Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/8311df-c3b2-461e-bd23-1605b1bd298e/1/W-l5-45HcwS7WR1raO6nPalKgVs.mft
File:                     W-l5-45HcwS7WR1raO6nPalKgVs.mft (raw, json)
Hash identifier:          cfdBkmtLgiOO5MOZcuHHLpHG+kptLQWPU9/Itaa6tTE=
Subject key identifier:   68:D4:E7:9E:30:86:4A:6C:1F:E2:43:76:0B:53:81:6C:61:FA:9E:4A
Authority key identifier: 5B:E9:79:FB:8E:47:73:04:BB:59:1D:6B:68:EE:A7:3D:A9:4A:81:5B
Certificate issuer:       /CN=5be979fb8e477304bb591d6b68eea73da94a815b
Certificate serial:       0199FD6B1E557DFB4E25999C71D5A19BD3C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W-l5-45HcwS7WR1raO6nPalKgVs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/8311df-c3b2-461e-bd23-1605b1bd298e/1/W-l5-45HcwS7WR1raO6nPalKgVs.mft
Manifest number:          16E5
Signing time:             Sun 19 Oct 2025 17:01:19 +0000
Manifest this update:     Sun 19 Oct 2025 17:01:19 +0000
Manifest next update:     Mon 20 Oct 2025 17:01:19 +0000
Files and hashes:         1: W-l5-45HcwS7WR1raO6nPalKgVs.crl (hash: HWhY45NwVUya1+asuLiyxkHKNyTHQjp9wvUPq4ZtIbY=)
                          2: ijhA7sBU_edCq9uT5tmZaZEbP3I.roa (hash: NR4CPSWiqCTjGhtLGBhv5LnWOgMPNqeAkbuxpb5OI8Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/8311df-c3b2-461e-bd23-1605b1bd298e/1/W-l5-45HcwS7WR1raO6nPalKgVs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/8311df-c3b2-461e-bd23-1605b1bd298e/1/W-l5-45HcwS7WR1raO6nPalKgVs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W-l5-45HcwS7WR1raO6nPalKgVs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 17:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:6b:1e:55:7d:fb:4e:25:99:9c:71:d5:a1:9b:d3:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5be979fb8e477304bb591d6b68eea73da94a815b
        Validity
            Not Before: Oct 19 17:01:19 2025 GMT
            Not After : Oct 20 17:01:19 2025 GMT
        Subject: CN=68d4e79e30864a6c1fe243760b53816c61fa9e4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:af:39:d6:10:0c:30:ac:fd:a5:b4:d3:16:00:
                    a9:01:b9:ac:bd:f5:44:1d:74:59:7e:37:ab:aa:85:
                    44:69:ec:21:59:a9:de:d5:96:b7:0b:c3:be:af:84:
                    cd:c9:33:9e:84:6e:39:74:4b:b7:b8:7e:dc:8e:83:
                    98:a6:94:5d:c1:45:d0:59:a5:db:6f:22:23:73:92:
                    71:eb:2b:bf:6c:c0:db:29:29:7e:ec:23:c0:a1:ea:
                    c6:45:59:b7:61:89:d7:de:06:cc:bd:88:59:ba:d0:
                    10:df:63:c1:40:65:9f:29:c8:4f:e5:98:21:8f:5d:
                    83:2f:54:f7:c6:7a:d8:e4:36:1b:18:6f:9f:ad:26:
                    10:91:27:44:8e:7c:28:65:c3:25:d9:11:85:65:58:
                    8e:2b:17:71:4a:d7:41:ce:c8:7a:77:68:00:50:fa:
                    56:0f:37:00:2c:1a:87:6b:25:f7:92:1f:34:99:a4:
                    d2:ed:bf:58:ea:44:b9:57:21:75:bf:e2:2c:e9:15:
                    2d:c5:ca:6a:3e:16:54:ad:f1:a4:ae:99:b2:bf:e3:
                    75:40:fa:b9:d7:2d:d3:9b:dc:24:b0:5e:8d:9b:fc:
                    ae:9e:33:13:b3:25:1d:20:e2:a5:5d:ca:50:aa:71:
                    98:4a:8d:97:cc:9d:d8:b1:a9:37:a1:12:8f:fc:a1:
