Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/d881e7-e2dc-4ed9-a759-6bfe902ef034/1/wU3JWO0VLcdwKeyPhs8BiuK7-Qk.mft
File:                     wU3JWO0VLcdwKeyPhs8BiuK7-Qk.mft (raw, json)
Hash identifier:          ZIaHyJDmYk+sGtA8f1N5PzUajXKkXMARkCUgLRJv7QA=
Subject key identifier:   0D:9F:9C:2E:8D:C3:6A:F5:14:33:21:D3:F2:FA:F0:FE:BF:7B:C1:75
Authority key identifier: C1:4D:C9:58:ED:15:2D:C7:70:29:EC:8F:86:CF:01:8A:E2:BB:F9:09
Certificate issuer:       /CN=c14dc958ed152dc77029ec8f86cf018ae2bbf909
Certificate serial:       0198D73AE0DB1371591D7CC9584F78514DC4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wU3JWO0VLcdwKeyPhs8BiuK7-Qk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/d881e7-e2dc-4ed9-a759-6bfe902ef034/1/wU3JWO0VLcdwKeyPhs8BiuK7-Qk.mft
Manifest number:          1646
Signing time:             Sat 23 Aug 2025 14:00:16 +0000
Manifest this update:     Sat 23 Aug 2025 14:00:16 +0000
Manifest next update:     Sun 24 Aug 2025 14:00:16 +0000
Files and hashes:         1: wU3JWO0VLcdwKeyPhs8BiuK7-Qk.crl (hash: aSVC4F6K572n5c0aF/3KyHK731i3AHAbhtoyWRJn904=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/d881e7-e2dc-4ed9-a759-6bfe902ef034/1/wU3JWO0VLcdwKeyPhs8BiuK7-Qk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/d881e7-e2dc-4ed9-a759-6bfe902ef034/1/wU3JWO0VLcdwKeyPhs8BiuK7-Qk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wU3JWO0VLcdwKeyPhs8BiuK7-Qk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d7:3a:e0:db:13:71:59:1d:7c:c9:58:4f:78:51:4d:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c14dc958ed152dc77029ec8f86cf018ae2bbf909
        Validity
            Not Before: Aug 23 14:00:16 2025 GMT
            Not After : Aug 24 14:00:16 2025 GMT
        Subject: CN=0d9f9c2e8dc36af5143321d3f2faf0febf7bc175
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:79:56:f9:7c:0f:c3:43:bc:ff:6f:b5:be:03:
                    45:4d:82:ab:f8:f5:94:13:62:2d:56:d5:81:2e:bd:
                    3d:20:cc:cd:ba:45:bc:ec:fb:db:69:ef:e0:ac:a6:
                    3e:e1:0a:2f:2c:fe:55:fb:31:1e:45:13:ad:d6:39:
                    8b:c0:9f:b7:35:a0:42:9c:05:d6:98:f8:84:ef:3d:
                    22:26:9f:66:d3:69:d3:4d:bb:1a:b5:a2:af:bb:ef:
                    a9:d3:d6:90:ed:46:3a:2d:7c:20:3d:39:73:6e:25:
                    71:49:40:22:fd:af:d5:c4:ff:da:b7:ae:40:4f:98:
                    eb:3c:7f:cd:64:4a:ad:7c:4a:eb:1f:ae:eb:e9:8c:
                    e3:6e:72:9f:b6:70:16:70:fa:e9:59:86:62:55:f6:
                    de:05:06:2f:58:16:17:be:18:af:5d:1d:aa:b4:ba:
                    94:4f:29:29:3f:87:59:bb:d9:3f:48:d4:62:01:00:
                    14:9d:b0:4e:e7:60:e5:87:ab:89:2d:70:35:fb:c4:
                    03:e4:16:98:36:8d:81:a7:19:39:70:40:66:d6:31:
                    02:22:1b:3b:0d:23:86:27:c3:8e:60:96:bc:ee:0e:
                    dc:f3:f3:4d:1a:b0:52:74:8b:08:bc:78:40:09:f3:
                    2c:6a:bf:20:8b:49:ea:3b:a9:b4:28:14:a1:40:09:
                    4d:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:9F:9C:2E:8D:C3:6A:F5:14:33:21:D3:F2:FA:F0:FE:BF:7B:C1:75
            X509v3 Authority Key Identifier:
                keyid:C1:4D:C9:58:ED:15:2D:C7:70:29:EC:8F:86:CF:01:8A:E2:BB:F9:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wU3JWO0VLcdwKeyPhs8BiuK7-Qk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/d881e7-e2dc-4ed9-a759-6bfe902ef034/1/wU3JWO0VLcdwKeyPhs8BiuK7-Qk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/d881e7-e2dc-4ed9-a759-6bfe902ef034/1/wU3JWO0VLcdwKeyPhs8BiuK7-Qk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:82:0d:d8:6b:10:03:0c:2f:5d:16:65:f8:24:06:f1:54:91:
         c8:84:df:f8:b8:50:0e:97:7a:ac:7f:c3:9c:83:4c:76:71:94:
         15:86:28:e6:72:d3:14:05:de:41:76:84:1a:66:0f:80:9e:a7:
         83:47:fe:3d:18:58:c6:b8:10:66:06:a4:04:76:08:f3:60:ab:
         4c:06:60:78:f3:b6:ea:7e:3f:50:83:89:8a:0c:46:f4:f7:f2:
         80:1a:0c:a3:8b:26:d2:42:99:10:04:70:b2:e1:52:e2:98:bc:
         a7:cc:e4:af:88:fb:73:2e:6a:d6:51:a5:52:8d:aa:f3:7a:46:
         d4:3b:df:b7:35:f9:ab:3d:c4:87:50:77:8c:4c:6e:99:30:40:
         12:0e:18:9a:f7:fd:63:f1:14:bf:dd:39:3a:7a:f9:d3:eb:be:
         0a:be:85:4b:a3:53:6f:49:c9:79:74:4c:e0:51:8d:19:be:9d:
         1a:39:c6:2f:8c:75:25:66:8e:e3:6d:fb:df:6c:32:48:34:2f:
         9d:03:e9:a6:a4:f3:58:1a:42:b6:a9:f6:a9:60:e3:5e:f0:df:
         87:f9:6b:d7:6f:25:4a:32:94:0a:ed:b0:c0:fc:53:09:55:e2:
         14:89:39:03:b0:49:81:30:00:ae:7f:c7:1e:09:e6:56:f0:bc:
         29:7c:f0:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:49:55 2025 by rpki-client