Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/461a83-810c-43ae-ac25-64e2bd619318/1/wWD3u-jXY2d3YUisuMTKNflr6Vc.mft
File:                     wWD3u-jXY2d3YUisuMTKNflr6Vc.mft (raw, json)
Hash identifier:          crHnQFer+6st2w6ESPDVoiU+Glo84UvRiv3DlSxF5lc=
Subject key identifier:   DB:EE:6F:94:C6:F5:CE:FF:D8:83:27:5A:79:13:C5:E4:51:7F:5B:EF
Authority key identifier: C1:60:F7:BB:E8:D7:63:67:77:61:48:AC:B8:C4:CA:35:F9:6B:E9:57
Certificate issuer:       /CN=c160f7bbe8d76367776148acb8c4ca35f96be957
Certificate serial:       0199239F7EF9797E1D92CF5EAE3474B76FF9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wWD3u-jXY2d3YUisuMTKNflr6Vc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/461a83-810c-43ae-ac25-64e2bd619318/1/wWD3u-jXY2d3YUisuMTKNflr6Vc.mft
Manifest number:          1644
Signing time:             Sun 07 Sep 2025 10:01:19 +0000
Manifest this update:     Sun 07 Sep 2025 10:01:19 +0000
Manifest next update:     Mon 08 Sep 2025 10:01:19 +0000
Files and hashes:         1: wWD3u-jXY2d3YUisuMTKNflr6Vc.crl (hash: yCWpSXwLJ+M9lh0iG+o0kZTHWoAwkFw8jP+2PFreZs4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/461a83-810c-43ae-ac25-64e2bd619318/1/wWD3u-jXY2d3YUisuMTKNflr6Vc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/461a83-810c-43ae-ac25-64e2bd619318/1/wWD3u-jXY2d3YUisuMTKNflr6Vc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wWD3u-jXY2d3YUisuMTKNflr6Vc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:23:9f:7e:f9:79:7e:1d:92:cf:5e:ae:34:74:b7:6f:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c160f7bbe8d76367776148acb8c4ca35f96be957
        Validity
            Not Before: Sep  7 10:01:19 2025 GMT
            Not After : Sep  8 10:01:19 2025 GMT
        Subject: CN=dbee6f94c6f5ceffd883275a7913c5e4517f5bef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:71:0d:8e:db:c2:90:3d:cc:68:8b:3c:4f:d8:
                    36:b0:5f:4a:84:a5:2a:60:2c:d0:aa:1e:97:58:2c:
                    7f:c2:5a:e5:9d:a4:7c:a5:0b:8e:5a:ec:ad:6e:b4:
                    59:84:82:2a:8d:8e:a4:cf:10:2a:e3:1a:29:01:ce:
                    e0:70:1d:76:63:d5:c3:d3:c3:0e:66:98:42:84:a3:
                    80:dd:80:44:a8:d5:e4:32:19:3c:9a:2a:2b:f3:98:
                    bf:4e:c4:5b:eb:17:5d:bf:b6:7e:34:4e:82:58:ea:
                    4b:bb:88:e2:bb:e1:c0:55:33:e0:7f:b6:a2:96:be:
                    9d:02:57:1b:ec:90:14:5c:66:b9:43:00:25:b7:26:
                    de:9f:80:22:4f:f2:57:52:b8:96:90:b7:92:b4:78:
                    89:a4:d3:92:cc:5e:88:28:4d:4c:5c:9c:1c:d5:d3:
                    69:53:79:d1:bf:04:5e:d3:be:44:cd:78:d4:f6:60:
                    7f:7b:57:41:b0:c1:fe:17:dd:53:97:3d:9b:17:ce:
                    55:d2:03:c8:94:55:83:f9:b7:59:b3:ae:17:e2:1d:
                    64:5b:cf:dd:d5:45:da:56:ec:c5:79:d7:4a:e7:90:
                    fa:14:49:c8:c7:28:64:2e:ee:ed:ba:1d:5f:b1:89:
                    4d:69:5a:89:ae:35:6f:2d:00:71:19:9f:b0:9f:02:
                    f7:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:EE:6F:94:C6:F5:CE:FF:D8:83:27:5A:79:13:C5:E4:51:7F:5B:EF
