Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/3904bb-0b6c-4da5-a5af-aafaaeaed8bb/1/WVpR9FwMtjeRQg0JQ8KDUdG7vQo.mft
File:                     WVpR9FwMtjeRQg0JQ8KDUdG7vQo.mft (raw, json)
Hash identifier:          HoNpBVYhUS0/0ZkuOu6umqpMyg/1rV0auqhiVkN8H9w=
Subject key identifier:   6E:55:C1:DE:72:1D:2C:99:33:46:8A:07:A8:30:9D:A3:A5:9F:13:88
Authority key identifier: 59:5A:51:F4:5C:0C:B6:37:91:42:0D:09:43:C2:83:51:D1:BB:BD:0A
Certificate issuer:       /CN=595a51f45c0cb63791420d0943c28351d1bbbd0a
Certificate serial:       01984A09F4EDD82139B56D5184898E7E873A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WVpR9FwMtjeRQg0JQ8KDUdG7vQo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/3904bb-0b6c-4da5-a5af-aafaaeaed8bb/1/WVpR9FwMtjeRQg0JQ8KDUdG7vQo.mft
Manifest number:          0A0E
Signing time:             Sun 27 Jul 2025 04:00:23 +0000
Manifest this update:     Sun 27 Jul 2025 04:00:23 +0000
Manifest next update:     Mon 28 Jul 2025 04:00:23 +0000
Files and hashes:         1: WVpR9FwMtjeRQg0JQ8KDUdG7vQo.crl (hash: 1z4P0aC+EsuJthJu9/dqroT5Q+WleMGPCc+wQ1kkd10=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/3904bb-0b6c-4da5-a5af-aafaaeaed8bb/1/WVpR9FwMtjeRQg0JQ8KDUdG7vQo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/3904bb-0b6c-4da5-a5af-aafaaeaed8bb/1/WVpR9FwMtjeRQg0JQ8KDUdG7vQo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WVpR9FwMtjeRQg0JQ8KDUdG7vQo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:09:f4:ed:d8:21:39:b5:6d:51:84:89:8e:7e:87:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=595a51f45c0cb63791420d0943c28351d1bbbd0a
        Validity
            Not Before: Jul 27 04:00:23 2025 GMT
            Not After : Jul 28 04:00:23 2025 GMT
        Subject: CN=6e55c1de721d2c9933468a07a8309da3a59f1388
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:37:94:80:e9:b3:79:3a:0d:ae:55:90:be:7d:
                    09:36:ab:e5:ed:fb:5a:9b:df:49:e7:ae:bf:9a:78:
                    38:f9:31:ae:d8:0a:04:36:e5:7d:e6:92:25:8b:ea:
                    f6:e8:75:6d:7a:d7:1f:06:2d:dc:dd:b4:96:5a:ed:
                    f7:ae:b9:71:a1:85:0f:eb:b7:5c:54:c2:03:d9:f1:
                    fd:64:31:a6:e3:36:78:03:d4:34:62:2f:d7:40:d7:
                    47:d8:bd:db:18:aa:f4:a1:eb:5f:0b:04:fa:68:fb:
                    a6:36:67:5d:c7:1a:35:63:38:cc:45:7e:a2:9c:fa:
                    d6:c2:5e:74:5d:f9:82:a4:6a:eb:5c:dc:f2:db:1a:
                    97:ab:c6:8a:55:41:85:a6:c8:3b:70:d1:ba:a4:58:
                    7d:34:16:bb:c7:46:d9:84:cf:13:ae:26:4c:13:8c:
                    23:98:99:f7:ab:67:2b:90:f0:e9:de:f9:7f:31:63:
                    f6:af:b6:aa:3d:8d:10:bb:b9:16:8a:4e:2c:2b:84:
                    6a:60:cc:04:c5:84:87:f1:9a:40:df:19:62:1c:3e:
                    b5:89:b9:7c:78:f5:13:de:29:49:ce:2b:25:a6:d7:
                    c0:65:15:75:b5:1d:76:39:ea:79:82:2a:2d:8d:82:
                    bb:b7:f1:e8:0b:55:65:70:be:e3:25:7b:29:d9:b4:
                    9f:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:55:C1:DE:72:1D:2C:99:33:46:8A:07:A8:30:9D:A3:A5:9F:13:88
