Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/e47b35-3ff5-4ba3-97d6-676d37f3a29a/1/wW_hAJ--ZJH3sVze8Y75bA69RZs.mft
File:                     wW_hAJ--ZJH3sVze8Y75bA69RZs.mft (raw, json)
Hash identifier:          Zz8lYMVr5eATU1wZgWrF4N9NNgNM+5FdkSv5kj6ay6w=
Subject key identifier:   DC:85:CC:EE:E9:D1:DE:BC:40:21:90:CD:FD:E4:F6:D1:52:EA:0E:47
Authority key identifier: C1:6F:E1:00:9F:BE:64:91:F7:B1:5C:DE:F1:8E:F9:6C:0E:BD:45:9B
Certificate issuer:       /CN=c16fe1009fbe6491f7b15cdef18ef96c0ebd459b
Certificate serial:       01984A0A2D330242B630865984BF8238F3AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wW_hAJ--ZJH3sVze8Y75bA69RZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/e47b35-3ff5-4ba3-97d6-676d37f3a29a/1/wW_hAJ--ZJH3sVze8Y75bA69RZs.mft
Manifest number:          15FE
Signing time:             Sun 27 Jul 2025 04:00:37 +0000
Manifest this update:     Sun 27 Jul 2025 04:00:37 +0000
Manifest next update:     Mon 28 Jul 2025 04:00:37 +0000
Files and hashes:         1: wW_hAJ--ZJH3sVze8Y75bA69RZs.crl (hash: 1vIYlWdqa7kKvQUrwFy20mnQm2aMKPB9XpaIzuMXq0o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/e47b35-3ff5-4ba3-97d6-676d37f3a29a/1/wW_hAJ--ZJH3sVze8Y75bA69RZs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/e47b35-3ff5-4ba3-97d6-676d37f3a29a/1/wW_hAJ--ZJH3sVze8Y75bA69RZs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wW_hAJ--ZJH3sVze8Y75bA69RZs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 00:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:0a:2d:33:02:42:b6:30:86:59:84:bf:82:38:f3:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c16fe1009fbe6491f7b15cdef18ef96c0ebd459b
        Validity
            Not Before: Jul 27 04:00:37 2025 GMT
            Not After : Jul 28 04:00:37 2025 GMT
        Subject: CN=dc85cceee9d1debc402190cdfde4f6d152ea0e47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d2:3b:ed:14:7b:35:ae:ff:8e:24:9c:7e:25:
                    56:6b:fd:2d:80:9d:d0:30:c8:ea:21:56:32:c6:d4:
                    96:cd:e0:7b:29:fa:7f:93:9d:24:38:ec:d8:a6:d9:
                    fb:f4:b2:f6:c8:d1:0e:06:bb:1b:84:d7:7c:45:3d:
                    9e:c5:ac:4a:3d:6c:76:ff:50:1f:d3:0f:2c:26:c9:
                    7b:6d:5b:6f:22:c0:8b:70:17:ec:6c:99:b6:a1:bc:
                    a1:c4:ae:a5:85:bd:01:17:81:40:5c:06:42:8b:44:
                    13:aa:b4:f0:d0:c0:c6:bc:39:35:69:73:42:8b:6a:
                    5e:9c:d7:c0:18:d8:c0:a5:c6:12:7a:20:c1:5f:6a:
                    0e:d0:e8:9f:f5:aa:39:06:ba:18:c9:f9:26:52:18:
                    be:06:9f:eb:de:81:58:43:d0:bc:66:d9:05:27:2e:
                    8a:b6:22:3b:4f:c4:c6:a6:b0:49:f3:60:1f:33:be:
                    86:f3:0c:a2:7e:47:cf:b4:0a:02:d8:09:c3:af:dd:
                    3a:df:13:49:e7:6f:94:0f:83:99:5e:fd:07:61:9f:
                    86:69:22:59:04:6e:41:fb:82:e2:1c:23:96:7b:a1:
                    26:69:30:ba:b2:19:a4:c1:9c:57:ca:a6:56:0c:d3:
                    a9:e5:25:f9:41:60:c8:96:ba:ed:8a:19:3e:a9:89:
                    85:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:85:CC:EE:E9:D1:DE:BC:40:21:90:CD:FD:E4:F6:D1:52:EA:0E:47
