Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/f35424-944f-4064-afc0-1123cc9ddccc/1/wWz7mmhJxB5fEXBbj9cWCF1chUk.mft
File:                     wWz7mmhJxB5fEXBbj9cWCF1chUk.mft (raw, json)
Hash identifier:          JMK+Dn6ao4lcGdSSi9KpJ410qsLW/Kmkee+qFR6JJpw=
Subject key identifier:   12:19:FD:A8:50:78:CD:85:C9:F9:27:5D:B4:8C:84:95:96:DF:63:52
Authority key identifier: C1:6C:FB:9A:68:49:C4:1E:5F:11:70:5B:8F:D7:16:08:5D:5C:85:49
Certificate issuer:       /CN=c16cfb9a6849c41e5f11705b8fd716085d5c8549
Certificate serial:       019848F734220CC44DEAB3AB26FB257F13F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wWz7mmhJxB5fEXBbj9cWCF1chUk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/f35424-944f-4064-afc0-1123cc9ddccc/1/wWz7mmhJxB5fEXBbj9cWCF1chUk.mft
Manifest number:          04DD
Signing time:             Sat 26 Jul 2025 23:00:16 +0000
Manifest this update:     Sat 26 Jul 2025 23:00:16 +0000
Manifest next update:     Sun 27 Jul 2025 23:00:16 +0000
Files and hashes:         1: wWz7mmhJxB5fEXBbj9cWCF1chUk.crl (hash: KGxVXkcmq2usNiNOW184JQ+0GiucRzJcegB6xLapPmw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/f35424-944f-4064-afc0-1123cc9ddccc/1/wWz7mmhJxB5fEXBbj9cWCF1chUk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/f35424-944f-4064-afc0-1123cc9ddccc/1/wWz7mmhJxB5fEXBbj9cWCF1chUk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wWz7mmhJxB5fEXBbj9cWCF1chUk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:f7:34:22:0c:c4:4d:ea:b3:ab:26:fb:25:7f:13:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c16cfb9a6849c41e5f11705b8fd716085d5c8549
        Validity
            Not Before: Jul 26 23:00:16 2025 GMT
            Not After : Jul 27 23:00:16 2025 GMT
        Subject: CN=1219fda85078cd85c9f9275db48c849596df6352
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:94:b5:89:29:d2:8f:d5:bd:a9:ed:ec:1f:9c:
                    bd:12:2c:e9:e1:ba:d2:a5:d2:96:cb:87:f1:e1:9a:
                    8b:49:d8:32:b8:17:a6:9a:43:e3:58:7d:7b:19:39:
                    81:0e:cc:01:56:fb:88:49:9f:c9:7f:ad:66:b8:d2:
                    e7:4f:f8:1f:9f:82:4e:6f:4e:6e:44:36:1d:a4:7d:
                    2d:05:41:de:10:d5:02:9f:34:d2:90:80:44:f5:74:
                    a3:0e:1a:a7:8c:0f:3c:3a:03:58:6f:db:8d:45:1e:
                    52:81:f7:78:2b:5f:71:1b:36:38:0b:c9:18:54:71:
                    c6:0d:84:48:74:9f:41:62:b5:93:15:54:fa:1a:f3:
                    76:0d:1f:4d:c2:96:c4:79:74:4d:81:53:77:4d:65:
                    20:da:b7:6d:35:2d:cd:f0:fd:c9:2f:de:80:f6:83:
                    83:03:64:df:07:0a:d4:62:73:d6:93:3a:37:d5:4b:
                    06:6d:94:9b:74:c9:f7:39:e8:7b:25:23:02:cb:51:
                    de:37:e7:ae:6f:90:31:25:f5:4e:25:74:07:8a:7c:
                    d5:fb:f8:ce:af:82:70:1f:48:e6:a7:43:06:87:83:
                    17:ed:d0:be:be:c2:fc:fd:ab:2e:df:9b:dd:21:a8:
                    76:cc:5f:2b:92:a0:92:f0:5f:59:78:15:75:1f:eb:
                    4d:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:19:FD:A8:50:78:CD:85:C9:F9:27:5D:B4:8C:84:95:96:DF:63:52
            X509v3 Authority Key Identifier:
                keyid:C1:6C:FB:9A:68:49:C4:1E:5F:11:70:5B:8F:D7:16:08:5D:5C:85:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wWz7mmhJxB5fEXBbj9cWCF1chUk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f35424-944f-4064-afc0-1123cc9ddccc/1/wWz7mmhJxB5fEXBbj9cWCF1chUk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f35424-944f-4064-afc0-1123cc9ddccc/1/wWz7mmhJxB5fEXBbj9cWCF1chUk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:c1:1a:25:df:ef:b6:b0:b9:9b:3f:ee:96:d7:ca:25:a4:5b:
         2d:1c:0b:61:66:e8:ab:dd:36:38:fd:bd:ec:0c:3e:a2:e6:a6:
         24:d7:25:44:36:03:71:21:97:d0:63:59:bb:ae:ee:37:c7:52:
         65:70:c2:cb:10:a0:82:14:cd:c6:a3:ac:23:a1:b9:5b:5c:28:
         59:27:d7:96:74:81:66:fc:60:2d:6f:b8:e4:74:95:2a:75:b4:
         aa:a4:95:fa:49:c9:f6:ce:51:bb:0a:64:fa:4d:4e:65:23:5d:
         3c:7c:33:82:be:74:14:13:e5:7e:4b:e6:de:af:89:73:a2:bb:
         f9:06:e4:60:6e:1d:a8:72:e7:53:81:e7:a4:1f:25:67:7a:2b:
         74:be:4d:53:fc:bf:47:a0:44:2b:0e:b4:bf:da:6f:c3:d3:94:
         f1:27:f7:6a:3e:8e:f7:f7:0a:c8:1d:4b:5f:64:cb:d4:18:a7:
         80:e7:28:e3:c7:cd:59:27:93:f2:87:95:b9:8a:a2:b0:99:28:
         dd:29:bc:6f:00:2a:d7:3a:07:c9:8e:f5:dc:32:2c:93:11:ef:
         0f:61:d7:0b:49:56:3c:1f:5c:0d:9f:d6:a8:73:89:f0:20:63:
         94:04:68:49:d8:0c:d4:d7:82:c3:4b:d3:ef:e9:fe:fc:53:f2:
         bd:62:92:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:25:08 2025 by rpki-client