Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/5e7141-9103-48eb-8dcd-ad5868825c36/1/wsFAyCGJcO9g5ok1Txa2OvSQCtU.mft
File:                     wsFAyCGJcO9g5ok1Txa2OvSQCtU.mft (raw, json)
Hash identifier:          hn3ARIms9t/YNWzwK4Hq1InWII/VKP4hcO58mozelX4=
Subject key identifier:   32:16:FC:B0:05:36:3C:B1:39:3D:7E:B5:DD:65:59:ED:B5:C2:DD:18
Authority key identifier: C2:C1:40:C8:21:89:70:EF:60:E6:89:35:4F:16:B6:3A:F4:90:0A:D5
Certificate issuer:       /CN=c2c140c8218970ef60e689354f16b63af4900ad5
Certificate serial:       0197CC4CA17313A00516601B2529A97FC76E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wsFAyCGJcO9g5ok1Txa2OvSQCtU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/5e7141-9103-48eb-8dcd-ad5868825c36/1/wsFAyCGJcO9g5ok1Txa2OvSQCtU.mft
Manifest number:          0A3F
Signing time:             Wed 02 Jul 2025 18:01:03 +0000
Manifest this update:     Wed 02 Jul 2025 18:01:03 +0000
Manifest next update:     Thu 03 Jul 2025 18:01:03 +0000
Files and hashes:         1: wsFAyCGJcO9g5ok1Txa2OvSQCtU.crl (hash: XRV+Pelgx/vsE40YiPWPwX2KwEBjEqV7g4dyvFYhZbs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/5e7141-9103-48eb-8dcd-ad5868825c36/1/wsFAyCGJcO9g5ok1Txa2OvSQCtU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/5e7141-9103-48eb-8dcd-ad5868825c36/1/wsFAyCGJcO9g5ok1Txa2OvSQCtU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wsFAyCGJcO9g5ok1Txa2OvSQCtU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 03 Jul 2025 18:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:cc:4c:a1:73:13:a0:05:16:60:1b:25:29:a9:7f:c7:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2c140c8218970ef60e689354f16b63af4900ad5
        Validity
            Not Before: Jul  2 18:01:03 2025 GMT
            Not After : Jul  3 18:01:03 2025 GMT
        Subject: CN=3216fcb005363cb1393d7eb5dd6559edb5c2dd18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:2e:4a:f5:98:a7:7e:d4:08:28:d4:e4:15:49:
                    ce:50:26:aa:36:f8:bf:43:31:94:be:6e:7e:76:74:
                    e7:bd:75:8f:9b:54:3d:8c:28:d4:6a:bb:09:77:8b:
                    de:7d:2b:8b:52:33:94:e6:b1:c1:71:c3:dd:c2:4c:
                    f4:b9:7a:08:d4:d6:62:ea:12:a4:04:23:6d:0e:4e:
                    e8:5d:2b:9a:f9:9e:c5:a9:aa:43:16:be:84:9a:4b:
                    98:ec:9c:e5:c1:97:b2:99:04:e4:a2:1c:80:24:11:
                    b2:21:7e:a2:1c:09:11:90:b3:d8:aa:75:72:63:11:
                    12:2d:48:b3:78:02:75:d2:ec:d3:77:4b:5c:2e:2a:
                    74:ef:ec:e3:cf:38:e3:6c:56:33:ac:8c:06:95:79:
                    38:46:1d:06:49:47:54:1c:df:d5:a5:ba:3c:ab:a4:
                    73:8f:4a:7b:0d:77:0a:82:30:7d:a4:7b:a3:49:f6:
                    89:57:60:60:b5:0e:16:c0:e5:a1:d2:60:15:55:ef:
                    9b:24:f9:ee:7f:13:46:61:9c:01:ff:8b:a2:2b:f4:
                    97:a9:15:0f:0b:8b:f2:84:f2:ff:1b:da:48:ef:9d:
                    ba:5f:15:53:ff:79:a9:8f:4a:dc:66:b9:cd:2a:78:
                    66:a4:74:36:81:89:49:11:b8:3f:3e:46:b3:cb:0a:
                    3a:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:16:FC:B0:05:36:3C:B1:39:3D:7E:B5:DD:65:59:ED:B5:C2:DD:18
