Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9c0278-542c-4467-ac7c-24aee2b0e82b/1/W-cZ-YXfOUpCrBHly8j4K0t67F0.mft
File:                     W-cZ-YXfOUpCrBHly8j4K0t67F0.mft (raw, json)
Hash identifier:          y//1rhYTym6Ce3c7e6vnFF7X5GdZUqgOq80aOiEC+xY=
Subject key identifier:   57:10:2A:F5:32:47:F7:98:C7:03:DA:04:5C:A8:F7:D0:F4:22:1C:A4
Authority key identifier: 5B:E7:19:F9:85:DF:39:4A:42:AC:11:E5:CB:C8:F8:2B:4B:7A:EC:5D
Certificate issuer:       /CN=5be719f985df394a42ac11e5cbc8f82b4b7aec5d
Certificate serial:       0198D473BB3E959D19B6B940737BFD5A20A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W-cZ-YXfOUpCrBHly8j4K0t67F0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/9c0278-542c-4467-ac7c-24aee2b0e82b/1/W-cZ-YXfOUpCrBHly8j4K0t67F0.mft
Manifest number:          164A
Signing time:             Sat 23 Aug 2025 01:03:31 +0000
Manifest this update:     Sat 23 Aug 2025 01:03:31 +0000
Manifest next update:     Sun 24 Aug 2025 01:03:31 +0000
Files and hashes:         1: W-cZ-YXfOUpCrBHly8j4K0t67F0.crl (hash: NbgEXtSaxP6RnaaL95V+Vtgk4fkBmhGPbnGGBfMWxJE=)
                          2: qfFhbPzEEV7-3fOF8iI3mosl_gc.roa (hash: eNrgqVa+1D+OMy3T6aNIQjkftemLm7/l9HKfq0aM6Lw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/9c0278-542c-4467-ac7c-24aee2b0e82b/1/W-cZ-YXfOUpCrBHly8j4K0t67F0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/9c0278-542c-4467-ac7c-24aee2b0e82b/1/W-cZ-YXfOUpCrBHly8j4K0t67F0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W-cZ-YXfOUpCrBHly8j4K0t67F0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:73:bb:3e:95:9d:19:b6:b9:40:73:7b:fd:5a:20:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5be719f985df394a42ac11e5cbc8f82b4b7aec5d
        Validity
            Not Before: Aug 23 01:03:31 2025 GMT
            Not After : Aug 24 01:03:31 2025 GMT
        Subject: CN=57102af53247f798c703da045ca8f7d0f4221ca4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:aa:cb:f2:cb:05:bf:0a:60:b0:3f:aa:01:d3:
                    c2:4a:9f:7b:6e:9f:7e:81:ac:e0:56:d5:2a:87:20:
                    ad:94:66:f0:9f:62:e8:ba:33:ef:12:d9:88:ab:b8:
                    c2:c4:ad:b5:1e:e6:9e:ec:87:f2:79:8c:0e:0a:86:
                    b7:8b:c4:f6:86:0d:cf:f5:1e:f7:c3:e1:6d:57:dd:
                    a2:31:68:48:cf:89:06:02:5a:78:94:ad:ce:b0:8c:
                    fc:21:56:c0:8a:a4:1d:da:b2:4c:99:a4:d4:8d:70:
                    78:e7:77:12:8a:d6:85:a0:d4:37:9a:a5:e0:24:0e:
                    33:80:98:5f:75:33:4a:3c:bc:88:77:83:96:58:c8:
                    62:96:0f:b0:f3:80:a5:e5:25:93:3c:32:b8:19:f0:
                    4f:bb:0b:09:a3:50:26:b3:64:74:42:8f:5e:81:d2:
                    e8:e7:b0:f7:9e:47:ef:24:aa:da:e1:2e:d1:b6:42:
                    c6:f1:fb:09:ec:1a:d7:f2:30:79:43:fd:06:ed:ad:
                    13:82:41:f5:d2:2f:0e:a8:18:20:b4:ed:92:fd:b7:
                    a8:b8:93:c0:db:50:c3:f5:01:61:94:39:e9:e2:84:
                    84:37:14:c9:a9:0a:49:12:72:24:2b:81:25:91:ab:
                    66:08:a8:75:d8:ce:38:da:21:63:d3:a0:11:82:7d:
                    78:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:10:2A:F5:32:47:F7:98:C7:03:DA:04:5C:A8:F7:D0:F4:22:1C:A4