            X509v3 Authority Key Identifier:
                keyid:C1:60:F7:BB:E8:D7:63:67:77:61:48:AC:B8:C4:CA:35:F9:6B:E9:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wWD3u-jXY2d3YUisuMTKNflr6Vc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/461a83-810c-43ae-ac25-64e2bd619318/1/wWD3u-jXY2d3YUisuMTKNflr6Vc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/461a83-810c-43ae-ac25-64e2bd619318/1/wWD3u-jXY2d3YUisuMTKNflr6Vc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:e0:b7:91:7c:5c:83:16:68:b7:f4:4d:50:74:b9:07:e2:12:
         74:ae:7f:7b:59:70:8b:09:a8:cc:06:36:44:31:38:bf:09:25:
         5b:a7:d2:3e:c3:02:61:13:f7:6d:c9:4b:37:c3:7d:8d:58:5c:
         6d:d5:cd:fd:79:0b:c1:8b:c0:fb:6d:f6:a7:5d:15:cf:74:e6:
         9d:d2:06:05:8d:62:bf:78:89:d7:7c:4e:d4:62:e4:bc:d9:7c:
         8e:94:1d:ad:be:90:fb:b7:67:7c:77:45:e8:44:48:ae:eb:72:
         64:95:e1:7f:c0:62:e4:8d:0a:98:5b:47:9b:1c:ae:50:2c:8c:
         02:cd:41:28:08:c0:92:13:47:62:5c:22:19:f9:e4:f8:4e:48:
         a9:f4:3d:01:c5:d0:06:3f:4c:0d:1f:93:e4:f6:91:da:15:dd:
         7c:66:49:09:fb:27:7a:73:4b:d0:01:9f:32:77:94:66:e8:8b:
         de:2c:80:7b:12:d0:aa:72:c1:35:9c:87:36:fc:8b:95:39:ee:
         3e:16:6e:b1:96:3b:72:5c:a5:74:d4:de:33:51:ba:13:4d:c3:
         de:19:44:a7:e4:f1:18:24:5d:f2:5c:8d:f8:ab:39:64:c5:c0:
         9f:aa:ff:df:74:1f:6a:b9:84:fa:0d:fc:52:9e:40:cc:2b:ae:
         ea:4a:9e:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjn375eX4dks9erjR0t2/5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxNjBmN2JiZThkNzYzNjc3NzYxNDhhY2I4YzRjYTM1Zjk2
YmU5NTcwHhcNMjUwOTA3MTAwMTE5WhcNMjUwOTA4MTAwMTE5WjAzMTEwLwYDVQQD
EyhkYmVlNmY5NGM2ZjVjZWZmZDg4MzI3NWE3OTEzYzVlNDUxN2Y1YmVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3ENjtvCkD3MaIs8T9g2sF9KhKUq
YCzQqh6XWCx/wlrlnaR8pQuOWuytbrRZhIIqjY6kzxAq4xopAc7gcB12Y9XD08MO
ZphChKOA3YBEqNXkMhk8mior85i/TsRb6xddv7Z+NE6CWOpLu4jiu+HAVTPgf7ai
lr6dAlcb7JAUXGa5QwAltyben4AiT/JXUriWkLeStHiJpNOSzF6IKE1MXJwc1dNp
U3nRvwRe075EzXjU9mB/e1dBsMH+F91Tlz2bF85V0gPIlFWD+bdZs64X4h1kW8/d
1UXaVuzFeddK55D6FEnIxyhkLu7tuh1fsYlNaVqJrjVvLQBxGZ+wnwL34QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNvub5TG9c7/2IMnWnkTxeRRf1vvMB8GA1UdIwQY
MBaAFMFg97vo12Nnd2FIrLjEyjX5a+lXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1dEM3UtalhZMmQzWVVpc3VNVEtOZmxyNlZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC80NjFhODMtODEwYy00M2FlLWFjMjUt
NjRlMmJkNjE5MzE4LzEvd1dEM3UtalhZMmQzWVVpc3VNVEtOZmxyNlZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC80NjFhODMtODEwYy00M2FlLWFjMjUtNjRlMmJkNjE5MzE4
LzEvd1dEM3UtalhZMmQzWVVpc3VNVEtOZmxyNlZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATeC3kXxc
gxZot/RNUHS5B+ISdK5/e1lwiwmozAY2RDE4vwklW6fSPsMCYRP3bclLN8N9jVhc
bdXN/XkLwYvA+232p10Vz3TmndIGBY1iv3iJ13xO1GLkvNl8jpQdrb6Q+7dnfHdF
6ERIrutyZJXhf8Bi5I0KmFtHmxyuUCyMAs1BKAjAkhNHYlwiGfnk+E5IqfQ9AcXQ
Bj9MDR+T5PaR2hXdfGZJCfsnenNL0AGfMneUZuiL3iyAexLQqnLBNZyHNvyLlTnu
PhZusZY7clyldNTeM1G6E03D3hlEp+TxGCRd8lyN+Ks5ZMXAn6r/33QfarmE+g38
Up5AzCuu6kqeQg==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:25:06 2025 by rpki-client