Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.mft
File:                     wneN4qm-mAISA4LnUNFZ6Vhywq4.mft (raw, json)
Hash identifier:          ODPK/JjaKMZXurxdyW5kvDSL6wdAoI0H4/hvzrfbols=
Subject key identifier:   08:60:F4:72:2F:F1:77:49:44:82:22:E5:CF:4A:26:6A:70:A5:97:20
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Certificate issuer:       /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial:       0199FD6B54607DD1A7150513B7EE308FBDD6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.mft
Manifest number:          1812
Signing time:             Sun 19 Oct 2025 17:01:33 +0000
Manifest this update:     Sun 19 Oct 2025 17:01:33 +0000
Manifest next update:     Mon 20 Oct 2025 17:01:33 +0000
Files and hashes:         1: wneN4qm-mAISA4LnUNFZ6Vhywq4.crl (hash: lDXC45oECd/+jr/RXwKt3y4boDgHKyHPUPGcfewOKhY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 11:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:fd:6b:54:60:7d:d1:a7:15:05:13:b7:ee:30:8f:bd:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
        Validity
            Not Before: Oct 19 17:01:33 2025 GMT
            Not After : Oct 20 17:01:33 2025 GMT
        Subject: CN=0860f4722ff17749448222e5cf4a266a70a59720
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:9b:01:43:fa:1b:f6:55:ff:3d:69:76:d7:a6:
                    74:a8:d8:bb:ea:61:99:c7:a3:a0:98:6e:3d:42:58:
                    8a:a6:91:8d:f6:0f:d6:2d:22:90:8d:1e:d1:d6:c8:
                    38:7d:e8:35:84:2c:a1:b4:7f:48:0e:e4:06:69:f3:
                    13:6b:17:82:03:60:7b:c9:8b:ad:63:c9:61:c6:aa:
                    d2:bd:76:d0:14:67:ca:45:86:dc:e0:40:34:f6:27:
                    1a:e4:7f:92:00:3f:d5:dd:e4:60:01:e0:10:57:3f:
                    5e:dd:b1:77:a7:1d:db:6a:9e:78:2a:5c:6f:10:96:
                    bd:ad:a1:20:ef:dd:9b:34:2c:02:cc:0d:47:b4:20:
                    9b:c6:b9:c0:4c:29:56:5a:74:36:e4:25:37:ef:b3:
                    ec:da:33:3e:51:b1:a7:47:1d:1a:b9:0d:4c:9b:9f:
                    7a:8a:72:fd:c2:b0:77:7c:9b:96:8b:ad:1d:8e:af:
                    de:c4:e8:07:c6:e5:cb:ad:62:a6:2b:c3:9e:e9:55:
                    e0:1b:44:f7:b0:09:17:71:95:32:ef:82:2f:e1:a5:
                    28:16:ae:01:44:ac:be:65:c7:86:19:55:88:d4:84:
                    9c:1c:38:8e:20:47:66:16:af:1a:dc:25:46:d0:99:
                    76:cf:47:16:2c:ef:62:c6:a4:3a:ad:eb:18:b4:2d:
                    d5:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:60:F4:72:2F:F1:77:49:44:82:22:E5:CF:4A:26:6A:70:A5:97:20
            X509v3 Authority Key Identifier:
                keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:68:46:eb:2c:9c:fe:c0:99:85:1b:18:4f:1f:06:55:b0:21:
         c8:77:96:91:25:2a:43:25:5d:73:11:5a:75:0d:39:81:67:ab:
         5d:e7:d7:23:2c:45:87:57:72:a6:5c:3a:b5:1d:d4:a8:a3:42:
         a6:dd:5b:a1:10:77:8a:73:bf:17:db:46:23:79:2a:63:48:35:
         e4:70:a7:2b:f1:2b:b5:41:b5:49:4c:bf:95:8e:82:5b:30:81:
         f8:57:90:4b:e8:2a:5d:f0:4e:ad:ba:bc:eb:b8:56:41:11:40:
         30:9c:f1:82:71:7c:d2:bf:d4:56:df:80:8f:5f:19:64:6a:8a:
         52:f1:9d:37:82:3b:43:51:77:c4:56:43:67:7e:14:ea:30:8f:
         c5:9a:b3:0d:31:c2:44:5e:04:0a:52:ab:2a:d4:a4:c8:17:b0:
         78:ff:a9:82:4a:23:0b:88:2a:71:ed:37:ae:7b:90:f2:ec:2f:
         71:6e:c2:d2:ba:c4:54:7a:8c:4e:60:58:7d:dd:db:7a:4e:ea:
         54:83:f0:72:f4:f7:17:ce:1f:ba:9f:fe:a6:cc:6e:95:8e:61:
         78:eb:d8:7e:fb:a2:54:24:27:b8:80:ab:60:c4:91:67:81:85:
         2a:15:18:d8:67:03:6e:a7:dd:47:9d:69:01:20:4c:00:e8:ea:
         ba:62:bc:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:48:06 2025 by rpki-client