Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/df215b-35e7-4ccc-aa8c-c128f27ccc78/1/W4M_gwOig5k2kGEKkYWlybaCv_s.mft
File:                     W4M_gwOig5k2kGEKkYWlybaCv_s.mft (raw, json)
Hash identifier:          xJNkiIlWiJ5DwTjl79YYhshNXJRWKsHDVdxcjpq0Br4=
Subject key identifier:   AC:E8:86:60:A5:B1:A7:93:E1:40:96:6B:48:0C:A7:99:9F:57:D5:41
Authority key identifier: 5B:83:3F:83:03:A2:83:99:36:90:61:0A:91:85:A5:C9:B6:82:BF:FB
Certificate issuer:       /CN=5b833f8303a283993690610a9185a5c9b682bffb
Certificate serial:       019A71B9388DE374CA67A14BA350948B0898
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W4M_gwOig5k2kGEKkYWlybaCv_s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/df215b-35e7-4ccc-aa8c-c128f27ccc78/1/W4M_gwOig5k2kGEKkYWlybaCv_s.mft
Manifest number:          171B
Signing time:             Tue 11 Nov 2025 07:02:35 +0000
Manifest this update:     Tue 11 Nov 2025 07:02:35 +0000
Manifest next update:     Wed 12 Nov 2025 07:02:35 +0000
Files and hashes:         1: W4M_gwOig5k2kGEKkYWlybaCv_s.crl (hash: Q9/SxhBY5VvEiuKUpE+MfPVMetyUwp3BC/mMp/QMbTE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/df215b-35e7-4ccc-aa8c-c128f27ccc78/1/W4M_gwOig5k2kGEKkYWlybaCv_s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/df215b-35e7-4ccc-aa8c-c128f27ccc78/1/W4M_gwOig5k2kGEKkYWlybaCv_s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W4M_gwOig5k2kGEKkYWlybaCv_s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 12 Nov 2025 07:02:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:71:b9:38:8d:e3:74:ca:67:a1:4b:a3:50:94:8b:08:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b833f8303a283993690610a9185a5c9b682bffb
        Validity
            Not Before: Nov 11 07:02:35 2025 GMT
            Not After : Nov 12 07:02:35 2025 GMT
        Subject: CN=ace88660a5b1a793e140966b480ca7999f57d541
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f7:48:0b:ac:23:dd:fd:ea:92:df:e3:e8:b0:
                    8c:0a:5f:c6:49:c4:f9:de:8e:37:0e:f0:75:a4:12:
                    58:31:b2:51:a1:0e:53:25:7d:31:b1:e3:40:f9:4e:
                    31:a3:9d:d4:d9:86:15:9a:d7:a7:16:22:46:6d:c6:
                    ee:11:09:bf:06:9d:7e:a0:c6:7c:79:e8:56:58:fd:
                    64:78:21:8e:fe:f2:89:c1:c4:34:16:df:a6:2e:42:
                    78:f9:63:ba:3a:1a:0d:42:a1:e2:02:90:02:62:2c:
                    90:84:02:96:5c:a3:37:a7:e5:44:21:69:1c:88:66:
                    c6:7f:e3:39:4a:8f:32:b7:90:25:01:70:9b:e9:ae:
                    d1:7b:cb:9f:d3:ac:29:ed:02:ef:e5:b5:51:a1:c4:
                    ef:3a:11:35:1e:d4:4b:dd:14:50:b6:f8:94:ad:60:
                    50:81:27:6e:77:b7:d2:95:19:01:77:be:a0:cf:f8:
                    eb:57:39:17:f2:c4:44:92:48:98:48:95:d8:8d:98:
                    e7:f7:14:db:47:2c:ba:13:68:84:a7:c1:35:4e:18:
                    f9:5e:c9:ea:c8:71:e2:5b:26:31:0b:25:be:ec:e5:
                    64:54:f9:b9:35:91:ec:3d:e7:47:90:fa:df:e8:cb:
                    e2:64:f7:c8:a2:60:73:4f:cf:af:db:81:29:db:18:
                    0a:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:E8:86:60:A5:B1:A7:93:E1:40:96:6B:48:0C:A7:99:9F:57:D5:41
            X509v3 Authority Key Identifier:
                keyid:5B:83:3F:83:03:A2:83:99:36:90:61:0A:91:85:A5:C9:B6:82:BF:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W4M_gwOig5k2kGEKkYWlybaCv_s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/df215b-35e7-4ccc-aa8c-c128f27ccc78/1/W4M_gwOig5k2kGEKkYWlybaCv_s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/df215b-35e7-4ccc-aa8c-c128f27ccc78/1/W4M_gwOig5k2kGEKkYWlybaCv_s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:00:62:d3:ac:59:fa:bf:d2:a5:9b:4d:12:25:89:a8:30:00:
         05:bd:26:6b:12:5c:c5:9f:15:8b:bc:ed:33:a3:39:76:f5:1d:
         d5:82:67:52:26:67:66:0c:64:d2:80:c7:ef:48:c1:aa:a6:34:
         75:a2:28:00:5c:17:e3:9d:49:c0:ac:64:dc:05:c7:c9:69:5f:
         0f:bd:93:b0:64:63:eb:8f:9e:80:81:9c:84:bf:f5:be:43:62:
         0f:b5:8d:d3:c7:a6:71:f5:8c:9e:a1:f3:29:9c:0a:30:d9:47:
         72:69:ef:b1:b8:23:d6:da:1c:65:4a:ae:aa:d5:67:43:62:aa:
         ff:bb:11:7d:3d:ae:f9:25:20:e2:a0:2c:a2:c2:96:41:84:9c:
         65:5c:53:69:32:f6:b1:a6:62:ab:dd:98:a6:87:cf:b9:00:b6:
         64:24:a0:31:38:4b:04:ff:bf:f5:5c:56:cc:3a:12:d6:26:16:
         24:54:6d:66:b6:f7:dc:69:fd:23:7b:00:0d:00:7c:57:95:7f:
         9c:f0:5e:32:34:5c:8e:c6:0a:6e:d3:cc:80:cc:fa:2f:df:5a:
         d6:5e:68:f1:30:9e:cb:17:7b:91:10:48:69:f7:00:9f:60:68:
         66:ec:98:02:2b:71:eb:5d:92:3b:0c:17:28:42:37:40:bc:a8:
         ca:4d:87:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:08:53 2025 by rpki-client