Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/b4cd6e-3e8c-4402-b2c1-b1a1edda77cd/1/wKmyD2ubglk-wH4MuLuHDOEYZdw.mft
File:                     wKmyD2ubglk-wH4MuLuHDOEYZdw.mft (raw, json)
Hash identifier:          z2DGRC9bSBtWQBuFkJKOI6vVDlo0HUCwUVGZynbwNwE=
Subject key identifier:   8B:6D:02:06:0A:27:1C:A3:B6:1E:06:E4:B3:22:C9:D6:9A:D8:D3:FC
Authority key identifier: C0:A9:B2:0F:6B:9B:82:59:3E:C0:7E:0C:B8:BB:87:0C:E1:18:65:DC
Certificate issuer:       /CN=c0a9b20f6b9b82593ec07e0cb8bb870ce11865dc
Certificate serial:       0198D51619FBD4FF34C465F1906550C862DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wKmyD2ubglk-wH4MuLuHDOEYZdw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/b4cd6e-3e8c-4402-b2c1-b1a1edda77cd/1/wKmyD2ubglk-wH4MuLuHDOEYZdw.mft
Manifest number:          09BA
Signing time:             Sat 23 Aug 2025 04:00:51 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:51 +0000
Manifest next update:     Sun 24 Aug 2025 04:00:51 +0000
Files and hashes:         1: wKmyD2ubglk-wH4MuLuHDOEYZdw.crl (hash: FCkIrMEakCvHYbhrrAR/+mePtQGt13+rkFox9jYHyY8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/b4cd6e-3e8c-4402-b2c1-b1a1edda77cd/1/wKmyD2ubglk-wH4MuLuHDOEYZdw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/b4cd6e-3e8c-4402-b2c1-b1a1edda77cd/1/wKmyD2ubglk-wH4MuLuHDOEYZdw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wKmyD2ubglk-wH4MuLuHDOEYZdw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 04:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:16:19:fb:d4:ff:34:c4:65:f1:90:65:50:c8:62:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0a9b20f6b9b82593ec07e0cb8bb870ce11865dc
        Validity
            Not Before: Aug 23 04:00:51 2025 GMT
            Not After : Aug 24 04:00:51 2025 GMT
        Subject: CN=8b6d02060a271ca3b61e06e4b322c9d69ad8d3fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:3d:0e:83:bb:7a:e3:3e:c7:78:4f:b6:d7:b2:
                    72:54:65:49:0c:0b:29:d1:4e:68:2a:fc:20:af:28:
                    91:57:34:5b:b8:e8:32:55:21:15:57:a7:41:5f:4c:
                    7e:fe:25:4e:d6:01:cb:95:d8:e0:62:e7:a2:16:38:
                    d8:b3:da:5e:c8:34:f4:a2:c9:90:d5:a3:10:40:d8:
                    23:b3:c4:6d:60:d3:46:c8:ff:9e:3d:88:cb:12:ef:
                    ad:b0:a3:bf:5b:09:9a:91:f4:26:a2:c0:b0:11:ba:
                    82:51:3c:67:63:7e:13:b6:cc:08:32:79:15:c0:44:
                    87:d4:c2:4a:e7:b4:16:76:7e:36:9c:30:72:c7:d9:
                    45:c2:b0:59:26:4a:8c:03:c1:ce:43:a0:06:e3:9e:
                    1b:69:6c:3c:89:b0:a4:7a:29:11:d0:58:87:b1:eb:
                    6c:b0:74:e7:06:16:dd:92:f3:41:49:fd:b9:6f:5a:
                    2d:a4:a1:73:d8:b2:e7:93:14:9e:be:b3:15:90:04:
                    0e:60:52:4d:96:b8:89:a3:10:29:49:e9:73:f6:fd:
                    0d:57:08:15:6b:b5:09:60:73:9d:69:92:03:10:68:
                    4b:93:dc:f8:0a:8e:11:3c:f6:2a:ba:f1:0e:eb:7a:
                    db:23:6f:bc:6c:21:08:64:85:c2:ca:6c:3f:55:e4:
                    1e:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:6D:02:06:0A:27:1C:A3:B6:1E:06:E4:B3:22:C9:D6:9A:D8:D3:FC
            X509v3 Authority Key Identifier:
                keyid:C0:A9:B2:0F:6B:9B:82:59:3E:C0:7E:0C:B8:BB:87:0C:E1:18:65:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wKmyD2ubglk-wH4MuLuHDOEYZdw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b4cd6e-3e8c-4402-b2c1-b1a1edda77cd/1/wKmyD2ubglk-wH4MuLuHDOEYZdw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b4cd6e-3e8c-4402-b2c1-b1a1edda77cd/1/wKmyD2ubglk-wH4MuLuHDOEYZdw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:fe:35:6e:03:e1:99:68:82:bb:20:92:f5:52:9b:71:c5:e6:
         a2:81:73:e9:53:28:af:67:d4:a6:32:0b:82:6e:30:7d:d4:7a:
         2a:50:ea:f0:b2:35:77:fb:f9:d1:d0:e5:55:53:b1:ab:46:17:
         ba:80:b8:39:2a:86:05:c3:d8:cd:9c:64:48:ea:e9:8b:d7:19:
         91:e5:fd:70:9f:8b:fa:b0:00:c3:cb:ec:a7:93:d8:f5:f6:5e:
         e5:a7:47:cf:49:7d:4d:93:d0:4f:2b:b5:3a:2c:f7:9c:2d:d5:
         8b:3c:29:36:0d:c6:87:1a:0e:2c:d6:26:af:42:84:b3:a7:a9:
         a8:75:8f:98:36:e6:15:cb:e8:23:ae:9e:26:33:ac:d9:ed:9e:
         bd:a6:06:e3:bd:5e:7e:4b:5b:5e:4e:9a:1f:4a:e0:40:80:86:
         c7:54:96:96:5b:03:04:61:2c:55:36:30:39:1d:60:5d:6f:6c:
         c2:b2:78:96:6d:09:7b:85:5f:24:ef:ef:73:1f:ab:fc:e4:52:
         b3:a7:a1:03:62:e9:85:be:69:61:30:fa:82:66:f9:28:88:77:
         6d:ae:2d:8e:b8:94:65:af:6f:8b:46:fc:9b:59:ee:24:36:98:
         aa:79:bf:b8:e7:31:60:41:a7:87:28:ae:72:81:5e:fa:78:9f:
         b8:68:8d:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:28:45 2025 by rpki-client