Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/674225-ac77-47a0-acd1-293fca2d51ea/1/WeTW-rd6x3n0m_b8irgeI61GdXY.mft
File:                     WeTW-rd6x3n0m_b8irgeI61GdXY.mft (raw, json)
Hash identifier:          p1hsIYL0XigQum/mFk6hJl8zKvKBz+TKVGaCvmSo9ks=
Subject key identifier:   85:6B:BF:D5:80:EA:04:21:63:9D:B9:48:DC:F1:CF:08:8E:9D:81:FB
Authority key identifier: 59:E4:D6:FA:B7:7A:C7:79:F4:9B:F6:FC:8A:B8:1E:23:AD:46:75:76
Certificate issuer:       /CN=59e4d6fab77ac779f49bf6fc8ab81e23ad467576
Certificate serial:       0199221E5B2FAA7E44398C802A48DD1E5C54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WeTW-rd6x3n0m_b8irgeI61GdXY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/674225-ac77-47a0-acd1-293fca2d51ea/1/WeTW-rd6x3n0m_b8irgeI61GdXY.mft
Manifest number:          168C
Signing time:             Sun 07 Sep 2025 03:00:38 +0000
Manifest this update:     Sun 07 Sep 2025 03:00:38 +0000
Manifest next update:     Mon 08 Sep 2025 03:00:38 +0000
Files and hashes:         1: WeTW-rd6x3n0m_b8irgeI61GdXY.crl (hash: OV+VHlM8i9FG6qNoqKFEfpR/VUW8cjVJdjC+pT4CFwQ=)
                          2: dyUMR2H2DcBGgzVGNTrxavt5Oxw.roa (hash: FFqBchcB73I3t37AaJsxQus46kLrppS0ZS76Nj++3PM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/674225-ac77-47a0-acd1-293fca2d51ea/1/WeTW-rd6x3n0m_b8irgeI61GdXY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/674225-ac77-47a0-acd1-293fca2d51ea/1/WeTW-rd6x3n0m_b8irgeI61GdXY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WeTW-rd6x3n0m_b8irgeI61GdXY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 03:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:1e:5b:2f:aa:7e:44:39:8c:80:2a:48:dd:1e:5c:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59e4d6fab77ac779f49bf6fc8ab81e23ad467576
        Validity
            Not Before: Sep  7 03:00:38 2025 GMT
            Not After : Sep  8 03:00:38 2025 GMT
        Subject: CN=856bbfd580ea0421639db948dcf1cf088e9d81fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:56:7e:4c:76:15:15:52:09:fb:e4:7b:94:44:
                    61:18:eb:a1:60:35:b4:4a:38:2a:94:d8:79:6d:99:
                    ae:4b:30:35:f4:c9:0e:cd:7c:ff:9f:e0:bb:26:4d:
                    35:dd:6d:32:c6:d9:6c:20:e6:d6:30:8d:91:9d:6a:
                    67:5a:a5:a7:4f:59:97:6d:f7:b1:bf:45:3a:fd:5c:
                    e6:2a:52:99:1c:8d:85:b1:83:57:b7:d6:00:1b:12:
                    89:e8:88:89:15:ee:ef:1f:55:87:99:30:b7:cf:75:
                    09:f4:01:67:9b:ee:02:72:cc:84:b6:5f:11:4a:17:
                    dd:f5:50:9a:d9:f1:cb:d1:90:f7:43:28:e5:a8:e5:
                    11:d1:c9:c1:49:10:84:7a:cc:80:b9:65:cf:f3:f1:
                    b4:b7:58:54:ff:17:87:2a:79:3b:66:fc:d9:cd:98:
                    58:74:e6:e9:ab:25:1f:be:30:a0:70:1e:c0:66:43:
                    32:8c:fe:54:20:21:74:02:d9:21:31:6c:cc:60:32:
                    b3:13:06:d8:89:39:ec:28:27:27:d9:f4:36:8a:4d:
                    5f:fa:54:77:64:08:b5:23:87:b5:b0:fe:dd:f4:17:
                    3c:37:35:5c:26:14:d1:22:e4:f3:69:59:0f:ca:40:
                    03:6e:3c:7e:ba:a8:a6:58:b3:72:73:0d:1d:fa:cc:
