Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/491a89-5850-40b6-85f4-1546bb6d36bb/1/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.mft
File:                     wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.mft (raw, json)
Hash identifier:          sD+X4kyIXY3nnxUtQjm7voCQ2CRDlioLXycQKpv6/00=
Subject key identifier:   07:40:8E:99:2C:7E:7C:58:89:5D:AE:53:FC:97:84:15:2F:1C:EF:D7
Authority key identifier: C1:37:F6:38:C0:BE:46:00:B4:66:DE:8E:33:0D:4C:F6:A7:FF:3B:3E
Certificate issuer:       /CN=c137f638c0be4600b466de8e330d4cf6a7ff3b3e
Certificate serial:       0199239FD2904E4181DDD475977D73E7B2D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/491a89-5850-40b6-85f4-1546bb6d36bb/1/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.mft
Manifest number:          1462
Signing time:             Sun 07 Sep 2025 10:01:40 +0000
Manifest this update:     Sun 07 Sep 2025 10:01:40 +0000
Manifest next update:     Mon 08 Sep 2025 10:01:40 +0000
Files and hashes:         1: wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.crl (hash: w17SWS6oSYZdbNpcLatEv8kVli/MO0ggvdP74bloJYI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/491a89-5850-40b6-85f4-1546bb6d36bb/1/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/491a89-5850-40b6-85f4-1546bb6d36bb/1/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:23:9f:d2:90:4e:41:81:dd:d4:75:97:7d:73:e7:b2:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c137f638c0be4600b466de8e330d4cf6a7ff3b3e
        Validity
            Not Before: Sep  7 10:01:40 2025 GMT
            Not After : Sep  8 10:01:40 2025 GMT
        Subject: CN=07408e992c7e7c58895dae53fc9784152f1cefd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:41:b4:38:c1:21:cf:f4:57:c6:42:c9:97:af:
                    04:78:57:ea:0d:87:1d:df:7d:6a:02:32:71:ba:27:
                    28:fc:0c:6d:4a:4d:91:ee:b3:aa:71:1c:7f:34:df:
                    3b:d6:8a:6c:5e:de:4b:21:c2:6f:78:20:0f:8a:bf:
                    c2:b4:0d:29:0c:6e:57:7b:e0:d2:8d:bd:91:fd:72:
                    27:68:99:59:d5:71:2e:1e:48:4d:da:49:ca:6f:c3:
                    90:0e:d3:ef:25:4c:a8:11:1f:e5:e3:47:98:17:82:
                    97:10:22:4d:a6:ad:34:80:70:6c:10:75:6b:4a:28:
                    8b:31:e6:66:8d:15:2b:7f:ad:b1:3c:b5:4f:ad:5b:
                    10:9c:da:34:22:26:a3:05:07:29:f3:ef:5c:d1:ec:
                    ee:bf:55:6b:6e:f6:45:d6:a4:1b:52:34:50:e5:e7:
                    d2:0b:ba:34:55:ff:a8:20:27:58:52:02:58:71:e0:
                    11:cf:be:d2:10:44:37:f9:dc:1b:f0:ea:73:63:bc:
                    47:38:b3:c7:ba:79:b0:22:ff:4f:2b:74:0c:09:76:
                    23:58:68:fc:e2:d7:a7:c8:ad:26:df:3f:2f:0a:84:
                    98:a4:96:1c:7f:ec:54:be:87:9e:40:4c:ff:ec:6a:
                    d2:53:ff:a0:43:d8:db:15:34:21:fb:c7:15:5e:78:
                    b4:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:40:8E:99:2C:7E:7C:58:89:5D:AE:53:FC:97:84:15:2F:1C:EF:D7
            X509v3 Authority Key Identifier:
                keyid:C1:37:F6:38:C0:BE:46:00:B4:66:DE:8E:33:0D:4C:F6:A7:FF:3B:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/491a89-5850-40b6-85f4-1546bb6d36bb/1/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/491a89-5850-40b6-85f4-1546bb6d36bb/1/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:6f:7e:14:58:a5:49:cb:fa:e6:74:86:f3:41:13:a2:db:45:
         e8:48:0f:5d:7f:a3:b6:89:06:74:89:60:80:21:0d:8b:7e:53:
         9e:4f:8e:1e:73:43:cd:4f:c1:7b:48:79:42:f2:3d:8b:5c:ed:
         b1:eb:ed:76:cb:eb:62:13:a7:ba:44:5a:22:2d:99:3d:6d:4b:
         f4:7f:49:66:e9:59:77:61:8c:da:44:5a:f7:a4:d9:c8:80:83:
         7f:cd:ff:ae:95:89:4a:01:55:ea:9b:ab:7b:50:ca:b5:2d:85:
         be:ff:20:2b:33:78:f5:f2:84:72:eb:7b:f4:8b:94:05:32:63:
         e6:7b:17:da:61:26:07:88:31:89:be:70:f9:47:3a:44:d4:1a:
         f4:3e:c8:34:8b:b8:08:27:8a:8a:09:cc:fb:d0:54:c1:43:ad:
         ee:04:b4:a3:82:99:33:c5:b0:5d:76:56:51:87:c7:30:a1:ba:
         3f:57:14:70:04:66:65:f2:c3:82:c1:38:0a:52:fb:95:0e:11:
         7c:f5:95:87:ae:03:a8:fc:ec:a3:9b:f6:ad:fe:55:d3:44:d6:
         cd:5d:24:20:0b:f2:40:b7:48:69:57:4e:b0:86:bd:f6:42:b4:
         0b:f5:a9:b3:82:6c:f2:2e:04:32:12:56:fb:1a:89:ba:3a:42:
         af:8b:82:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:25:20 2025 by rpki-client