Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/4dd151-6f2d-4a62-8862-13d9301f7c0a/1/WUvl-iT9Z_TbSuP8qYVv8IgVOdI.mft
File:                     WUvl-iT9Z_TbSuP8qYVv8IgVOdI.mft (raw, json)
Hash identifier:          8dE70AY5ERBmY0GOBAS3AoDfzX3FKNs+AcLpp6QZTkw=
Subject key identifier:   DB:1A:D3:E9:E1:35:51:12:4D:3C:65:D3:5F:78:2F:3D:DB:21:C0:D9
Authority key identifier: 59:4B:E5:FA:24:FD:67:F4:DB:4A:E3:FC:A9:85:6F:F0:88:15:39:D2
Certificate issuer:       /CN=594be5fa24fd67f4db4ae3fca9856ff0881539d2
Certificate serial:       0198D6CD4896BFC044D4AE5AAF7C3CF153CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WUvl-iT9Z_TbSuP8qYVv8IgVOdI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/4dd151-6f2d-4a62-8862-13d9301f7c0a/1/WUvl-iT9Z_TbSuP8qYVv8IgVOdI.mft
Manifest number:          0341
Signing time:             Sat 23 Aug 2025 12:00:34 +0000
Manifest this update:     Sat 23 Aug 2025 12:00:34 +0000
Manifest next update:     Sun 24 Aug 2025 12:00:34 +0000
Files and hashes:         1: WUvl-iT9Z_TbSuP8qYVv8IgVOdI.crl (hash: L9nOg4CTdnJmYvG2YTojdj8+86+KTPTutxuHLk+xQuQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/4dd151-6f2d-4a62-8862-13d9301f7c0a/1/WUvl-iT9Z_TbSuP8qYVv8IgVOdI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/4dd151-6f2d-4a62-8862-13d9301f7c0a/1/WUvl-iT9Z_TbSuP8qYVv8IgVOdI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WUvl-iT9Z_TbSuP8qYVv8IgVOdI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 12:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:cd:48:96:bf:c0:44:d4:ae:5a:af:7c:3c:f1:53:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=594be5fa24fd67f4db4ae3fca9856ff0881539d2
        Validity
            Not Before: Aug 23 12:00:34 2025 GMT
            Not After : Aug 24 12:00:34 2025 GMT
        Subject: CN=db1ad3e9e13551124d3c65d35f782f3ddb21c0d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:26:ea:21:12:be:f2:81:71:08:18:ff:da:f7:
                    c3:e4:9e:b2:87:68:49:d3:a6:19:d8:d7:ca:66:5b:
                    b4:07:fd:47:40:a9:d1:1e:83:5b:c5:bc:ce:cf:9b:
                    72:48:9a:37:d1:a4:9c:fa:78:77:f2:53:2e:f0:9d:
                    60:ff:de:22:92:5c:2b:9a:98:0d:92:0f:63:bf:d0:
                    70:c8:83:f0:28:a1:06:cf:db:77:29:fe:7c:d8:8b:
                    9b:7a:0a:4c:2e:ad:3c:be:46:11:9b:72:17:71:3e:
                    97:83:72:e4:18:26:46:96:9e:39:a1:e0:96:e4:4c:
                    4d:c1:69:71:d8:da:43:9d:48:16:62:59:5b:46:46:
                    b8:3c:5a:48:6d:1e:13:63:24:56:69:0c:f5:ee:73:
                    99:b8:a6:c4:22:a5:07:f1:38:1c:d5:01:5a:26:71:
                    d7:08:f7:72:41:78:b2:8e:45:d8:f5:42:5f:ac:8a:
                    67:42:00:9b:38:5a:de:27:1c:7c:10:ec:59:27:8f:
                    8d:9c:20:04:a0:1d:48:d0:87:3a:db:b2:fe:7a:8f:
                    d3:52:d9:06:70:bb:9b:76:de:e2:82:11:75:6d:ed:
                    1b:ce:c8:96:0d:63:f1:69:ab:2c:e3:45:78:44:5a:
                    4a:a7:42:97:cf:d4:44:ad:7e:ae:0c:88:75:3e:de:
                    7a:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:1A:D3:E9:E1:35:51:12:4D:3C:65:D3:5F:78:2F:3D:DB:21:C0:D9
