Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/da7fe1-4627-483d-8832-269a6b823b7e/1/w27RUSe_ywvNemOGi0mck8szURM.mft
File:                     w27RUSe_ywvNemOGi0mck8szURM.mft (raw, json)
Hash identifier:          KfE+L1HgnFc8AwUYshwhQGaUQZw2NzYyDxSdBWBt2P0=
Subject key identifier:   89:78:27:3E:D3:FF:FF:21:E4:6A:B1:89:D9:63:22:08:45:9C:6C:F2
Authority key identifier: C3:6E:D1:51:27:BF:CB:0B:CD:7A:63:86:8B:49:9C:93:CB:33:51:13
Certificate issuer:       /CN=c36ed15127bfcb0bcd7a63868b499c93cb335113
Certificate serial:       0199FFC7D8B92CCFF436200951FB372861FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w27RUSe_ywvNemOGi0mck8szURM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/da7fe1-4627-483d-8832-269a6b823b7e/1/w27RUSe_ywvNemOGi0mck8szURM.mft
Manifest number:          0198
Signing time:             Mon 20 Oct 2025 04:01:51 +0000
Manifest this update:     Mon 20 Oct 2025 04:01:51 +0000
Manifest next update:     Tue 21 Oct 2025 04:01:51 +0000
Files and hashes:         1: w27RUSe_ywvNemOGi0mck8szURM.crl (hash: RddfzpM2qVg3YU6RPNe45nXSPBhP3AV0iI5NomsdMEI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/da7fe1-4627-483d-8832-269a6b823b7e/1/w27RUSe_ywvNemOGi0mck8szURM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/da7fe1-4627-483d-8832-269a6b823b7e/1/w27RUSe_ywvNemOGi0mck8szURM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w27RUSe_ywvNemOGi0mck8szURM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:ff:c7:d8:b9:2c:cf:f4:36:20:09:51:fb:37:28:61:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c36ed15127bfcb0bcd7a63868b499c93cb335113
        Validity
            Not Before: Oct 20 04:01:51 2025 GMT
            Not After : Oct 21 04:01:51 2025 GMT
        Subject: CN=8978273ed3ffff21e46ab189d9632208459c6cf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:46:13:75:16:af:d1:fb:8a:4f:4c:99:f6:89:
                    53:6c:86:c9:db:4d:7c:79:e6:45:d3:a6:f8:69:e2:
                    18:e1:fe:3b:38:94:5a:9f:9f:48:0e:45:77:83:bd:
                    e3:5a:8a:c6:0d:5a:ea:8f:d5:c9:17:3c:ba:97:b7:
                    63:55:c1:3c:5e:23:4f:e7:cd:48:fc:7f:dc:9e:97:
                    10:1b:60:48:5b:9e:88:d5:7f:84:24:a2:b8:d5:62:
                    df:4e:09:2f:ce:30:e3:42:d1:85:28:d2:e8:22:ad:
                    39:08:69:9f:76:f9:9d:de:d4:b5:ae:2c:d6:91:3f:
                    cd:77:94:e9:17:65:cf:81:45:15:ac:58:15:58:9e:
                    01:94:3c:6b:45:ee:20:5c:2c:5f:f8:90:84:fd:ba:
                    41:f9:f8:f0:ed:75:00:4e:a6:d4:06:a0:4c:a1:94:
                    82:68:dd:ed:96:21:aa:8f:34:88:1b:d7:03:a9:9b:
                    7e:bf:55:b1:e8:80:60:44:23:0a:0f:95:c7:5f:77:
                    a6:d3:72:de:ac:05:d9:8b:93:55:cc:b3:9e:44:f3:
                    b2:e7:2f:c2:9c:7f:86:de:56:e0:96:0f:51:bb:21:
                    6d:3d:60:c0:b6:e3:83:b4:7b:0a:f1:da:d5:d9:be:
                    99:3b:37:db:fe:b3:31:53:b5:78:e7:b7:d5:2e:17:
                    73:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:78:27:3E:D3:FF:FF:21:E4:6A:B1:89:D9:63:22:08:45:9C:6C:F2
