Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/e47b35-3ff5-4ba3-97d6-676d37f3a29a/1/wW_hAJ--ZJH3sVze8Y75bA69RZs.mft
File:                     wW_hAJ--ZJH3sVze8Y75bA69RZs.mft (raw, json)
Hash identifier:          +a2V2evz1vGxl1BqsMcxqreAXmgj9/IB7V/0VhXrkV0=
Subject key identifier:   EB:43:31:82:AD:4F:04:93:F8:3A:CF:F6:B0:5D:5C:13:6D:6E:E5:D9
Authority key identifier: C1:6F:E1:00:9F:BE:64:91:F7:B1:5C:DE:F1:8E:F9:6C:0E:BD:45:9B
Certificate issuer:       /CN=c16fe1009fbe6491f7b15cdef18ef96c0ebd459b
Certificate serial:       0198D5163F54C0A485B3C672F8032C8F8672
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wW_hAJ--ZJH3sVze8Y75bA69RZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/e47b35-3ff5-4ba3-97d6-676d37f3a29a/1/wW_hAJ--ZJH3sVze8Y75bA69RZs.mft
Manifest number:          1646
Signing time:             Sat 23 Aug 2025 04:01:01 +0000
Manifest this update:     Sat 23 Aug 2025 04:01:01 +0000
Manifest next update:     Sun 24 Aug 2025 04:01:01 +0000
Files and hashes:         1: wW_hAJ--ZJH3sVze8Y75bA69RZs.crl (hash: c8OSrbTpsdruMYDnsDEyH4utO6Dltk+WGfSEoobE2qM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/e47b35-3ff5-4ba3-97d6-676d37f3a29a/1/wW_hAJ--ZJH3sVze8Y75bA69RZs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/e47b35-3ff5-4ba3-97d6-676d37f3a29a/1/wW_hAJ--ZJH3sVze8Y75bA69RZs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wW_hAJ--ZJH3sVze8Y75bA69RZs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 04:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:16:3f:54:c0:a4:85:b3:c6:72:f8:03:2c:8f:86:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c16fe1009fbe6491f7b15cdef18ef96c0ebd459b
        Validity
            Not Before: Aug 23 04:01:01 2025 GMT
            Not After : Aug 24 04:01:01 2025 GMT
        Subject: CN=eb433182ad4f0493f83acff6b05d5c136d6ee5d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:0c:3d:28:65:69:e5:ca:75:ad:65:ae:89:79:
                    57:a6:f1:4d:ca:15:28:b1:41:d6:bb:76:59:ef:21:
                    e7:00:b8:68:7d:1d:8a:d3:93:41:ee:7d:bd:6d:c7:
                    56:7a:fd:9d:df:bd:c0:eb:37:5b:cd:f9:6a:39:5d:
                    7b:0d:92:fe:87:da:48:96:97:d7:45:52:9c:9f:dc:
                    b0:de:62:91:5e:ee:8d:3d:59:da:af:b0:31:1d:6c:
                    ad:af:73:23:73:41:81:7a:e5:5d:e3:09:97:00:94:
                    ef:c2:8a:64:b8:54:66:9b:da:d1:31:e6:0d:92:b9:
                    02:30:b2:4d:62:12:10:96:38:61:77:fe:9f:df:1b:
                    41:28:43:d6:86:6d:18:16:cc:34:6a:4b:a4:56:2f:
                    8c:d5:f8:d4:67:b7:27:13:00:8e:4f:2f:53:52:11:
                    f3:cd:7b:41:38:a3:fd:00:0d:e2:1a:e9:a8:74:bb:
                    cf:e1:13:ab:08:cb:6e:e6:8d:79:da:c4:78:a8:e9:
                    20:3a:85:4e:e1:09:29:4b:a2:b0:9a:de:f3:03:a4:
                    12:aa:f8:d6:38:c2:71:d8:e1:50:e6:f4:11:5b:f0:
                    af:bf:71:20:52:3c:49:0d:a1:39:72:20:9a:7f:4d:
                    ac:0d:30:c0:8c:c3:71:ca:f5:43:f2:f0:d8:d5:7a:
                    7e:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:43:31:82:AD:4F:04:93:F8:3A:CF:F6:B0:5D:5C:13:6D:6E:E5:D9
            X509v3 Authority Key Identifier:
                keyid:C1:6F:E1:00:9F:BE:64:91:F7:B1:5C:DE:F1:8E:F9:6C:0E:BD:45:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wW_hAJ--ZJH3sVze8Y75bA69RZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e47b35-3ff5-4ba3-97d6-676d37f3a29a/1/wW_hAJ--ZJH3sVze8Y75bA69RZs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e47b35-3ff5-4ba3-97d6-676d37f3a29a/1/wW_hAJ--ZJH3sVze8Y75bA69RZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:8c:49:85:78:d3:41:26:23:2d:bd:52:21:a0:1c:a8:87:06:
         aa:05:f6:02:1c:ff:4c:8f:b2:a7:7c:d1:98:cc:d9:54:38:b2:
         a2:7f:0d:a3:76:6d:ba:f7:1d:08:f5:e8:3f:4c:17:20:fb:8a:
         72:92:7c:a8:69:1f:46:54:6c:e9:cb:c3:68:89:4f:3d:47:01:
         03:04:a3:d3:d6:f8:d2:b8:1d:50:07:a6:f3:f7:60:96:75:d5:
         74:f5:ad:cc:c9:54:b1:34:c5:b6:17:f1:74:9b:60:eb:94:da:
         43:52:f9:1c:8e:7f:3b:a1:f3:6b:42:f6:1d:5c:2c:fe:01:c1:
         59:0f:01:2e:7e:f7:24:57:a2:6e:15:c0:62:1b:c0:0d:f5:6c:
         a3:3f:20:4b:b3:d0:4e:60:bf:4c:d0:cd:f1:0c:e8:ca:98:a1:
         59:a9:d6:12:50:e3:9e:84:eb:5b:7a:0a:e2:54:70:27:4f:8f:
         e0:de:72:4e:d5:f8:f3:b8:71:c8:d3:45:7e:2a:e1:0f:99:ec:
         55:e1:b3:2c:c0:ec:1d:ff:dc:3a:ed:06:9e:e8:9a:ad:c0:8d:
         cc:d8:fb:57:4e:63:2e:ae:18:d3:8c:d8:b8:e8:2d:9a:3b:82:
         45:98:69:01:72:e7:1e:d1:62:f9:4d:e6:69:4e:12:78:c6:6c:
         fb:62:a2:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:32:05 2025 by rpki-client