Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/461a83-810c-43ae-ac25-64e2bd619318/1/wWD3u-jXY2d3YUisuMTKNflr6Vc.mft
File:                     wWD3u-jXY2d3YUisuMTKNflr6Vc.mft (raw, json)
Hash identifier:          OdH56XVbEgVHyvFfcjXwYQv4SF5hY7acJiOLGtmiR2c=
Subject key identifier:   42:3D:26:CE:DB:1F:23:72:83:37:90:C8:28:75:3D:1F:8B:5A:D0:09
Authority key identifier: C1:60:F7:BB:E8:D7:63:67:77:61:48:AC:B8:C4:CA:35:F9:6B:E9:57
Certificate issuer:       /CN=c160f7bbe8d76367776148acb8c4ca35f96be957
Certificate serial:       0197B6A1F65037B4F9FDBA3F9766F347ADDC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wWD3u-jXY2d3YUisuMTKNflr6Vc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/461a83-810c-43ae-ac25-64e2bd619318/1/wWD3u-jXY2d3YUisuMTKNflr6Vc.mft
Manifest number:          1587
Signing time:             Sat 28 Jun 2025 13:02:37 +0000
Manifest this update:     Sat 28 Jun 2025 13:02:37 +0000
Manifest next update:     Sun 29 Jun 2025 13:02:37 +0000
Files and hashes:         1: wWD3u-jXY2d3YUisuMTKNflr6Vc.crl (hash: 2UCdYf/QhUbZY0wE09kCVDFRK/smyN9W5NDWQ46YwFA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/461a83-810c-43ae-ac25-64e2bd619318/1/wWD3u-jXY2d3YUisuMTKNflr6Vc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/461a83-810c-43ae-ac25-64e2bd619318/1/wWD3u-jXY2d3YUisuMTKNflr6Vc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wWD3u-jXY2d3YUisuMTKNflr6Vc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:02:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a1:f6:50:37:b4:f9:fd:ba:3f:97:66:f3:47:ad:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c160f7bbe8d76367776148acb8c4ca35f96be957
        Validity
            Not Before: Jun 28 13:02:37 2025 GMT
            Not After : Jun 29 13:02:37 2025 GMT
        Subject: CN=423d26cedb1f2372833790c828753d1f8b5ad009
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:58:ea:d4:4a:80:79:48:89:01:b0:b1:34:83:
                    35:91:e6:24:9a:23:aa:ff:b7:77:70:fa:3e:5c:a1:
                    13:6d:95:79:17:8f:95:be:25:91:0e:eb:6d:25:21:
                    1a:1c:07:e1:8f:0b:3c:86:92:20:15:85:1b:d2:56:
                    91:8c:49:b4:09:d4:30:a5:c1:91:61:4c:e4:c8:7e:
                    71:88:4d:26:97:fa:b1:4b:e7:a5:d2:ab:6c:6b:f3:
                    0e:a3:3d:79:3c:63:44:6b:09:df:e9:bf:6e:c8:fe:
                    2d:90:09:62:4a:ff:7c:c1:ca:8b:22:46:fe:42:17:
                    51:17:bc:73:ea:0e:8e:9e:19:4c:74:5b:5f:ae:ac:
                    36:f6:63:e0:1f:28:02:8d:9f:d2:c4:65:f2:64:83:
                    1e:15:d7:37:9e:47:25:9a:e6:27:a3:8c:d0:ed:a2:
                    9b:f4:47:f5:eb:91:d3:d8:cd:ea:6b:c4:6b:76:14:
                    5c:8e:05:45:87:62:dd:55:43:dc:64:93:89:4c:2a:
                    f7:e6:51:52:31:03:2a:a6:fe:13:fc:f3:f4:75:04:
                    45:44:df:e9:c5:ef:fc:eb:2d:ca:89:be:ef:2f:37:
                    e6:ff:fb:a6:98:06:02:be:89:c3:49:2e:c8:e6:22:
                    36:18:21:47:ac:5d:a2:cc:21:d8:fe:51:99:8b:1e:
                    50:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:3D:26:CE:DB:1F:23:72:83:37:90:C8:28:75:3D:1F:8B:5A:D0:09
