Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/11cc2a-ad66-4d2a-9e30-1f59bc7287cd/1/Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.mft
File:                     Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.mft (raw, json)
Hash identifier:          7l+dQw3dZ20WLs0vcKikD2oSeh2Q+t3429UIVZTqX8U=
Subject key identifier:   7A:C4:3D:14:BD:75:3F:90:DE:F9:C6:C4:54:EE:18:EF:06:7A:23:91
Authority key identifier: 5A:0E:48:8B:B0:9D:28:73:D6:62:E2:84:6A:22:88:A4:25:DE:D9:46
Certificate issuer:       /CN=5a0e488bb09d2873d662e2846a2288a425ded946
Certificate serial:       0198D65F181F7621CB8487BB4775748F3722
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/11cc2a-ad66-4d2a-9e30-1f59bc7287cd/1/Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.mft
Manifest number:          0260
Signing time:             Sat 23 Aug 2025 10:00:12 +0000
Manifest this update:     Sat 23 Aug 2025 10:00:12 +0000
Manifest next update:     Sun 24 Aug 2025 10:00:12 +0000
Files and hashes:         1: Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.crl (hash: FA9whb/noAR4ZINPwCwKqJ7U5RgjiVaveZ7xHV7F1EQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/11cc2a-ad66-4d2a-9e30-1f59bc7287cd/1/Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/11cc2a-ad66-4d2a-9e30-1f59bc7287cd/1/Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 10:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d6:5f:18:1f:76:21:cb:84:87:bb:47:75:74:8f:37:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a0e488bb09d2873d662e2846a2288a425ded946
        Validity
            Not Before: Aug 23 10:00:12 2025 GMT
            Not After : Aug 24 10:00:12 2025 GMT
        Subject: CN=7ac43d14bd753f90def9c6c454ee18ef067a2391
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b5:a1:b7:ef:9a:d1:02:69:29:8e:e1:46:f9:
                    fc:a8:72:ad:17:23:69:11:97:bf:60:e6:6e:3d:7d:
                    43:a7:d6:8f:47:70:d1:db:06:b9:f5:ea:5e:b8:d9:
                    25:b7:2e:44:85:12:03:7b:1e:73:6a:2c:ef:38:79:
                    e6:72:f5:9b:41:42:cc:01:18:9f:5e:d1:97:7b:9f:
                    99:f6:35:d8:5c:14:80:6e:f4:30:8c:0c:40:ab:90:
                    62:d5:13:46:cc:bb:ca:da:33:e7:92:b7:8c:48:bc:
                    36:38:68:42:49:76:e0:94:b6:2e:ee:8b:c0:a4:a5:
                    7e:ec:04:e4:30:fe:8d:13:18:74:e5:58:9e:ff:38:
                    c9:e3:46:81:bb:0d:84:bf:10:25:29:c3:2b:94:76:
                    92:5d:45:97:a0:88:f1:96:47:5c:30:3e:df:89:e2:
                    2c:76:b2:0c:0e:71:f5:ad:03:05:af:7c:63:d5:e7:
                    c5:a8:c1:96:e2:a3:7c:ea:51:68:c5:73:af:b2:38:
                    d8:48:36:dd:75:3e:31:02:35:07:23:80:e0:fa:a6:
                    2c:aa:cb:9f:e8:47:8f:87:d2:c0:77:40:e2:d8:fb:
                    f5:99:80:56:b6:7a:ea:e2:b8:3f:b8:dd:3d:95:65:
                    53:0f:54:bd:de:e5:7d:3f:7b:11:d3:50:22:f7:8f:
                    82:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:C4:3D:14:BD:75:3F:90:DE:F9:C6:C4:54:EE:18:EF:06:7A:23:91
            X509v3 Authority Key Identifier:
                keyid:5A:0E:48:8B:B0:9D:28:73:D6:62:E2:84:6A:22:88:A4:25:DE:D9:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/11cc2a-ad66-4d2a-9e30-1f59bc7287cd/1/Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/11cc2a-ad66-4d2a-9e30-1f59bc7287cd/1/Wg5Ii7CdKHPWYuKEaiKIpCXe2UY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:da:df:42:5b:6c:74:63:e3:49:2b:47:df:97:b5:19:fd:b0:
         c9:5b:05:b8:56:02:f0:cc:5f:f3:a1:8e:87:18:b7:d3:f5:1f:
         73:85:be:94:bc:93:4d:bb:ff:77:ac:12:30:04:c0:9f:49:2b:
         32:11:50:4e:0a:82:ce:d0:ca:93:89:df:13:29:f8:ae:13:65:
         a7:fd:52:fa:30:a3:31:1e:d6:d0:50:a0:da:d1:cf:90:58:db:
         65:ae:43:0d:0c:9b:07:58:6d:9f:71:e5:db:96:23:96:33:77:
         be:66:42:eb:be:dc:68:e4:75:71:51:fa:35:de:cf:37:03:23:
         d8:e5:ec:c0:23:1e:09:27:8f:69:16:1e:05:04:8c:0a:f5:12:
         a0:29:34:cd:e3:c4:26:11:05:f2:96:78:31:11:02:0b:fc:f2:
         29:d6:72:9f:d8:d0:87:e9:3c:b6:61:a6:ae:86:fa:20:b1:5b:
         52:07:8d:a9:c8:13:71:75:dc:6c:92:bc:07:ff:70:23:7d:89:
         38:33:75:95:d7:78:43:d4:5d:42:41:e6:90:10:59:0b:18:09:
         c8:3f:db:f5:4f:f1:24:bf:ea:e7:4c:da:ee:10:90:05:ee:7f:
         1f:a4:c1:30:23:14:c8:b7:25:a1:5f:63:cc:e3:c4:98:44:a6:
         b2:2d:25:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:23:00 2025 by rpki-client