Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/bb7335-b8c9-4e41-b124-bf9e37b7b870/1/wFLV2TVyLCxcxJ8FLNWlqPFFc2s.mft
File:                     wFLV2TVyLCxcxJ8FLNWlqPFFc2s.mft (raw, json)
Hash identifier:          b7jVuuLD++Qb3uCLdS2ZHxiL4diISoDZiHiCVk94JP0=
Subject key identifier:   87:B3:E3:AD:C2:83:FA:8F:44:16:F3:81:BF:61:34:30:D9:EB:E6:7B
Authority key identifier: C0:52:D5:D9:35:72:2C:2C:5C:C4:9F:05:2C:D5:A5:A8:F1:45:73:6B
Certificate issuer:       /CN=c052d5d935722c2c5cc49f052cd5a5a8f145736b
Certificate serial:       01984AAEB02921ECF22D9083710B4D7BF9DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wFLV2TVyLCxcxJ8FLNWlqPFFc2s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/bb7335-b8c9-4e41-b124-bf9e37b7b870/1/wFLV2TVyLCxcxJ8FLNWlqPFFc2s.mft
Manifest number:          14D0
Signing time:             Sun 27 Jul 2025 07:00:18 +0000
Manifest this update:     Sun 27 Jul 2025 07:00:18 +0000
Manifest next update:     Mon 28 Jul 2025 07:00:18 +0000
Files and hashes:         1: wFLV2TVyLCxcxJ8FLNWlqPFFc2s.crl (hash: fBfJq4RmxDSdRDPx3dnlTCDzeqxtnhTszqUkV7ZY7Wo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/bb7335-b8c9-4e41-b124-bf9e37b7b870/1/wFLV2TVyLCxcxJ8FLNWlqPFFc2s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/bb7335-b8c9-4e41-b124-bf9e37b7b870/1/wFLV2TVyLCxcxJ8FLNWlqPFFc2s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wFLV2TVyLCxcxJ8FLNWlqPFFc2s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Jul 2025 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:4a:ae:b0:29:21:ec:f2:2d:90:83:71:0b:4d:7b:f9:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c052d5d935722c2c5cc49f052cd5a5a8f145736b
        Validity
            Not Before: Jul 27 07:00:18 2025 GMT
            Not After : Jul 28 07:00:18 2025 GMT
        Subject: CN=87b3e3adc283fa8f4416f381bf613430d9ebe67b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:3e:43:ee:7a:f2:48:2e:5b:c9:09:89:b9:ba:
                    d6:5a:d9:bc:9b:bc:04:dd:95:da:f0:f1:c0:fc:57:
                    57:c8:aa:f5:46:68:18:82:5c:8b:8a:68:2e:91:06:
                    66:df:7b:48:65:51:91:31:b1:2b:3f:e7:ff:ab:ea:
                    0b:cb:a3:df:c7:56:c9:67:1e:91:a6:a1:2b:88:65:
                    f5:92:dd:b5:8c:07:f9:14:13:8e:03:a8:fa:e8:9b:
                    fe:47:7b:ff:48:9b:b1:93:64:5d:06:cf:8b:43:15:
                    f3:4c:31:d8:67:36:e7:9e:95:8a:81:29:c8:60:6c:
                    ee:2b:49:1a:5a:f9:06:ee:c6:d5:0d:e2:4e:7b:97:
                    4d:28:ea:31:d4:be:1e:fc:51:d5:94:8b:74:21:9d:
                    1b:ec:43:c9:86:d6:3e:5d:da:ba:b9:59:24:7d:fd:
                    af:a6:de:85:94:b0:bd:0c:3c:4b:c1:ad:91:7a:2a:
                    53:63:ba:6c:e4:04:48:18:1a:e7:cb:26:16:d9:7b:
                    b2:8a:ac:f4:aa:22:d3:d6:f1:4e:d1:02:3e:8e:fd:
                    7a:7e:50:d2:0a:e8:49:43:d2:62:2e:e9:95:20:5e:
                    fe:78:c2:76:cb:15:e2:d0:7a:0b:1b:1d:d0:89:49:
                    57:4e:10:e7:c2:eb:2c:fa:f5:db:0c:92:ac:99:38:
                    00:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:B3:E3:AD:C2:83:FA:8F:44:16:F3:81:BF:61:34:30:D9:EB:E6:7B
            X509v3 Authority Key Identifier:
                keyid:C0:52:D5:D9:35:72:2C:2C:5C:C4:9F:05:2C:D5:A5:A8:F1:45:73:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wFLV2TVyLCxcxJ8FLNWlqPFFc2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/bb7335-b8c9-4e41-b124-bf9e37b7b870/1/wFLV2TVyLCxcxJ8FLNWlqPFFc2s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/bb7335-b8c9-4e41-b124-bf9e37b7b870/1/wFLV2TVyLCxcxJ8FLNWlqPFFc2s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:4f:fd:8e:47:6d:9e:f3:d4:b1:28:df:11:13:ed:28:93:02:
         99:15:19:12:ee:49:c3:6a:02:58:68:75:19:e2:1c:cb:8c:e0:
         08:40:cb:7b:60:7b:d9:f8:3f:4e:f9:3a:29:5e:a1:7b:f0:54:
         5b:2c:1a:e0:d5:d4:4d:b8:b5:2a:93:94:8a:92:e2:99:1f:d6:
         cb:e0:ff:df:13:be:a5:b2:b5:c8:4c:60:44:e4:79:ef:a7:a8:
         42:2b:13:30:be:a5:ec:3f:95:d6:c2:02:98:91:8e:03:26:d6:
         2b:83:39:65:f9:8b:ef:bc:da:42:0d:f6:a4:b6:a9:7a:ff:b1:
         eb:74:a3:ee:dc:ea:cb:42:46:57:9e:f0:aa:5a:fb:ae:63:32:
         4d:69:c6:a3:19:ad:0b:71:b9:78:18:7f:79:35:72:a4:76:c8:
         6f:50:08:7d:e9:e5:68:50:c4:b3:a8:74:da:81:57:50:f8:61:
         e4:bd:7e:c0:24:88:2b:78:f5:ea:83:79:2c:63:41:78:60:61:
         ea:17:57:1b:37:72:20:51:5a:f6:3c:7d:8a:f7:89:d0:20:7c:
         df:fc:56:24:b5:d6:69:f9:c4:d1:c3:8c:42:df:fa:f1:79:50:
         40:b6:41:0b:16:22:8e:63:7f:93:c9:24:3e:b9:aa:b9:b6:9b:
         43:8c:f9:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:30:42 2025 by rpki-client