Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/eb3ab5-56cd-4227-b06d-a6ce38f3d1d8/1/w1k2RMcJGfYIPygZpz89Oeucteg.mft
File:                     w1k2RMcJGfYIPygZpz89Oeucteg.mft (raw, json)
Hash identifier:          IF1CaujEDMzuT0l8qSPVaS6F0kk6MMVwgiriTt6tRhY=
Subject key identifier:   24:65:56:18:01:17:2D:C6:E4:51:52:99:A1:D4:77:5A:12:DB:A5:8F
Authority key identifier: C3:59:36:44:C7:09:19:F6:08:3F:28:19:A7:3F:3D:39:EB:9C:B5:E8
Certificate issuer:       /CN=c3593644c70919f6083f2819a73f3d39eb9cb5e8
Certificate serial:       0198D51574EF8B6F908D7FAF4771AA8BE08E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w1k2RMcJGfYIPygZpz89Oeucteg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/eb3ab5-56cd-4227-b06d-a6ce38f3d1d8/1/w1k2RMcJGfYIPygZpz89Oeucteg.mft
Manifest number:          0F0E
Signing time:             Sat 23 Aug 2025 04:00:09 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:09 +0000
Manifest next update:     Sun 24 Aug 2025 04:00:09 +0000
Files and hashes:         1: w1k2RMcJGfYIPygZpz89Oeucteg.crl (hash: LpoeKqJLQYAZtyvhf5jdObwkdlPkWIVtyI52h0nVN4I=)
                          2: zwDf_kkH_sbuGk9WPwUaPDjfffs.roa (hash: EodK3W1jmYTJC73uP7dzhnrwbPzudn9QK+eDEFeCQfI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/eb3ab5-56cd-4227-b06d-a6ce38f3d1d8/1/w1k2RMcJGfYIPygZpz89Oeucteg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/eb3ab5-56cd-4227-b06d-a6ce38f3d1d8/1/w1k2RMcJGfYIPygZpz89Oeucteg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w1k2RMcJGfYIPygZpz89Oeucteg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 04:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:15:74:ef:8b:6f:90:8d:7f:af:47:71:aa:8b:e0:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3593644c70919f6083f2819a73f3d39eb9cb5e8
        Validity
            Not Before: Aug 23 04:00:09 2025 GMT
            Not After : Aug 24 04:00:09 2025 GMT
        Subject: CN=2465561801172dc6e4515299a1d4775a12dba58f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:59:17:0c:68:bd:e8:3f:cc:ae:6b:80:75:53:
                    c0:c8:c4:b0:04:3b:42:31:86:b8:14:b3:42:bb:2a:
                    6e:fe:10:9a:01:ed:4d:83:b4:87:11:32:39:4a:00:
                    37:71:c8:32:9f:e5:76:f4:a2:e3:47:58:d4:f0:ba:
                    cf:e2:66:19:46:20:7a:af:4a:66:08:3e:85:40:cf:
                    c8:b5:2c:2a:69:a8:3a:f4:ce:a8:a7:39:bf:68:eb:
                    12:ca:de:45:59:8f:91:63:49:11:01:26:63:99:9b:
                    f8:48:72:22:ef:f1:35:fe:b2:4a:fe:12:2a:05:06:
                    27:dc:47:d6:4d:84:bc:82:7c:b2:51:01:e5:27:38:
                    93:6c:ce:48:20:2a:22:2c:fd:a2:23:65:e2:ac:17:
                    af:01:3a:da:b3:b7:0b:43:d9:2b:5e:84:e7:66:16:
                    b9:58:f2:50:c9:ba:f9:cd:98:cf:62:f1:03:d2:8e:
                    8c:c5:19:11:cb:08:22:23:d6:71:ef:f3:4b:b6:d1:
                    77:cc:4f:fc:fa:13:58:7c:de:59:ad:e6:20:21:00:
                    af:9e:85:9f:24:a4:b5:a7:f9:dc:7b:79:f2:a6:7a:
                    d2:90:cb:5c:2c:ad:3b:b5:4d:dc:98:6e:ff:f1:3a:
                    65:1b:74:40:33:54:52:09:5d:b2:15:e8:e2:de:88:
