Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/00b84b-b5d1-4c1d-8e70-09e8fafaf0cc/1/wA7St1AmRN0DbiOS-wMyz7FNuNI.mft
File:                     wA7St1AmRN0DbiOS-wMyz7FNuNI.mft (raw, json)
Hash identifier:          D4LZJpOJTu7Iy/UKGPUtItJ6tya73U7CtB7uV3+pHQQ=
Subject key identifier:   9F:51:40:F3:26:E1:89:92:8C:1D:08:30:24:0B:26:05:6E:38:4D:47
Authority key identifier: C0:0E:D2:B7:50:26:44:DD:03:6E:23:92:FB:03:32:CF:B1:4D:B8:D2
Certificate issuer:       /CN=c00ed2b7502644dd036e2392fb0332cfb14db8d2
Certificate serial:       0198D515932B598AC02932F045ECB7B4FBA2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wA7St1AmRN0DbiOS-wMyz7FNuNI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/00b84b-b5d1-4c1d-8e70-09e8fafaf0cc/1/wA7St1AmRN0DbiOS-wMyz7FNuNI.mft
Manifest number:          1647
Signing time:             Sat 23 Aug 2025 04:00:17 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:17 +0000
Manifest next update:     Sun 24 Aug 2025 04:00:17 +0000
Files and hashes:         1: wA7St1AmRN0DbiOS-wMyz7FNuNI.crl (hash: C3UIfsV8hjPzxL/76Tc3o4flDOTWDECT18Uip+Y6SZM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/00b84b-b5d1-4c1d-8e70-09e8fafaf0cc/1/wA7St1AmRN0DbiOS-wMyz7FNuNI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/00b84b-b5d1-4c1d-8e70-09e8fafaf0cc/1/wA7St1AmRN0DbiOS-wMyz7FNuNI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wA7St1AmRN0DbiOS-wMyz7FNuNI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 04:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:15:93:2b:59:8a:c0:29:32:f0:45:ec:b7:b4:fb:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c00ed2b7502644dd036e2392fb0332cfb14db8d2
        Validity
            Not Before: Aug 23 04:00:17 2025 GMT
            Not After : Aug 24 04:00:17 2025 GMT
        Subject: CN=9f5140f326e189928c1d0830240b26056e384d47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:2e:52:cf:5f:c2:51:5a:12:b8:43:bd:a7:fb:
                    ec:3a:b9:66:a3:13:0d:bd:3b:e7:73:3e:a8:37:90:
                    0c:54:0e:9b:02:81:3e:1c:eb:f6:b7:de:81:1d:f9:
                    6d:1f:a3:2b:d4:a8:8f:06:2c:6d:ad:c6:f6:3d:b8:
                    8c:a4:52:5f:92:ff:46:fe:63:11:bc:9f:d4:c4:42:
                    dc:64:d5:dc:2b:62:51:60:ed:6b:9d:9a:0e:ce:f3:
                    ac:ac:ac:09:d9:45:9e:70:3b:6c:3e:64:b0:63:53:
                    7d:4b:1c:e0:b2:65:51:50:c1:de:83:fa:ee:64:24:
                    6a:87:b3:e0:bf:ba:c3:b2:45:5a:ed:fe:85:a2:cf:
                    64:75:b8:23:54:aa:bd:8b:ac:27:e0:16:3e:b3:77:
                    3d:1d:76:1a:0f:e8:c7:aa:a5:07:d8:da:11:70:66:
                    54:39:b8:03:bb:1b:38:ec:26:18:2b:95:c2:b1:57:
                    e5:f5:95:3d:0d:19:a3:40:b4:ea:f8:36:c5:44:d5:
                    55:25:27:d5:75:e1:22:74:d2:c9:4d:0c:66:12:1f:
                    58:e1:bc:ad:a9:03:e0:4a:56:cb:44:a1:87:7b:a2:
                    15:35:6e:ab:ea:68:a0:be:bd:74:2e:49:31:52:dd:
                    76:05:45:6e:d3:d6:5f:3e:00:8e:fa:c7:4c:5c:7f:
                    91:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:51:40:F3:26:E1:89:92:8C:1D:08:30:24:0B:26:05:6E:38:4D:47
            X509v3 Authority Key Identifier:
                keyid:C0:0E:D2:B7:50:26:44:DD:03:6E:23:92:FB:03:32:CF:B1:4D:B8:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wA7St1AmRN0DbiOS-wMyz7FNuNI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/00b84b-b5d1-4c1d-8e70-09e8fafaf0cc/1/wA7St1AmRN0DbiOS-wMyz7FNuNI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/00b84b-b5d1-4c1d-8e70-09e8fafaf0cc/1/wA7St1AmRN0DbiOS-wMyz7FNuNI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:38:06:ed:27:eb:17:08:bb:9c:7e:a4:b7:6a:a8:85:a6:10:
         33:59:94:9d:16:d7:5e:3c:2c:5b:ea:d9:eb:80:85:f8:80:ec:
         4f:42:c7:20:f5:35:5f:a1:f8:f1:91:fc:b9:40:d8:37:b3:4d:
         a1:66:5b:f1:bb:9f:dd:47:a5:ec:49:b2:87:2f:94:1e:92:0f:
         1f:20:08:fe:fe:16:4c:a2:9e:db:2d:09:6f:b0:64:e4:85:ce:
         15:82:45:05:d3:cb:3a:79:83:53:53:f1:d2:40:74:57:d5:aa:
         ed:70:96:9c:ec:09:3f:b9:8c:55:cc:b6:c7:7b:20:81:cd:98:
         5e:ba:9c:7f:27:2e:49:3d:3d:88:f5:68:2e:d8:e8:8d:83:90:
         42:d3:fe:f8:82:18:36:90:74:a8:d3:31:42:7b:2c:3f:d1:ba:
         f1:ec:3c:a1:33:37:e3:15:31:90:5c:41:a2:0d:fb:cf:3f:3c:
         d2:12:8f:42:c3:f7:fa:55:e9:80:a3:4c:16:11:de:9a:47:79:
         f8:50:9c:25:ba:e1:26:eb:cc:f5:5d:ba:90:25:5d:d9:2d:da:
         70:88:03:1b:db:cc:1b:9a:e8:8c:5b:f8:10:29:0c:30:bc:9d:
         b9:30:de:5b:5b:08:71:08:90:2c:85:87:62:b0:fb:a9:ea:6b:
         11:3b:3a:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:11:39 2025 by rpki-client