Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/8dbca3-6934-44ae-8fc9-2f8d4240c436/1/w16ED0bhmFswYQC1wTG7uGO33AY.mft
File:                     w16ED0bhmFswYQC1wTG7uGO33AY.mft (raw, json)
Hash identifier:          lzSksRaDVSO4MVZIDENiFHXsdeRANhcemipkc9ykz6I=
Subject key identifier:   A0:49:C0:D1:E3:B0:94:B6:AF:AB:DD:7E:09:8E:0B:AC:84:16:6E:5B
Authority key identifier: C3:5E:84:0F:46:E1:98:5B:30:61:00:B5:C1:31:BB:B8:63:B7:DC:06
Certificate issuer:       /CN=c35e840f46e1985b306100b5c131bbb863b7dc06
Certificate serial:       019848C0D1C9A5C366FD877D3B2C8AD09D9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w16ED0bhmFswYQC1wTG7uGO33AY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/8dbca3-6934-44ae-8fc9-2f8d4240c436/1/w16ED0bhmFswYQC1wTG7uGO33AY.mft
Manifest number:          1482
Signing time:             Sat 26 Jul 2025 22:00:52 +0000
Manifest this update:     Sat 26 Jul 2025 22:00:52 +0000
Manifest next update:     Sun 27 Jul 2025 22:00:52 +0000
Files and hashes:         1: w16ED0bhmFswYQC1wTG7uGO33AY.crl (hash: UA9YJjZ0Dcbr4TtHvqY6i+A0NnqrESSS/TSpUdEApqM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/8dbca3-6934-44ae-8fc9-2f8d4240c436/1/w16ED0bhmFswYQC1wTG7uGO33AY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/8dbca3-6934-44ae-8fc9-2f8d4240c436/1/w16ED0bhmFswYQC1wTG7uGO33AY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w16ED0bhmFswYQC1wTG7uGO33AY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:c0:d1:c9:a5:c3:66:fd:87:7d:3b:2c:8a:d0:9d:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c35e840f46e1985b306100b5c131bbb863b7dc06
        Validity
            Not Before: Jul 26 22:00:52 2025 GMT
            Not After : Jul 27 22:00:52 2025 GMT
        Subject: CN=a049c0d1e3b094b6afabdd7e098e0bac84166e5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:8c:d4:49:b1:60:29:bd:dd:40:13:e9:84:79:
                    e4:07:f5:60:69:0b:9b:ea:aa:a0:89:b1:68:85:ab:
                    69:5d:2b:18:59:db:ff:2a:10:2c:79:69:6d:88:24:
                    0b:5a:93:81:41:fa:fd:86:9a:a6:42:ee:30:ea:42:
                    a5:8b:3d:77:67:e6:0a:c7:c0:a9:51:b5:2c:8a:f2:
                    8f:f3:36:f8:89:00:df:df:8a:bd:0f:f9:e3:83:fc:
                    83:70:1f:d6:b2:3f:1f:d5:42:5a:4c:47:1d:a7:ef:
                    8e:3c:02:5a:36:c2:5d:4f:ae:1b:dc:6b:a2:a3:45:
                    86:ad:f0:90:de:4a:48:ad:da:7a:40:ef:7b:79:2a:
                    6f:98:99:da:9e:da:19:42:18:3c:b4:ef:f3:99:da:
                    cf:79:00:f8:4c:4b:6f:b7:f6:01:10:17:ef:d1:0e:
                    ae:a0:35:5c:4c:0e:04:b3:da:d6:b1:e1:f9:44:8b:
                    41:0f:5e:6e:e4:08:71:cf:5b:74:3e:96:18:a8:1e:
                    73:27:3f:25:2d:9c:b3:26:84:7b:51:45:ae:66:b7:
                    56:c5:f0:fe:6e:14:7d:b8:7d:04:2f:a6:a2:ef:3e:
                    b8:1f:13:01:d1:ed:27:55:f7:d0:93:74:27:e1:04:
                    04:5e:43:87:da:9e:01:1e:38:24:60:40:14:64:98:
                    00:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:49:C0:D1:E3:B0:94:B6:AF:AB:DD:7E:09:8E:0B:AC:84:16:6E:5B