                    05:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:65:56:18:01:17:2D:C6:E4:51:52:99:A1:D4:77:5A:12:DB:A5:8F
            X509v3 Authority Key Identifier:
                keyid:C3:59:36:44:C7:09:19:F6:08:3F:28:19:A7:3F:3D:39:EB:9C:B5:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w1k2RMcJGfYIPygZpz89Oeucteg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/eb3ab5-56cd-4227-b06d-a6ce38f3d1d8/1/w1k2RMcJGfYIPygZpz89Oeucteg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/eb3ab5-56cd-4227-b06d-a6ce38f3d1d8/1/w1k2RMcJGfYIPygZpz89Oeucteg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:bf:86:66:a2:9a:47:f4:94:a4:db:f2:d1:8e:ed:52:b9:42:
         b0:0d:73:96:a6:d7:82:47:ed:f5:1d:4c:ff:31:e8:cd:2d:94:
         29:12:e3:69:27:cb:db:90:7a:84:f1:a0:66:23:09:27:bb:b0:
         92:f3:e4:43:30:61:9a:4a:2d:2d:d8:32:42:34:d8:e8:9a:93:
         78:1a:05:44:34:b2:a5:37:69:2a:bc:47:5a:01:ae:61:bf:77:
         c5:4b:54:a5:81:7f:24:d4:24:00:41:9c:03:a4:a2:cb:51:6d:
         c0:ff:bc:02:98:dc:c9:09:5d:9e:64:97:cd:c6:80:0e:0f:4d:
         17:b7:20:ee:33:62:e6:db:c1:9f:32:3f:20:f9:b2:e0:9f:74:
         93:02:c8:90:bd:c9:00:e9:a4:85:bc:66:19:da:93:92:65:3c:
         a4:ff:da:b8:3f:c7:d0:d6:6d:ca:d8:2c:ab:ab:2f:0a:b4:c5:
         c8:c4:a4:f5:e2:1d:d5:a1:33:f0:97:0f:32:28:9b:47:d4:c0:
         68:e0:56:af:60:5a:0a:3d:2f:cd:78:f5:08:cd:ce:61:21:d6:
         3e:27:71:e9:b7:df:96:d7:bc:22:57:a0:51:44:65:87:1e:c9:
         04:7b:60:60:e8:8c:01:11:a6:00:e4:c5:93:e7:04:f7:b3:06:
         86:2f:b0:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFXTvi2+QjX+vR3Gqi+COMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzNTkzNjQ0YzcwOTE5ZjYwODNmMjgxOWE3M2YzZDM5ZWI5
Y2I1ZTgwHhcNMjUwODIzMDQwMDA5WhcNMjUwODI0MDQwMDA5WjAzMTEwLwYDVQQD
EygyNDY1NTYxODAxMTcyZGM2ZTQ1MTUyOTlhMWQ0Nzc1YTEyZGJhNThmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA41kXDGi96D/MrmuAdVPAyMSwBDtC
MYa4FLNCuypu/hCaAe1Ng7SHETI5SgA3ccgyn+V29KLjR1jU8LrP4mYZRiB6r0pm
CD6FQM/ItSwqaag69M6opzm/aOsSyt5FWY+RY0kRASZjmZv4SHIi7/E1/rJK/hIq
BQYn3EfWTYS8gnyyUQHlJziTbM5IICoiLP2iI2XirBevATras7cLQ9krXoTnZha5
WPJQybr5zZjPYvED0o6MxRkRywgiI9Zx7/NLttF3zE/8+hNYfN5ZreYgIQCvnoWf
JKS1p/nce3nypnrSkMtcLK07tU3cmG7/8TplG3RAM1RSCV2yFeji3ogF+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCRlVhgBFy3G5FFSmaHUd1oS26WPMB8GA1UdIwQY
MBaAFMNZNkTHCRn2CD8oGac/PTnrnLXoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzFrMlJNY0pHZllJUHlnWnB6ODlPZXVjdGVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9lYjNhYjUtNTZjZC00MjI3LWIwNmQt
YTZjZTM4ZjNkMWQ4LzEvdzFrMlJNY0pHZllJUHlnWnB6ODlPZXVjdGVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny9lYjNhYjUtNTZjZC00MjI3LWIwNmQtYTZjZTM4ZjNkMWQ4
LzEvdzFrMlJNY0pHZllJUHlnWnB6ODlPZXVjdGVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH7+GZqKa
R/SUpNvy0Y7tUrlCsA1zlqbXgkft9R1M/zHozS2UKRLjaSfL25B6hPGgZiMJJ7uw
kvPkQzBhmkotLdgyQjTY6JqTeBoFRDSypTdpKrxHWgGuYb93xUtUpYF/JNQkAEGc
A6Siy1FtwP+8ApjcyQldnmSXzcaADg9NF7cg7jNi5tvBnzI/IPmy4J90kwLIkL3J
AOmkhbxmGdqTkmU8pP/auD/H0NZtytgsq6svCrTFyMSk9eId1aEz8JcPMiibR9TA
aOBWr2BaCj0vzXj1CM3OYSHWPidx6bfflte8IlegUURlhx7JBHtgYOiMARGmAOTF
k+cE97MGhi+wcQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:26 2025 by rpki-client