Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/eec528-f2ff-4cb5-9cda-f6b547fee8e0/1/wSwHLDWQnVJTIrAnWGus-tEZ8X0.mft
File:                     wSwHLDWQnVJTIrAnWGus-tEZ8X0.mft (raw, json)
Hash identifier:          LjhgCoVwOWhsrfY6cpcNqWBMBIOqNKf/LiWnDCfEW9U=
Subject key identifier:   12:80:B1:6B:EE:2D:85:17:08:5C:2F:5F:DE:30:EE:27:69:45:52:1B
Authority key identifier: C1:2C:07:2C:35:90:9D:52:53:22:B0:27:58:6B:AC:FA:D1:19:F1:7D
Certificate issuer:       /CN=c12c072c35909d525322b027586bacfad119f17d
Certificate serial:       0198D4A788EE3855128E366CDC438728F790
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wSwHLDWQnVJTIrAnWGus-tEZ8X0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/eec528-f2ff-4cb5-9cda-f6b547fee8e0/1/wSwHLDWQnVJTIrAnWGus-tEZ8X0.mft
Manifest number:          046B
Signing time:             Sat 23 Aug 2025 02:00:06 +0000
Manifest this update:     Sat 23 Aug 2025 02:00:06 +0000
Manifest next update:     Sun 24 Aug 2025 02:00:06 +0000
Files and hashes:         1: wSwHLDWQnVJTIrAnWGus-tEZ8X0.crl (hash: wLsHZbSoqbnpMVGQJZwt6zblvzkZNt8+Nv+h67r0oXo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/eec528-f2ff-4cb5-9cda-f6b547fee8e0/1/wSwHLDWQnVJTIrAnWGus-tEZ8X0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/eec528-f2ff-4cb5-9cda-f6b547fee8e0/1/wSwHLDWQnVJTIrAnWGus-tEZ8X0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wSwHLDWQnVJTIrAnWGus-tEZ8X0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 02:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:a7:88:ee:38:55:12:8e:36:6c:dc:43:87:28:f7:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c12c072c35909d525322b027586bacfad119f17d
        Validity
            Not Before: Aug 23 02:00:06 2025 GMT
            Not After : Aug 24 02:00:06 2025 GMT
        Subject: CN=1280b16bee2d8517085c2f5fde30ee276945521b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e5:df:32:cd:83:47:70:d5:21:27:80:66:13:
                    b2:70:cd:6d:81:08:b4:04:71:91:06:60:e8:23:33:
                    2f:58:61:b1:f3:ba:48:85:3e:01:4d:cc:e5:59:ae:
                    40:1c:09:10:80:c5:64:1a:ed:b3:93:4e:1f:d9:17:
                    dd:fc:13:23:77:ad:97:4f:0c:9a:65:a1:75:a6:0c:
                    83:54:36:e8:c1:71:59:a3:7b:cb:52:c6:7f:06:78:
                    86:84:f5:a5:d2:30:69:40:c9:00:b0:70:8d:cb:0a:
                    e5:97:4b:84:02:1d:69:a7:46:64:b5:75:9d:97:de:
                    60:e9:3f:7a:67:ee:88:3f:91:41:a3:0c:21:e7:ad:
                    3e:03:29:b7:12:ca:8d:ea:85:bd:74:a4:d7:3c:f4:
                    13:f5:2e:9a:8e:a4:c1:18:a8:d9:64:7f:83:84:b9:
                    4d:ec:57:2b:4d:87:ce:47:da:5c:b7:cc:92:e9:46:
                    ad:99:dd:35:7b:ec:cc:bd:7f:fd:c6:00:7e:14:8a:
                    e8:ce:56:36:fa:5d:23:b4:d1:45:22:ab:4f:8a:0e:
                    22:6e:54:75:92:a9:c7:ee:49:5e:80:f9:9a:0f:91:
                    ae:3a:cb:c1:53:51:f7:30:3b:0e:79:90:eb:70:65:
                    19:f8:ee:da:ef:71:dc:d2:4c:a0:fd:c1:67:ef:08:
                    83:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:80:B1:6B:EE:2D:85:17:08:5C:2F:5F:DE:30:EE:27:69:45:52:1B
            X509v3 Authority Key Identifier:
                keyid:C1:2C:07:2C:35:90:9D:52:53:22:B0:27:58:6B:AC:FA:D1:19:F1:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSwHLDWQnVJTIrAnWGus-tEZ8X0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/eec528-f2ff-4cb5-9cda-f6b547fee8e0/1/wSwHLDWQnVJTIrAnWGus-tEZ8X0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/eec528-f2ff-4cb5-9cda-f6b547fee8e0/1/wSwHLDWQnVJTIrAnWGus-tEZ8X0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:ac:5d:cb:98:1a:49:5e:d2:72:89:d7:13:c9:8f:f8:3d:eb:
         0b:10:78:4d:23:7e:51:e4:96:31:91:8c:31:e9:22:f3:6c:68:
         c5:01:1d:1e:1e:9c:6f:de:7f:71:2e:2d:c6:d5:d0:69:c1:9d:
         77:a1:c8:9b:2d:8d:df:70:17:a1:c0:07:a1:9f:89:d4:07:43:
         11:fb:da:e4:23:4f:ff:8f:e9:eb:d7:07:07:0c:39:a9:9d:1c:
         66:f1:52:06:64:e2:8f:4c:22:79:24:51:e9:7c:22:bc:5c:c8:
         b6:f7:5b:59:e1:8b:3a:90:a8:9f:01:ef:68:8f:37:aa:6e:ce:
         b4:5d:72:86:6b:cc:56:d3:a4:1e:a1:7e:b6:18:30:0e:47:bc:
         64:f8:68:79:d2:fe:67:f2:e1:cd:70:0e:31:38:21:bc:6f:32:
         28:bc:d3:db:98:28:9d:75:1d:0f:fe:d2:21:22:4d:3f:65:56:
         57:0c:94:d8:84:51:95:bc:64:3b:2b:8f:2f:0b:5c:ee:5c:a7:
         36:ce:56:a3:4b:52:2c:35:5f:19:08:b0:83:07:24:65:86:69:
         96:68:55:50:b6:9d:42:21:80:47:23:3d:94:8a:e7:e0:ca:3f:
         a1:8c:51:34:76:53:fe:b5:5a:de:e2:8d:2c:b4:1b:a8:23:9b:
         3b:6f:14:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:51:25 2025 by rpki-client