            X509v3 Authority Key Identifier:
                keyid:C3:6E:D1:51:27:BF:CB:0B:CD:7A:63:86:8B:49:9C:93:CB:33:51:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w27RUSe_ywvNemOGi0mck8szURM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/da7fe1-4627-483d-8832-269a6b823b7e/1/w27RUSe_ywvNemOGi0mck8szURM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/da7fe1-4627-483d-8832-269a6b823b7e/1/w27RUSe_ywvNemOGi0mck8szURM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d5:f8:8b:38:f5:ee:94:08:f8:16:16:a8:c7:52:e5:be:e9:a9:
         4c:a7:e1:c4:8f:9a:ad:52:6e:c0:34:d7:67:ff:92:35:f1:b3:
         40:8c:c6:19:32:0c:9d:90:f4:71:63:e9:56:16:d7:b3:77:e6:
         98:46:4e:5a:65:be:49:13:13:b0:39:da:21:a5:63:97:58:e3:
         16:ec:88:40:dd:d4:e1:02:d7:4b:3f:bb:17:ea:0d:f5:4a:06:
         a7:11:fe:af:11:91:50:f8:c0:a6:fd:a8:c0:2b:62:bb:05:ab:
         70:da:70:76:8f:b1:5e:97:d8:3a:95:ff:af:90:d7:85:33:cb:
         d9:53:cb:8f:23:47:95:74:23:69:ac:4c:d6:e5:89:63:6b:03:
         78:3e:5c:a8:ec:96:e3:c0:ae:e9:24:43:8d:27:13:79:35:a3:
         12:81:2c:1c:ac:15:81:04:76:a8:ea:b9:04:96:de:9e:fe:a7:
         4e:b1:f1:0d:80:41:23:f2:47:e6:dd:cf:91:c5:ed:2e:aa:c4:
         31:c2:a1:ce:6b:7e:89:bf:ed:13:c8:5c:a6:fa:8e:f8:cd:cd:
         db:8c:13:37:bc:e4:f9:b7:80:a5:ea:c7:f9:5a:ff:56:0d:89:
         1c:d7:f1:93:54:40:7f:2f:01:5c:f5:12:8c:90:75:48:5e:3d:
         90:8a:bd:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/x9i5LM/0NiAJUfs3KGH8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzNmVkMTUxMjdiZmNiMGJjZDdhNjM4NjhiNDk5YzkzY2Iz
MzUxMTMwHhcNMjUxMDIwMDQwMTUxWhcNMjUxMDIxMDQwMTUxWjAzMTEwLwYDVQQD
Eyg4OTc4MjczZWQzZmZmZjIxZTQ2YWIxODlkOTYzMjIwODQ1OWM2Y2YyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkYTdRav0fuKT0yZ9olTbIbJ2018
eeZF06b4aeIY4f47OJRan59IDkV3g73jWorGDVrqj9XJFzy6l7djVcE8XiNP581I
/H/cnpcQG2BIW56I1X+EJKK41WLfTgkvzjDjQtGFKNLoIq05CGmfdvmd3tS1rizW
kT/Nd5TpF2XPgUUVrFgVWJ4BlDxrRe4gXCxf+JCE/bpB+fjw7XUATqbUBqBMoZSC
aN3tliGqjzSIG9cDqZt+v1Wx6IBgRCMKD5XHX3em03LerAXZi5NVzLOeRPOy5y/C
nH+G3lbglg9RuyFtPWDAtuODtHsK8drV2b6ZOzfb/rMxU7V457fVLhdz0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIl4Jz7T//8h5GqxidljIghFnGzyMB8GA1UdIwQY
MBaAFMNu0VEnv8sLzXpjhotJnJPLM1ETMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzI3UlVTZV95d3ZOZW1PR2kwbWNrOHN6VVJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9kYTdmZTEtNDYyNy00ODNkLTg4MzIt
MjY5YTZiODIzYjdlLzEvdzI3UlVTZV95d3ZOZW1PR2kwbWNrOHN6VVJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS9kYTdmZTEtNDYyNy00ODNkLTg4MzItMjY5YTZiODIzYjdl
LzEvdzI3UlVTZV95d3ZOZW1PR2kwbWNrOHN6VVJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1fiLOPXu
lAj4Fhaox1LlvumpTKfhxI+arVJuwDTXZ/+SNfGzQIzGGTIMnZD0cWPpVhbXs3fm
mEZOWmW+SRMTsDnaIaVjl1jjFuyIQN3U4QLXSz+7F+oN9UoGpxH+rxGRUPjApv2o
wCtiuwWrcNpwdo+xXpfYOpX/r5DXhTPL2VPLjyNHlXQjaaxM1uWJY2sDeD5cqOyW
48Cu6SRDjScTeTWjEoEsHKwVgQR2qOq5BJbenv6nTrHxDYBBI/JH5t3PkcXtLqrE
McKhzmt+ib/tE8hcpvqO+M3N24wTN7zk+beAperH+Vr/Vg2JHNfxk1RAfy8BXPUS
jJB1SF49kIq9Bw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 08:57:05 2025 by rpki-client