Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/46b2a9-81dd-40b5-889f-d07c60001c55/1/Wp-Mwmq9Ofs-2EOVlWdnqCb5TVs.mft
File:                     Wp-Mwmq9Ofs-2EOVlWdnqCb5TVs.mft (raw, json)
Hash identifier:          54tNLXtTr8bvMx9Qg1HIc2/EvuKgjbfcKxlmsYHNWLU=
Subject key identifier:   AF:28:85:AF:C4:A9:DF:A2:34:19:07:B5:1B:B5:AF:C8:28:5B:6D:A2
Authority key identifier: 5A:9F:8C:C2:6A:BD:39:FB:3E:D8:43:95:95:67:67:A8:26:F9:4D:5B
Certificate issuer:       /CN=5a9f8cc26abd39fb3ed84395956767a826f94d5b
Certificate serial:       0197B70F5387741C35CC5661E358592B8E7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wp-Mwmq9Ofs-2EOVlWdnqCb5TVs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/46b2a9-81dd-40b5-889f-d07c60001c55/1/Wp-Mwmq9Ofs-2EOVlWdnqCb5TVs.mft
Manifest number:          15B1
Signing time:             Sat 28 Jun 2025 15:02:04 +0000
Manifest this update:     Sat 28 Jun 2025 15:02:04 +0000
Manifest next update:     Sun 29 Jun 2025 15:02:04 +0000
Files and hashes:         1: Wp-Mwmq9Ofs-2EOVlWdnqCb5TVs.crl (hash: XU/WcrcbaWInsu9caNBxa5CnocvOlxTJ2jc0470agKs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/46b2a9-81dd-40b5-889f-d07c60001c55/1/Wp-Mwmq9Ofs-2EOVlWdnqCb5TVs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/46b2a9-81dd-40b5-889f-d07c60001c55/1/Wp-Mwmq9Ofs-2EOVlWdnqCb5TVs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Wp-Mwmq9Ofs-2EOVlWdnqCb5TVs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 10:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:0f:53:87:74:1c:35:cc:56:61:e3:58:59:2b:8e:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a9f8cc26abd39fb3ed84395956767a826f94d5b
        Validity
            Not Before: Jun 28 15:02:04 2025 GMT
            Not After : Jun 29 15:02:04 2025 GMT
        Subject: CN=af2885afc4a9dfa2341907b51bb5afc8285b6da2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:67:63:02:fe:05:59:35:38:13:4f:f7:da:16:
                    6a:51:89:c3:a0:ae:ee:0d:f3:e5:18:5f:ed:11:58:
                    b8:d4:4f:fe:b1:26:83:b9:f9:07:1c:9e:43:3e:2d:
                    36:d3:85:cf:be:43:13:46:bc:79:12:96:65:01:f2:
                    cb:1d:7f:c1:fe:2d:1d:9e:1b:f6:eb:a8:11:b0:8e:
                    5c:01:e1:f0:52:3a:2a:7d:b5:0c:24:44:df:4f:44:
                    c1:8f:f0:7f:64:0e:47:e7:47:58:42:eb:29:76:c1:
                    a6:22:e6:49:4e:7b:7a:c1:1f:e1:1c:79:fd:a2:40:
                    14:22:66:3b:91:92:25:0a:cb:fd:f5:94:57:b8:e5:
                    b8:71:6a:29:9a:00:34:88:4a:f2:25:6e:af:14:89:
                    3e:fb:84:9e:a6:a9:9d:ad:f5:cd:a0:a6:ad:ee:a5:
                    cd:90:93:3d:d6:ab:a3:e5:55:f0:6d:e8:fc:74:1d:
                    73:03:78:6a:f3:db:78:7d:11:77:be:6e:e9:5a:d9:
                    ff:57:16:6a:4f:41:21:6d:99:6d:9e:09:ec:a6:e3:
                    ae:cc:c9:48:56:b3:40:bf:0b:d3:cc:49:f2:85:6c:
                    16:f0:1a:df:05:05:81:e2:c2:b7:57:15:59:8a:e3:
                    48:0a:1c:f9:dc:63:18:16:7a:a2:60:9b:68:7b:c3:
                    c8:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:28:85:AF:C4:A9:DF:A2:34:19:07:B5:1B:B5:AF:C8:28:5B:6D:A2
            X509v3 Authority Key Identifier:
                keyid:5A:9F:8C:C2:6A:BD:39:FB:3E:D8:43:95:95:67:67:A8:26:F9:4D:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wp-Mwmq9Ofs-2EOVlWdnqCb5TVs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/46b2a9-81dd-40b5-889f-d07c60001c55/1/Wp-Mwmq9Ofs-2EOVlWdnqCb5TVs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/46b2a9-81dd-40b5-889f-d07c60001c55/1/Wp-Mwmq9Ofs-2EOVlWdnqCb5TVs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:2e:7c:98:fb:d1:c0:81:69:f3:cf:04:34:ba:d1:ec:ca:0c:
         e7:c5:0f:2c:c4:c4:3d:88:d5:60:11:68:4b:b2:fd:52:b9:de:
         41:52:ee:20:d2:35:3d:e6:e5:01:54:42:33:1e:db:12:fb:e5:
         da:37:4b:0b:01:7e:ad:24:92:d5:1e:49:19:f3:c9:15:ab:c7:
         17:96:0e:d3:41:69:44:9a:22:93:a4:04:4b:06:7e:82:7c:87:
         37:77:32:6c:c1:64:8b:85:f8:2d:8e:3e:ff:a6:67:7e:cf:c4:
         01:14:6d:70:04:1e:12:6c:1b:41:86:83:46:a8:54:a6:57:d7:
         2a:b0:97:52:da:00:a9:a4:5b:79:65:64:61:21:bd:37:20:a6:
         5d:7f:fb:10:08:06:d2:0b:fe:f5:15:21:78:24:fe:2c:b2:95:
         d9:72:18:ec:0b:4b:ac:47:f8:11:99:b7:2e:7a:20:a0:b3:45:
         27:26:9a:72:1f:29:eb:1a:b5:cc:04:60:e5:35:52:80:71:fa:
         0a:bd:03:1e:3c:43:33:18:6c:45:b1:98:63:44:03:e6:19:39:
         9b:23:26:12:81:8e:24:fb:7a:1d:1e:ef:b4:87:dd:31:65:18:
         f3:df:35:58:8b:e5:5b:bd:60:18:c1:d1:33:08:35:ed:a2:33:
         da:5b:03:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:32:39 2025 by rpki-client