Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/9c64e2-4b64-43da-b904-10b907ffd08f/1/wZXJC6JdDegZV1eMeMt7JOjJPsk.mft
File:                     wZXJC6JdDegZV1eMeMt7JOjJPsk.mft (raw, json)
Hash identifier:          Ao9Uf3EV+mr04WLiGg9hBWO/Fg7eiMpPCpGKBESoRIU=
Subject key identifier:   F6:85:E0:EC:B6:8C:67:0C:35:76:93:01:60:39:26:F6:DE:4A:5B:AD
Authority key identifier: C1:95:C9:0B:A2:5D:0D:E8:19:57:57:8C:78:CB:7B:24:E8:C9:3E:C9
Certificate issuer:       /CN=c195c90ba25d0de81957578c78cb7b24e8c93ec9
Certificate serial:       0198458999FB4B85C9D67CD0466A1EC0F1BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wZXJC6JdDegZV1eMeMt7JOjJPsk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/9c64e2-4b64-43da-b904-10b907ffd08f/1/wZXJC6JdDegZV1eMeMt7JOjJPsk.mft
Manifest number:          011B
Signing time:             Sat 26 Jul 2025 07:01:42 +0000
Manifest this update:     Sat 26 Jul 2025 07:01:42 +0000
Manifest next update:     Sun 27 Jul 2025 07:01:42 +0000
Files and hashes:         1: wZXJC6JdDegZV1eMeMt7JOjJPsk.crl (hash: d+3o5JKlzxcF6svVGmYrCCTZiLD4MQJercZcfjGroCw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/9c64e2-4b64-43da-b904-10b907ffd08f/1/wZXJC6JdDegZV1eMeMt7JOjJPsk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/9c64e2-4b64-43da-b904-10b907ffd08f/1/wZXJC6JdDegZV1eMeMt7JOjJPsk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wZXJC6JdDegZV1eMeMt7JOjJPsk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 06:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:45:89:99:fb:4b:85:c9:d6:7c:d0:46:6a:1e:c0:f1:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c195c90ba25d0de81957578c78cb7b24e8c93ec9
        Validity
            Not Before: Jul 26 07:01:42 2025 GMT
            Not After : Jul 27 07:01:42 2025 GMT
        Subject: CN=f685e0ecb68c670c35769301603926f6de4a5bad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:29:f8:ef:63:b2:e5:f1:c8:c5:fb:e0:e7:69:
                    8e:48:6a:c2:db:77:24:1a:f1:80:36:35:62:d5:ab:
                    88:53:f2:dd:af:18:84:d2:42:e7:fe:b4:16:f9:39:
                    01:76:59:b4:07:3d:08:de:16:7f:12:ea:4d:87:39:
                    35:c4:79:f3:23:78:9a:0f:aa:ed:4e:58:31:b0:e8:
                    9e:dc:8a:55:73:5e:00:99:c6:46:44:d3:e3:f5:3c:
                    37:08:c6:66:54:04:10:9c:5b:70:92:04:d5:29:15:
                    af:44:3d:6c:aa:ab:62:36:30:0d:4d:d2:75:96:76:
                    e1:57:51:6d:3f:8a:20:20:9f:d8:83:44:f7:7f:30:
                    a9:e4:da:4d:49:a1:44:e2:7e:73:ba:39:2f:bd:b2:
                    94:13:f2:f7:d5:ad:25:d1:52:71:9f:1c:38:bb:5d:
                    47:d7:d5:de:77:03:f2:ea:49:a1:7d:8b:b7:c9:4c:
                    14:16:11:7b:06:34:ea:47:85:ce:74:c4:d0:c3:9a:
                    aa:53:75:bc:62:fb:cb:69:41:a8:e2:ec:14:52:d8:
                    1e:03:ff:29:6f:bd:5f:56:df:b7:61:b3:5e:25:5c:
                    08:a6:ba:66:35:38:d3:e8:77:56:4c:90:73:2d:9b:
                    9b:96:b5:12:ea:94:1a:2c:23:e1:7f:10:4e:a6:4f:
                    75:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:85:E0:EC:B6:8C:67:0C:35:76:93:01:60:39:26:F6:DE:4A:5B:AD
            X509v3 Authority Key Identifier:
                keyid:C1:95:C9:0B:A2:5D:0D:E8:19:57:57:8C:78:CB:7B:24:E8:C9:3E:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wZXJC6JdDegZV1eMeMt7JOjJPsk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9c64e2-4b64-43da-b904-10b907ffd08f/1/wZXJC6JdDegZV1eMeMt7JOjJPsk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9c64e2-4b64-43da-b904-10b907ffd08f/1/wZXJC6JdDegZV1eMeMt7JOjJPsk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:ca:fc:80:91:ae:ba:97:1f:63:69:76:ab:c6:a7:e5:68:ed:
         d0:6e:5c:10:82:72:9d:4f:bc:4a:3f:56:55:43:88:23:3e:3d:
         0f:61:03:fb:1c:6c:80:54:51:80:40:8f:c0:33:b5:7b:e6:2a:
         25:e3:b0:9b:96:65:a4:74:2c:ac:f1:dd:69:d3:b1:4c:e9:1b:
         4b:a9:1c:72:0c:43:14:cf:86:94:37:35:0b:66:2a:44:bc:b6:
         ed:0b:73:b0:f5:04:8b:5f:ac:e4:4b:b9:52:cb:bc:04:a8:71:
         56:ca:cf:c2:46:a6:bb:e7:d0:c6:aa:d4:16:73:af:54:28:b4:
         16:9c:2f:6c:20:e9:f1:09:fd:50:e7:b1:12:cc:c3:97:c5:77:
         71:72:01:b3:c0:ce:75:d1:56:26:5d:d9:2b:6b:2a:4a:3c:a2:
         2f:b2:96:48:0d:6f:18:0f:e9:78:ea:0a:b0:c8:2a:b5:1b:d8:
         7e:0d:08:5f:47:32:c9:ba:a9:f6:cb:e7:e6:cf:35:42:c8:f3:
         63:7f:b3:46:c8:a6:1a:97:86:bd:23:b6:22:d5:90:ad:e0:e6:
         70:27:97:36:4e:6d:da:22:9b:61:b9:68:c4:c7:0a:0d:b3:cc:
         36:bb:52:91:45:ae:3e:ef:8f:58:a8:6e:d8:2b:c2:64:8e:ec:
         0e:30:fd:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 14:52:32 2025 by rpki-client