Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/40b8f6-685d-4e86-97d8-6e31347d04d9/1/WN1CqzRgJ5cJwTS1cPduNOTZW5E.mft
File:                     WN1CqzRgJ5cJwTS1cPduNOTZW5E.mft (raw, json)
Hash identifier:          VFkhrneDNEco6KauYG+RQG+YaR9oKNciHgCYURTMnX0=
Subject key identifier:   A4:6E:43:F1:2E:67:7B:BC:6B:84:DE:4C:59:4E:AC:A5:FC:EF:2F:97
Authority key identifier: 58:DD:42:AB:34:60:27:97:09:C1:34:B5:70:F7:6E:34:E4:D9:5B:91
Certificate issuer:       /CN=58dd42ab3460279709c134b570f76e34e4d95b91
Certificate serial:       019872CF9B31E3E318523F16EF3C59B259EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WN1CqzRgJ5cJwTS1cPduNOTZW5E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/40b8f6-685d-4e86-97d8-6e31347d04d9/1/WN1CqzRgJ5cJwTS1cPduNOTZW5E.mft
Manifest number:          133B
Signing time:             Mon 04 Aug 2025 02:01:04 +0000
Manifest this update:     Mon 04 Aug 2025 02:01:04 +0000
Manifest next update:     Tue 05 Aug 2025 02:01:04 +0000
Files and hashes:         1: WN1CqzRgJ5cJwTS1cPduNOTZW5E.crl (hash: HcSvhOwJXgtlRmkFkFw/lKBDTpt9B7+QJeBbUCpoTfQ=)
                          2: fyfyl5NsL0BWisw7TSdl5mH8Mlw.roa (hash: /XQvoo54R4s6GryMB7e6F8gsZAvkqlu3TTwYzBkmBbY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/40b8f6-685d-4e86-97d8-6e31347d04d9/1/WN1CqzRgJ5cJwTS1cPduNOTZW5E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/40b8f6-685d-4e86-97d8-6e31347d04d9/1/WN1CqzRgJ5cJwTS1cPduNOTZW5E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WN1CqzRgJ5cJwTS1cPduNOTZW5E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 02:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:72:cf:9b:31:e3:e3:18:52:3f:16:ef:3c:59:b2:59:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58dd42ab3460279709c134b570f76e34e4d95b91
        Validity
            Not Before: Aug  4 02:01:04 2025 GMT
            Not After : Aug  5 02:01:04 2025 GMT
        Subject: CN=a46e43f12e677bbc6b84de4c594eaca5fcef2f97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:cb:46:e4:10:5c:68:f6:d1:79:73:a4:8d:39:
                    00:81:96:57:62:bc:b3:cf:bf:1f:b2:77:55:d3:15:
                    32:a1:cb:a6:8b:a9:29:89:ea:a2:5e:f2:a6:36:ff:
                    3f:09:82:15:1a:d8:b7:d2:fa:c8:97:fc:a1:d8:d8:
                    fb:f8:17:b0:ac:c8:92:4a:11:c4:69:b7:56:14:b5:
                    be:56:ae:1a:0b:61:d6:82:06:e3:a6:17:fb:19:b2:
                    0e:23:83:7d:92:76:72:30:14:42:4b:7d:c7:94:7e:
                    a9:ec:56:8a:f7:22:59:db:44:a7:e9:9e:d0:ae:7d:
                    dc:07:df:eb:c3:88:32:0d:86:09:ab:71:c0:85:ed:
                    13:54:f7:a5:9a:fc:e3:e3:44:98:69:c0:83:69:25:
                    56:ed:db:87:2e:e9:73:11:15:87:77:fd:ce:35:dd:
                    73:76:8f:e1:16:09:43:3e:99:0b:ac:71:00:1c:68:
                    29:cf:6a:46:50:0a:16:a7:f0:87:ef:f1:65:34:42:
                    7b:b1:1d:e6:36:a3:9f:fe:34:6b:10:dc:51:95:4d:
                    52:1a:f3:8a:e2:8b:48:dc:a8:6e:21:34:fc:6e:a9:
                    45:65:fe:49:64:38:f1:e1:a8:40:6e:33:ed:65:f9:
                    e7:68:fa:43:09:3d:82:1d:bf:ea:4e:69:6a:a5:69:
