Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/451550-2bb2-4937-9f52-2ff8e9d23f97/1/W5mOGE1PxK_6IFCQmdkZoxoHlHs.mft
File:                     W5mOGE1PxK_6IFCQmdkZoxoHlHs.mft (raw, json)
Hash identifier:          5+ZRMlhMEwajTSmrNtVEC5mSy/jpfFTEhGcSgnfL9dk=
Subject key identifier:   D4:43:6F:40:BB:75:BA:82:99:96:B9:70:92:41:48:DB:23:FC:9F:5D
Authority key identifier: 5B:99:8E:18:4D:4F:C4:AF:FA:20:50:90:99:D9:19:A3:1A:07:94:7B
Certificate issuer:       /CN=5b998e184d4fc4affa20509099d919a31a07947b
Certificate serial:       0198D473B33E11A43C73BAE10DEB8E97894A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W5mOGE1PxK_6IFCQmdkZoxoHlHs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/451550-2bb2-4937-9f52-2ff8e9d23f97/1/W5mOGE1PxK_6IFCQmdkZoxoHlHs.mft
Manifest number:          1648
Signing time:             Sat 23 Aug 2025 01:03:28 +0000
Manifest this update:     Sat 23 Aug 2025 01:03:28 +0000
Manifest next update:     Sun 24 Aug 2025 01:03:28 +0000
Files and hashes:         1: W5mOGE1PxK_6IFCQmdkZoxoHlHs.crl (hash: Blost2hHWuZJoVDkH0HBXuVleX+Lyk3DDKpnn0KwIeo=)
                          2: gtNjwWIklt9RQOUEEkHBnNPLSqM.roa (hash: vH0Ya4SYvhAbrE7j6LOzzc7/NQSUnPHlrM/bMm0UTx8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/451550-2bb2-4937-9f52-2ff8e9d23f97/1/W5mOGE1PxK_6IFCQmdkZoxoHlHs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/451550-2bb2-4937-9f52-2ff8e9d23f97/1/W5mOGE1PxK_6IFCQmdkZoxoHlHs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W5mOGE1PxK_6IFCQmdkZoxoHlHs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:73:b3:3e:11:a4:3c:73:ba:e1:0d:eb:8e:97:89:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b998e184d4fc4affa20509099d919a31a07947b
        Validity
            Not Before: Aug 23 01:03:28 2025 GMT
            Not After : Aug 24 01:03:28 2025 GMT
        Subject: CN=d4436f40bb75ba829996b970924148db23fc9f5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:43:e4:25:bf:f5:39:93:40:7b:5f:1e:74:03:
                    60:2f:c0:57:4e:e8:a5:56:69:a4:58:b6:61:1f:5a:
                    70:ad:e1:b5:93:18:4b:7b:77:bc:4e:3c:71:82:ef:
                    2f:3e:1e:fe:2e:5e:45:0d:ec:65:d3:d9:30:84:a3:
                    c7:58:4c:9b:3c:5c:c7:be:6c:df:ea:90:ae:c6:5f:
                    60:3b:3c:32:8e:01:50:c0:53:e9:7f:53:c7:4d:bc:
                    8a:a4:8a:bf:28:97:36:81:41:72:3f:55:b2:a6:ff:
                    af:68:eb:df:3a:82:77:a0:c3:6e:65:ef:9c:c4:85:
                    46:9b:ac:40:94:f1:de:06:d2:cd:9f:d2:ff:87:e1:
                    92:c8:9d:d5:03:18:dc:2e:c2:72:f7:14:c3:b9:49:
                    1f:ff:dc:57:82:e7:58:c8:8c:af:ab:18:d3:5c:6e:
                    af:9f:59:ae:60:16:45:09:4d:a7:90:76:4c:b7:c7:
                    ff:5e:b6:30:ff:51:34:cc:9a:62:e3:90:29:93:24:
                    cf:ad:f0:8d:14:67:88:fa:70:05:d3:51:46:06:f4:
                    4f:f3:eb:c5:fa:17:7a:4e:5a:3e:87:78:89:06:5f:
                    c3:d4:59:7d:4f:28:5a:0f:fe:9b:34:9f:0e:ea:0a:
                    a1:c4:b4:7d:3e:86:be:a4:e0:24:94:48:db:36:d3:
                    69:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:43:6F:40:BB:75:BA:82:99:96:B9:70:92:41:48:DB:23:FC:9F:5D
