Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/8dbca3-6934-44ae-8fc9-2f8d4240c436/1/w16ED0bhmFswYQC1wTG7uGO33AY.mft
File:                     w16ED0bhmFswYQC1wTG7uGO33AY.mft (raw, json)
Hash identifier:          U4Ptw0Scr1caneTmq2X4buKGBOW8oP8/s4EjLVayWyg=
Subject key identifier:   CC:19:F8:11:4B:53:F1:DB:57:92:77:3D:45:27:1B:DF:14:3D:6C:3F
Authority key identifier: C3:5E:84:0F:46:E1:98:5B:30:61:00:B5:C1:31:BB:B8:63:B7:DC:06
Certificate issuer:       /CN=c35e840f46e1985b306100b5c131bbb863b7dc06
Certificate serial:       01974FA160FF2D7C57D4A7152278E8306AE1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w16ED0bhmFswYQC1wTG7uGO33AY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/8dbca3-6934-44ae-8fc9-2f8d4240c436/1/w16ED0bhmFswYQC1wTG7uGO33AY.mft
Manifest number:          1401
Signing time:             Sun 08 Jun 2025 13:01:05 +0000
Manifest this update:     Sun 08 Jun 2025 13:01:05 +0000
Manifest next update:     Mon 09 Jun 2025 13:01:05 +0000
Files and hashes:         1: w16ED0bhmFswYQC1wTG7uGO33AY.crl (hash: 7Gdi2gzAbYLooUNL/5+tLKyfh9wuHYonPHGXEu39y6c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/8dbca3-6934-44ae-8fc9-2f8d4240c436/1/w16ED0bhmFswYQC1wTG7uGO33AY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/8dbca3-6934-44ae-8fc9-2f8d4240c436/1/w16ED0bhmFswYQC1wTG7uGO33AY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w16ED0bhmFswYQC1wTG7uGO33AY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 13:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4f:a1:60:ff:2d:7c:57:d4:a7:15:22:78:e8:30:6a:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c35e840f46e1985b306100b5c131bbb863b7dc06
        Validity
            Not Before: Jun  8 13:01:05 2025 GMT
            Not After : Jun  9 13:01:05 2025 GMT
        Subject: CN=cc19f8114b53f1db5792773d45271bdf143d6c3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:8e:85:ce:52:3b:4a:b3:44:5b:5b:fd:dd:cf:
                    65:2c:29:10:a9:5e:43:c7:32:fa:1e:26:74:92:f5:
                    fb:57:61:93:13:39:e9:80:5a:1c:a7:2b:ce:e8:4d:
                    f2:93:4e:2f:b0:fe:78:97:ad:59:b0:8a:0d:ba:4d:
                    5a:8a:2a:ae:e5:c4:2d:81:af:e4:9e:a8:37:ea:00:
                    e9:51:76:37:88:d7:ed:12:db:7e:e1:de:64:97:2f:
                    41:6a:d3:ac:c3:74:4a:72:2d:70:db:6b:8c:4b:8a:
                    a3:11:bf:56:ee:20:26:9a:73:51:3e:11:1f:87:ed:
                    10:24:b8:f9:2c:ce:54:9f:8d:94:5a:ba:91:32:61:
                    69:80:10:5d:6c:cd:c2:a8:77:27:10:29:06:1f:da:
                    3c:a1:19:a1:ac:db:03:20:2b:73:86:13:f4:73:91:
                    30:f2:70:f9:f3:ac:3b:42:66:16:0c:4b:80:5f:ea:
                    db:11:57:44:5d:88:bb:a1:4c:83:cb:b3:f2:64:49:
                    a7:2b:e8:e7:e1:e4:f2:35:7a:0f:5a:67:1d:89:69:
                    9b:f3:b7:cf:c4:c3:44:4a:18:6e:27:eb:5b:bf:3a:
                    ca:3f:f6:0e:8f:18:01:d1:b6:0b:9a:a6:d0:42:2f:
                    96:ef:92:a2:a1:5b:cf:8c:be:47:03:95:ea:54:53:
                    db:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:19:F8:11:4B:53:F1:DB:57:92:77:3D:45:27:1B:DF:14:3D:6C:3F
