Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/bb5627-d627-4161-a2b3-9d25c3349d11/1/W8KZyUmzraue-TUmM_zsw7cr1Rg.mft
File:                     W8KZyUmzraue-TUmM_zsw7cr1Rg.mft (raw, json)
Hash identifier:          aT+UeWlZ5Nh6zVfLqtANQiWFSiBiHwTVglwVWsFJi88=
Subject key identifier:   4C:49:1A:14:C2:D4:A8:98:80:D7:80:91:17:C8:06:C7:E8:BF:57:85
Authority key identifier: 5B:C2:99:C9:49:B3:AD:AB:9E:F9:35:26:33:FC:EC:C3:B7:2B:D5:18
Certificate issuer:       /CN=5bc299c949b3adab9ef9352633fcecc3b72bd518
Certificate serial:       019748FA08BAB8E561F812BECF0F968E6BF1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W8KZyUmzraue-TUmM_zsw7cr1Rg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/bb5627-d627-4161-a2b3-9d25c3349d11/1/W8KZyUmzraue-TUmM_zsw7cr1Rg.mft
Manifest number:          128C
Signing time:             Sat 07 Jun 2025 06:00:35 +0000
Manifest this update:     Sat 07 Jun 2025 06:00:35 +0000
Manifest next update:     Sun 08 Jun 2025 06:00:35 +0000
Files and hashes:         1: W8KZyUmzraue-TUmM_zsw7cr1Rg.crl (hash: h4Kx/yGqR/CEVqpYriZSmmJXmTeJ2FeGsvnwfLdPJy8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/bb5627-d627-4161-a2b3-9d25c3349d11/1/W8KZyUmzraue-TUmM_zsw7cr1Rg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/bb5627-d627-4161-a2b3-9d25c3349d11/1/W8KZyUmzraue-TUmM_zsw7cr1Rg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W8KZyUmzraue-TUmM_zsw7cr1Rg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:fa:08:ba:b8:e5:61:f8:12:be:cf:0f:96:8e:6b:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5bc299c949b3adab9ef9352633fcecc3b72bd518
        Validity
            Not Before: Jun  7 06:00:35 2025 GMT
            Not After : Jun  8 06:00:35 2025 GMT
        Subject: CN=4c491a14c2d4a89880d7809117c806c7e8bf5785
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:4b:98:9b:d4:c7:e6:74:bb:2d:19:38:b5:24:
                    cc:79:ab:09:5f:3f:1e:5a:b8:39:6e:2c:19:3a:2e:
                    6c:04:08:c9:52:47:56:81:c1:d9:fd:9e:96:8b:c0:
                    7a:73:6c:59:38:8b:25:1a:b6:53:6c:c5:8c:6a:95:
                    a5:16:71:b6:71:07:cb:79:eb:81:dd:f6:bb:66:70:
                    2e:48:36:58:57:e2:65:f3:77:ea:11:48:d3:d8:87:
                    4c:f6:5d:bc:ee:3c:62:ee:8d:a7:dd:63:7a:97:5f:
                    15:93:c8:56:99:a9:6e:e4:3a:8e:3b:70:ad:d5:0f:
                    24:5c:c5:b0:ba:f5:2f:be:be:cf:d0:1c:0f:bd:2f:
                    85:1e:b2:95:e4:8a:22:48:a4:fb:01:05:ee:3d:a5:
                    a8:96:83:59:9f:9d:f4:3c:c7:6e:ac:99:3c:ed:c4:
                    fc:b9:06:d5:e9:79:5e:39:58:73:d6:fe:e2:d6:29:
                    dc:59:28:68:e5:2e:b8:56:8f:9a:08:23:1b:43:04:
                    0c:db:32:02:19:5a:f8:cb:8d:78:ff:01:7d:61:30:
                    0e:5c:55:cb:6e:28:cb:2b:08:e1:b9:43:5d:04:00:
                    e6:77:67:e1:46:7c:a2:98:5c:7e:6a:63:0d:f4:9f:
                    86:bf:16:85:b6:75:10:ea:99:fc:09:d6:82:1f:49:
                    67:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:49:1A:14:C2:D4:A8:98:80:D7:80:91:17:C8:06:C7:E8:BF:57:85