            X509v3 Authority Key Identifier:
                keyid:59:4B:E5:FA:24:FD:67:F4:DB:4A:E3:FC:A9:85:6F:F0:88:15:39:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WUvl-iT9Z_TbSuP8qYVv8IgVOdI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4dd151-6f2d-4a62-8862-13d9301f7c0a/1/WUvl-iT9Z_TbSuP8qYVv8IgVOdI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4dd151-6f2d-4a62-8862-13d9301f7c0a/1/WUvl-iT9Z_TbSuP8qYVv8IgVOdI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:f6:78:8d:df:93:02:2b:0a:91:26:e7:2b:bc:a1:be:76:9a:
         78:f3:6b:82:b8:6a:fb:c0:3a:1a:23:97:aa:cf:e4:fc:cb:2a:
         57:74:d1:ae:8d:b7:e4:4c:6a:11:28:d7:81:2e:e1:5a:49:66:
         7a:29:f9:b5:89:0f:2f:60:7e:69:48:f3:80:7e:96:79:fc:84:
         22:5c:1e:79:c1:1f:a8:53:10:14:e3:1c:e2:4c:e9:e1:11:b7:
         46:71:f7:0d:1b:bb:fa:15:f4:45:d8:72:a4:88:fa:4a:41:aa:
         54:fa:10:00:cf:37:69:2b:60:8f:16:9c:8a:4a:01:a2:a7:cf:
         99:8e:2f:02:cf:fa:45:13:8c:68:cf:07:12:d5:34:d8:97:d5:
         8c:b5:87:e9:da:74:2b:88:20:7a:26:3d:c8:d3:32:83:cb:5c:
         dd:dc:15:55:d0:87:58:22:97:88:69:2f:6c:04:0a:39:9e:dc:
         f6:d1:50:4c:26:aa:ce:55:64:c7:30:00:5e:d2:59:95:f1:2c:
         4f:3b:64:4e:c5:c1:d4:a0:3f:c2:f4:0b:bd:53:65:bd:4d:76:
         37:69:39:af:20:c3:bb:85:5e:67:af:0d:f3:50:dd:2f:ef:f2:
         d2:75:26:12:ba:56:38:5d:9d:29:3a:40:b1:07:81:bd:3f:84:
         98:c3:10:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWzUiWv8BE1K5ar3w88VPKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5NGJlNWZhMjRmZDY3ZjRkYjRhZTNmY2E5ODU2ZmYwODgx
NTM5ZDIwHhcNMjUwODIzMTIwMDM0WhcNMjUwODI0MTIwMDM0WjAzMTEwLwYDVQQD
EyhkYjFhZDNlOWUxMzU1MTEyNGQzYzY1ZDM1Zjc4MmYzZGRiMjFjMGQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqybqIRK+8oFxCBj/2vfD5J6yh2hJ
06YZ2NfKZlu0B/1HQKnRHoNbxbzOz5tySJo30aSc+nh38lMu8J1g/94iklwrmpgN
kg9jv9BwyIPwKKEGz9t3Kf582IubegpMLq08vkYRm3IXcT6Xg3LkGCZGlp45oeCW
5ExNwWlx2NpDnUgWYllbRka4PFpIbR4TYyRWaQz17nOZuKbEIqUH8Tgc1QFaJnHX
CPdyQXiyjkXY9UJfrIpnQgCbOFreJxx8EOxZJ4+NnCAEoB1I0Ic627L+eo/TUtkG
cLubdt7ighF1be0bzsiWDWPxaass40V4RFpKp0KXz9RErX6uDIh1Pt56wwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNsa0+nhNVESTTxl0194Lz3bIcDZMB8GA1UdIwQY
MBaAFFlL5fok/Wf020rj/KmFb/CIFTnSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1V2bC1pVDlaX1RiU3VQOHFZVnY4SWdWT2RJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy80ZGQxNTEtNmYyZC00YTYyLTg4NjIt
MTNkOTMwMWY3YzBhLzEvV1V2bC1pVDlaX1RiU3VQOHFZVnY4SWdWT2RJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy80ZGQxNTEtNmYyZC00YTYyLTg4NjItMTNkOTMwMWY3YzBh
LzEvV1V2bC1pVDlaX1RiU3VQOHFZVnY4SWdWT2RJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsfZ4jd+T
AisKkSbnK7yhvnaaePNrgrhq+8A6GiOXqs/k/MsqV3TRro235ExqESjXgS7hWklm
ein5tYkPL2B+aUjzgH6WefyEIlweecEfqFMQFOMc4kzp4RG3RnH3DRu7+hX0Rdhy
pIj6SkGqVPoQAM83aStgjxacikoBoqfPmY4vAs/6RROMaM8HEtU02JfVjLWH6dp0
K4ggeiY9yNMyg8tc3dwVVdCHWCKXiGkvbAQKOZ7c9tFQTCaqzlVkxzAAXtJZlfEs
TztkTsXB1KA/wvQLvVNlvU12N2k5ryDDu4VeZ68N81DdL+/y0nUmErpWOF2dKTpA
sQeBvT+EmMMQXw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 16:07:27 2025 by rpki-client