Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/3904bb-0b6c-4da5-a5af-aafaaeaed8bb/1/WVpR9FwMtjeRQg0JQ8KDUdG7vQo.mft
File:                     WVpR9FwMtjeRQg0JQ8KDUdG7vQo.mft (raw, json)
Hash identifier:          8uK6Mpc1LoRP+YJoImNPe9Sray6ubQTmRlGHqn+F03w=
Subject key identifier:   91:12:31:15:83:4F:EC:A7:0A:A5:E8:4E:4D:30:98:32:4F:9F:E1:36
Authority key identifier: 59:5A:51:F4:5C:0C:B6:37:91:42:0D:09:43:C2:83:51:D1:BB:BD:0A
Certificate issuer:       /CN=595a51f45c0cb63791420d0943c28351d1bbbd0a
Certificate serial:       0198D5164229432B263D067AB3048E4730EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WVpR9FwMtjeRQg0JQ8KDUdG7vQo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/3904bb-0b6c-4da5-a5af-aafaaeaed8bb/1/WVpR9FwMtjeRQg0JQ8KDUdG7vQo.mft
Manifest number:          0A56
Signing time:             Sat 23 Aug 2025 04:01:02 +0000
Manifest this update:     Sat 23 Aug 2025 04:01:02 +0000
Manifest next update:     Sun 24 Aug 2025 04:01:02 +0000
Files and hashes:         1: WVpR9FwMtjeRQg0JQ8KDUdG7vQo.crl (hash: 8L1Zgk8dgRWL6HsTqcUun2Ns16RQ684o0BGv0/sB1h8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/3904bb-0b6c-4da5-a5af-aafaaeaed8bb/1/WVpR9FwMtjeRQg0JQ8KDUdG7vQo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/3904bb-0b6c-4da5-a5af-aafaaeaed8bb/1/WVpR9FwMtjeRQg0JQ8KDUdG7vQo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WVpR9FwMtjeRQg0JQ8KDUdG7vQo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:16:42:29:43:2b:26:3d:06:7a:b3:04:8e:47:30:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=595a51f45c0cb63791420d0943c28351d1bbbd0a
        Validity
            Not Before: Aug 23 04:01:02 2025 GMT
            Not After : Aug 24 04:01:02 2025 GMT
        Subject: CN=91123115834feca70aa5e84e4d3098324f9fe136
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:a9:66:d9:28:28:02:aa:54:1d:08:25:f1:82:
                    36:a3:b3:99:da:2b:4c:7b:36:9f:fc:8e:d3:4f:cb:
                    8e:a4:62:01:a0:b6:99:d6:86:15:16:f7:76:f4:23:
                    b6:6a:7a:ff:c0:7f:26:f1:2c:b4:aa:c8:2e:8b:61:
                    8d:e1:e4:09:c3:cf:41:5b:6d:b6:bf:ba:00:3e:87:
                    9b:e0:5a:17:85:0b:68:68:b6:60:93:de:d0:a7:16:
                    c2:a1:42:a7:01:ce:c9:e1:30:29:10:c4:fb:34:dc:
                    ad:f2:14:98:fe:f5:a3:05:ee:0e:c4:64:ba:a5:b9:
                    3d:8c:2c:a4:ef:65:63:5a:90:a5:1c:39:f8:20:67:
                    ec:ee:e3:b4:b4:a9:71:cb:3b:99:47:62:06:65:e1:
                    f4:87:0b:85:c4:0c:27:c9:7e:cd:be:58:01:0c:2a:
                    ff:ca:52:f6:cb:af:02:18:00:f4:85:d4:7c:79:51:
                    35:f7:45:93:66:2a:7e:c7:0d:27:f5:b2:f6:1d:cd:
                    cb:db:b0:ea:90:05:51:4e:70:cd:27:23:b9:c0:cc:
                    c1:dd:57:3e:75:8d:06:d6:f1:e5:03:e6:3e:2b:6f:
                    b4:82:8c:5a:83:82:7e:b3:a6:64:6a:b2:e1:de:be:
                    5f:0c:5f:b6:33:9c:00:b8:08:80:44:93:52:3e:07:
                    a6:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:12:31:15:83:4F:EC:A7:0A:A5:E8:4E:4D:30:98:32:4F:9F:E1:36
            X509v3 Authority Key Identifier:
                keyid:59:5A:51:F4:5C:0C:B6:37:91:42:0D:09:43:C2:83:51:D1:BB:BD:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WVpR9FwMtjeRQg0JQ8KDUdG7vQo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3904bb-0b6c-4da5-a5af-aafaaeaed8bb/1/WVpR9FwMtjeRQg0JQ8KDUdG7vQo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3904bb-0b6c-4da5-a5af-aafaaeaed8bb/1/WVpR9FwMtjeRQg0JQ8KDUdG7vQo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:e2:cc:ba:c2:05:a9:78:d6:75:37:35:9e:37:13:4e:65:5a:
         c8:b4:37:56:d9:14:3e:21:07:46:4b:93:14:78:dd:5c:62:12:
         ed:67:c3:c5:78:04:11:27:93:ce:f2:70:5a:0b:58:15:60:1d:
         2c:2a:8d:2d:cf:66:17:c0:94:d1:29:bf:ff:fe:ed:30:51:2b:
         2b:90:9d:58:d5:c3:29:7d:f5:6c:33:fd:f0:5e:2c:8d:33:81:
         fa:1a:cf:cc:85:76:e9:52:31:89:f9:20:69:ce:17:0c:b2:3f:
         c7:d7:59:48:b3:8d:68:80:92:27:8e:e1:ec:9a:61:31:54:47:
         2c:61:ae:6c:32:ba:05:b6:56:aa:94:8b:a7:0a:59:db:e4:52:
         c5:1a:5e:9a:07:b1:29:8e:cc:3b:8a:30:ad:be:d0:af:09:f4:
         95:af:a4:88:02:f1:e2:1f:a5:f6:42:ab:85:3e:4e:f8:b8:2a:
         74:63:30:23:3d:5e:fd:85:67:c4:cc:f3:1c:09:b5:12:0e:c2:
         e6:6d:30:6b:13:4b:70:2d:19:01:cc:c1:99:0e:24:6b:5f:ba:
         d1:2d:34:51:23:d7:7f:0c:ba:18:b7:79:75:3c:21:44:34:4f:
         4e:9b:ed:3c:ed:5c:bf:eb:83:f0:07:d5:ca:50:54:8e:44:c6:
         95:38:32:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:14:56 2025 by rpki-client