            X509v3 Authority Key Identifier:
                keyid:C2:C1:40:C8:21:89:70:EF:60:E6:89:35:4F:16:B6:3A:F4:90:0A:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsFAyCGJcO9g5ok1Txa2OvSQCtU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/5e7141-9103-48eb-8dcd-ad5868825c36/1/wsFAyCGJcO9g5ok1Txa2OvSQCtU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/5e7141-9103-48eb-8dcd-ad5868825c36/1/wsFAyCGJcO9g5ok1Txa2OvSQCtU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:fe:ed:d6:f6:79:10:06:b6:cb:d0:c0:05:9f:90:52:97:a2:
         00:68:ac:1b:06:07:c4:e5:c7:e2:b3:e7:46:1a:3d:0d:2e:b1:
         f9:9f:50:04:d7:21:79:7b:c3:69:0b:e4:a0:0e:ce:d8:50:1b:
         f3:19:e2:d4:27:26:1a:3e:48:be:ae:88:08:03:b1:e5:44:b2:
         ec:96:8f:89:bc:2f:2c:ac:b9:be:56:9c:a0:c4:a2:18:e6:8a:
         94:34:f4:60:ff:fe:d0:62:dc:3b:b3:5c:fe:b7:f4:a4:9b:b4:
         dd:dc:0f:83:30:31:b0:8c:e7:21:96:10:35:c8:0f:fb:02:7e:
         83:d3:bd:48:3b:46:12:6a:5a:4e:4e:85:57:51:52:60:7c:fc:
         74:cd:78:3e:07:7c:69:72:fc:99:c1:3a:af:cf:50:2d:c5:07:
         9d:99:82:d5:6a:10:52:0a:d3:c3:d8:ca:7f:72:c8:69:aa:63:
         f6:f5:e5:ca:c8:6d:03:59:c5:fd:1e:63:e1:4d:73:70:87:85:
         b3:cc:db:7d:42:a1:39:4c:cd:6b:5c:f0:4e:d3:4e:fb:6a:7d:
         9e:c4:e0:ea:86:b7:00:14:cd:83:ac:88:e5:de:8e:b2:07:13:
         c5:f6:e9:19:4e:7d:23:20:04:fb:82:3d:06:6d:f9:f9:b0:e2:
         6b:4a:26:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfMTKFzE6AFFmAbJSmpf8duMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyYzE0MGM4MjE4OTcwZWY2MGU2ODkzNTRmMTZiNjNhZjQ5
MDBhZDUwHhcNMjUwNzAyMTgwMTAzWhcNMjUwNzAzMTgwMTAzWjAzMTEwLwYDVQQD
EygzMjE2ZmNiMDA1MzYzY2IxMzkzZDdlYjVkZDY1NTllZGI1YzJkZDE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7S5K9ZinftQIKNTkFUnOUCaqNvi/
QzGUvm5+dnTnvXWPm1Q9jCjUarsJd4vefSuLUjOU5rHBccPdwkz0uXoI1NZi6hKk
BCNtDk7oXSua+Z7FqapDFr6EmkuY7JzlwZeymQTkohyAJBGyIX6iHAkRkLPYqnVy
YxESLUizeAJ10uzTd0tcLip07+zjzzjjbFYzrIwGlXk4Rh0GSUdUHN/Vpbo8q6Rz
j0p7DXcKgjB9pHujSfaJV2BgtQ4WwOWh0mAVVe+bJPnufxNGYZwB/4uiK/SXqRUP
C4vyhPL/G9pI7526XxVT/3mpj0rcZrnNKnhmpHQ2gYlJEbg/Pkazywo6HQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDIW/LAFNjyxOT1+td1lWe21wt0YMB8GA1UdIwQY
MBaAFMLBQMghiXDvYOaJNU8Wtjr0kArVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3NGQXlDR0pjTzlnNW9rMVR4YTJPdlNRQ3RVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS81ZTcxNDEtOTEwMy00OGViLThkY2Qt
YWQ1ODY4ODI1YzM2LzEvd3NGQXlDR0pjTzlnNW9rMVR4YTJPdlNRQ3RVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS81ZTcxNDEtOTEwMy00OGViLThkY2QtYWQ1ODY4ODI1YzM2
LzEvd3NGQXlDR0pjTzlnNW9rMVR4YTJPdlNRQ3RVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKv7t1vZ5
EAa2y9DABZ+QUpeiAGisGwYHxOXH4rPnRho9DS6x+Z9QBNcheXvDaQvkoA7O2FAb
8xni1CcmGj5Ivq6ICAOx5USy7JaPibwvLKy5vlacoMSiGOaKlDT0YP/+0GLcO7Nc
/rf0pJu03dwPgzAxsIznIZYQNcgP+wJ+g9O9SDtGEmpaTk6FV1FSYHz8dM14Pgd8
aXL8mcE6r89QLcUHnZmC1WoQUgrTw9jKf3LIaapj9vXlyshtA1nF/R5j4U1zcIeF
s8zbfUKhOUzNa1zwTtNO+2p9nsTg6oa3ABTNg6yI5d6OsgcTxfbpGU59IyAE+4I9
Bm35+bDia0omeQ==
-----END CERTIFICATE-----
Generated at Thu Jul 3 02:00:11 2025 by rpki-client