Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/b5f591-d5ea-47e2-9e69-04d12f2d070a/1/wtVzsWdwcfL9bUS4QBthISBZjM8.mft
File:                     wtVzsWdwcfL9bUS4QBthISBZjM8.mft (raw, json)
Hash identifier:          97vJccunIyJX8YqhWTz5VgjOdSIjVigDISkYT1o+rzo=
Subject key identifier:   FA:83:0F:53:9F:41:49:C4:D5:03:64:98:62:CC:C7:D4:AC:75:EE:9F
Authority key identifier: C2:D5:73:B1:67:70:71:F2:FD:6D:44:B8:40:1B:61:21:20:59:8C:CF
Certificate issuer:       /CN=c2d573b1677071f2fd6d44b8401b612120598ccf
Certificate serial:       0198816828FB769E07E5849D5EFE7DA2DFAB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wtVzsWdwcfL9bUS4QBthISBZjM8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/b5f591-d5ea-47e2-9e69-04d12f2d070a/1/wtVzsWdwcfL9bUS4QBthISBZjM8.mft
Manifest number:          161A
Signing time:             Wed 06 Aug 2025 22:02:23 +0000
Manifest this update:     Wed 06 Aug 2025 22:02:23 +0000
Manifest next update:     Thu 07 Aug 2025 22:02:23 +0000
Files and hashes:         1: wtVzsWdwcfL9bUS4QBthISBZjM8.crl (hash: G7aSQnG+ZpO+sKkdq33TwnrY7ulMxpT5e/ruHDPk/3A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/b5f591-d5ea-47e2-9e69-04d12f2d070a/1/wtVzsWdwcfL9bUS4QBthISBZjM8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/b5f591-d5ea-47e2-9e69-04d12f2d070a/1/wtVzsWdwcfL9bUS4QBthISBZjM8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wtVzsWdwcfL9bUS4QBthISBZjM8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 22:02:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:81:68:28:fb:76:9e:07:e5:84:9d:5e:fe:7d:a2:df:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2d573b1677071f2fd6d44b8401b612120598ccf
        Validity
            Not Before: Aug  6 22:02:23 2025 GMT
            Not After : Aug  7 22:02:23 2025 GMT
        Subject: CN=fa830f539f4149c4d503649862ccc7d4ac75ee9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:98:69:bd:db:da:90:ae:70:e8:8d:ef:a0:06:
                    d2:1d:37:67:63:fb:71:b3:23:32:29:a3:a6:b2:d9:
                    67:2d:08:a1:f6:4b:2f:e9:e7:1a:19:97:f1:d6:bb:
                    4d:21:b7:4d:70:e3:46:6e:8c:17:1d:78:ca:2c:e9:
                    62:91:4f:15:8f:37:7c:a2:6e:70:31:1b:0d:97:9b:
                    16:88:6d:f8:ea:ef:d8:65:0a:62:c7:3d:92:c1:a6:
                    1a:a5:5f:f3:67:bd:5c:b7:a1:ad:ba:ba:51:68:de:
                    41:1b:30:24:d7:91:29:ae:9c:fb:f5:e5:97:6c:8a:
                    0d:2a:ea:00:33:4b:ee:3d:11:ae:a0:c4:8c:83:be:
                    8a:3e:e9:5a:26:8d:c7:28:6f:27:00:37:3e:21:f3:
                    54:b6:58:a4:83:95:39:7a:b0:d6:23:80:0f:e1:f1:
                    18:7e:07:a9:b3:b6:10:02:4c:af:c2:e3:dc:c6:a0:
                    22:fd:c8:e1:70:19:9b:8b:8e:5c:d8:5d:7f:3d:dd:
                    e4:d5:32:2f:ec:ac:d6:3d:3c:ae:27:08:de:bf:20:
                    82:f6:cc:7b:67:4b:67:ba:1c:ca:cf:ab:39:aa:98:
                    93:6d:51:0f:ac:64:15:3a:60:a5:82:99:f7:8a:8b:
                    13:a4:92:59:60:9d:0a:e7:f9:ff:c0:cb:75:c5:41:
                    8e:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:83:0F:53:9F:41:49:C4:D5:03:64:98:62:CC:C7:D4:AC:75:EE:9F