            X509v3 Authority Key Identifier:
                keyid:5B:99:8E:18:4D:4F:C4:AF:FA:20:50:90:99:D9:19:A3:1A:07:94:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W5mOGE1PxK_6IFCQmdkZoxoHlHs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/451550-2bb2-4937-9f52-2ff8e9d23f97/1/W5mOGE1PxK_6IFCQmdkZoxoHlHs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/451550-2bb2-4937-9f52-2ff8e9d23f97/1/W5mOGE1PxK_6IFCQmdkZoxoHlHs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:35:3e:04:fe:84:86:83:5f:95:bb:7e:64:6c:fa:d1:3d:af:
         cd:a3:9a:83:de:04:53:a4:e8:03:0e:f8:d2:bd:e0:8d:ea:4f:
         90:1e:6e:79:41:39:41:c1:23:17:b8:f8:6b:21:de:fd:5f:b8:
         41:d3:53:aa:0e:08:0c:db:f8:86:aa:a6:7b:79:91:ed:24:51:
         e9:0b:45:13:e7:cf:94:79:7a:6e:fb:ff:79:9e:9a:0d:f2:b7:
         f7:fa:78:f9:0e:e9:67:2c:67:f3:5b:5e:8e:64:d0:97:9d:d4:
         e1:0a:f4:8f:23:ed:01:a4:eb:48:1b:68:8a:20:11:5c:9d:50:
         29:3b:f4:85:f4:c5:2f:9c:d9:82:6f:c9:a2:21:1f:d9:68:ad:
         c7:12:75:85:ba:b2:58:f5:0d:99:62:b6:86:21:27:5e:03:65:
         fc:e4:16:d3:95:35:d1:1e:4f:76:cb:47:a6:2a:bf:01:e8:ae:
         36:de:24:85:fa:7e:97:4e:92:a1:59:1c:50:d8:5e:d5:c2:e7:
         13:71:4c:fb:28:43:86:c4:bc:2d:21:fd:fc:bf:b5:f1:9e:d6:
         da:ed:d2:31:4f:1c:84:aa:7e:78:85:99:58:05:b2:c8:45:95:
         75:96:6f:3a:e6:e3:98:86:28:c9:eb:ef:7e:bf:3e:7a:de:61:
         6b:1f:f6:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUc7M+EaQ8c7rhDeuOl4lKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViOTk4ZTE4NGQ0ZmM0YWZmYTIwNTA5MDk5ZDkxOWEzMWEw
Nzk0N2IwHhcNMjUwODIzMDEwMzI4WhcNMjUwODI0MDEwMzI4WjAzMTEwLwYDVQQD
EyhkNDQzNmY0MGJiNzViYTgyOTk5NmI5NzA5MjQxNDhkYjIzZmM5ZjVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEPkJb/1OZNAe18edANgL8BXTuil
VmmkWLZhH1pwreG1kxhLe3e8Tjxxgu8vPh7+Ll5FDexl09kwhKPHWEybPFzHvmzf
6pCuxl9gOzwyjgFQwFPpf1PHTbyKpIq/KJc2gUFyP1Wypv+vaOvfOoJ3oMNuZe+c
xIVGm6xAlPHeBtLNn9L/h+GSyJ3VAxjcLsJy9xTDuUkf/9xXgudYyIyvqxjTXG6v
n1muYBZFCU2nkHZMt8f/XrYw/1E0zJpi45ApkyTPrfCNFGeI+nAF01FGBvRP8+vF
+hd6Tlo+h3iJBl/D1Fl9TyhaD/6bNJ8O6gqhxLR9Poa+pOAklEjbNtNpEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNRDb0C7dbqCmZa5cJJBSNsj/J9dMB8GA1UdIwQY
MBaAFFuZjhhNT8Sv+iBQkJnZGaMaB5R7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzVtT0dFMVB4S182SUZDUW1ka1pveG9IbEhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi80NTE1NTAtMmJiMi00OTM3LTlmNTIt
MmZmOGU5ZDIzZjk3LzEvVzVtT0dFMVB4S182SUZDUW1ka1pveG9IbEhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi80NTE1NTAtMmJiMi00OTM3LTlmNTItMmZmOGU5ZDIzZjk3
LzEvVzVtT0dFMVB4S182SUZDUW1ka1pveG9IbEhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAITU+BP6E
hoNflbt+ZGz60T2vzaOag94EU6ToAw740r3gjepPkB5ueUE5QcEjF7j4ayHe/V+4
QdNTqg4IDNv4hqqme3mR7SRR6QtFE+fPlHl6bvv/eZ6aDfK39/p4+Q7pZyxn81te
jmTQl53U4Qr0jyPtAaTrSBtoiiARXJ1QKTv0hfTFL5zZgm/JoiEf2WitxxJ1hbqy
WPUNmWK2hiEnXgNl/OQW05U10R5PdstHpiq/AeiuNt4khfp+l06SoVkcUNhe1cLn
E3FM+yhDhsS8LSH9/L+18Z7W2u3SMU8chKp+eIWZWAWyyEWVdZZvOubjmIYoyevv
fr8+et5hax/2sg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:26:32 2025 by rpki-client