Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2cb73b-de66-4b41-bf83-f21f7e8ead5c/1/W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.mft
File:                     W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.mft (raw, json)
Hash identifier:          3fOGKcN0VpeOlGnJkbIrD1eJEwGA3ncKaSyU0ODwgE8=
Subject key identifier:   EB:24:D0:99:E4:38:CC:5F:23:52:F2:6A:65:A4:E7:F4:13:6A:0F:47
Authority key identifier: 5B:80:C9:D0:92:44:70:E1:C1:E3:0B:C4:EE:FF:19:90:90:A7:03:5C
Certificate issuer:       /CN=5b80c9d0924470e1c1e30bc4eeff199090a7035c
Certificate serial:       0199FDD929D859358FCF94FB1CD7AB9C0A71
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/2cb73b-de66-4b41-bf83-f21f7e8ead5c/1/W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.mft
Manifest number:          032F
Signing time:             Sun 19 Oct 2025 19:01:31 +0000
Manifest this update:     Sun 19 Oct 2025 19:01:31 +0000
Manifest next update:     Mon 20 Oct 2025 19:01:31 +0000
Files and hashes:         1: W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.crl (hash: rwqeBV3yyg7TgFjTBHHDYdGiadjMBQbDGt50isHHdLE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/2cb73b-de66-4b41-bf83-f21f7e8ead5c/1/W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/2cb73b-de66-4b41-bf83-f21f7e8ead5c/1/W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:d9:29:d8:59:35:8f:cf:94:fb:1c:d7:ab:9c:0a:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b80c9d0924470e1c1e30bc4eeff199090a7035c
        Validity
            Not Before: Oct 19 19:01:31 2025 GMT
            Not After : Oct 20 19:01:31 2025 GMT
        Subject: CN=eb24d099e438cc5f2352f26a65a4e7f4136a0f47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:eb:dc:94:ba:5f:99:f7:eb:da:a3:00:3e:57:
                    5e:b7:5f:1a:3a:53:9b:8d:cd:95:88:12:bb:86:cf:
                    4f:fd:6e:f6:7f:34:8d:4d:14:54:3d:3d:bf:27:7d:
                    6c:8c:97:fd:86:27:68:81:5a:d4:45:0b:90:83:fd:
                    80:9e:20:fd:da:c7:31:31:5a:09:a0:c7:9d:30:ae:
                    71:7b:c3:30:03:44:5e:59:86:32:ad:3b:ae:34:7a:
                    74:d5:71:eb:0f:0f:fb:41:80:d4:a4:4f:45:69:33:
                    4f:1c:9c:53:31:f1:ae:dc:99:e7:7c:fd:86:57:e8:
                    52:f8:a0:99:9f:ce:27:73:35:a3:e6:c8:b2:9e:d2:
                    5b:6a:09:8a:fc:d3:e4:ee:78:56:dc:78:04:aa:0d:
                    ec:cb:25:dd:dc:49:dd:20:eb:50:ae:7a:12:e1:75:
                    41:06:74:46:91:fc:d9:39:3b:54:24:62:9c:ec:6c:
                    85:e6:96:93:7e:67:10:04:1e:84:3a:26:ab:af:2a:
                    77:6d:f2:00:f0:f4:e6:3d:0d:d2:9a:b9:9a:da:70:
                    ca:f4:15:d1:3b:70:60:48:6b:52:5e:3e:66:4a:fa:
                    6a:a7:3c:6e:a0:21:98:65:31:f0:1c:d4:1c:af:ca:
                    41:43:84:2d:e6:3f:df:87:80:88:33:a2:73:dd:84:
                    e4:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:24:D0:99:E4:38:CC:5F:23:52:F2:6A:65:A4:E7:F4:13:6A:0F:47
