Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/491a89-5850-40b6-85f4-1546bb6d36bb/1/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.mft
File:                     wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.mft (raw, json)
Hash identifier:          zw2bk2Gto8iQSmXXrcIQtvlxBmToVf/UaUpokd0ubRk=
Subject key identifier:   C1:BD:81:63:4E:6D:18:2E:45:92:16:4F:B5:D3:0F:59:13:80:31:2F
Authority key identifier: C1:37:F6:38:C0:BE:46:00:B4:66:DE:8E:33:0D:4C:F6:A7:FF:3B:3E
Certificate issuer:       /CN=c137f638c0be4600b466de8e330d4cf6a7ff3b3e
Certificate serial:       0199FDD9DF6C71C0CC217CCBFFCCD7BA4D07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/491a89-5850-40b6-85f4-1546bb6d36bb/1/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.mft
Manifest number:          14D3
Signing time:             Sun 19 Oct 2025 19:02:18 +0000
Manifest this update:     Sun 19 Oct 2025 19:02:18 +0000
Manifest next update:     Mon 20 Oct 2025 19:02:18 +0000
Files and hashes:         1: wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.crl (hash: Twj1qsLkQVgYqYakslGkLmC+78vUyag45Nq0K8nYvqY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/491a89-5850-40b6-85f4-1546bb6d36bb/1/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/491a89-5850-40b6-85f4-1546bb6d36bb/1/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:d9:df:6c:71:c0:cc:21:7c:cb:ff:cc:d7:ba:4d:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c137f638c0be4600b466de8e330d4cf6a7ff3b3e
        Validity
            Not Before: Oct 19 19:02:18 2025 GMT
            Not After : Oct 20 19:02:18 2025 GMT
        Subject: CN=c1bd81634e6d182e4592164fb5d30f591380312f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:28:d0:91:19:b8:b9:f8:b4:fb:71:dc:b3:9a:
                    3a:42:d3:7a:9e:48:6d:25:5c:98:18:e4:5c:e5:d1:
                    4b:a7:4e:cf:67:52:de:37:4c:de:c1:f5:9b:a2:99:
                    2a:bd:80:60:01:14:23:0b:6f:e4:70:35:a8:bc:02:
                    77:a7:58:08:ef:e1:52:14:12:23:58:d8:14:e6:4a:
                    67:f1:b6:84:2b:4d:9f:ac:6c:1b:39:17:51:70:e1:
                    a8:68:9b:56:d5:89:70:75:dc:63:35:f6:db:09:37:
                    8b:9e:9a:e9:20:1c:a6:16:3e:2d:3f:01:36:b0:c4:
                    25:72:19:b6:84:53:be:ea:6c:ab:42:16:ab:22:22:
                    5a:37:a5:0e:a0:b9:83:92:42:60:73:1c:17:d9:13:
                    3a:08:c5:da:77:8b:ea:3d:67:5b:43:f5:6e:50:f5:
                    47:f5:4c:75:2a:4b:bf:12:60:84:0c:cf:d5:f2:fb:
                    bb:62:dc:af:1f:36:fb:d6:2e:91:43:7a:09:a4:f1:
                    96:f7:7f:c9:03:2a:14:7d:5c:a8:67:3c:39:bc:f0:
                    43:85:e8:a9:64:ed:8e:19:71:06:96:26:4d:e3:20:
                    39:27:3b:d0:cf:ad:a7:6d:07:ea:59:e0:53:22:21:
                    1d:dc:b2:eb:04:2c:6d:e9:17:9e:fb:0d:f1:04:c1:
                    0d:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:BD:81:63:4E:6D:18:2E:45:92:16:4F:B5:D3:0F:59:13:80:31:2F
            X509v3 Authority Key Identifier:
                keyid:C1:37:F6:38:C0:BE:46:00:B4:66:DE:8E:33:0D:4C:F6:A7:FF:3B:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/491a89-5850-40b6-85f4-1546bb6d36bb/1/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/491a89-5850-40b6-85f4-1546bb6d36bb/1/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:0e:53:3b:c2:15:f8:1f:16:42:a0:e0:4f:a2:5b:e3:00:07:
         5b:18:b2:e9:fb:7e:96:2b:55:b9:ee:43:8c:49:46:b6:3b:b8:
         e2:16:13:b7:d4:ee:7c:f3:90:c7:d9:cc:3d:0c:27:24:09:c5:
         4b:f2:f3:30:42:fc:c0:2e:0a:a3:1c:1a:8b:01:be:06:b8:b3:
         71:c8:2e:38:6b:ac:05:29:60:a9:60:8d:da:31:ea:33:9e:9f:
         8f:7a:d7:d5:40:6a:f3:5b:b3:d1:41:7f:3d:7e:48:3e:f8:10:
         70:42:d4:41:8f:f1:aa:40:3e:af:bb:f1:ab:18:a8:e9:c9:d8:
         bb:2d:e2:a8:77:16:de:11:0a:e8:a8:e5:75:a5:a5:bf:f1:be:
         c6:f5:70:01:b7:d7:57:58:a4:ba:07:b6:18:41:41:ce:5f:7b:
         3e:04:1e:80:63:4c:15:56:bc:d0:47:74:dc:9b:87:b4:12:04:
         5c:86:8d:04:dd:dd:54:ef:a5:de:46:a8:fa:16:17:43:c0:d8:
         e6:8d:76:a7:94:d8:50:e8:e3:4a:29:1d:00:dd:bc:65:62:d5:
         b5:6e:26:f4:0e:f6:25:ff:b9:0c:95:e4:e4:84:c6:c0:a6:b3:
         b6:73:fb:2c:90:31:c6:b4:d1:0d:44:ab:c8:58:cc:2f:c1:c9:
         a9:e9:78:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:49:55 2025 by rpki-client