:ef:c4:f7:67:16:10:
         43:b1:72:76:c1:96:d6:cb:c5:ab:c4:9e:36:93:ef:00:1a:9a:
         5b:61:31:2e:a5:1d:41:d8:c8:4d:fc:56:57:48:0c:08:bb:ae:
         6c:81:8f:ab:a2:15:84:90:ba:60:49:02:08:92:fd:83:3b:20:
         49:1e:0e:1a:cd:19:e5:09:5a:57:ec:e0:30:54:04:ed:66:cb:
         8a:04:00:ad:b5:46:1a:b6:9e:b4:4d:72:e0:fa:4e:c9:60:a2:
         ac:55:48:34:bb:f2:92:9b:5d:f2:63:9f:62:03:f7:4b:79:25:
         4d:19:bf:31:0c:20:d1:d7:3f:d4:84:dc:fd:37:46:46:bd:1b:
         5a:30:d5:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiKae3wo5G+8V/6jGdyGX+BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwMDRlZDllYjU5NWM4OWJiOWVjN2UyMGY5ODUyOWU5NTE3
MzlkODQwHhcNMjUwODA4MTYwMDU0WhcNMjUwODA5MTYwMDU0WjAzMTEwLwYDVQQD
Eyg0ODA5OGFmZjhiMzBkZWIyM2Y4ZmEyMzkzYzhiNjMzMjc2M2IwYmNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYrol16jqRIK+wyUpibS3UTYP8CG
4dfYsquLvNiJZ2Ofww47FsRnGDy94/4whYqmYYYV9Tth8oEsGEpitZYAucgaStIF
DQrqSK5B3xdUqdKPp8wpMzQmsW9NH1spT0rySsg7nV1adRP8M/74f4IIs2sT5gbc
qMOP7tQurfhKiDQ99OnbcsZl6+NxNZxj1haHn1kBL3yKbn3Z9AmY4XDjNRDIWxfo
xNw1N9iTU13VAj8NEfZ8o11/EoFGPrNgkJu0jSCvQb9QO+ZD9nMkj05k1vdYUMNv
PU0kKZ/izvl1Ku2vo8A/3JHw17kmo+3x/KVmwxaDWU+rgY774+aaxWu03wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEgJiv+LMN6yP4+iOTyLYzJ2OwvOMB8GA1UdIwQY
MBaAFMAE7Z61lcibuex+IPmFKelRc52EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0FUdG5yV1Z5SnU1N0g0Zy1ZVXA2VkZ6bllRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni82MGVmZjItNzI5OS00NDJiLTgxY2Ut
MWVhNWQyZTk1NDFhLzEvd0FUdG5yV1Z5SnU1N0g0Zy1ZVXA2VkZ6bllRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni82MGVmZjItNzI5OS00NDJiLTgxY2UtMWVhNWQyZTk1NDFh
LzEvd0FUdG5yV1Z5SnU1N0g0Zy1ZVXA2VkZ6bllRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoqb0pXDZ
uloOD6UnP0m8vu2hYhpsf0pStdxc3orUtnLY79wADnCfN7yJAJvGVPdrB9xe56eU
zHdkUCA4aNW2Uc61S7Fzuer2Hbev9fJIG4S9PWxjVnKCRBh2px1Syc11XwVgFPQ9
DPFLe0NMrVUuc2qw1NyKxXng78T3ZxYQQ7FydsGW1svFq8SeNpPvABqaW2ExLqUd
QdjITfxWV0gMCLuubIGPq6IVhJC6YEkCCJL9gzsgSR4OGs0Z5QlaV+zgMFQE7WbL
igQArbVGGraetE1y4PpOyWCirFVINLvykptd8mOfYgP3S3klTRm/MQwg0dc/1ITc
/TdGRr0bWjDV8g==
-----END CERTIFICATE-----
Generated at Fri Aug 8 20:53:36 2025 by rpki-client