            X509v3 Authority Key Identifier:
                keyid:5B:C2:99:C9:49:B3:AD:AB:9E:F9:35:26:33:FC:EC:C3:B7:2B:D5:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W8KZyUmzraue-TUmM_zsw7cr1Rg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bb5627-d627-4161-a2b3-9d25c3349d11/1/W8KZyUmzraue-TUmM_zsw7cr1Rg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bb5627-d627-4161-a2b3-9d25c3349d11/1/W8KZyUmzraue-TUmM_zsw7cr1Rg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d5:6a:c4:9c:76:12:a9:ce:04:0a:ba:01:3c:c2:dc:94:9d:ed:
         23:38:29:24:14:d5:2f:9d:35:ba:11:db:55:e6:f5:9a:01:75:
         2d:b4:d5:92:07:e5:91:46:a3:7f:40:18:5d:f5:20:2c:62:90:
         fb:61:32:24:65:65:fe:a8:20:ab:ca:eb:c4:de:5c:31:39:b3:
         b4:5e:fa:40:97:f7:60:dc:60:48:61:9f:23:21:5f:3a:ea:6f:
         31:2a:68:4f:2d:0f:eb:3f:b2:40:a7:27:e5:9b:09:16:db:3f:
         a4:23:60:4c:99:4d:6d:17:ce:58:c5:d2:23:f6:bc:9b:5a:a5:
         b6:c8:f7:f0:90:c8:ad:bc:fd:23:2e:4b:43:52:6a:91:8d:46:
         d6:f6:3d:d2:ca:99:e3:3a:dc:97:dc:0a:89:91:ae:3f:73:aa:
         18:6a:c1:30:77:58:f2:c8:8c:3a:f5:c5:0f:5e:88:93:56:00:
         5b:ab:a9:ef:4d:93:8b:2a:f2:9e:9b:c7:b4:2d:46:b0:0f:b5:
         48:61:25:90:f8:9b:ed:40:d4:5e:11:c9:20:b4:0e:0f:64:0c:
         82:65:99:32:a4:bc:4e:c0:28:bb:90:cd:e2:d6:7c:04:30:23:
         ff:63:5a:3d:b2:73:9e:bd:f1:76:73:51:04:ca:40:99:0b:33:
         50:5e:d8:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdI+gi6uOVh+BK+zw+WjmvxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViYzI5OWM5NDliM2FkYWI5ZWY5MzUyNjMzZmNlY2MzYjcy
YmQ1MTgwHhcNMjUwNjA3MDYwMDM1WhcNMjUwNjA4MDYwMDM1WjAzMTEwLwYDVQQD
Eyg0YzQ5MWExNGMyZDRhODk4ODBkNzgwOTExN2M4MDZjN2U4YmY1Nzg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1kuYm9TH5nS7LRk4tSTMeasJXz8e
Wrg5biwZOi5sBAjJUkdWgcHZ/Z6Wi8B6c2xZOIslGrZTbMWMapWlFnG2cQfLeeuB
3fa7ZnAuSDZYV+Jl83fqEUjT2IdM9l287jxi7o2n3WN6l18Vk8hWmalu5DqOO3Ct
1Q8kXMWwuvUvvr7P0BwPvS+FHrKV5IoiSKT7AQXuPaWoloNZn530PMdurJk87cT8
uQbV6XleOVhz1v7i1incWSho5S64Vo+aCCMbQwQM2zICGVr4y414/wF9YTAOXFXL
bijLKwjhuUNdBADmd2fhRnyimFx+amMN9J+GvxaFtnUQ6pn8CdaCH0lnVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFExJGhTC1KiYgNeAkRfIBsfov1eFMB8GA1UdIwQY
MBaAFFvCmclJs62rnvk1JjP87MO3K9UYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzhLWnlVbXpyYXVlLVRVbU1fenN3N2NyMVJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9iYjU2MjctZDYyNy00MTYxLWEyYjMt
OWQyNWMzMzQ5ZDExLzEvVzhLWnlVbXpyYXVlLVRVbU1fenN3N2NyMVJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9iYjU2MjctZDYyNy00MTYxLWEyYjMtOWQyNWMzMzQ5ZDEx
LzEvVzhLWnlVbXpyYXVlLVRVbU1fenN3N2NyMVJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1WrEnHYS
qc4ECroBPMLclJ3tIzgpJBTVL501uhHbVeb1mgF1LbTVkgflkUajf0AYXfUgLGKQ
+2EyJGVl/qggq8rrxN5cMTmztF76QJf3YNxgSGGfIyFfOupvMSpoTy0P6z+yQKcn
5ZsJFts/pCNgTJlNbRfOWMXSI/a8m1qltsj38JDIrbz9Iy5LQ1JqkY1G1vY90sqZ
4zrcl9wKiZGuP3OqGGrBMHdY8siMOvXFD16Ik1YAW6up702TiyrynpvHtC1GsA+1
SGElkPib7UDUXhHJILQOD2QMgmWZMqS8TsAou5DN4tZ8BDAj/2NaPbJznr3xdnNR
BMpAmQszUF7Y8g==
-----END CERTIFICATE-----
Generated at Sat Jun 7 09:20:48 2025 by rpki-client