Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/79e61d-9afb-4d55-94a4-4e4a5065594a/1/DWisydbqg0IUE-TPWgc3-sMXNSo.mft
File:                     DWisydbqg0IUE-TPWgc3-sMXNSo.mft (raw, json)
Hash identifier:          X15F2Eciw4Ot3qvn9EAvzpc1WjM1jVRRlljZIln+lSM=
Subject key identifier:   E8:3D:94:2D:DA:47:B5:39:08:80:AA:37:42:D4:D2:29:FE:12:73:62
Authority key identifier: 0D:68:AC:C9:D6:EA:83:42:14:13:E4:CF:5A:07:37:FA:C3:17:35:2A
Certificate issuer:       /CN=0d68acc9d6ea83421413e4cf5a0737fac317352a
Certificate serial:       019A500766E1304459792D59B79D1F6B3C91
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DWisydbqg0IUE-TPWgc3-sMXNSo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/79e61d-9afb-4d55-94a4-4e4a5065594a/1/DWisydbqg0IUE-TPWgc3-sMXNSo.mft
Manifest number:          043F
Signing time:             Tue 04 Nov 2025 18:00:53 +0000
Manifest this update:     Tue 04 Nov 2025 18:00:53 +0000
Manifest next update:     Wed 05 Nov 2025 18:00:53 +0000
Files and hashes:         1: DWisydbqg0IUE-TPWgc3-sMXNSo.crl (hash: /X6a7kru0rz986KZCRGgtYM9eT6g6uiZ7cL/RwCE9n4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/79e61d-9afb-4d55-94a4-4e4a5065594a/1/DWisydbqg0IUE-TPWgc3-sMXNSo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/79e61d-9afb-4d55-94a4-4e4a5065594a/1/DWisydbqg0IUE-TPWgc3-sMXNSo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DWisydbqg0IUE-TPWgc3-sMXNSo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 16:49:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:50:07:66:e1:30:44:59:79:2d:59:b7:9d:1f:6b:3c:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d68acc9d6ea83421413e4cf5a0737fac317352a
        Validity
            Not Before: Nov  4 18:00:53 2025 GMT
            Not After : Nov  5 18:00:53 2025 GMT
        Subject: CN=e83d942dda47b5390880aa3742d4d229fe127362
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c5:6d:4d:7d:68:18:23:96:ad:fb:f9:68:4e:
                    7c:75:fd:c0:6d:10:4f:8d:68:fd:4f:78:3a:a3:7e:
                    12:e1:1c:46:6b:86:56:4f:da:2c:a6:37:94:4e:e7:
                    65:43:84:7e:16:73:34:06:22:ff:68:0d:a9:e1:a0:
                    f3:ab:4d:0a:1a:cb:60:ef:ee:87:34:7b:8b:23:6f:
                    2e:e8:9a:01:e3:f4:44:d4:44:ec:42:52:4b:32:6a:
                    e2:98:5c:97:7c:b9:9a:19:30:ea:a8:bf:10:c0:cf:
                    00:db:67:ad:32:65:46:f9:4f:78:23:93:16:1a:51:
                    ff:c5:01:00:95:73:99:be:81:3a:be:3d:c2:16:c9:
                    49:f3:d5:9b:f5:31:70:21:4f:7c:3a:ed:6c:52:09:
                    19:3c:ef:cc:a4:55:32:63:bc:54:0d:94:51:d8:fd:
                    e6:e9:c2:61:98:26:a6:fc:ea:93:27:ed:53:9b:c0:
                    60:19:6b:f4:c3:2a:b0:91:e3:34:d8:11:0a:66:7e:
                    91:79:30:00:92:68:7d:da:7c:a6:63:80:22:0f:1a:
                    bc:8f:54:d0:a3:53:31:4d:5e:69:06:7d:85:02:16:
                    38:d5:f1:8a:cf:31:f1:73:0d:69:3d:61:1a:e9:30:
                    e5:10:81:e6:ee:11:9c:42:6d:6a:33:e6:91:7c:aa:
                    7b:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:3D:94:2D:DA:47:B5:39:08:80:AA:37:42:D4:D2:29:FE:12:73:62
