Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/bb7335-b8c9-4e41-b124-bf9e37b7b870/1/wFLV2TVyLCxcxJ8FLNWlqPFFc2s.mft
File:                     wFLV2TVyLCxcxJ8FLNWlqPFFc2s.mft (raw, json)
Hash identifier:          QPAYa4uicH/9RxTyvS6jD+dl6c/NGuiU29oPReCbb/A=
Subject key identifier:   82:34:82:51:E9:02:9F:FB:CD:59:6E:D8:CE:7A:46:FA:44:7E:1D:7C
Authority key identifier: C0:52:D5:D9:35:72:2C:2C:5C:C4:9F:05:2C:D5:A5:A8:F1:45:73:6B
Certificate issuer:       /CN=c052d5d935722c2c5cc49f052cd5a5a8f145736b
Certificate serial:       0198D5BBAC890EAC6B2220FCAA7DF25A8321
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wFLV2TVyLCxcxJ8FLNWlqPFFc2s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/bb7335-b8c9-4e41-b124-bf9e37b7b870/1/wFLV2TVyLCxcxJ8FLNWlqPFFc2s.mft
Manifest number:          1518
Signing time:             Sat 23 Aug 2025 07:01:43 +0000
Manifest this update:     Sat 23 Aug 2025 07:01:43 +0000
Manifest next update:     Sun 24 Aug 2025 07:01:43 +0000
Files and hashes:         1: wFLV2TVyLCxcxJ8FLNWlqPFFc2s.crl (hash: 6Y0qHk37PvD2G0gBXszP4P4gGKrOLjuPLhFUdylN/Mc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/bb7335-b8c9-4e41-b124-bf9e37b7b870/1/wFLV2TVyLCxcxJ8FLNWlqPFFc2s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/bb7335-b8c9-4e41-b124-bf9e37b7b870/1/wFLV2TVyLCxcxJ8FLNWlqPFFc2s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wFLV2TVyLCxcxJ8FLNWlqPFFc2s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:bb:ac:89:0e:ac:6b:22:20:fc:aa:7d:f2:5a:83:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c052d5d935722c2c5cc49f052cd5a5a8f145736b
        Validity
            Not Before: Aug 23 07:01:43 2025 GMT
            Not After : Aug 24 07:01:43 2025 GMT
        Subject: CN=82348251e9029ffbcd596ed8ce7a46fa447e1d7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b3:a7:23:2a:3c:da:ed:f7:61:f4:b9:38:61:
                    df:4a:75:ad:f2:17:5e:36:35:81:31:4f:38:dc:31:
                    14:d8:63:9c:c9:05:4b:b3:0f:64:78:c1:c6:a8:c4:
                    08:d0:43:1e:7b:7f:b1:b7:b1:3f:d2:44:fd:a7:0a:
                    45:51:34:17:ed:c7:fe:e5:cc:fc:ca:88:44:c8:e9:
                    34:58:34:5b:e9:25:b8:cb:da:24:53:a6:09:a6:4d:
                    7b:16:55:e9:14:bd:35:38:04:7f:83:b9:a6:53:7f:
                    42:3a:5d:7a:9d:8e:3d:80:0e:ad:27:3c:4f:0b:bd:
                    80:64:de:c1:ff:c7:38:86:da:ae:2b:20:e3:fa:7c:
                    2e:3a:64:e6:6b:d3:fd:ca:9f:1a:14:43:b3:2c:c7:
                    57:2b:c5:33:6d:21:f8:87:a5:ef:06:37:38:87:2a:
                    2c:ef:c6:fe:0b:84:0a:f8:15:79:d6:74:b7:36:7d:
                    b1:f4:51:f9:7c:5a:45:b3:84:0b:ec:54:69:4b:e9:
                    df:34:af:2f:d8:b2:68:c2:04:b8:53:0b:a6:bc:df:
                    64:1e:a4:ef:5b:91:2e:e6:ea:6a:a0:46:2f:0a:74:
                    ed:48:83:ba:65:2b:77:0a:13:21:b6:67:68:bf:48:
                    b0:0b:a6:a7:22:1e:f0:02:85:4f:19:95:3b:83:0e:
                    cf:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:34:82:51:E9:02:9F:FB:CD:59:6E:D8:CE:7A:46:FA:44:7E:1D:7C
