Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/1540c1-9867-403d-8b9b-f3d9f63d5d97/1/W1t31kWP-tmE5R3zNPPo-YOCrCQ.mft
File:                     W1t31kWP-tmE5R3zNPPo-YOCrCQ.mft (raw, json)
Hash identifier:          1qq6ELgCBistPc+tbHnXPeJHFgksaUIF7YmXYIcHVKQ=
Subject key identifier:   47:3D:0C:58:32:27:C7:10:AF:27:01:74:12:06:54:CB:44:BD:02:AF
Authority key identifier: 5B:5B:77:D6:45:8F:FA:D9:84:E5:1D:F3:34:F3:E8:F9:83:82:AC:24
Certificate issuer:       /CN=5b5b77d6458ffad984e51df334f3e8f98382ac24
Certificate serial:       019922FAA9860EE041CFC58608E8E725385F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W1t31kWP-tmE5R3zNPPo-YOCrCQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/1540c1-9867-403d-8b9b-f3d9f63d5d97/1/W1t31kWP-tmE5R3zNPPo-YOCrCQ.mft
Manifest number:          04BB
Signing time:             Sun 07 Sep 2025 07:01:16 +0000
Manifest this update:     Sun 07 Sep 2025 07:01:16 +0000
Manifest next update:     Mon 08 Sep 2025 07:01:16 +0000
Files and hashes:         1: W1t31kWP-tmE5R3zNPPo-YOCrCQ.crl (hash: 4AhMEJKkBk6eGOHe2TUCQZ+TO5j2J/XllDcuRP1RMs8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/1540c1-9867-403d-8b9b-f3d9f63d5d97/1/W1t31kWP-tmE5R3zNPPo-YOCrCQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/1540c1-9867-403d-8b9b-f3d9f63d5d97/1/W1t31kWP-tmE5R3zNPPo-YOCrCQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W1t31kWP-tmE5R3zNPPo-YOCrCQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:fa:a9:86:0e:e0:41:cf:c5:86:08:e8:e7:25:38:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b5b77d6458ffad984e51df334f3e8f98382ac24
        Validity
            Not Before: Sep  7 07:01:16 2025 GMT
            Not After : Sep  8 07:01:16 2025 GMT
        Subject: CN=473d0c583227c710af270174120654cb44bd02af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:09:bc:91:af:8a:61:fd:f7:69:bf:e8:24:c7:
                    d0:f1:fa:4b:6b:6b:59:3c:88:a9:98:40:77:1e:d1:
                    96:57:08:d1:65:16:89:a9:6c:80:fd:56:30:a9:0e:
                    8a:ee:a6:0b:6a:d0:bd:fd:81:05:8c:dd:f1:be:25:
                    46:62:03:c8:6e:cc:35:ef:05:4d:f6:81:e1:b7:02:
                    4c:7f:15:17:c6:36:9a:e3:8f:d4:9d:50:df:ff:af:
                    42:2c:1a:95:26:d8:15:6b:50:4d:13:b4:2e:96:50:
                    e6:38:6f:f9:62:75:af:3f:6f:7a:4e:d6:c1:d5:f2:
                    10:cf:1b:b5:43:38:f7:54:cf:21:00:0a:df:21:b8:
                    38:11:7c:0b:60:54:db:60:67:88:13:bb:34:80:85:
                    fa:ae:23:72:49:1a:c0:57:bc:60:cb:36:63:35:ca:
                    46:fa:6c:9b:46:80:10:b3:27:1e:74:b3:04:13:14:
                    91:e1:0f:66:32:84:3d:0b:98:3a:9f:66:cd:1c:45:
                    89:99:4b:09:79:d6:08:89:dc:7a:68:ce:dc:ae:00:
                    79:0e:d8:e2:9c:55:d6:ed:97:36:b9:6e:0b:4b:72:
                    4e:f4:47:53:ae:a0:ed:a4:a9:69:e5:65:ee:00:eb:
                    1d:f7:ea:dd:ea:c5:1b:51:ec:ba:33:76:b8:80:1d:
                    dc:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:3D:0C:58:32:27:C7:10:AF:27:01:74:12:06:54:CB:44:BD:02:AF