            X509v3 Authority Key Identifier:
                keyid:0D:68:AC:C9:D6:EA:83:42:14:13:E4:CF:5A:07:37:FA:C3:17:35:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DWisydbqg0IUE-TPWgc3-sMXNSo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/79e61d-9afb-4d55-94a4-4e4a5065594a/1/DWisydbqg0IUE-TPWgc3-sMXNSo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/79e61d-9afb-4d55-94a4-4e4a5065594a/1/DWisydbqg0IUE-TPWgc3-sMXNSo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:24:13:ad:94:62:59:7d:47:cc:9a:69:9e:3c:6a:d7:97:15:
         9e:04:d1:f1:53:64:aa:37:00:37:0e:90:69:18:80:40:0d:29:
         27:68:19:40:e4:53:c9:91:e0:ee:7c:53:98:32:82:8d:17:f4:
         02:e2:6f:2e:06:d3:83:59:58:20:25:cd:ce:a3:c8:8a:67:e7:
         e5:8c:a3:a9:b8:c0:59:13:a3:b6:e1:cf:54:22:fe:6a:a9:e9:
         be:4c:1c:68:a5:54:e6:04:3f:4f:9f:14:70:a1:6a:1f:ba:fb:
         5d:65:39:1a:9e:81:ba:b1:63:6d:1d:4c:50:20:fd:39:00:9b:
         7f:5b:01:1e:3e:d6:29:52:30:d9:46:3d:c1:59:a9:70:4f:35:
         8c:9a:f1:18:5c:5e:ea:61:81:9a:ff:33:a4:d9:47:4c:0b:36:
         76:81:14:fa:71:d8:bd:13:43:6c:aa:f1:82:43:21:b4:3e:7d:
         63:27:b6:8e:c7:9d:ed:ed:d4:b8:18:34:45:94:c7:43:ab:a4:
         82:b3:f2:b1:43:ad:0d:d6:1f:ad:26:18:cd:84:94:d7:5c:5c:
         6d:4a:fb:5b:47:3c:c7:49:93:a2:7b:c8:6b:c9:ee:d4:52:99:
         b3:69:1c:cb:8f:6b:76:c7:71:0e:5a:06:26:4c:aa:bd:03:8f:
         dd:52:ad:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpQB2bhMERZeS1Zt50fazyRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkNjhhY2M5ZDZlYTgzNDIxNDEzZTRjZjVhMDczN2ZhYzMx
NzM1MmEwHhcNMjUxMTA0MTgwMDUzWhcNMjUxMTA1MTgwMDUzWjAzMTEwLwYDVQQD
EyhlODNkOTQyZGRhNDdiNTM5MDg4MGFhMzc0MmQ0ZDIyOWZlMTI3MzYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApsVtTX1oGCOWrfv5aE58df3AbRBP
jWj9T3g6o34S4RxGa4ZWT9ospjeUTudlQ4R+FnM0BiL/aA2p4aDzq00KGstg7+6H
NHuLI28u6JoB4/RE1ETsQlJLMmrimFyXfLmaGTDqqL8QwM8A22etMmVG+U94I5MW
GlH/xQEAlXOZvoE6vj3CFslJ89Wb9TFwIU98Ou1sUgkZPO/MpFUyY7xUDZRR2P3m
6cJhmCam/OqTJ+1Tm8BgGWv0wyqwkeM02BEKZn6ReTAAkmh92nymY4AiDxq8j1TQ
o1MxTV5pBn2FAhY41fGKzzHxcw1pPWEa6TDlEIHm7hGcQm1qM+aRfKp7owIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOg9lC3aR7U5CICqN0LU0in+EnNiMB8GA1UdIwQY
MBaAFA1orMnW6oNCFBPkz1oHN/rDFzUqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFdpc3lkYnFnMElVRS1UUFdnYzMtc01YTlNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS83OWU2MWQtOWFmYi00ZDU1LTk0YTQt
NGU0YTUwNjU1OTRhLzEvRFdpc3lkYnFnMElVRS1UUFdnYzMtc01YTlNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS83OWU2MWQtOWFmYi00ZDU1LTk0YTQtNGU0YTUwNjU1OTRh
LzEvRFdpc3lkYnFnMElVRS1UUFdnYzMtc01YTlNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXiQTrZRi
WX1HzJppnjxq15cVngTR8VNkqjcANw6QaRiAQA0pJ2gZQORTyZHg7nxTmDKCjRf0
AuJvLgbTg1lYICXNzqPIimfn5YyjqbjAWROjtuHPVCL+aqnpvkwcaKVU5gQ/T58U
cKFqH7r7XWU5Gp6BurFjbR1MUCD9OQCbf1sBHj7WKVIw2UY9wVmpcE81jJrxGFxe
6mGBmv8zpNlHTAs2doEU+nHYvRNDbKrxgkMhtD59Yye2jsed7e3UuBg0RZTHQ6uk
grPysUOtDdYfrSYYzYSU11xcbUr7W0c8x0mTonvIa8nu1FKZs2kcy49rdsdxDloG
JkyqvQOP3VKtBQ==
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:41:30 2025 by rpki-client