            X509v3 Authority Key Identifier:
                keyid:C1:6F:E1:00:9F:BE:64:91:F7:B1:5C:DE:F1:8E:F9:6C:0E:BD:45:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wW_hAJ--ZJH3sVze8Y75bA69RZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e47b35-3ff5-4ba3-97d6-676d37f3a29a/1/wW_hAJ--ZJH3sVze8Y75bA69RZs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e47b35-3ff5-4ba3-97d6-676d37f3a29a/1/wW_hAJ--ZJH3sVze8Y75bA69RZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:77:43:e3:5f:73:34:94:08:49:7b:84:64:ea:ca:5e:27:37:
         58:ef:f4:5b:94:ac:8e:ad:22:1e:03:7e:94:c0:b4:83:9f:69:
         d2:79:6d:df:38:65:de:b8:ca:b0:98:53:1b:c4:b4:e0:98:5c:
         cc:9e:ba:61:88:89:54:56:07:d2:db:54:c0:43:e9:e7:66:87:
         16:69:58:a5:4c:3b:eb:83:7c:3d:67:90:90:86:47:2c:fb:2c:
         a9:f6:a3:96:80:1e:35:19:b8:87:1d:1d:89:7d:73:11:c9:3b:
         e6:a9:01:02:1a:a2:4e:1a:15:b7:d1:ed:2a:5d:a9:40:06:50:
         9d:59:80:15:57:9f:8d:c0:a4:93:8f:97:43:6d:5f:8e:dd:fa:
         9f:16:32:09:3d:55:5b:04:69:4f:c2:e6:57:cc:02:1b:1d:97:
         44:62:53:83:7c:8e:99:78:cf:b5:c0:45:75:4b:e8:f0:1d:f3:
         95:24:16:a9:4f:84:6f:71:f8:35:c6:50:38:c5:9a:49:a2:4a:
         9f:1d:8b:dd:e0:bc:41:56:62:b4:15:f2:0d:4a:ca:da:3f:82:
         32:a1:10:ca:df:ac:d5:26:53:46:ea:37:fe:4b:ca:77:6c:63:
         12:6e:da:84:62:d2:18:d9:44:fa:dc:02:22:f9:c4:6c:94:88:
         9c:40:5e:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKCi0zAkK2MIZZhL+COPOqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxNmZlMTAwOWZiZTY0OTFmN2IxNWNkZWYxOGVmOTZjMGVi
ZDQ1OWIwHhcNMjUwNzI3MDQwMDM3WhcNMjUwNzI4MDQwMDM3WjAzMTEwLwYDVQQD
EyhkYzg1Y2NlZWU5ZDFkZWJjNDAyMTkwY2RmZGU0ZjZkMTUyZWEwZTQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNI77RR7Na7/jiScfiVWa/0tgJ3Q
MMjqIVYyxtSWzeB7Kfp/k50kOOzYptn79LL2yNEOBrsbhNd8RT2exaxKPWx2/1Af
0w8sJsl7bVtvIsCLcBfsbJm2obyhxK6lhb0BF4FAXAZCi0QTqrTw0MDGvDk1aXNC
i2penNfAGNjApcYSeiDBX2oO0Oif9ao5BroYyfkmUhi+Bp/r3oFYQ9C8ZtkFJy6K
tiI7T8TGprBJ82AfM76G8wyifkfPtAoC2AnDr9063xNJ52+UD4OZXv0HYZ+GaSJZ
BG5B+4LiHCOWe6EmaTC6shmkwZxXyqZWDNOp5SX5QWDIlrrtihk+qYmFIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNyFzO7p0d68QCGQzf3k9tFS6g5HMB8GA1UdIwQY
MBaAFMFv4QCfvmSR97Fc3vGO+WwOvUWbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1dfaEFKLS1aSkgzc1Z6ZThZNzViQTY5UlpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9lNDdiMzUtM2ZmNS00YmEzLTk3ZDYt
Njc2ZDM3ZjNhMjlhLzEvd1dfaEFKLS1aSkgzc1Z6ZThZNzViQTY5UlpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC9lNDdiMzUtM2ZmNS00YmEzLTk3ZDYtNjc2ZDM3ZjNhMjlh
LzEvd1dfaEFKLS1aSkgzc1Z6ZThZNzViQTY5UlpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWndD419z
NJQISXuEZOrKXic3WO/0W5Ssjq0iHgN+lMC0g59p0nlt3zhl3rjKsJhTG8S04Jhc
zJ66YYiJVFYH0ttUwEPp52aHFmlYpUw764N8PWeQkIZHLPssqfajloAeNRm4hx0d
iX1zEck75qkBAhqiThoVt9HtKl2pQAZQnVmAFVefjcCkk4+XQ21fjt36nxYyCT1V
WwRpT8LmV8wCGx2XRGJTg3yOmXjPtcBFdUvo8B3zlSQWqU+Eb3H4NcZQOMWaSaJK
nx2L3eC8QVZitBXyDUrK2j+CMqEQyt+s1SZTRuo3/kvKd2xjEm7ahGLSGNlE+twC
IvnEbJSInEBe1w==
-----END CERTIFICATE-----
Generated at Sun Jul 27 08:26:22 2025 by rpki-client