Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3990c2-51be-4b87-af62-e0e099640eac/1/ws_pT97DCaxVMFrJDnw9Yo39QGo.mft
File:                     ws_pT97DCaxVMFrJDnw9Yo39QGo.mft (raw, json)
Hash identifier:          QGxaKeWyVylNMMaKLt33Yj1v24pimGHu/EJxv0Y1JXE=
Subject key identifier:   8C:41:6A:1B:8C:26:C1:0C:54:1A:97:94:B9:A7:7E:BE:C8:F8:4C:C7
Authority key identifier: C2:CF:E9:4F:DE:C3:09:AC:55:30:5A:C9:0E:7C:3D:62:8D:FD:40:6A
Certificate issuer:       /CN=c2cfe94fdec309ac55305ac90e7c3d628dfd406a
Certificate serial:       019923D616AB0B39A319212122F29A25E01F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ws_pT97DCaxVMFrJDnw9Yo39QGo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/3990c2-51be-4b87-af62-e0e099640eac/1/ws_pT97DCaxVMFrJDnw9Yo39QGo.mft
Manifest number:          01F3
Signing time:             Sun 07 Sep 2025 11:00:56 +0000
Manifest this update:     Sun 07 Sep 2025 11:00:56 +0000
Manifest next update:     Mon 08 Sep 2025 11:00:56 +0000
Files and hashes:         1: ws_pT97DCaxVMFrJDnw9Yo39QGo.crl (hash: jP9yOLbo/CYEmutzr/en/e4FnkNwQ0yL3u6VtH5pLGc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/3990c2-51be-4b87-af62-e0e099640eac/1/ws_pT97DCaxVMFrJDnw9Yo39QGo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/3990c2-51be-4b87-af62-e0e099640eac/1/ws_pT97DCaxVMFrJDnw9Yo39QGo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ws_pT97DCaxVMFrJDnw9Yo39QGo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 07:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:23:d6:16:ab:0b:39:a3:19:21:21:22:f2:9a:25:e0:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2cfe94fdec309ac55305ac90e7c3d628dfd406a
        Validity
            Not Before: Sep  7 11:00:56 2025 GMT
            Not After : Sep  8 11:00:56 2025 GMT
        Subject: CN=8c416a1b8c26c10c541a9794b9a77ebec8f84cc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ab:5d:00:c1:2f:ca:53:5a:fb:11:c6:2f:c0:
                    00:c1:b3:68:28:20:9a:38:f6:02:09:4e:55:d6:e2:
                    a2:ff:1e:63:19:6b:be:fa:c3:de:ae:e7:ff:00:80:
                    74:f0:10:70:30:aa:19:b3:46:b8:ba:99:f9:b6:3e:
                    93:88:c6:36:f9:d1:3c:b7:8d:a8:1d:21:20:a8:5d:
                    f3:f5:e4:9f:a9:c8:b0:16:54:98:d5:e7:70:69:e1:
                    01:9b:6c:7e:81:3c:02:9a:31:39:aa:3d:fe:00:4f:
                    f0:18:4d:67:7d:7b:8f:d2:56:eb:e2:18:d6:ca:7b:
                    a3:17:09:1b:68:c0:3f:99:1a:e9:33:32:b2:71:e6:
                    0f:b0:0c:db:4d:e2:0a:d0:0e:0b:22:97:6b:c1:cd:
                    be:88:eb:cf:2d:bd:0e:1b:d1:f2:8d:f1:c1:b4:10:
                    6d:54:f8:14:12:8c:e6:78:90:b2:2e:0a:11:2a:7a:
                    a8:47:2e:5f:a3:6c:c7:43:af:95:b8:69:a4:18:8d:
                    da:aa:2e:a5:d6:3c:22:bc:d9:fc:bc:ed:fb:f3:e8:
                    57:3a:62:ec:a4:fe:c5:91:fa:94:50:b2:49:be:b7:
                    48:12:4e:61:11:24:5e:ab:23:70:3d:b4:95:d9:eb:
                    fa:fb:7b:13:f4:d2:e0:7a:cc:b6:90:be:10:55:8f:
                    dc:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:41:6A:1B:8C:26:C1:0C:54:1A:97:94:B9:A7:7E:BE:C8:F8:4C:C7
            X509v3 Authority Key Identifier:
                keyid:C2:CF:E9:4F:DE:C3:09:AC:55:30:5A:C9:0E:7C:3D:62:8D:FD:40:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ws_pT97DCaxVMFrJDnw9Yo39QGo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3990c2-51be-4b87-af62-e0e099640eac/1/ws_pT97DCaxVMFrJDnw9Yo39QGo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3990c2-51be-4b87-af62-e0e099640eac/1/ws_pT97DCaxVMFrJDnw9Yo39QGo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:6e:fc:62:13:ff:eb:77:f9:84:03:1f:83:4d:02:0b:52:20:
         43:c0:31:2e:6e:72:02:5b:3a:fe:e8:ec:85:d1:bf:c4:ee:e3:
         47:30:48:7f:63:9e:ce:5d:42:f8:b2:53:60:91:63:e1:cb:6d:
         a1:ce:2f:73:90:eb:32:0d:12:c4:60:e6:82:6f:3c:fa:0c:56:
         d0:af:a5:f5:5b:70:2d:ef:1f:ad:cd:99:10:b3:9f:3c:b5:1a:
         56:d4:fb:3b:bb:08:3f:bc:08:3f:8e:28:46:5b:e0:52:98:65:
         d3:b6:b2:08:5f:92:e6:4a:72:0b:ad:58:2a:5f:bd:a1:7f:80:
         74:77:4a:b8:69:2d:f6:09:cf:7f:e3:92:a5:27:4d:00:ef:0e:
         5b:c9:78:1b:8b:f2:e1:f3:7e:17:1a:0f:0a:96:ee:e2:6a:1b:
         36:9b:6e:07:d0:35:44:c2:e5:18:db:93:97:82:10:6d:9c:85:
         03:87:b1:b7:aa:a9:51:f5:84:57:b4:3e:1b:8f:7e:d8:a4:56:
         46:8a:30:97:1a:6b:d1:a1:6f:45:32:cf:44:55:f2:2a:64:d6:
         55:8e:7e:db:a5:63:6f:f2:d7:a7:ad:01:13:72:54:9b:b2:86:
         08:b6:ac:3f:35:04:66:1f:ac:a6:dc:bb:44:0d:ef:23:ac:19:
         64:e9:38:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:35:25 2025 by rpki-client