                    ba:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:D4:E7:9E:30:86:4A:6C:1F:E2:43:76:0B:53:81:6C:61:FA:9E:4A
            X509v3 Authority Key Identifier:
                keyid:5B:E9:79:FB:8E:47:73:04:BB:59:1D:6B:68:EE:A7:3D:A9:4A:81:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-l5-45HcwS7WR1raO6nPalKgVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8311df-c3b2-461e-bd23-1605b1bd298e/1/W-l5-45HcwS7WR1raO6nPalKgVs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8311df-c3b2-461e-bd23-1605b1bd298e/1/W-l5-45HcwS7WR1raO6nPalKgVs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:00:14:8b:3f:3a:a2:5f:95:97:ed:0e:a0:85:43:f5:56:f4:
         5d:9e:f3:8e:fb:67:75:86:4d:23:dc:d1:20:d1:2b:6d:03:cd:
         d2:1f:05:b4:b3:6c:41:6b:2e:51:3a:a1:1f:24:c4:98:b3:9f:
         49:a7:9b:9d:dd:42:46:54:39:0b:5b:78:5e:f4:59:8e:57:00:
         fd:70:80:15:bb:80:18:f2:26:98:29:3e:68:2d:1a:36:a1:5d:
         b7:32:36:20:79:92:b9:26:cb:9c:03:4e:00:ba:c9:64:70:3b:
         08:5c:53:ec:53:f6:1e:22:a5:b7:b7:55:3d:81:a1:a5:d4:a9:
         db:85:0b:a2:f3:da:08:27:61:09:72:05:37:4d:9e:43:18:91:
         e2:db:49:fe:68:0a:50:ad:06:3c:b6:f0:1d:9f:e0:b8:1f:27:
         14:49:19:10:78:9c:fc:f3:c0:9a:41:97:43:37:e4:80:25:24:
         f3:7c:de:d2:48:8b:2d:d4:17:9b:7e:bb:93:48:3d:00:ba:e3:
         a8:36:e2:89:e0:21:b9:e1:88:2d:fc:9a:d3:e2:c5:e4:f6:0b:
         fd:10:3e:4f:32:e7:17:32:9c:ad:69:9a:7d:67:e2:ac:67:6e:
         87:18:5d:d9:5e:55:99:eb:d8:f9:26:6a:cd:b3:7b:7a:2a:89:
         d0:d9:cc:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9ax5VfftOJZmccdWhm9PIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViZTk3OWZiOGU0NzczMDRiYjU5MWQ2YjY4ZWVhNzNkYTk0
YTgxNWIwHhcNMjUxMDE5MTcwMTE5WhcNMjUxMDIwMTcwMTE5WjAzMTEwLwYDVQQD
Eyg2OGQ0ZTc5ZTMwODY0YTZjMWZlMjQzNzYwYjUzODE2YzYxZmE5ZTRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2K851hAMMKz9pbTTFgCpAbmsvfVE
HXRZfjerqoVEaewhWane1Za3C8O+r4TNyTOehG45dEu3uH7cjoOYppRdwUXQWaXb
byIjc5Jx6yu/bMDbKSl+7CPAoerGRVm3YYnX3gbMvYhZutAQ32PBQGWfKchP5Zgh
j12DL1T3xnrY5DYbGG+frSYQkSdEjnwoZcMl2RGFZViOKxdxStdBzsh6d2gAUPpW
DzcALBqHayX3kh80maTS7b9Y6kS5VyF1v+Is6RUtxcpqPhZUrfGkrpmyv+N1QPq5
1y3Tm9wksF6Nm/yunjMTsyUdIOKlXcpQqnGYSo2XzJ3Ysak3oRKP/KG6NQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGjU554whkpsH+JDdgtTgWxh+p5KMB8GA1UdIwQY
MBaAFFvpefuOR3MEu1kda2jupz2pSoFbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVy1sNS00NUhjd1M3V1IxcmFPNm5QYWxLZ1ZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC84MzExZGYtYzNiMi00NjFlLWJkMjMt
MTYwNWIxYmQyOThlLzEvVy1sNS00NUhjd1M3V1IxcmFPNm5QYWxLZ1ZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC84MzExZGYtYzNiMi00NjFlLWJkMjMtMTYwNWIxYmQyOThl
LzEvVy1sNS00NUhjd1M3V1IxcmFPNm5QYWxLZ1ZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXgAUiz86
ol+Vl+0OoIVD9Vb0XZ7zjvtndYZNI9zRINErbQPN0h8FtLNsQWsuUTqhHyTEmLOf
Saebnd1CRlQ5C1t4XvRZjlcA/XCAFbuAGPImmCk+aC0aNqFdtzI2IHmSuSbLnANO
ALrJZHA7CFxT7FP2HiKlt7dVPYGhpdSp24ULovPaCCdhCXIFN02eQxiR4ttJ/mgK
UK0GPLbwHZ/guB8nFEkZEHic/PPAmkGXQzfkgCUk83ze0kiLLdQXm367k0g9ALrj
qDbiieAhueGILfya0+LF5PYL/RA+TzLnFzKcrWmafWfirGduhxhd2V5VmevY+SZq
zbN7eiqJ0NnMGQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 03:40:53 2025 by rpki-client