Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.mft
File:                     wneN4qm-mAISA4LnUNFZ6Vhywq4.mft (raw, json)
Hash identifier:          7wdO7H7JnpBIP1WB7Ts63rXWUIu4M9ssQQn68yb27ZE=
Subject key identifier:   62:71:18:0B:78:36:F3:90:05:00:29:05:69:D8:F5:23:02:58:17:C5
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Certificate issuer:       /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial:       0197B820CD5923266E034F463AE85A76910F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.mft
Manifest number:          16E5
Signing time:             Sat 28 Jun 2025 20:00:46 +0000
Manifest this update:     Sat 28 Jun 2025 20:00:46 +0000
Manifest next update:     Sun 29 Jun 2025 20:00:46 +0000
Files and hashes:         1: wneN4qm-mAISA4LnUNFZ6Vhywq4.crl (hash: NqHNcm8IntP0lOiMvxv5oliXTrcIBnDpOu0XIL6Ujqc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:20:cd:59:23:26:6e:03:4f:46:3a:e8:5a:76:91:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
        Validity
            Not Before: Jun 28 20:00:46 2025 GMT
            Not After : Jun 29 20:00:46 2025 GMT
        Subject: CN=6271180b7836f3900500290569d8f523025817c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:9e:1d:a3:8f:1c:a2:dd:de:c6:37:81:98:5f:
                    e9:6c:7e:f6:82:f2:02:b4:f6:2f:81:a0:76:41:c1:
                    3e:82:6f:7f:61:19:57:71:69:c0:af:a1:80:ff:97:
                    5d:c5:3f:a0:58:c6:47:4e:18:f0:59:6e:6e:b7:f7:
                    33:f9:03:93:de:bd:ab:4d:97:19:bc:cf:cc:8a:df:
                    ca:bf:6d:eb:18:61:47:d3:46:48:9d:3b:71:f1:cc:
                    c9:50:30:01:a2:24:98:9c:0f:b7:59:6c:84:c1:65:
                    3d:48:9b:bf:f9:02:f7:23:3d:c1:4b:49:6b:f4:b0:
                    92:fc:cc:7e:ea:5e:ce:d0:c9:33:ab:e0:34:07:00:
                    67:ed:96:50:44:c4:76:3f:fc:0c:97:1e:fb:74:46:
                    2c:14:5d:35:6d:fb:dd:7d:6f:17:7c:59:ee:3e:c2:
                    bc:67:df:2a:26:dc:4c:a9:50:5d:5a:a8:24:1e:3f:
                    3d:dd:5b:b7:d4:40:0a:25:37:0d:df:bc:8d:42:82:
                    29:cc:b2:30:12:0c:aa:0c:48:d2:54:d1:95:61:60:
                    d6:2e:31:04:a4:48:8e:d7:62:10:dc:56:08:42:c7:
                    40:6c:63:00:07:d4:04:77:77:03:fd:2e:03:08:94:
                    a6:5d:2a:09:38:4a:dc:6f:6f:74:cb:a2:4b:cb:ca:
                    e4:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:71:18:0B:78:36:F3:90:05:00:29:05:69:D8:F5:23:02:58:17:C5
            X509v3 Authority Key Identifier:
                keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:94:a3:e9:c7:53:11:5f:e3:10:02:63:10:be:46:fa:52:7a:
         e3:65:9c:ca:72:5a:bb:d1:ce:8f:22:de:51:c2:c8:2f:54:7a:
         e7:17:f2:84:38:95:c9:1e:f1:a0:df:90:57:e9:1c:55:89:68:
         21:4a:05:ce:a6:46:32:59:bb:91:1b:d0:54:c3:9e:75:33:ef:
         2a:39:7b:21:5c:8d:7d:2a:39:5d:af:f8:02:f7:df:ef:37:86:
         d6:25:65:9f:16:11:56:3b:d6:59:49:87:e8:64:4b:2c:bc:74:
         6d:03:e3:4b:c5:48:e4:10:d7:aa:72:0a:35:3f:88:9c:12:2b:
         29:1f:24:34:01:94:eb:fb:89:31:eb:eb:b8:b5:29:fc:c5:ff:
         ec:e3:f2:85:78:71:77:3f:e8:3d:58:ec:ad:cb:5a:36:4e:1e:
         6c:fa:aa:c6:15:1e:1b:32:07:de:8a:a0:90:05:63:0b:6c:e5:
         ba:98:2f:0f:5c:56:41:4c:54:41:a4:aa:26:fa:b2:a5:cb:a4:
         c8:f0:bb:0c:c5:ae:dd:2e:3b:a5:c5:da:45:b6:d2:ba:19:a9:
         88:81:61:4d:aa:7d:fd:4e:b1:0a:ba:ca:6f:22:2f:48:34:b6:
         71:0e:ca:22:ea:7f:98:e4:3a:9b:a9:3d:cb:7c:20:3c:24:4d:
         d8:e2:12:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:43:36 2025 by rpki-client