Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a57805-a97f-4462-ae38-d86156e61c47/1/Wy17v8Kblv03I3vOZ4bFO604D70.mft
File:                     Wy17v8Kblv03I3vOZ4bFO604D70.mft (raw, json)
Hash identifier:          fGwbLKV6S9RaEMt2SWH34yO+JahiuJAEKqkiyWYur7M=
Subject key identifier:   99:3E:31:E0:D6:E6:98:4D:35:97:07:E6:97:02:1A:FD:DD:ED:A6:7A
Authority key identifier: 5B:2D:7B:BF:C2:9B:96:FD:37:23:7B:CE:67:86:C5:3B:AD:38:0F:BD
Certificate issuer:       /CN=5b2d7bbfc29b96fd37237bce6786c53bad380fbd
Certificate serial:       019848527F184F8E0F24EDC880F602A98099
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wy17v8Kblv03I3vOZ4bFO604D70.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/a57805-a97f-4462-ae38-d86156e61c47/1/Wy17v8Kblv03I3vOZ4bFO604D70.mft
Manifest number:          01D2
Signing time:             Sat 26 Jul 2025 20:00:22 +0000
Manifest this update:     Sat 26 Jul 2025 20:00:22 +0000
Manifest next update:     Sun 27 Jul 2025 20:00:22 +0000
Files and hashes:         1: Wy17v8Kblv03I3vOZ4bFO604D70.crl (hash: XhA1EFJQHTf78sSE0tWHdJLnfVyFNeTvGogEOl7VpVI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/a57805-a97f-4462-ae38-d86156e61c47/1/Wy17v8Kblv03I3vOZ4bFO604D70.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/a57805-a97f-4462-ae38-d86156e61c47/1/Wy17v8Kblv03I3vOZ4bFO604D70.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Wy17v8Kblv03I3vOZ4bFO604D70.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:52:7f:18:4f:8e:0f:24:ed:c8:80:f6:02:a9:80:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b2d7bbfc29b96fd37237bce6786c53bad380fbd
        Validity
            Not Before: Jul 26 20:00:22 2025 GMT
            Not After : Jul 27 20:00:22 2025 GMT
        Subject: CN=993e31e0d6e6984d359707e697021afdddeda67a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:aa:2b:16:87:3a:09:8b:d2:90:0c:42:16:22:
                    74:92:65:16:f5:0e:64:c9:17:57:c3:c3:f8:9d:f2:
                    f6:e4:0a:6e:fa:6a:89:7c:ef:f1:55:4a:54:db:c0:
                    e1:77:36:be:39:5a:5f:07:5f:9b:de:23:b5:69:6d:
                    02:be:42:ec:00:9b:e6:5c:9c:4c:eb:49:c9:89:d4:
                    07:3a:47:75:4b:6c:72:9b:a8:3f:b7:ea:82:3e:89:
                    79:b6:11:91:99:d9:dd:a3:7a:50:26:e8:e8:8c:6d:
                    51:b8:c6:35:b4:cd:64:97:85:7d:96:a9:c4:4b:55:
                    79:25:7d:6b:cc:0e:cd:7b:7b:19:82:2e:3b:c1:e1:
                    46:08:bc:62:9c:96:3b:53:85:e2:e3:f2:bb:06:26:
                    7d:36:c0:ea:c8:55:38:dc:8e:fc:ce:45:ed:b1:00:
                    19:93:88:1a:de:b5:07:69:85:42:ff:a2:95:8a:a9:
                    4d:85:bf:49:ea:b1:0a:6e:37:34:cf:07:91:f2:94:
                    31:78:1f:6a:a7:e9:27:47:15:04:a7:bc:db:30:46:
                    d2:89:ec:e5:f0:37:3d:21:76:5f:93:1a:0b:be:bb:
                    b1:ab:9c:9d:c8:0c:6d:71:4c:ad:82:27:f4:64:88:
                    5c:66:2c:05:6a:6b:82:36:06:2b:75:09:17:54:8e:
                    2f:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:3E:31:E0:D6:E6:98:4D:35:97:07:E6:97:02:1A:FD:DD:ED:A6:7A
            X509v3 Authority Key Identifier:
                keyid:5B:2D:7B:BF:C2:9B:96:FD:37:23:7B:CE:67:86:C5:3B:AD:38:0F:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wy17v8Kblv03I3vOZ4bFO604D70.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a57805-a97f-4462-ae38-d86156e61c47/1/Wy17v8Kblv03I3vOZ4bFO604D70.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a57805-a97f-4462-ae38-d86156e61c47/1/Wy17v8Kblv03I3vOZ4bFO604D70.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:6b:ab:ce:43:af:9d:f8:35:f7:1f:1e:60:03:12:b7:58:59:
         d5:f0:8e:23:3a:70:9d:f8:18:fe:57:b4:ca:9c:f4:e7:78:e6:
         ba:aa:cd:e0:a2:28:54:e9:01:53:63:fa:26:5f:40:d3:b8:3d:
         d0:e2:1b:1d:bd:6a:e1:ab:f5:5e:d9:eb:4c:1e:5c:cf:84:4a:
         15:b3:c2:45:4d:c5:fa:b6:3f:20:21:13:ef:2d:54:87:07:f1:
         1a:ef:67:b3:ca:6d:1b:98:91:62:71:2c:2d:33:e4:2e:04:bb:
         b5:b2:0c:fc:2d:e3:34:3a:81:ca:94:8c:ee:80:47:f9:9a:06:
         17:0c:b5:b1:9f:82:e2:79:8c:e6:51:4d:26:a8:bd:f6:1d:f9:
         5a:7f:be:1a:29:b0:36:23:a0:26:4a:91:1b:8e:4e:8f:7e:80:
         47:9f:9b:9c:3a:18:a2:8f:86:3a:ab:3a:58:e9:42:27:59:01:
         e0:f8:d8:6e:ff:1c:f6:60:92:ba:7b:f9:13:fe:9e:7d:e3:4b:
         7d:55:b8:7c:0f:c4:77:4e:fa:88:c1:74:42:31:eb:69:bd:bd:
         69:cb:36:53:10:46:dd:d6:b0:2f:55:2b:15:14:85:10:21:cf:
         88:e8:fe:59:f6:4b:fb:af:a8:99:83:7e:ab:73:4a:7d:d3:c5:
         f9:c9:fb:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:51:01 2025 by rpki-client