Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/80790b-891f-4e03-bd56-9fb6b4ea250a/1/wR_52bpVx9lQjFpNwe7MDilWHC4.mft
File:                     wR_52bpVx9lQjFpNwe7MDilWHC4.mft (raw, json)
Hash identifier:          WE5aOJG0Nk+dLy/HQQ8BNpsP5aJcSlnBthQhYPcri9Y=
Subject key identifier:   C4:1B:79:7F:B9:8C:73:26:D9:21:82:C8:56:2E:70:14:AD:C0:3B:EB
Authority key identifier: C1:1F:F9:D9:BA:55:C7:D9:50:8C:5A:4D:C1:EE:CC:0E:29:56:1C:2E
Certificate issuer:       /CN=c11ff9d9ba55c7d9508c5a4dc1eecc0e29561c2e
Certificate serial:       019A00A380D367FC7D772296142B24F5B88E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wR_52bpVx9lQjFpNwe7MDilWHC4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/80790b-891f-4e03-bd56-9fb6b4ea250a/1/wR_52bpVx9lQjFpNwe7MDilWHC4.mft
Manifest number:          16E2
Signing time:             Mon 20 Oct 2025 08:01:46 +0000
Manifest this update:     Mon 20 Oct 2025 08:01:46 +0000
Manifest next update:     Tue 21 Oct 2025 08:01:46 +0000
Files and hashes:         1: wR_52bpVx9lQjFpNwe7MDilWHC4.crl (hash: K0d3IpuTwpKA5OF1dyMURev4Hf4Xz83iw/DMP3UJPZc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/80790b-891f-4e03-bd56-9fb6b4ea250a/1/wR_52bpVx9lQjFpNwe7MDilWHC4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/80790b-891f-4e03-bd56-9fb6b4ea250a/1/wR_52bpVx9lQjFpNwe7MDilWHC4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wR_52bpVx9lQjFpNwe7MDilWHC4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 08:01:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:00:a3:80:d3:67:fc:7d:77:22:96:14:2b:24:f5:b8:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c11ff9d9ba55c7d9508c5a4dc1eecc0e29561c2e
        Validity
            Not Before: Oct 20 08:01:46 2025 GMT
            Not After : Oct 21 08:01:46 2025 GMT
        Subject: CN=c41b797fb98c7326d92182c8562e7014adc03beb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:ae:44:ce:c1:f7:7d:12:61:52:b7:d6:24:3f:
                    38:cb:be:ee:48:6f:47:43:ed:2d:96:00:ce:7b:25:
                    96:b4:df:6f:a6:e7:d6:02:b6:97:08:12:1d:f1:46:
                    bb:e2:1d:66:c9:84:b7:af:57:1a:c7:89:91:f9:e1:
                    91:24:08:46:dc:10:9b:9e:21:5a:77:e2:74:41:2f:
                    36:ba:7a:cd:59:89:cd:73:3e:7a:3c:16:f1:b8:47:
                    f3:6a:0f:c1:12:d1:02:3e:63:18:2a:cc:19:02:9a:
                    d0:4b:c1:bd:27:1e:ff:3e:17:7c:f4:ab:7b:65:d4:
                    d6:55:d6:21:ca:5c:14:3c:75:b7:90:97:68:d7:41:
                    4d:92:b1:39:a1:56:94:7f:5d:35:39:bf:b0:7f:c8:
                    b2:d9:0c:a8:08:96:34:8a:51:95:6b:09:1e:bd:d0:
                    df:44:6a:b0:99:60:db:77:69:6a:80:3d:5b:70:62:
                    ae:0e:6c:47:02:53:05:ba:b1:95:11:d6:cb:45:7f:
                    7d:bd:b3:87:f2:d1:fa:2e:90:9b:45:82:bd:53:c8:
                    e5:ab:82:41:6a:40:17:18:fc:c3:77:08:b4:ad:7e:
                    4e:54:b5:f4:0e:c2:56:26:42:24:c7:3a:2d:91:14:
                    cb:32:7f:f4:36:e1:ca:4a:e6:15:b8:ff:c8:ab:2f:
                    34:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:1B:79:7F:B9:8C:73:26:D9:21:82:C8:56:2E:70:14:AD:C0:3B:EB
            X509v3 Authority Key Identifier:
                keyid:C1:1F:F9:D9:BA:55:C7:D9:50:8C:5A:4D:C1:EE:CC:0E:29:56:1C:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wR_52bpVx9lQjFpNwe7MDilWHC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/80790b-891f-4e03-bd56-9fb6b4ea250a/1/wR_52bpVx9lQjFpNwe7MDilWHC4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/80790b-891f-4e03-bd56-9fb6b4ea250a/1/wR_52bpVx9lQjFpNwe7MDilWHC4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:f2:92:c4:e6:10:67:c9:54:93:12:b1:08:e7:54:8a:60:8d:
         df:78:4b:46:c5:8b:af:cc:04:7e:11:75:1d:f7:af:e6:71:44:
         ac:a1:8e:0b:24:cc:e8:98:75:12:e7:61:af:ca:8a:01:da:f4:
         79:d5:e7:c2:d0:8f:e1:c0:b5:4d:0e:93:5e:db:d1:e6:4d:1b:
         5b:22:19:51:e5:10:70:42:c9:b4:1d:bc:e7:54:d3:be:d2:8f:
         38:e2:e5:af:5e:5b:c1:b0:32:af:53:f1:cf:a9:61:fe:31:7d:
         ec:67:b5:78:ac:18:e3:db:42:06:f3:29:f1:f7:68:c1:58:bb:
         5d:5d:5e:64:95:c8:4c:12:1a:8b:34:7d:0a:be:ab:9b:24:21:
         6f:b7:b6:83:e9:ac:4d:e7:ef:17:5e:39:7b:94:d4:b7:65:eb:
         9e:b7:a7:97:ec:d5:bc:1b:01:a7:35:cd:bd:19:c6:f2:68:f0:
         ce:85:53:03:8e:d9:8d:8d:2e:01:92:f6:10:40:ac:d9:0b:3a:
         3c:1b:2b:8f:7e:22:af:cf:44:1a:ec:42:1b:a8:29:9f:80:80:
         55:59:f3:5f:d1:58:3a:ad:b2:73:db:56:da:6f:51:c3:8d:6a:
         23:f7:7b:59:ba:c6:d0:40:95:2e:e3:bc:55:80:d4:7a:66:83:
         a2:7a:4b:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:19:32 2025 by rpki-client