            X509v3 Authority Key Identifier:
                keyid:C2:D5:73:B1:67:70:71:F2:FD:6D:44:B8:40:1B:61:21:20:59:8C:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtVzsWdwcfL9bUS4QBthISBZjM8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/b5f591-d5ea-47e2-9e69-04d12f2d070a/1/wtVzsWdwcfL9bUS4QBthISBZjM8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/b5f591-d5ea-47e2-9e69-04d12f2d070a/1/wtVzsWdwcfL9bUS4QBthISBZjM8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:f3:58:e2:61:8e:02:ec:e7:9e:33:00:35:b6:d9:bc:6b:0d:
         57:53:2a:24:ef:64:4c:cb:46:ce:5d:d0:59:e3:7a:c6:f4:e4:
         19:e7:af:90:f8:36:95:a4:00:62:8e:3f:96:23:a5:57:e8:33:
         9f:9f:15:ee:c8:84:5d:f6:81:d8:38:65:cd:b1:bc:41:87:74:
         4b:11:01:96:60:5c:7f:55:83:3a:56:3e:60:31:a3:62:0a:78:
         95:04:fc:c7:21:d0:92:b8:96:de:d3:b9:df:f1:44:ec:8a:50:
         d5:7e:6c:69:06:68:e7:0c:06:30:8a:9d:38:65:22:49:58:81:
         4a:bc:01:d7:5b:29:ae:d8:fb:7e:4f:8c:28:25:8d:54:44:46:
         4a:28:56:6f:15:54:79:b1:ef:5e:bc:bd:98:0d:8b:6f:8c:ff:
         87:3c:ea:d3:58:40:33:6c:99:4c:c1:b5:99:16:bd:4a:db:62:
         14:8c:e4:5a:c4:d2:b0:87:f5:06:cc:4f:f2:5d:1d:b0:c1:dd:
         27:f8:78:64:4b:be:3c:34:9b:9e:43:6b:79:97:20:46:ca:80:
         7e:74:3b:8f:ac:8f:37:7f:1c:e3:8a:16:03:aa:bb:8d:a1:70:
         37:05:9c:f0:bf:20:3f:c2:bd:2a:da:26:78:ad:7a:a4:6c:e2:
         cf:61:7a:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiBaCj7dp4H5YSdXv59ot+rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyZDU3M2IxNjc3MDcxZjJmZDZkNDRiODQwMWI2MTIxMjA1
OThjY2YwHhcNMjUwODA2MjIwMjIzWhcNMjUwODA3MjIwMjIzWjAzMTEwLwYDVQQD
EyhmYTgzMGY1MzlmNDE0OWM0ZDUwMzY0OTg2MmNjYzdkNGFjNzVlZTlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAophpvdvakK5w6I3voAbSHTdnY/tx
syMyKaOmstlnLQih9ksv6ecaGZfx1rtNIbdNcONGbowXHXjKLOlikU8Vjzd8om5w
MRsNl5sWiG346u/YZQpixz2SwaYapV/zZ71ct6GturpRaN5BGzAk15Eprpz79eWX
bIoNKuoAM0vuPRGuoMSMg76KPulaJo3HKG8nADc+IfNUtlikg5U5erDWI4AP4fEY
fgeps7YQAkyvwuPcxqAi/cjhcBmbi45c2F1/Pd3k1TIv7KzWPTyuJwjevyCC9sx7
Z0tnuhzKz6s5qpiTbVEPrGQVOmClgpn3iosTpJJZYJ0K5/n/wMt1xUGOawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPqDD1OfQUnE1QNkmGLMx9Ssde6fMB8GA1UdIwQY
MBaAFMLVc7FncHHy/W1EuEAbYSEgWYzPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3RWenNXZHdjZkw5YlVTNFFCdGhJU0Jaak04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9iNWY1OTEtZDVlYS00N2UyLTllNjkt
MDRkMTJmMmQwNzBhLzEvd3RWenNXZHdjZkw5YlVTNFFCdGhJU0Jaak04Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC9iNWY1OTEtZDVlYS00N2UyLTllNjktMDRkMTJmMmQwNzBh
LzEvd3RWenNXZHdjZkw5YlVTNFFCdGhJU0Jaak04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoPNY4mGO
AuznnjMANbbZvGsNV1MqJO9kTMtGzl3QWeN6xvTkGeevkPg2laQAYo4/liOlV+gz
n58V7siEXfaB2DhlzbG8QYd0SxEBlmBcf1WDOlY+YDGjYgp4lQT8xyHQkriW3tO5
3/FE7IpQ1X5saQZo5wwGMIqdOGUiSViBSrwB11sprtj7fk+MKCWNVERGSihWbxVU
ebHvXry9mA2Lb4z/hzzq01hAM2yZTMG1mRa9SttiFIzkWsTSsIf1BsxP8l0dsMHd
J/h4ZEu+PDSbnkNreZcgRsqAfnQ7j6yPN38c44oWA6q7jaFwNwWc8L8gP8K9Ktom
eK16pGziz2F6hw==
-----END CERTIFICATE-----
Generated at Thu Aug 7 07:16:58 2025 by rpki-client