            X509v3 Authority Key Identifier:
                keyid:C1:60:F7:BB:E8:D7:63:67:77:61:48:AC:B8:C4:CA:35:F9:6B:E9:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wWD3u-jXY2d3YUisuMTKNflr6Vc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/461a83-810c-43ae-ac25-64e2bd619318/1/wWD3u-jXY2d3YUisuMTKNflr6Vc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/461a83-810c-43ae-ac25-64e2bd619318/1/wWD3u-jXY2d3YUisuMTKNflr6Vc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:ea:bb:c2:07:d6:52:1e:8b:56:1e:e5:47:f5:50:8d:d8:22:
         a8:82:40:bb:f7:49:43:ff:d3:e4:c3:1b:2e:48:2c:b2:23:4d:
         7c:69:d7:44:87:61:c6:6a:22:45:0f:47:b4:01:4e:83:5d:1c:
         c5:21:a8:54:79:09:e6:ec:e6:11:3d:10:e9:2e:1a:ab:14:b2:
         b0:84:b3:56:10:bd:2a:59:9d:86:f9:89:12:8e:6b:5c:b3:09:
         c6:98:9f:f9:f8:f0:7e:41:85:41:7d:5e:3b:49:50:15:d1:f6:
         9d:ef:a3:48:3e:ee:4a:d5:4d:b1:7a:61:60:20:52:76:66:7c:
         d8:37:59:8b:ee:61:c4:10:14:5d:f2:fe:ee:83:12:e0:53:40:
         18:64:d2:31:39:34:7d:4e:b6:8a:f6:f5:a3:55:0b:82:91:5e:
         b5:76:91:0c:b3:dc:f9:9b:cf:d8:e3:a1:d3:af:51:14:e1:ed:
         c1:0b:be:4f:bc:a7:1c:6b:6c:92:ee:84:94:7b:44:86:04:a5:
         ed:06:aa:05:aa:5e:8c:6d:30:27:c9:1b:8d:3f:6f:ca:b3:67:
         36:a8:f0:1c:f8:d7:9b:36:86:08:5d:e9:65:9a:95:5e:1f:c2:
         47:00:fa:78:87:7b:e0:94:8a:f2:95:28:ab:86:1b:02:9d:36:
         0d:3a:4f:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2ofZQN7T5/bo/l2bzR63cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxNjBmN2JiZThkNzYzNjc3NzYxNDhhY2I4YzRjYTM1Zjk2
YmU5NTcwHhcNMjUwNjI4MTMwMjM3WhcNMjUwNjI5MTMwMjM3WjAzMTEwLwYDVQQD
Eyg0MjNkMjZjZWRiMWYyMzcyODMzNzkwYzgyODc1M2QxZjhiNWFkMDA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtljq1EqAeUiJAbCxNIM1keYkmiOq
/7d3cPo+XKETbZV5F4+VviWRDuttJSEaHAfhjws8hpIgFYUb0laRjEm0CdQwpcGR
YUzkyH5xiE0ml/qxS+el0qtsa/MOoz15PGNEawnf6b9uyP4tkAliSv98wcqLIkb+
QhdRF7xz6g6OnhlMdFtfrqw29mPgHygCjZ/SxGXyZIMeFdc3nkclmuYno4zQ7aKb
9Ef165HT2M3qa8RrdhRcjgVFh2LdVUPcZJOJTCr35lFSMQMqpv4T/PP0dQRFRN/p
xe/86y3Kib7vLzfm//ummAYCvonDSS7I5iI2GCFHrF2izCHY/lGZix5QCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEI9Js7bHyNygzeQyCh1PR+LWtAJMB8GA1UdIwQY
MBaAFMFg97vo12Nnd2FIrLjEyjX5a+lXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1dEM3UtalhZMmQzWVVpc3VNVEtOZmxyNlZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC80NjFhODMtODEwYy00M2FlLWFjMjUt
NjRlMmJkNjE5MzE4LzEvd1dEM3UtalhZMmQzWVVpc3VNVEtOZmxyNlZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC80NjFhODMtODEwYy00M2FlLWFjMjUtNjRlMmJkNjE5MzE4
LzEvd1dEM3UtalhZMmQzWVVpc3VNVEtOZmxyNlZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHeq7wgfW
Uh6LVh7lR/VQjdgiqIJAu/dJQ//T5MMbLkgssiNNfGnXRIdhxmoiRQ9HtAFOg10c
xSGoVHkJ5uzmET0Q6S4aqxSysISzVhC9KlmdhvmJEo5rXLMJxpif+fjwfkGFQX1e
O0lQFdH2ne+jSD7uStVNsXphYCBSdmZ82DdZi+5hxBAUXfL+7oMS4FNAGGTSMTk0
fU62ivb1o1ULgpFetXaRDLPc+ZvP2OOh069RFOHtwQu+T7ynHGtsku6ElHtEhgSl
7QaqBapejG0wJ8kbjT9vyrNnNqjwHPjXmzaGCF3pZZqVXh/CRwD6eId74JSK8pUo
q4YbAp02DTpPDw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:11:05 2025 by rpki-client