            X509v3 Authority Key Identifier:
                keyid:5B:80:C9:D0:92:44:70:E1:C1:E3:0B:C4:EE:FF:19:90:90:A7:03:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2cb73b-de66-4b41-bf83-f21f7e8ead5c/1/W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2cb73b-de66-4b41-bf83-f21f7e8ead5c/1/W4DJ0JJEcOHB4wvE7v8ZkJCnA1w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:bd:96:12:c1:48:05:93:41:0f:2a:1a:d7:ca:3d:b9:77:78:
         8a:d0:ea:05:e1:46:2f:87:06:5b:a8:e0:77:98:05:77:bb:16:
         13:b7:ac:4d:27:0d:42:71:e7:07:66:26:96:f3:be:d3:53:d4:
         d5:47:fa:5e:45:98:93:8d:86:4d:75:6a:1d:87:3a:a0:c0:fb:
         6e:7f:a2:88:44:e5:9e:95:91:20:4a:c1:ac:2e:ee:18:d1:28:
         1d:fc:29:17:bb:00:d0:23:b1:1e:8f:49:a9:47:e8:83:82:ea:
         3f:49:b2:0a:10:bd:96:fa:f5:df:ce:08:c2:81:bb:d8:d3:e8:
         b7:aa:b8:2c:b1:4c:6c:95:f3:a8:aa:a9:8c:37:f0:4b:ce:eb:
         a5:fc:07:00:ca:b6:67:6d:8a:eb:f3:e7:ec:21:8f:6d:3c:f3:
         4e:2f:61:f6:7d:ee:17:28:6d:14:a3:de:79:71:a1:c2:e9:7d:
         6f:7a:c7:52:bd:ef:92:d7:08:5a:4c:bb:41:94:63:06:49:55:
         7f:27:21:cd:22:0c:80:51:75:29:8c:19:22:11:1f:8b:6d:fc:
         65:06:7b:41:96:65:13:a8:64:61:bd:5b:e9:ac:4a:36:f7:5a:
         c4:f0:c1:42:5a:5c:c3:73:57:d5:e8:9a:a0:e3:76:ef:60:33:
         9c:3c:94:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92SnYWTWPz5T7HNernApxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViODBjOWQwOTI0NDcwZTFjMWUzMGJjNGVlZmYxOTkwOTBh
NzAzNWMwHhcNMjUxMDE5MTkwMTMxWhcNMjUxMDIwMTkwMTMxWjAzMTEwLwYDVQQD
EyhlYjI0ZDA5OWU0MzhjYzVmMjM1MmYyNmE2NWE0ZTdmNDEzNmEwZjQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhuvclLpfmffr2qMAPldet18aOlOb
jc2ViBK7hs9P/W72fzSNTRRUPT2/J31sjJf9hidogVrURQuQg/2AniD92scxMVoJ
oMedMK5xe8MwA0ReWYYyrTuuNHp01XHrDw/7QYDUpE9FaTNPHJxTMfGu3JnnfP2G
V+hS+KCZn84nczWj5siyntJbagmK/NPk7nhW3HgEqg3syyXd3EndIOtQrnoS4XVB
BnRGkfzZOTtUJGKc7GyF5paTfmcQBB6EOiarryp3bfIA8PTmPQ3Smrma2nDK9BXR
O3BgSGtSXj5mSvpqpzxuoCGYZTHwHNQcr8pBQ4Qt5j/fh4CIM6Jz3YTkCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOsk0JnkOMxfI1LyamWk5/QTag9HMB8GA1UdIwQY
MBaAFFuAydCSRHDhweMLxO7/GZCQpwNcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzRESjBKSkVjT0hCNHd2RTd2OFprSkNuQTF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS8yY2I3M2ItZGU2Ni00YjQxLWJmODMt
ZjIxZjdlOGVhZDVjLzEvVzRESjBKSkVjT0hCNHd2RTd2OFprSkNuQTF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS8yY2I3M2ItZGU2Ni00YjQxLWJmODMtZjIxZjdlOGVhZDVj
LzEvVzRESjBKSkVjT0hCNHd2RTd2OFprSkNuQTF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZr2WEsFI
BZNBDyoa18o9uXd4itDqBeFGL4cGW6jgd5gFd7sWE7esTScNQnHnB2YmlvO+01PU
1Uf6XkWYk42GTXVqHYc6oMD7bn+iiETlnpWRIErBrC7uGNEoHfwpF7sA0COxHo9J
qUfog4LqP0myChC9lvr1384IwoG72NPot6q4LLFMbJXzqKqpjDfwS87rpfwHAMq2
Z22K6/Pn7CGPbTzzTi9h9n3uFyhtFKPeeXGhwul9b3rHUr3vktcIWky7QZRjBklV
fychzSIMgFF1KYwZIhEfi238ZQZ7QZZlE6hkYb1b6axKNvdaxPDBQlpcw3NX1eia
oON272AznDyUOw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:44:23 2025 by rpki-client