                    e0:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:6B:BF:D5:80:EA:04:21:63:9D:B9:48:DC:F1:CF:08:8E:9D:81:FB
            X509v3 Authority Key Identifier:
                keyid:59:E4:D6:FA:B7:7A:C7:79:F4:9B:F6:FC:8A:B8:1E:23:AD:46:75:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WeTW-rd6x3n0m_b8irgeI61GdXY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/674225-ac77-47a0-acd1-293fca2d51ea/1/WeTW-rd6x3n0m_b8irgeI61GdXY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/674225-ac77-47a0-acd1-293fca2d51ea/1/WeTW-rd6x3n0m_b8irgeI61GdXY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:77:7c:27:ce:96:e5:07:ad:2d:c4:61:af:6e:79:96:49:13:
         12:02:9d:f0:be:9c:60:68:20:e2:0f:4a:a5:2b:72:9d:cc:42:
         55:74:0b:2b:04:69:a6:a9:c2:8e:0d:89:b5:97:6b:81:66:8c:
         f9:58:0a:30:86:0d:84:2b:92:be:41:78:88:6c:b9:3f:c9:4a:
         01:3e:97:fe:27:f8:15:43:b9:aa:9e:f5:44:d5:69:ac:e8:4c:
         7d:b2:82:43:9d:7a:95:7c:3f:b2:e0:76:53:ea:f4:e8:5d:df:
         3c:39:1b:28:16:5e:ad:c1:8e:50:05:ce:47:5e:4a:25:7a:d6:
         a0:60:1b:11:48:2a:64:b6:e1:2e:f5:80:9f:2c:46:a3:fb:1a:
         b0:f3:2f:82:9e:30:ba:6d:f1:dc:fa:db:4d:45:31:54:8d:1a:
         ef:3b:18:d3:ad:3a:9c:6f:57:50:8c:bf:93:76:ca:9c:f1:64:
         2b:5c:0f:ec:e8:c1:8c:23:dd:da:d0:b1:77:51:45:e2:2b:7c:
         32:4e:6b:44:af:38:69:f6:84:cc:84:d0:69:ca:a0:af:ea:73:
         36:98:a6:01:7c:8c:9a:3f:22:75:48:ae:29:03:a3:85:e4:a5:
         89:f4:b9:93:4b:70:49:11:e9:9e:09:c4:5d:69:07:56:c7:40:
         fc:a1:9a:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiHlsvqn5EOYyAKkjdHlxUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5ZTRkNmZhYjc3YWM3NzlmNDliZjZmYzhhYjgxZTIzYWQ0
Njc1NzYwHhcNMjUwOTA3MDMwMDM4WhcNMjUwOTA4MDMwMDM4WjAzMTEwLwYDVQQD
Eyg4NTZiYmZkNTgwZWEwNDIxNjM5ZGI5NDhkY2YxY2YwODhlOWQ4MWZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVZ+THYVFVIJ++R7lERhGOuhYDW0
SjgqlNh5bZmuSzA19MkOzXz/n+C7Jk013W0yxtlsIObWMI2RnWpnWqWnT1mXbfex
v0U6/VzmKlKZHI2FsYNXt9YAGxKJ6IiJFe7vH1WHmTC3z3UJ9AFnm+4CcsyEtl8R
Shfd9VCa2fHL0ZD3QyjlqOUR0cnBSRCEesyAuWXP8/G0t1hU/xeHKnk7ZvzZzZhY
dObpqyUfvjCgcB7AZkMyjP5UICF0AtkhMWzMYDKzEwbYiTnsKCcn2fQ2ik1f+lR3
ZAi1I4e1sP7d9Bc8NzVcJhTRIuTzaVkPykADbjx+uqimWLNycw0d+szg6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIVrv9WA6gQhY525SNzxzwiOnYH7MB8GA1UdIwQY
MBaAFFnk1vq3esd59Jv2/Iq4HiOtRnV2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2VUVy1yZDZ4M24wbV9iOGlyZ2VJNjFHZFhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi82NzQyMjUtYWM3Ny00N2EwLWFjZDEt
MjkzZmNhMmQ1MWVhLzEvV2VUVy1yZDZ4M24wbV9iOGlyZ2VJNjFHZFhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi82NzQyMjUtYWM3Ny00N2EwLWFjZDEtMjkzZmNhMmQ1MWVh
LzEvV2VUVy1yZDZ4M24wbV9iOGlyZ2VJNjFHZFhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAknd8J86W
5QetLcRhr255lkkTEgKd8L6cYGgg4g9KpStyncxCVXQLKwRppqnCjg2JtZdrgWaM
+VgKMIYNhCuSvkF4iGy5P8lKAT6X/if4FUO5qp71RNVprOhMfbKCQ516lXw/suB2
U+r06F3fPDkbKBZercGOUAXOR15KJXrWoGAbEUgqZLbhLvWAnyxGo/sasPMvgp4w
um3x3PrbTUUxVI0a7zsY0606nG9XUIy/k3bKnPFkK1wP7OjBjCPd2tCxd1FF4it8
Mk5rRK84afaEzITQacqgr+pzNpimAXyMmj8idUiuKQOjheSlifS5k0twSRHpngnE
XWkHVsdA/KGanQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:01:41 2025 by rpki-client