            X509v3 Authority Key Identifier:
                keyid:5B:E7:19:F9:85:DF:39:4A:42:AC:11:E5:CB:C8:F8:2B:4B:7A:EC:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-cZ-YXfOUpCrBHly8j4K0t67F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9c0278-542c-4467-ac7c-24aee2b0e82b/1/W-cZ-YXfOUpCrBHly8j4K0t67F0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9c0278-542c-4467-ac7c-24aee2b0e82b/1/W-cZ-YXfOUpCrBHly8j4K0t67F0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:1f:65:7d:0d:a2:41:44:9e:4a:83:11:40:33:62:50:ee:77:
         33:9f:9a:ad:e6:04:98:2b:b1:2b:ca:87:f2:3d:cc:78:23:4f:
         c3:2e:e3:7d:e2:e9:37:23:38:54:4e:d8:79:ed:e6:f0:24:e6:
         dd:66:e7:58:fd:ac:98:aa:06:96:27:dd:21:ee:a4:03:c7:ce:
         6b:21:36:30:f0:13:b1:31:18:5f:a4:c4:f2:51:1b:3b:ec:7f:
         b1:31:a5:35:39:7e:1e:06:38:72:b9:c1:10:eb:5a:8f:66:d2:
         50:ba:30:2d:13:13:e8:5d:ff:5a:f6:00:69:4c:10:dc:40:9a:
         25:90:a3:d5:b5:05:1d:bf:b7:82:0c:c8:16:3a:29:9d:8f:55:
         c4:f3:9a:be:7f:80:b7:12:64:74:69:72:51:f3:01:51:aa:6d:
         07:ac:8d:1a:93:3b:8c:f2:79:37:55:00:3b:80:94:73:52:23:
         ac:62:5f:a5:78:0e:62:8a:70:9b:5d:0a:34:b8:49:34:de:1e:
         43:6d:39:63:84:35:62:76:46:82:19:7d:bd:ce:aa:eb:7a:2d:
         be:fb:a4:db:b2:f3:3c:22:ea:f1:d7:b9:d5:85:6d:e5:4d:f3:
         46:d5:0b:db:cf:80:54:b9:02:8d:31:a4:c4:67:d9:ed:1e:82:
         62:db:1b:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUc7s+lZ0ZtrlAc3v9WiChMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViZTcxOWY5ODVkZjM5NGE0MmFjMTFlNWNiYzhmODJiNGI3
YWVjNWQwHhcNMjUwODIzMDEwMzMxWhcNMjUwODI0MDEwMzMxWjAzMTEwLwYDVQQD
Eyg1NzEwMmFmNTMyNDdmNzk4YzcwM2RhMDQ1Y2E4ZjdkMGY0MjIxY2E0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6arL8ssFvwpgsD+qAdPCSp97bp9+
gazgVtUqhyCtlGbwn2LoujPvEtmIq7jCxK21Huae7IfyeYwOCoa3i8T2hg3P9R73
w+FtV92iMWhIz4kGAlp4lK3OsIz8IVbAiqQd2rJMmaTUjXB453cSitaFoNQ3mqXg
JA4zgJhfdTNKPLyId4OWWMhilg+w84Cl5SWTPDK4GfBPuwsJo1Ams2R0Qo9egdLo
57D3nkfvJKra4S7RtkLG8fsJ7BrX8jB5Q/0G7a0TgkH10i8OqBggtO2S/beouJPA
21DD9QFhlDnp4oSENxTJqQpJEnIkK4ElkatmCKh12M442iFj06ARgn14jwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFcQKvUyR/eYxwPaBFyo99D0IhykMB8GA1UdIwQY
MBaAFFvnGfmF3zlKQqwR5cvI+CtLeuxdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVy1jWi1ZWGZPVXBDckJIbHk4ajRLMHQ2N0YwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85YzAyNzgtNTQyYy00NDY3LWFjN2Mt
MjRhZWUyYjBlODJiLzEvVy1jWi1ZWGZPVXBDckJIbHk4ajRLMHQ2N0YwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS85YzAyNzgtNTQyYy00NDY3LWFjN2MtMjRhZWUyYjBlODJi
LzEvVy1jWi1ZWGZPVXBDckJIbHk4ajRLMHQ2N0YwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABh9lfQ2i
QUSeSoMRQDNiUO53M5+areYEmCuxK8qH8j3MeCNPwy7jfeLpNyM4VE7Yee3m8CTm
3WbnWP2smKoGlifdIe6kA8fOayE2MPATsTEYX6TE8lEbO+x/sTGlNTl+HgY4crnB
EOtaj2bSULowLRMT6F3/WvYAaUwQ3ECaJZCj1bUFHb+3ggzIFjopnY9VxPOavn+A
txJkdGlyUfMBUaptB6yNGpM7jPJ5N1UAO4CUc1IjrGJfpXgOYopwm10KNLhJNN4e
Q205Y4Q1YnZGghl9vc6q63otvvuk27LzPCLq8de51YVt5U3zRtUL28+AVLkCjTGk
xGfZ7R6CYtsbCA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:19:29 2025 by rpki-client