            X509v3 Authority Key Identifier:
                keyid:59:5A:51:F4:5C:0C:B6:37:91:42:0D:09:43:C2:83:51:D1:BB:BD:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WVpR9FwMtjeRQg0JQ8KDUdG7vQo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3904bb-0b6c-4da5-a5af-aafaaeaed8bb/1/WVpR9FwMtjeRQg0JQ8KDUdG7vQo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3904bb-0b6c-4da5-a5af-aafaaeaed8bb/1/WVpR9FwMtjeRQg0JQ8KDUdG7vQo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:35:20:82:49:22:5b:19:a7:24:b2:92:3c:26:5d:1a:5b:25:
         db:28:ff:db:15:57:2b:04:9d:8f:44:aa:a1:46:85:6a:69:55:
         e1:9c:33:00:91:db:5b:dc:a1:45:b1:08:4e:53:2c:88:d5:13:
         9d:4f:6b:7e:09:85:79:42:38:df:58:80:6d:b3:52:ec:ac:69:
         6c:85:a8:98:59:f3:ad:a5:81:ee:31:02:9c:36:b8:4b:59:df:
         ff:2f:03:27:2f:ea:b6:fa:71:9f:5e:d5:85:cf:1e:05:4b:3f:
         5a:15:1f:ab:d8:19:cb:cb:96:c9:7d:58:b5:d4:9e:d1:79:1b:
         a3:8c:10:84:8f:ab:25:67:bf:a8:2e:9b:c2:b2:8f:c0:96:74:
         3b:75:f1:02:07:a8:a3:76:d9:99:b6:cf:45:74:8c:c5:71:06:
         27:fc:6e:65:de:04:3c:75:18:66:52:47:00:59:61:e3:ee:8c:
         cc:7a:b1:ef:66:7f:77:d0:f9:f7:f0:45:e5:6a:cf:e8:3b:e0:
         b1:91:a5:ba:11:99:75:17:bc:9e:a1:e6:9c:a1:11:9c:da:c6:
         86:1f:a5:2a:e9:c6:22:b5:68:b0:ff:a1:02:08:f6:19:67:9c:
         81:0d:02:bf:bd:08:5c:58:06:22:e9:55:4f:7e:d0:52:22:e6:
         77:89:6f:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKCfTt2CE5tW1RhImOfoc6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5NWE1MWY0NWMwY2I2Mzc5MTQyMGQwOTQzYzI4MzUxZDFi
YmJkMGEwHhcNMjUwNzI3MDQwMDIzWhcNMjUwNzI4MDQwMDIzWjAzMTEwLwYDVQQD
Eyg2ZTU1YzFkZTcyMWQyYzk5MzM0NjhhMDdhODMwOWRhM2E1OWYxMzg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDeUgOmzeToNrlWQvn0JNqvl7fta
m99J566/mng4+TGu2AoENuV95pIli+r26HVtetcfBi3c3bSWWu33rrlxoYUP67dc
VMID2fH9ZDGm4zZ4A9Q0Yi/XQNdH2L3bGKr0oetfCwT6aPumNmddxxo1YzjMRX6i
nPrWwl50XfmCpGrrXNzy2xqXq8aKVUGFpsg7cNG6pFh9NBa7x0bZhM8TriZME4wj
mJn3q2crkPDp3vl/MWP2r7aqPY0Qu7kWik4sK4RqYMwExYSH8ZpA3xliHD61ibl8
ePUT3ilJzislptfAZRV1tR12Oep5giotjYK7t/HoC1VlcL7jJXsp2bSfpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG5Vwd5yHSyZM0aKB6gwnaOlnxOIMB8GA1UdIwQY
MBaAFFlaUfRcDLY3kUINCUPCg1HRu70KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1ZwUjlGd010amVSUWcwSlE4S0RVZEc3dlFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny8zOTA0YmItMGI2Yy00ZGE1LWE1YWYt
YWFmYWFlYWVkOGJiLzEvV1ZwUjlGd010amVSUWcwSlE4S0RVZEc3dlFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny8zOTA0YmItMGI2Yy00ZGE1LWE1YWYtYWFmYWFlYWVkOGJi
LzEvV1ZwUjlGd010amVSUWcwSlE4S0RVZEc3dlFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaTUggkki
WxmnJLKSPCZdGlsl2yj/2xVXKwSdj0SqoUaFamlV4ZwzAJHbW9yhRbEITlMsiNUT
nU9rfgmFeUI431iAbbNS7KxpbIWomFnzraWB7jECnDa4S1nf/y8DJy/qtvpxn17V
hc8eBUs/WhUfq9gZy8uWyX1YtdSe0Xkbo4wQhI+rJWe/qC6bwrKPwJZ0O3XxAgeo
o3bZmbbPRXSMxXEGJ/xuZd4EPHUYZlJHAFlh4+6MzHqx72Z/d9D59/BF5WrP6Dvg
sZGluhGZdRe8nqHmnKERnNrGhh+lKunGIrVosP+hAgj2GWecgQ0Cv70IXFgGIulV
T37QUiLmd4lv9Q==
-----END CERTIFICATE-----
Generated at Sun Jul 27 05:17:23 2025 by rpki-client