            X509v3 Authority Key Identifier:
                keyid:C3:5E:84:0F:46:E1:98:5B:30:61:00:B5:C1:31:BB:B8:63:B7:DC:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16ED0bhmFswYQC1wTG7uGO33AY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/8dbca3-6934-44ae-8fc9-2f8d4240c436/1/w16ED0bhmFswYQC1wTG7uGO33AY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/8dbca3-6934-44ae-8fc9-2f8d4240c436/1/w16ED0bhmFswYQC1wTG7uGO33AY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:42:42:5e:70:43:40:91:30:68:45:fe:73:ba:f7:4e:12:c0:
         ca:56:83:d9:d7:d1:d5:d6:6f:3f:1b:1c:c8:11:87:f5:06:41:
         e3:78:85:2f:95:f8:d0:40:39:2e:b5:c0:68:e8:d9:b7:5d:82:
         6c:e5:6a:30:93:fe:af:29:59:74:77:3b:2a:01:a7:a7:58:09:
         b6:e2:83:7d:82:e4:21:49:b9:ac:34:92:6f:c1:00:6d:65:43:
         75:32:f8:ab:a9:1c:99:7a:3c:93:12:db:ce:82:e0:35:76:c5:
         98:e5:02:7b:04:3b:ae:e5:42:45:82:fc:23:31:0d:63:f5:9e:
         ea:cc:ba:cb:60:b6:40:3d:c5:49:52:03:26:81:18:45:05:7e:
         d9:f9:ff:fe:a1:c2:93:4b:22:fb:5b:62:ba:0f:33:99:e5:a3:
         09:17:73:77:ed:b9:bd:f6:0a:11:e0:b6:72:7e:22:a7:a3:b7:
         49:00:87:78:cd:cd:78:97:8d:0d:b4:ae:0c:1a:fc:50:04:a8:
         b0:1a:15:bd:1f:c7:d8:fe:58:d0:89:4b:21:fd:3a:d4:42:54:
         7a:db:ac:9a:bd:33:67:c5:b8:4d:e3:50:83:38:6a:12:e6:76:
         4f:27:5f:3f:e8:07:a9:bb:3d:2d:a4:12:fa:41:e1:f9:9d:d3:
         f8:db:bb:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdPoWD/LXxX1KcVInjoMGrhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzNWU4NDBmNDZlMTk4NWIzMDYxMDBiNWMxMzFiYmI4NjNi
N2RjMDYwHhcNMjUwNjA4MTMwMTA1WhcNMjUwNjA5MTMwMTA1WjAzMTEwLwYDVQQD
EyhjYzE5ZjgxMTRiNTNmMWRiNTc5Mjc3M2Q0NTI3MWJkZjE0M2Q2YzNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqY6FzlI7SrNEW1v93c9lLCkQqV5D
xzL6HiZ0kvX7V2GTEznpgFocpyvO6E3yk04vsP54l61ZsIoNuk1aiiqu5cQtga/k
nqg36gDpUXY3iNftEtt+4d5kly9BatOsw3RKci1w22uMS4qjEb9W7iAmmnNRPhEf
h+0QJLj5LM5Un42UWrqRMmFpgBBdbM3CqHcnECkGH9o8oRmhrNsDICtzhhP0c5Ew
8nD586w7QmYWDEuAX+rbEVdEXYi7oUyDy7PyZEmnK+jn4eTyNXoPWmcdiWmb87fP
xMNEShhuJ+tbvzrKP/YOjxgB0bYLmqbQQi+W75KioVvPjL5HA5XqVFPbEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMwZ+BFLU/HbV5J3PUUnG98UPWw/MB8GA1UdIwQY
MBaAFMNehA9G4ZhbMGEAtcExu7hjt9wGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzE2RUQwYmhtRnN3WVFDMXdURzd1R08zM0FZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC84ZGJjYTMtNjkzNC00NGFlLThmYzkt
MmY4ZDQyNDBjNDM2LzEvdzE2RUQwYmhtRnN3WVFDMXdURzd1R08zM0FZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC84ZGJjYTMtNjkzNC00NGFlLThmYzktMmY4ZDQyNDBjNDM2
LzEvdzE2RUQwYmhtRnN3WVFDMXdURzd1R08zM0FZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASkJCXnBD
QJEwaEX+c7r3ThLAylaD2dfR1dZvPxscyBGH9QZB43iFL5X40EA5LrXAaOjZt12C
bOVqMJP+rylZdHc7KgGnp1gJtuKDfYLkIUm5rDSSb8EAbWVDdTL4q6kcmXo8kxLb
zoLgNXbFmOUCewQ7ruVCRYL8IzENY/We6sy6y2C2QD3FSVIDJoEYRQV+2fn//qHC
k0si+1tiug8zmeWjCRdzd+25vfYKEeC2cn4ip6O3SQCHeM3NeJeNDbSuDBr8UASo
sBoVvR/H2P5Y0IlLIf061EJUetusmr0zZ8W4TeNQgzhqEuZ2TydfP+gHqbs9LaQS
+kHh+Z3T+Nu7/w==
-----END CERTIFICATE-----
Generated at Sun Jun 8 23:29:40 2025 by rpki-client