            X509v3 Authority Key Identifier:
                keyid:C3:5E:84:0F:46:E1:98:5B:30:61:00:B5:C1:31:BB:B8:63:B7:DC:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16ED0bhmFswYQC1wTG7uGO33AY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/8dbca3-6934-44ae-8fc9-2f8d4240c436/1/w16ED0bhmFswYQC1wTG7uGO33AY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/8dbca3-6934-44ae-8fc9-2f8d4240c436/1/w16ED0bhmFswYQC1wTG7uGO33AY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:24:8b:f7:ba:df:82:d1:72:52:63:fc:fb:f1:11:3d:d1:d5:
         54:ac:8c:76:35:f0:e8:34:11:c0:b0:bd:f0:39:8a:f7:22:d1:
         a7:de:2f:7a:94:1c:f3:28:05:a2:fb:08:28:f4:7b:32:6e:ae:
         a6:6e:cd:aa:91:80:ce:1b:64:a6:03:34:3d:52:ac:9e:06:fc:
         44:d3:b5:dc:4e:10:7b:f7:8b:78:7d:ca:95:c3:b4:99:58:8c:
         2a:c7:45:9e:53:c0:5f:70:b0:9f:a8:f0:58:9d:05:6f:2b:b5:
         84:4f:aa:fe:7a:b9:47:45:4d:42:d8:89:38:a3:1b:f1:a3:ac:
         f4:d6:6c:43:64:de:66:48:ef:a1:4b:26:28:19:dd:65:a7:52:
         8f:b1:93:6c:05:c0:8e:7a:1c:27:62:d4:59:1e:85:6d:3e:cd:
         43:19:8e:df:35:01:65:8e:d6:d8:0a:2b:9a:43:4e:16:20:7d:
         71:97:4a:a3:44:d8:8f:5b:56:2b:5d:19:19:6b:19:bb:cd:59:
         28:f1:60:00:78:05:14:bc:61:55:d6:5c:31:50:67:ba:83:bd:
         b0:9b:c2:a0:e9:de:72:66:64:1e:60:35:2e:9c:d2:aa:04:cf:
         e7:3e:4f:d8:22:5f:46:29:e5:4f:7e:17:a6:b5:de:6f:e5:a1:
         4a:3f:35:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhIwNHJpcNm/Yd9OyyK0J2bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzNWU4NDBmNDZlMTk4NWIzMDYxMDBiNWMxMzFiYmI4NjNi
N2RjMDYwHhcNMjUwNzI2MjIwMDUyWhcNMjUwNzI3MjIwMDUyWjAzMTEwLwYDVQQD
EyhhMDQ5YzBkMWUzYjA5NGI2YWZhYmRkN2UwOThlMGJhYzg0MTY2ZTViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYzUSbFgKb3dQBPphHnkB/VgaQub
6qqgibFohatpXSsYWdv/KhAseWltiCQLWpOBQfr9hpqmQu4w6kKliz13Z+YKx8Cp
UbUsivKP8zb4iQDf34q9D/njg/yDcB/Wsj8f1UJaTEcdp++OPAJaNsJdT64b3Gui
o0WGrfCQ3kpIrdp6QO97eSpvmJnantoZQhg8tO/zmdrPeQD4TEtvt/YBEBfv0Q6u
oDVcTA4Es9rWseH5RItBD15u5Ahxz1t0PpYYqB5zJz8lLZyzJoR7UUWuZrdWxfD+
bhR9uH0EL6ai7z64HxMB0e0nVffQk3Qn4QQEXkOH2p4BHjgkYEAUZJgAQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKBJwNHjsJS2r6vdfgmOC6yEFm5bMB8GA1UdIwQY
MBaAFMNehA9G4ZhbMGEAtcExu7hjt9wGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzE2RUQwYmhtRnN3WVFDMXdURzd1R08zM0FZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC84ZGJjYTMtNjkzNC00NGFlLThmYzkt
MmY4ZDQyNDBjNDM2LzEvdzE2RUQwYmhtRnN3WVFDMXdURzd1R08zM0FZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC84ZGJjYTMtNjkzNC00NGFlLThmYzktMmY4ZDQyNDBjNDM2
LzEvdzE2RUQwYmhtRnN3WVFDMXdURzd1R08zM0FZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlySL97rf
gtFyUmP8+/ERPdHVVKyMdjXw6DQRwLC98DmK9yLRp94vepQc8ygFovsIKPR7Mm6u
pm7NqpGAzhtkpgM0PVKsngb8RNO13E4Qe/eLeH3KlcO0mViMKsdFnlPAX3Cwn6jw
WJ0Fbyu1hE+q/nq5R0VNQtiJOKMb8aOs9NZsQ2TeZkjvoUsmKBndZadSj7GTbAXA
jnocJ2LUWR6FbT7NQxmO3zUBZY7W2AormkNOFiB9cZdKo0TYj1tWK10ZGWsZu81Z
KPFgAHgFFLxhVdZcMVBnuoO9sJvCoOnecmZkHmA1LpzSqgTP5z5P2CJfRinlT34X
prXeb+WhSj81OA==
-----END CERTIFICATE-----
Generated at Sun Jul 27 05:51:29 2025 by rpki-client