Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/4f43fc-4187-4bb9-905a-f0c6258b9a04/1/W1v_nUH3GfYmAMMtNBDduZ7Msww.mft
File:                     W1v_nUH3GfYmAMMtNBDduZ7Msww.mft (raw, json)
Hash identifier:          1E0YyufmT+fLvlHLmWqm5ki30OoL897xMSFalTcjx8M=
Subject key identifier:   A1:1C:12:44:26:59:00:5C:48:BE:A5:FB:9C:67:0A:94:A2:B6:86:1D
Authority key identifier: 5B:5B:FF:9D:41:F7:19:F6:26:00:C3:2D:34:10:DD:B9:9E:CC:B3:0C
Certificate issuer:       /CN=5b5bff9d41f719f62600c32d3410ddb99eccb30c
Certificate serial:       0198D7A94E135FE8E26C64014488F750440C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W1v_nUH3GfYmAMMtNBDduZ7Msww.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/4f43fc-4187-4bb9-905a-f0c6258b9a04/1/W1v_nUH3GfYmAMMtNBDduZ7Msww.mft
Manifest number:          1071
Signing time:             Sat 23 Aug 2025 16:00:53 +0000
Manifest this update:     Sat 23 Aug 2025 16:00:53 +0000
Manifest next update:     Sun 24 Aug 2025 16:00:53 +0000
Files and hashes:         1: BYEpO3dKB_ok3YL5Nvkz1BqvKfY.roa (hash: tzMMybSfOyrsE8fXw9tkAmX7iTeiSe2VTc77bmai8Ps=)
                          2: FvfQzenY4vuGvPjzUDTw1tjiG2s.roa (hash: zkGEFuUXYUubPgf+SgQqduDAgySAdGnP1m7nGCOsPPE=)
                          3: W1v_nUH3GfYmAMMtNBDduZ7Msww.crl (hash: Q9ieJF2x6MXX3yG78D2HEdrAKdRb9o8A4UjVcmxvB0o=)
                          4: YHhKqKllORo1YpLh6r99OV2fKdU.roa (hash: mexx1monVzWkvXW1/Ufj3sXVxDrM1B0b6uh/TwyrzYI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/4f43fc-4187-4bb9-905a-f0c6258b9a04/1/W1v_nUH3GfYmAMMtNBDduZ7Msww.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/4f43fc-4187-4bb9-905a-f0c6258b9a04/1/W1v_nUH3GfYmAMMtNBDduZ7Msww.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W1v_nUH3GfYmAMMtNBDduZ7Msww.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:50:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:a9:4e:13:5f:e8:e2:6c:64:01:44:88:f7:50:44:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b5bff9d41f719f62600c32d3410ddb99eccb30c
        Validity
            Not Before: Aug 23 16:00:53 2025 GMT
            Not After : Aug 24 16:00:53 2025 GMT
        Subject: CN=a11c12442659005c48bea5fb9c670a94a2b6861d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:0c:68:95:f2:28:2a:c8:75:79:e0:e9:9b:63:
                    c0:c3:43:5e:5d:9d:e9:22:8a:f4:4f:57:49:64:e7:
                    f4:13:b2:3b:eb:de:ae:01:32:ed:cd:b6:c6:25:ae:
                    e7:2e:d9:3e:d5:bc:f8:15:89:49:67:ef:08:7c:01:
                    c6:2a:7c:56:9e:dc:66:ab:0b:43:9c:6b:85:3a:fc:
                    cf:49:b0:6c:77:b5:be:32:56:45:1b:0b:5b:d4:fe:
                    85:60:6f:01:01:01:ac:5a:00:a9:24:31:19:68:df:
                    f0:2f:7b:50:32:56:d4:95:10:2f:ac:b0:2a:0d:a4:
                    86:28:0f:57:5e:85:61:7a:c1:01:2b:7d:f2:38:ac:
                    01:e9:60:5c:e4:6f:f9:69:1f:34:95:ad:2e:9d:07:
                    2f:e8:fc:4e:fb:2a:78:9d:5d:b2:1c:80:a5:e3:52:
                    bd:87:6b:e8:bd:29:a9:0a:51:3b:b0:e6:61:71:60:
                    0b:67:6d:42:65:5d:48:4d:17:35:8c:b5:8b:34:9e:
                    80:47:ac:f1:bf:c5:5e:02:e3:b7:05:47:7c:26:c3:
                    87:7e:aa:8a:82:50:f6:3f:ad:f1:46:f3:bc:d6:7a:
                    2f:97:de:f9:d0:cd:44:e3:e3:5e:7e:cb:b8:3e:16:
