Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/e139d8-68e0-4ffa-b4ef-d7364dd35b31/1/wIGiJnTcJaqlCFNn4g4HjekGTxI.mft
File:                     wIGiJnTcJaqlCFNn4g4HjekGTxI.mft (raw, json)
Hash identifier:          ff1quVbHBWe7nJJDhruZ2b/h/31M7nQs7ODYyLtUEQk=
Subject key identifier:   40:04:BE:60:50:CE:E0:54:53:E5:01:D6:84:33:22:D6:BF:78:88:49
Authority key identifier: C0:81:A2:26:74:DC:25:AA:A5:08:53:67:E2:0E:07:8D:E9:06:4F:12
Certificate issuer:       /CN=c081a22674dc25aaa5085367e20e078de9064f12
Certificate serial:       0197C425F6EA50948C6DBB7B24DBB610D95F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wIGiJnTcJaqlCFNn4g4HjekGTxI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/e139d8-68e0-4ffa-b4ef-d7364dd35b31/1/wIGiJnTcJaqlCFNn4g4HjekGTxI.mft
Manifest number:          0832
Signing time:             Tue 01 Jul 2025 04:01:51 +0000
Manifest this update:     Tue 01 Jul 2025 04:01:51 +0000
Manifest next update:     Wed 02 Jul 2025 04:01:51 +0000
Files and hashes:         1: wIGiJnTcJaqlCFNn4g4HjekGTxI.crl (hash: TiWYn1ce0BwM/f3Ok7sZQToQAw8P1RZn93ufmJgH1ik=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/e139d8-68e0-4ffa-b4ef-d7364dd35b31/1/wIGiJnTcJaqlCFNn4g4HjekGTxI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/e139d8-68e0-4ffa-b4ef-d7364dd35b31/1/wIGiJnTcJaqlCFNn4g4HjekGTxI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wIGiJnTcJaqlCFNn4g4HjekGTxI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 02 Jul 2025 04:01:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:c4:25:f6:ea:50:94:8c:6d:bb:7b:24:db:b6:10:d9:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c081a22674dc25aaa5085367e20e078de9064f12
        Validity
            Not Before: Jul  1 04:01:51 2025 GMT
            Not After : Jul  2 04:01:51 2025 GMT
        Subject: CN=4004be6050cee05453e501d6843322d6bf788849
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:8e:38:8e:42:d4:ec:e6:d3:6f:3a:0e:a3:5e:
                    e4:d2:8a:81:f7:8f:9d:33:48:f0:fe:47:00:a5:16:
                    c1:48:7b:d8:91:50:4f:46:9f:e3:97:e8:0e:90:97:
                    e6:d8:9d:46:5c:98:3c:00:09:af:8f:24:63:ef:2a:
                    8b:1d:c0:c5:d1:e4:9c:ce:4b:07:8f:24:af:99:23:
                    aa:99:88:a4:f3:84:20:85:ed:a3:f1:e9:d2:9d:8c:
                    09:e2:22:91:76:18:d5:25:6e:7b:10:e8:8c:af:21:
                    c7:24:2a:f7:69:03:9e:dc:61:e2:ad:0f:af:52:81:
                    ea:65:80:28:e1:1f:63:43:60:21:24:80:bc:59:db:
                    2e:74:0a:8c:bd:02:16:00:e5:6a:57:77:53:f9:e4:
                    d4:11:16:57:24:8d:a5:05:c3:2a:11:8f:5d:4c:27:
                    f4:aa:42:e8:1d:af:df:e7:c9:94:2a:79:7e:15:3e:
                    d4:43:fd:91:70:83:7c:d8:23:3e:e5:45:77:4c:ad:
                    94:58:17:25:e8:e9:cd:b3:f9:87:bd:eb:c9:28:ec:
                    45:81:26:d9:66:74:63:c7:64:05:eb:0a:76:f8:c6:
                    c8:df:a7:09:de:98:90:e5:23:da:88:b7:11:57:54:
                    b0:59:42:0d:6e:6b:3b:c3:53:5e:1b:53:b8:2f:62:
                    8f:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:04:BE:60:50:CE:E0:54:53:E5:01:D6:84:33:22:D6:BF:78:88:49
            X509v3 Authority Key Identifier:
                keyid:C0:81:A2:26:74:DC:25:AA:A5:08:53:67:E2:0E:07:8D:E9:06:4F:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wIGiJnTcJaqlCFNn4g4HjekGTxI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/e139d8-68e0-4ffa-b4ef-d7364dd35b31/1/wIGiJnTcJaqlCFNn4g4HjekGTxI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/e139d8-68e0-4ffa-b4ef-d7364dd35b31/1/wIGiJnTcJaqlCFNn4g4HjekGTxI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:4b:b1:26:14:ae:0d:38:7a:42:46:c5:d3:cc:e4:6b:a2:73:
         97:82:d7:51:b1:7f:75:98:9a:5d:ac:f2:22:b7:67:6d:5e:29:
         ed:76:04:59:2b:b0:12:f3:cc:c3:4d:4c:8c:d7:8c:a7:0c:7d:
         7d:6f:ff:90:86:18:8e:95:24:fd:2d:85:64:a6:f4:3c:aa:3d:
         7c:27:87:1d:e6:b8:8b:92:9c:52:a7:8e:fb:fa:e2:1d:43:2c:
         7d:3c:86:af:ae:7b:f1:1f:9c:1c:7c:b4:8f:cc:92:6e:e9:61:
         9c:38:68:fe:82:6e:d4:fa:00:0f:6d:2c:29:de:af:f8:23:c1:
         b7:00:be:c9:c7:2b:9f:cb:5d:cf:9b:3d:9d:dd:3b:2d:c3:ca:
         dc:54:c0:70:85:c9:9e:31:54:4e:77:8c:32:4d:0d:0d:d7:92:
         26:c4:7f:22:33:65:a6:8f:5d:46:b5:a7:02:32:ac:81:e7:f0:
         d9:f2:05:21:ae:82:50:c2:30:26:7f:17:21:71:1a:7e:38:bd:
         dd:f4:48:0d:a6:33:81:44:ad:2b:23:c6:1f:c4:d2:92:c5:35:
         89:b8:91:4c:22:79:a9:bd:d8:14:4b:34:6a:1c:9a:19:0e:b9:
         6e:08:a8:bc:87:ed:0b:cf:a8:08:a2:e2:00:a5:1a:5f:fb:15:
         2d:cc:a3:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 10:53:19 2025 by rpki-client