Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/df32dd-75ae-48b2-a1b2-2929b9f1d15b/1/cwOM3GJSLkhLBhXEJBx-eqgh2NY.mft
File:                     cwOM3GJSLkhLBhXEJBx-eqgh2NY.mft (raw, json)
Hash identifier:          j5Xki+DqtXZa7oiagOIKJzcXesgw6mAqj4AyXl5Wj08=
Subject key identifier:   03:46:FF:7A:CF:FC:1B:D7:49:07:B3:E0:45:D1:ED:80:B8:3F:51:55
Authority key identifier: 73:03:8C:DC:62:52:2E:48:4B:06:15:C4:24:1C:7E:7A:A8:21:D8:D6
Certificate issuer:       /CN=73038cdc62522e484b0615c4241c7e7aa821d8d6
Certificate serial:       0199FBEBF20117B446FD7A2589FBE7CC4C62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cwOM3GJSLkhLBhXEJBx-eqgh2NY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/df32dd-75ae-48b2-a1b2-2929b9f1d15b/1/cwOM3GJSLkhLBhXEJBx-eqgh2NY.mft
Manifest number:          02B6
Signing time:             Sun 19 Oct 2025 10:02:48 +0000
Manifest this update:     Sun 19 Oct 2025 10:02:48 +0000
Manifest next update:     Mon 20 Oct 2025 10:02:48 +0000
Files and hashes:         1: cwOM3GJSLkhLBhXEJBx-eqgh2NY.crl (hash: 6emPkRwe1vIQvRFOjzy2bCUY/4/8uooC3m428teosA0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/df32dd-75ae-48b2-a1b2-2929b9f1d15b/1/cwOM3GJSLkhLBhXEJBx-eqgh2NY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/df32dd-75ae-48b2-a1b2-2929b9f1d15b/1/cwOM3GJSLkhLBhXEJBx-eqgh2NY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cwOM3GJSLkhLBhXEJBx-eqgh2NY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:eb:f2:01:17:b4:46:fd:7a:25:89:fb:e7:cc:4c:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73038cdc62522e484b0615c4241c7e7aa821d8d6
        Validity
            Not Before: Oct 19 10:02:48 2025 GMT
            Not After : Oct 20 10:02:48 2025 GMT
        Subject: CN=0346ff7acffc1bd74907b3e045d1ed80b83f5155
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:3a:bc:49:23:64:1b:89:ea:12:06:16:77:db:
                    3b:63:dd:54:14:a1:29:e6:86:81:0c:26:ca:3e:ce:
                    64:4b:cb:c6:1b:ba:ad:78:7e:d5:7e:1e:42:50:99:
                    5c:83:17:70:1a:f2:13:6b:dd:66:4e:82:7e:fc:b9:
                    67:0a:e2:30:a7:3b:f0:4b:5f:e4:07:b9:ae:06:95:
                    48:49:43:67:ff:69:03:8e:f5:d2:65:ca:e3:2f:1f:
                    47:cf:a3:fb:8d:11:cd:86:41:1e:d3:9e:51:12:c6:
                    4a:10:07:91:06:24:33:a2:41:56:c7:30:bb:63:eb:
                    13:b2:77:e4:a6:8a:7a:73:6c:cb:ad:a1:95:85:a5:
                    04:23:a3:8e:a5:cc:c6:c5:01:f1:8e:d7:f6:d5:10:
                    13:46:77:37:5d:c7:54:3b:30:35:7e:3e:fa:5b:d0:
                    7a:a8:04:8a:87:eb:fb:7a:c9:82:74:00:ef:60:99:
                    a1:04:5b:d4:21:a5:1f:89:ac:a9:76:24:24:39:ba:
                    59:ab:86:c4:f6:d4:41:4d:d4:16:e2:f4:55:07:5a:
                    68:09:9c:e3:38:20:b5:61:49:eb:ac:e7:c9:65:7a:
                    0c:64:5d:71:76:52:5b:ff:6d:e0:39:15:8d:ed:c2:
                    bc:73:80:b1:c5:95:e0:af:8d:68:b6:12:07:f0:6f:
                    63:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:46:FF:7A:CF:FC:1B:D7:49:07:B3:E0:45:D1:ED:80:B8:3F:51:55
            X509v3 Authority Key Identifier:
                keyid:73:03:8C:DC:62:52:2E:48:4B:06:15:C4:24:1C:7E:7A:A8:21:D8:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cwOM3GJSLkhLBhXEJBx-eqgh2NY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/df32dd-75ae-48b2-a1b2-2929b9f1d15b/1/cwOM3GJSLkhLBhXEJBx-eqgh2NY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/df32dd-75ae-48b2-a1b2-2929b9f1d15b/1/cwOM3GJSLkhLBhXEJBx-eqgh2NY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:8a:73:d8:7f:a1:f3:59:2d:f2:c7:c1:2e:66:8b:ea:dd:6d:
         9a:bf:2a:ce:3d:fb:18:4f:3d:93:ac:c4:a4:a9:8f:e0:f0:83:
         2b:c9:0a:cf:f3:b1:6c:cd:9e:b9:59:e4:e2:64:ee:f8:a4:8a:
         0f:2c:a2:14:0c:58:83:1a:a4:80:a2:7f:14:45:e9:88:32:bf:
         47:20:74:4d:b7:1e:8c:6d:b5:a7:64:de:fa:41:7e:e5:8c:c3:
         96:95:9a:1a:69:88:d8:c0:0f:87:64:7d:03:0b:be:ee:cf:d2:
         f1:96:d9:85:a0:20:74:66:b8:1f:ab:65:40:25:90:be:75:f3:
         47:4e:e2:1e:f0:53:b1:75:e0:b8:73:7a:48:57:68:8d:ce:7d:
         82:da:30:86:67:5e:a2:d5:53:5e:79:ba:1f:a8:ad:34:2e:78:
         12:7b:ee:12:b5:4b:0e:8e:7a:64:31:8f:84:d2:2f:30:d7:9e:
         34:e5:30:14:6e:d2:0b:0c:99:ec:8e:72:e5:ea:99:91:4d:87:
         27:81:33:f4:27:01:db:5c:55:05:33:aa:f2:4b:46:40:dd:bd:
         42:2d:32:dc:65:06:64:e4:37:b9:5b:ea:8e:f2:87:5f:9a:39:
         94:be:5f:e2:45:e6:97:a1:94:51:cf:a7:4a:98:38:fb:be:44:
         51:7c:fa:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:19:31 2025 by rpki-client