Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/173035-88ba-4452-903d-4ba85efdb266/1/wi7Wzo-2x52t12WDpeotOruaQy8.mft
File:                     wi7Wzo-2x52t12WDpeotOruaQy8.mft (raw, json)
Hash identifier:          8+PRg+SBlp549OTL25EKkrUPDLv36bLI6+fkYbz9Xk4=
Subject key identifier:   DD:93:16:FA:A1:94:82:98:A2:82:C1:31:50:1C:49:5F:DA:57:0F:8E
Authority key identifier: C2:2E:D6:CE:8F:B6:C7:9D:AD:D7:65:83:A5:EA:2D:3A:BB:9A:43:2F
Certificate issuer:       /CN=c22ed6ce8fb6c79dadd76583a5ea2d3abb9a432f
Certificate serial:       01984E8B56EBB0A9A5528A90CCC9D23D2C5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wi7Wzo-2x52t12WDpeotOruaQy8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/173035-88ba-4452-903d-4ba85efdb266/1/wi7Wzo-2x52t12WDpeotOruaQy8.mft
Manifest number:          13
Signing time:             Mon 28 Jul 2025 01:00:11 +0000
Manifest this update:     Mon 28 Jul 2025 01:00:11 +0000
Manifest next update:     Tue 29 Jul 2025 01:00:11 +0000
Files and hashes:         1: wi7Wzo-2x52t12WDpeotOruaQy8.crl (hash: CkgixFOMMERvrNEaK5yKFJDvchCS3B5QgNbNDD8oUbU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/173035-88ba-4452-903d-4ba85efdb266/1/wi7Wzo-2x52t12WDpeotOruaQy8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/173035-88ba-4452-903d-4ba85efdb266/1/wi7Wzo-2x52t12WDpeotOruaQy8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wi7Wzo-2x52t12WDpeotOruaQy8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 18:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4e:8b:56:eb:b0:a9:a5:52:8a:90:cc:c9:d2:3d:2c:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c22ed6ce8fb6c79dadd76583a5ea2d3abb9a432f
        Validity
            Not Before: Jul 28 01:00:11 2025 GMT
            Not After : Jul 29 01:00:11 2025 GMT
        Subject: CN=dd9316faa1948298a282c131501c495fda570f8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:13:51:a9:9b:33:b3:99:be:fd:8a:29:3a:5b:
                    df:c1:1a:bd:bc:f4:50:a2:36:bf:a9:a6:76:df:07:
                    5a:cb:8d:4e:c9:dd:e0:17:3f:66:59:cd:e6:9d:f1:
                    06:2c:f1:3d:d3:2d:8d:05:d3:47:82:60:41:de:64:
                    23:32:8d:d2:fe:99:8e:09:d9:6d:49:27:85:4f:0d:
                    ef:ab:21:f1:00:83:47:f8:7f:d6:97:f3:f9:4c:d4:
                    10:79:d6:3c:e4:36:d2:7d:d1:b6:12:a6:7a:00:30:
                    67:f9:cc:38:c4:e9:f7:24:7a:fb:d4:b0:a4:d1:43:
                    32:cf:11:f4:d8:64:fa:0f:56:fa:6b:a9:de:15:3a:
                    cb:04:7b:fb:e4:87:6c:a6:ac:a7:97:0b:56:4b:0c:
                    46:be:7b:91:47:fb:e8:1d:9b:cc:a0:24:06:ef:68:
                    a1:4e:42:02:77:fc:26:c5:60:e8:c2:5a:cd:b6:e9:
                    ce:12:40:fc:fb:30:de:c5:fa:9c:18:ab:6a:d6:2b:
                    e7:87:32:90:17:df:13:25:f8:93:47:2d:c3:f0:d2:
                    ea:3c:7e:94:82:27:38:d1:4a:42:8d:e2:cd:16:16:
                    b1:54:13:52:a4:af:49:6a:f8:2c:82:f3:91:5d:90:
                    1c:b0:0d:73:e0:d2:c3:e1:27:69:e2:77:f8:1b:3e:
                    c7:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:93:16:FA:A1:94:82:98:A2:82:C1:31:50:1C:49:5F:DA:57:0F:8E
            X509v3 Authority Key Identifier:
                keyid:C2:2E:D6:CE:8F:B6:C7:9D:AD:D7:65:83:A5:EA:2D:3A:BB:9A:43:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wi7Wzo-2x52t12WDpeotOruaQy8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/173035-88ba-4452-903d-4ba85efdb266/1/wi7Wzo-2x52t12WDpeotOruaQy8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/173035-88ba-4452-903d-4ba85efdb266/1/wi7Wzo-2x52t12WDpeotOruaQy8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:cb:58:e9:e6:cc:40:43:c6:91:d5:f4:64:e8:3b:bc:c1:59:
         20:92:7f:e2:db:6b:15:55:8b:d2:15:f9:59:3c:0c:c1:df:49:
         ba:a1:3d:8b:ad:09:e5:a7:46:83:a0:73:80:c2:ef:b2:31:41:
         07:07:bc:5a:34:36:d2:c0:42:dc:77:bc:c2:3c:72:2d:83:ee:
         83:23:e5:4d:66:64:70:c6:dc:35:27:a1:6e:04:48:a7:34:e8:
         3c:c3:ba:22:bd:3b:85:19:83:35:6c:98:8f:90:f5:d0:5c:07:
         06:95:a8:fa:12:89:bf:04:65:72:a9:7c:4e:de:0c:7a:6f:4c:
         e0:1e:ad:db:10:b1:5f:2a:cc:d2:8c:4b:06:ca:4c:d3:15:fa:
         41:71:57:db:54:c7:7a:d8:4e:79:60:ac:29:28:8b:53:9a:f5:
         e7:34:00:e3:32:f5:88:dc:8f:d4:c7:e2:59:72:5f:9e:72:1f:
         f4:7d:23:9b:2f:9d:64:25:99:99:e3:70:85:ae:d1:c0:ef:4a:
         93:a9:b0:8e:db:da:13:e4:34:fe:e7:b3:44:ae:9c:b2:8f:3f:
         42:f9:03:e3:50:87:c3:f7:15:d8:2b:92:f6:57:14:ab:93:e7:
         b7:22:1f:dc:48:60:d3:bf:d0:52:37:0b:01:1b:e1:0a:10:04:
         a4:2c:8b:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 02:16:35 2025 by rpki-client