Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/173035-88ba-4452-903d-4ba85efdb266/1/wi7Wzo-2x52t12WDpeotOruaQy8.mft
File:                     wi7Wzo-2x52t12WDpeotOruaQy8.mft (raw, json)
Hash identifier:          +CrwEdsxC/eCD/SmSefOfH4ckBoA7BxOBPFRzilE8q0=
Subject key identifier:   3A:AD:1E:A4:BA:B6:17:EF:05:66:98:2B:98:3A:71:69:3E:C7:0A:41
Authority key identifier: C2:2E:D6:CE:8F:B6:C7:9D:AD:D7:65:83:A5:EA:2D:3A:BB:9A:43:2F
Certificate issuer:       /CN=c22ed6ce8fb6c79dadd76583a5ea2d3abb9a432f
Certificate serial:       0199FB458E3E7FDA9850CA6D4AFF1AEA60A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wi7Wzo-2x52t12WDpeotOruaQy8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/173035-88ba-4452-903d-4ba85efdb266/1/wi7Wzo-2x52t12WDpeotOruaQy8.mft
Manifest number:          F1
Signing time:             Sun 19 Oct 2025 07:01:03 +0000
Manifest this update:     Sun 19 Oct 2025 07:01:03 +0000
Manifest next update:     Mon 20 Oct 2025 07:01:03 +0000
Files and hashes:         1: wi7Wzo-2x52t12WDpeotOruaQy8.crl (hash: 1Cx594J8ZPYkfrlO85mpmVzKcy134EqdbQEF9I2wUW0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/173035-88ba-4452-903d-4ba85efdb266/1/wi7Wzo-2x52t12WDpeotOruaQy8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/173035-88ba-4452-903d-4ba85efdb266/1/wi7Wzo-2x52t12WDpeotOruaQy8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wi7Wzo-2x52t12WDpeotOruaQy8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fb:45:8e:3e:7f:da:98:50:ca:6d:4a:ff:1a:ea:60:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c22ed6ce8fb6c79dadd76583a5ea2d3abb9a432f
        Validity
            Not Before: Oct 19 07:01:03 2025 GMT
            Not After : Oct 20 07:01:03 2025 GMT
        Subject: CN=3aad1ea4bab617ef0566982b983a71693ec70a41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:47:6d:3a:57:7e:ba:17:c2:fe:d0:d3:76:b1:
                    64:f5:48:91:bd:fc:6b:78:1b:9c:32:43:c1:04:c7:
                    8f:ba:cc:15:e8:94:f5:68:4b:53:68:79:72:c1:68:
                    27:ae:47:4e:24:86:26:f7:ff:54:c7:f0:73:2f:9a:
                    99:ca:4b:b3:e8:4c:b3:e9:8b:44:25:a4:81:ff:c4:
                    fa:29:af:52:1d:8a:bf:b3:4a:e4:69:04:4e:80:b2:
                    06:cd:fe:4d:73:44:cf:1b:0d:b8:cd:ba:f6:9a:32:
                    5c:85:b6:bb:e9:78:92:7c:8a:95:56:62:28:05:e7:
                    45:75:36:8e:18:ab:a8:c8:e7:f2:e7:a2:eb:27:13:
                    f5:c8:fd:f3:da:7e:8e:05:1b:05:13:08:9c:35:d1:
                    a2:fa:23:08:0e:f9:e8:39:43:a8:c8:07:58:5f:15:
                    67:c2:d5:1b:cd:12:7b:9d:c7:d2:db:9b:c1:d5:b0:
                    d6:7f:1d:ce:dc:29:34:ff:ba:9d:08:09:3f:75:e0:
                    d4:81:40:3f:59:ed:d4:a2:9e:92:05:1d:c0:3c:cb:
                    94:28:b1:11:9b:8a:8e:e4:a9:29:f0:1e:0d:37:38:
                    4a:a9:eb:65:2a:48:69:76:45:80:1a:c2:20:ad:05:
                    16:f2:20:1c:4b:df:1e:ae:49:52:d7:6a:71:85:42:
                    21:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:AD:1E:A4:BA:B6:17:EF:05:66:98:2B:98:3A:71:69:3E:C7:0A:41
            X509v3 Authority Key Identifier:
                keyid:C2:2E:D6:CE:8F:B6:C7:9D:AD:D7:65:83:A5:EA:2D:3A:BB:9A:43:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wi7Wzo-2x52t12WDpeotOruaQy8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/173035-88ba-4452-903d-4ba85efdb266/1/wi7Wzo-2x52t12WDpeotOruaQy8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/173035-88ba-4452-903d-4ba85efdb266/1/wi7Wzo-2x52t12WDpeotOruaQy8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:1f:c8:82:2a:20:f7:02:ab:ab:bb:e1:08:7c:ac:d2:81:9f:
         67:40:ae:ac:e2:f8:5e:d1:3e:82:c4:e7:0a:93:6c:37:3f:3c:
         30:b8:c0:64:81:65:9b:d2:51:09:a1:f7:b2:ae:2c:90:19:06:
         39:12:fc:f7:76:8c:2c:95:ff:b2:94:84:07:b7:d2:f4:37:a4:
         9d:cf:1d:da:4b:80:ee:47:a4:8e:8a:f6:1b:30:0c:02:b0:79:
         96:93:41:96:03:d5:02:25:11:a0:34:25:61:13:ef:50:d6:2f:
         2f:78:d3:bf:2e:77:f1:ba:9c:56:a6:40:f3:c6:df:3b:3e:2c:
         55:db:40:ac:4a:55:9e:da:70:3a:19:d9:41:85:b4:de:bb:3d:
         50:a5:74:6d:3e:73:5f:23:e9:08:24:8c:04:fb:6f:13:fc:06:
         fe:3e:bc:c6:1b:17:e7:a0:0b:45:f9:1e:1b:95:2c:7d:22:22:
         e3:6f:29:02:32:cb:eb:fe:14:ba:c3:22:84:f0:bb:54:24:84:
         9e:e7:69:62:57:77:d8:4b:6d:46:05:f1:f8:f4:29:d3:94:8a:
         02:8f:54:4f:8e:6a:21:df:f5:41:f4:a0:2e:a5:17:3b:10:86:
         23:21:9e:32:09:ae:44:90:9f:17:a7:27:4a:7a:b9:b1:aa:68:
         e3:13:d5:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:43:56 2025 by rpki-client