            X509v3 Authority Key Identifier:
                keyid:5B:5B:77:D6:45:8F:FA:D9:84:E5:1D:F3:34:F3:E8:F9:83:82:AC:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W1t31kWP-tmE5R3zNPPo-YOCrCQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1540c1-9867-403d-8b9b-f3d9f63d5d97/1/W1t31kWP-tmE5R3zNPPo-YOCrCQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/1540c1-9867-403d-8b9b-f3d9f63d5d97/1/W1t31kWP-tmE5R3zNPPo-YOCrCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:5d:7a:92:39:df:67:94:4d:fa:0f:ee:33:f9:e9:60:e8:a4:
         5a:e4:84:29:2b:40:ac:22:a0:0a:c2:11:bf:32:25:0c:06:12:
         46:2e:b3:a5:7f:23:ec:1a:cd:19:84:02:12:b3:63:dc:f1:8d:
         7c:46:00:7f:6a:ed:b0:5a:57:7f:54:c8:7b:25:97:69:b8:a5:
         b3:84:1d:50:f5:45:6a:59:94:72:0e:93:fa:60:91:1f:3b:e3:
         03:16:9e:11:ef:06:b3:ea:f2:d8:9d:30:fa:e7:35:27:20:33:
         4f:b1:35:73:c3:60:8d:76:1e:96:ff:9f:02:7f:19:3b:de:1a:
         5a:12:e5:e7:94:65:ee:c4:16:51:11:91:06:e4:92:37:4f:fa:
         4a:cc:3a:e5:55:4c:2a:8b:8c:fc:94:c4:57:78:8a:de:30:f2:
         71:c7:74:a1:e0:cd:ee:99:5f:7f:1c:48:66:12:18:7e:e9:44:
         fe:7e:25:cf:b8:1a:d2:7f:71:7a:ac:98:e8:6f:f3:81:0e:d3:
         fd:b6:df:7d:49:de:8e:f6:22:96:47:60:c0:17:58:b3:26:8a:
         54:a8:c7:29:b7:e6:3b:21:11:6c:91:1f:55:67:e2:1a:c9:30:
         bd:d1:07:f2:9d:0f:1f:f8:75:d0:49:60:ef:e4:57:09:04:a8:
         be:5a:38:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZki+qmGDuBBz8WGCOjnJThfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViNWI3N2Q2NDU4ZmZhZDk4NGU1MWRmMzM0ZjNlOGY5ODM4
MmFjMjQwHhcNMjUwOTA3MDcwMTE2WhcNMjUwOTA4MDcwMTE2WjAzMTEwLwYDVQQD
Eyg0NzNkMGM1ODMyMjdjNzEwYWYyNzAxNzQxMjA2NTRjYjQ0YmQwMmFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgm8ka+KYf33ab/oJMfQ8fpLa2tZ
PIipmEB3HtGWVwjRZRaJqWyA/VYwqQ6K7qYLatC9/YEFjN3xviVGYgPIbsw17wVN
9oHhtwJMfxUXxjaa44/UnVDf/69CLBqVJtgVa1BNE7QullDmOG/5YnWvP296TtbB
1fIQzxu1Qzj3VM8hAArfIbg4EXwLYFTbYGeIE7s0gIX6riNySRrAV7xgyzZjNcpG
+mybRoAQsycedLMEExSR4Q9mMoQ9C5g6n2bNHEWJmUsJedYIidx6aM7crgB5Dtji
nFXW7Zc2uW4LS3JO9EdTrqDtpKlp5WXuAOsd9+rd6sUbUey6M3a4gB3ctQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEc9DFgyJ8cQrycBdBIGVMtEvQKvMB8GA1UdIwQY
MBaAFFtbd9ZFj/rZhOUd8zTz6PmDgqwkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzF0MzFrV1AtdG1FNVIzek5QUG8tWU9DckNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8xNTQwYzEtOTg2Ny00MDNkLThiOWIt
ZjNkOWY2M2Q1ZDk3LzEvVzF0MzFrV1AtdG1FNVIzek5QUG8tWU9DckNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS8xNTQwYzEtOTg2Ny00MDNkLThiOWItZjNkOWY2M2Q1ZDk3
LzEvVzF0MzFrV1AtdG1FNVIzek5QUG8tWU9DckNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARF16kjnf
Z5RN+g/uM/npYOikWuSEKStArCKgCsIRvzIlDAYSRi6zpX8j7BrNGYQCErNj3PGN
fEYAf2rtsFpXf1TIeyWXabils4QdUPVFalmUcg6T+mCRHzvjAxaeEe8Gs+ry2J0w
+uc1JyAzT7E1c8NgjXYelv+fAn8ZO94aWhLl55Rl7sQWURGRBuSSN0/6Ssw65VVM
KouM/JTEV3iK3jDyccd0oeDN7plffxxIZhIYfulE/n4lz7ga0n9xeqyY6G/zgQ7T
/bbffUnejvYilkdgwBdYsyaKVKjHKbfmOyERbJEfVWfiGskwvdEH8p0PH/h10Elg
7+RXCQSovlo40A==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:46:14 2025 by rpki-client