                    22:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:6E:43:F1:2E:67:7B:BC:6B:84:DE:4C:59:4E:AC:A5:FC:EF:2F:97
            X509v3 Authority Key Identifier:
                keyid:58:DD:42:AB:34:60:27:97:09:C1:34:B5:70:F7:6E:34:E4:D9:5B:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WN1CqzRgJ5cJwTS1cPduNOTZW5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/40b8f6-685d-4e86-97d8-6e31347d04d9/1/WN1CqzRgJ5cJwTS1cPduNOTZW5E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/40b8f6-685d-4e86-97d8-6e31347d04d9/1/WN1CqzRgJ5cJwTS1cPduNOTZW5E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:c9:b0:38:51:7d:03:58:5c:68:45:b4:fa:2e:d5:60:c2:e0:
         fa:5d:06:30:a1:c3:5f:90:b2:1e:e7:87:eb:e6:11:4d:eb:ed:
         5b:07:40:45:c4:53:60:5a:8a:c1:9f:99:54:84:81:2c:d7:02:
         6e:a2:e2:a6:3b:c0:6f:7e:f2:c7:09:ae:25:09:c3:b8:35:e0:
         c2:d4:6e:92:e4:8e:cb:13:66:b2:a7:94:e6:e0:c0:39:1f:0c:
         fb:f1:a2:87:66:fd:64:15:7b:ff:e1:01:fb:8c:34:44:85:93:
         d4:be:34:72:b2:20:f1:ce:6a:d3:28:5f:61:78:b4:d5:cc:09:
         ce:b7:de:2e:62:5c:85:92:00:9b:f3:94:11:ad:ad:0d:84:72:
         d8:7e:8e:59:97:1f:02:bc:76:be:b5:29:f1:e1:e1:f8:77:91:
         10:1c:20:1b:3d:77:da:02:99:68:a5:7d:ca:86:54:7f:6a:ef:
         e9:58:a7:1e:a7:4c:33:64:7f:09:75:f2:3d:d8:8d:2a:9a:05:
         d3:e8:ba:2e:06:e6:5d:91:81:ae:25:8d:1d:69:67:7f:ee:ad:
         ad:a4:73:e3:d7:04:1d:b1:54:7f:fd:e9:c5:ff:a1:b0:6a:74:
         7d:77:93:75:06:81:23:57:73:9b:dc:c1:a3:85:38:92:9b:7f:
         9d:72:67:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhyz5sx4+MYUj8W7zxZslnqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4ZGQ0MmFiMzQ2MDI3OTcwOWMxMzRiNTcwZjc2ZTM0ZTRk
OTViOTEwHhcNMjUwODA0MDIwMTA0WhcNMjUwODA1MDIwMTA0WjAzMTEwLwYDVQQD
EyhhNDZlNDNmMTJlNjc3YmJjNmI4NGRlNGM1OTRlYWNhNWZjZWYyZjk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApctG5BBcaPbReXOkjTkAgZZXYryz
z78fsndV0xUyocumi6kpieqiXvKmNv8/CYIVGti30vrIl/yh2Nj7+BewrMiSShHE
abdWFLW+Vq4aC2HWggbjphf7GbIOI4N9knZyMBRCS33HlH6p7FaK9yJZ20Sn6Z7Q
rn3cB9/rw4gyDYYJq3HAhe0TVPelmvzj40SYacCDaSVW7duHLulzERWHd/3ONd1z
do/hFglDPpkLrHEAHGgpz2pGUAoWp/CH7/FlNEJ7sR3mNqOf/jRrENxRlU1SGvOK
4otI3KhuITT8bqlFZf5JZDjx4ahAbjPtZfnnaPpDCT2CHb/qTmlqpWkiCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKRuQ/EuZ3u8a4TeTFlOrKX87y+XMB8GA1UdIwQY
MBaAFFjdQqs0YCeXCcE0tXD3bjTk2VuRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV04xQ3F6UmdKNWNKd1RTMWNQZHVOT1RaVzVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC80MGI4ZjYtNjg1ZC00ZTg2LTk3ZDgt
NmUzMTM0N2QwNGQ5LzEvV04xQ3F6UmdKNWNKd1RTMWNQZHVOT1RaVzVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC80MGI4ZjYtNjg1ZC00ZTg2LTk3ZDgtNmUzMTM0N2QwNGQ5
LzEvV04xQ3F6UmdKNWNKd1RTMWNQZHVOT1RaVzVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdcmwOFF9
A1hcaEW0+i7VYMLg+l0GMKHDX5CyHueH6+YRTevtWwdARcRTYFqKwZ+ZVISBLNcC
bqLipjvAb37yxwmuJQnDuDXgwtRukuSOyxNmsqeU5uDAOR8M+/Gih2b9ZBV7/+EB
+4w0RIWT1L40crIg8c5q0yhfYXi01cwJzrfeLmJchZIAm/OUEa2tDYRy2H6OWZcf
Arx2vrUp8eHh+HeREBwgGz132gKZaKV9yoZUf2rv6VinHqdMM2R/CXXyPdiNKpoF
0+i6LgbmXZGBriWNHWlnf+6traRz49cEHbFUf/3pxf+hsGp0fXeTdQaBI1dzm9zB
o4U4kpt/nXJnJw==
-----END CERTIFICATE-----
Generated at Mon Aug 4 10:59:58 2025 by rpki-client