            X509v3 Authority Key Identifier:
                keyid:C0:52:D5:D9:35:72:2C:2C:5C:C4:9F:05:2C:D5:A5:A8:F1:45:73:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wFLV2TVyLCxcxJ8FLNWlqPFFc2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/bb7335-b8c9-4e41-b124-bf9e37b7b870/1/wFLV2TVyLCxcxJ8FLNWlqPFFc2s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/bb7335-b8c9-4e41-b124-bf9e37b7b870/1/wFLV2TVyLCxcxJ8FLNWlqPFFc2s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:2d:14:52:76:c2:4b:94:7f:f5:01:4f:a5:cf:66:8a:25:e0:
         c7:c4:a2:bc:8b:51:38:07:3d:e3:15:20:94:1b:eb:a6:e4:f8:
         92:51:45:a1:6c:bb:85:fb:ed:52:dc:f9:96:8c:20:85:b7:42:
         49:71:15:5d:d1:1c:0a:f7:f7:4a:78:39:22:36:8d:f0:4c:fb:
         bb:05:69:56:30:c2:30:ec:93:76:7d:d5:4a:28:e1:93:2c:28:
         b4:78:29:50:fc:b1:1d:52:1b:aa:cd:2a:2f:69:73:c0:83:07:
         cd:dc:05:74:55:0e:87:12:19:37:fe:1b:01:d9:25:b9:f1:f1:
         d5:1d:a6:7f:da:ce:97:83:0c:ee:5f:00:87:eb:cb:21:24:c0:
         75:c3:73:0e:94:6d:a2:82:93:c7:25:ec:39:3b:73:ec:60:82:
         b1:eb:19:5b:b7:33:35:b3:52:a7:68:35:e0:c9:3a:a6:5a:07:
         25:42:81:cb:15:02:07:da:f9:a5:5b:40:fa:0d:e5:e6:c2:e0:
         a8:e7:7a:15:7f:20:a3:6b:28:cb:64:b3:ce:81:89:82:9d:68:
         4a:18:93:d5:df:f1:ed:d2:4e:50:69:99:cc:1c:ce:5a:3a:d2:
         46:b9:14:13:d8:47:31:73:89:af:01:96:ee:33:d0:13:c9:a7:
         94:88:62:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVu6yJDqxrIiD8qn3yWoMhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwNTJkNWQ5MzU3MjJjMmM1Y2M0OWYwNTJjZDVhNWE4ZjE0
NTczNmIwHhcNMjUwODIzMDcwMTQzWhcNMjUwODI0MDcwMTQzWjAzMTEwLwYDVQQD
Eyg4MjM0ODI1MWU5MDI5ZmZiY2Q1OTZlZDhjZTdhNDZmYTQ0N2UxZDdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbOnIyo82u33YfS5OGHfSnWt8hde
NjWBMU843DEU2GOcyQVLsw9keMHGqMQI0EMee3+xt7E/0kT9pwpFUTQX7cf+5cz8
yohEyOk0WDRb6SW4y9okU6YJpk17FlXpFL01OAR/g7mmU39COl16nY49gA6tJzxP
C72AZN7B/8c4htquKyDj+nwuOmTma9P9yp8aFEOzLMdXK8UzbSH4h6XvBjc4hyos
78b+C4QK+BV51nS3Nn2x9FH5fFpFs4QL7FRpS+nfNK8v2LJowgS4UwumvN9kHqTv
W5Eu5upqoEYvCnTtSIO6ZSt3ChMhtmdov0iwC6anIh7wAoVPGZU7gw7PZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFII0glHpAp/7zVlu2M56RvpEfh18MB8GA1UdIwQY
MBaAFMBS1dk1ciwsXMSfBSzVpajxRXNrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd0ZMVjJUVnlMQ3hjeEo4RkxOV2xxUEZGYzJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9iYjczMzUtYjhjOS00ZTQxLWIxMjQt
YmY5ZTM3YjdiODcwLzEvd0ZMVjJUVnlMQ3hjeEo4RkxOV2xxUEZGYzJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni9iYjczMzUtYjhjOS00ZTQxLWIxMjQtYmY5ZTM3YjdiODcw
LzEvd0ZMVjJUVnlMQ3hjeEo4RkxOV2xxUEZGYzJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVC0UUnbC
S5R/9QFPpc9miiXgx8SivItROAc94xUglBvrpuT4klFFoWy7hfvtUtz5lowghbdC
SXEVXdEcCvf3Sng5IjaN8Ez7uwVpVjDCMOyTdn3VSijhkywotHgpUPyxHVIbqs0q
L2lzwIMHzdwFdFUOhxIZN/4bAdklufHx1R2mf9rOl4MM7l8Ah+vLISTAdcNzDpRt
ooKTxyXsOTtz7GCCsesZW7czNbNSp2g14Mk6ploHJUKByxUCB9r5pVtA+g3l5sLg
qOd6FX8go2soy2SzzoGJgp1oShiT1d/x7dJOUGmZzBzOWjrSRrkUE9hHMXOJrwGW
7jPQE8mnlIhijg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:26:29 2025 by rpki-client