                    3a:35:c3:68:3f:55:0e:e8:d2:09:66:5f:2c:69:3d:
                    5b:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:1C:12:44:26:59:00:5C:48:BE:A5:FB:9C:67:0A:94:A2:B6:86:1D
            X509v3 Authority Key Identifier:
                keyid:5B:5B:FF:9D:41:F7:19:F6:26:00:C3:2D:34:10:DD:B9:9E:CC:B3:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W1v_nUH3GfYmAMMtNBDduZ7Msww.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/4f43fc-4187-4bb9-905a-f0c6258b9a04/1/W1v_nUH3GfYmAMMtNBDduZ7Msww.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/4f43fc-4187-4bb9-905a-f0c6258b9a04/1/W1v_nUH3GfYmAMMtNBDduZ7Msww.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:74:c6:91:3c:5f:f4:a5:54:3c:15:8d:4e:8d:47:4e:ba:9a:
         35:c2:85:c4:aa:a4:a0:fb:0a:47:fb:09:6b:f9:7f:ee:fc:3b:
         dd:a7:75:ab:a6:2a:6a:bd:23:9b:77:63:83:a3:9c:83:0b:50:
         e8:47:e0:fc:40:41:25:b2:3e:d4:dd:0a:e2:a6:2e:04:2b:51:
         45:11:43:99:1a:02:6b:1d:10:d3:9c:a8:3a:e9:ea:e0:35:d8:
         ad:81:2f:8d:ac:10:a4:6f:69:33:1f:f5:f5:44:5c:ae:34:4d:
         38:fc:2f:c2:87:bc:50:03:fb:28:f9:2d:2e:6c:43:3d:26:40:
         8d:26:a5:db:e3:4e:88:f0:51:8d:99:88:ef:f8:f6:dd:ee:b0:
         ee:52:f9:33:5f:95:bc:e5:ce:99:8c:43:f6:40:6a:50:f2:18:
         49:e5:f0:ca:78:3b:8e:76:ae:25:83:c2:3b:73:93:2f:ff:0c:
         aa:f2:49:fd:a8:26:ac:5a:f7:38:14:10:f5:33:bb:0d:6e:b4:
         97:25:31:80:13:5d:6d:26:06:55:54:da:fa:a1:ea:42:6d:c4:
         43:6d:47:bf:5a:50:6f:71:4c:8c:86:ce:65:d1:c1:38:cf:b5:
         38:50:93:7b:27:02:ab:49:05:0a:23:17:2e:25:0f:fc:4d:86:
         c3:9d:04:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXqU4TX+jibGQBRIj3UEQMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViNWJmZjlkNDFmNzE5ZjYyNjAwYzMyZDM0MTBkZGI5OWVj
Y2IzMGMwHhcNMjUwODIzMTYwMDUzWhcNMjUwODI0MTYwMDUzWjAzMTEwLwYDVQQD
EyhhMTFjMTI0NDI2NTkwMDVjNDhiZWE1ZmI5YzY3MGE5NGEyYjY4NjFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgxolfIoKsh1eeDpm2PAw0NeXZ3p
Ior0T1dJZOf0E7I7696uATLtzbbGJa7nLtk+1bz4FYlJZ+8IfAHGKnxWntxmqwtD
nGuFOvzPSbBsd7W+MlZFGwtb1P6FYG8BAQGsWgCpJDEZaN/wL3tQMlbUlRAvrLAq
DaSGKA9XXoVhesEBK33yOKwB6WBc5G/5aR80la0unQcv6PxO+yp4nV2yHICl41K9
h2vovSmpClE7sOZhcWALZ21CZV1ITRc1jLWLNJ6AR6zxv8VeAuO3BUd8JsOHfqqK
glD2P63xRvO81novl9750M1E4+Nefsu4PhY6NcNoP1UO6NIJZl8saT1bwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKEcEkQmWQBcSL6l+5xnCpSitoYdMB8GA1UdIwQY
MBaAFFtb/51B9xn2JgDDLTQQ3bmezLMMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzF2X25VSDNHZlltQU1NdE5CRGR1WjdNc3d3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi80ZjQzZmMtNDE4Ny00YmI5LTkwNWEt
ZjBjNjI1OGI5YTA0LzEvVzF2X25VSDNHZlltQU1NdE5CRGR1WjdNc3d3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi80ZjQzZmMtNDE4Ny00YmI5LTkwNWEtZjBjNjI1OGI5YTA0
LzEvVzF2X25VSDNHZlltQU1NdE5CRGR1WjdNc3d3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACHTGkTxf
9KVUPBWNTo1HTrqaNcKFxKqkoPsKR/sJa/l/7vw73ad1q6Yqar0jm3djg6OcgwtQ
6Efg/EBBJbI+1N0K4qYuBCtRRRFDmRoCax0Q05yoOunq4DXYrYEvjawQpG9pMx/1
9URcrjRNOPwvwoe8UAP7KPktLmxDPSZAjSal2+NOiPBRjZmI7/j23e6w7lL5M1+V
vOXOmYxD9kBqUPIYSeXwyng7jnauJYPCO3OTL/8MqvJJ/agmrFr3OBQQ9TO7DW60
lyUxgBNdbSYGVVTa+qHqQm3EQ21Hv1pQb3FMjIbOZdHBOM+1OFCTeycCq0kFCiMX
LiUP/E2Gw50EhQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:49:38 2025 by rpki-client