Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/3e50ff-a566-4cb1-a110-3a8af02951ee/1/wrAFQRuLMhCDQsn3BZUCIGuYJME.mft
File:                     wrAFQRuLMhCDQsn3BZUCIGuYJME.mft (raw, json)
Hash identifier:          Qeaj8QTpFXUh6hxbZhDOLrRKJ+7t3ePMVvsM8nJCdzM=
Subject key identifier:   6A:98:08:3A:7D:B8:95:1E:70:76:61:FE:24:A7:FE:B2:81:38:04:B5
Authority key identifier: C2:B0:05:41:1B:8B:32:10:83:42:C9:F7:05:95:02:20:6B:98:24:C1
Certificate issuer:       /CN=c2b005411b8b32108342c9f7059502206b9824c1
Certificate serial:       0199FC213D4CF19187400524022A86CE0775
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wrAFQRuLMhCDQsn3BZUCIGuYJME.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/3e50ff-a566-4cb1-a110-3a8af02951ee/1/wrAFQRuLMhCDQsn3BZUCIGuYJME.mft
Manifest number:          16E0
Signing time:             Sun 19 Oct 2025 11:01:00 +0000
Manifest this update:     Sun 19 Oct 2025 11:01:00 +0000
Manifest next update:     Mon 20 Oct 2025 11:01:00 +0000
Files and hashes:         1: wrAFQRuLMhCDQsn3BZUCIGuYJME.crl (hash: awUNX0hWhIGfgz/VpfZ8osZywP76/iJois62RVsUAKY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/3e50ff-a566-4cb1-a110-3a8af02951ee/1/wrAFQRuLMhCDQsn3BZUCIGuYJME.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/3e50ff-a566-4cb1-a110-3a8af02951ee/1/wrAFQRuLMhCDQsn3BZUCIGuYJME.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wrAFQRuLMhCDQsn3BZUCIGuYJME.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 06:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fc:21:3d:4c:f1:91:87:40:05:24:02:2a:86:ce:07:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2b005411b8b32108342c9f7059502206b9824c1
        Validity
            Not Before: Oct 19 11:01:00 2025 GMT
            Not After : Oct 20 11:01:00 2025 GMT
        Subject: CN=6a98083a7db8951e707661fe24a7feb2813804b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:5c:d1:bc:63:cd:23:66:5c:43:5c:6a:65:f0:
                    e9:1d:d8:2e:e7:43:c5:ef:4d:c4:dd:cd:6b:bf:14:
                    60:dd:fe:bf:f3:71:d5:c6:ae:25:a1:5b:63:7a:05:
                    d5:d4:e5:20:66:64:83:3f:2e:de:17:89:bf:bb:8a:
                    0a:2d:29:0c:2b:06:d3:c2:08:cb:a7:14:a2:2e:92:
                    e9:85:4c:d1:e4:f8:a0:40:4a:8d:92:28:b9:dd:c8:
                    7d:1e:fc:96:b6:93:1a:d4:51:36:45:7d:41:61:8b:
                    db:39:b2:62:f4:4b:7c:7d:e1:d9:ba:a2:b1:7d:6e:
                    aa:54:0e:08:dd:99:dd:00:0a:0a:71:bc:4b:42:64:
                    48:29:e6:eb:06:6b:f2:ba:76:23:8c:8e:77:3a:2e:
                    ce:97:0b:b6:9b:13:eb:72:0e:27:3a:4c:55:06:a3:
                    cb:88:e5:c9:07:1c:57:2a:ab:c9:2f:a0:e4:f7:0e:
                    53:00:cd:7c:88:bf:d8:c6:36:df:04:d1:64:ad:ff:
                    80:9a:29:66:73:82:86:55:6a:e4:82:57:40:a1:7b:
                    a9:f5:59:f6:fb:9c:a7:4e:70:6a:02:1e:48:59:6b:
                    36:36:01:01:52:16:30:40:18:4d:0b:36:79:23:77:
                    f9:15:46:12:f7:63:81:32:84:09:9d:3c:55:e4:8d:
                    b0:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:98:08:3A:7D:B8:95:1E:70:76:61:FE:24:A7:FE:B2:81:38:04:B5
            X509v3 Authority Key Identifier:
                keyid:C2:B0:05:41:1B:8B:32:10:83:42:C9:F7:05:95:02:20:6B:98:24:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wrAFQRuLMhCDQsn3BZUCIGuYJME.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/3e50ff-a566-4cb1-a110-3a8af02951ee/1/wrAFQRuLMhCDQsn3BZUCIGuYJME.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/3e50ff-a566-4cb1-a110-3a8af02951ee/1/wrAFQRuLMhCDQsn3BZUCIGuYJME.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:8a:30:25:e1:62:55:f6:f5:7e:9b:55:20:1e:7a:90:bc:6d:
         91:6b:23:8e:9b:16:12:a2:a6:db:db:b4:c7:08:49:d0:62:7a:
         50:74:a1:77:c3:1d:ef:61:ba:70:44:0e:75:0e:da:d5:21:4e:
         0b:8a:7b:ec:74:d6:0e:a1:a4:0c:94:94:43:85:d5:46:43:fd:
         98:06:e9:0a:f7:3a:85:63:d5:be:db:10:da:35:48:ba:8c:77:
         59:d8:1f:fa:e2:57:d8:ad:96:79:b1:a7:83:db:fc:74:45:56:
         7d:f0:04:95:6f:21:00:6d:8b:46:00:91:8c:ad:99:c8:c1:3c:
         b9:77:55:26:87:63:2a:80:e8:d0:77:90:98:90:81:30:72:b1:
         57:c4:51:03:1a:b3:a4:05:11:70:9e:b1:8b:fc:c5:49:26:3d:
         9d:c8:42:31:34:d8:90:2b:1a:39:53:a6:00:ef:74:9f:3d:21:
         32:5a:0b:72:0e:57:89:48:06:0b:77:b9:3a:19:a9:38:54:f1:
         d8:06:24:da:42:4d:c5:97:6a:a2:87:51:92:f4:48:a9:ac:53:
         ad:62:ab:d8:c1:ce:fd:16:ee:6a:a9:ca:c4:3c:0a:7b:78:dc:
         de:46:b2:d9:45:f4:d6:27:2f:a0:2f:fe:13:4c:de:bf:99:88:
         62:01:6b:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:19:03 2025 by rpki-client