Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/1e0d60-8752-4b6d-85f8-5e96c232e3d5/1/wQdP2lcp9wXl_ZLyJeyvW5PLgog.mft
File:                     wQdP2lcp9wXl_ZLyJeyvW5PLgog.mft (raw, json)
Hash identifier:          5JffbRqX8pZAXT1gxOY+0JXS18XFXld+vh47lJyUYSY=
Subject key identifier:   C9:A0:DE:78:84:71:1F:77:B6:16:B3:CC:8A:E0:92:B5:80:2A:47:18
Authority key identifier: C1:07:4F:DA:57:29:F7:05:E5:FD:92:F2:25:EC:AF:5B:93:CB:82:88
Certificate issuer:       /CN=c1074fda5729f705e5fd92f225ecaf5b93cb8288
Certificate serial:       0199221E98583C534718846FC64CEFD8AC63
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wQdP2lcp9wXl_ZLyJeyvW5PLgog.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/1e0d60-8752-4b6d-85f8-5e96c232e3d5/1/wQdP2lcp9wXl_ZLyJeyvW5PLgog.mft
Manifest number:          166E
Signing time:             Sun 07 Sep 2025 03:00:54 +0000
Manifest this update:     Sun 07 Sep 2025 03:00:54 +0000
Manifest next update:     Mon 08 Sep 2025 03:00:54 +0000
Files and hashes:         1: wQdP2lcp9wXl_ZLyJeyvW5PLgog.crl (hash: jQGPgR3N6zk95S6TR9jAh/bhW4GqAdHLk6563PtdGAk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/1e0d60-8752-4b6d-85f8-5e96c232e3d5/1/wQdP2lcp9wXl_ZLyJeyvW5PLgog.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/1e0d60-8752-4b6d-85f8-5e96c232e3d5/1/wQdP2lcp9wXl_ZLyJeyvW5PLgog.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wQdP2lcp9wXl_ZLyJeyvW5PLgog.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 03:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:1e:98:58:3c:53:47:18:84:6f:c6:4c:ef:d8:ac:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1074fda5729f705e5fd92f225ecaf5b93cb8288
        Validity
            Not Before: Sep  7 03:00:54 2025 GMT
            Not After : Sep  8 03:00:54 2025 GMT
        Subject: CN=c9a0de7884711f77b616b3cc8ae092b5802a4718
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:19:84:80:9c:b1:89:3c:78:e2:75:00:c8:a4:
                    86:a3:e0:06:df:10:2b:7e:30:64:62:b1:45:f2:ae:
                    15:fb:0f:28:b8:04:3f:e7:46:39:7f:81:be:b5:52:
                    cb:7b:ae:63:cc:5d:6f:9d:42:cd:09:12:f2:5a:ec:
                    66:ca:17:95:4f:1b:79:78:29:77:f1:ca:9a:e3:1b:
                    7e:e2:96:08:f4:e9:8d:20:28:b0:e0:61:aa:b2:8e:
                    5b:e5:c7:c7:6d:0a:33:53:17:57:e6:ce:89:54:d2:
                    c2:d3:3e:3c:8b:0f:65:d3:ee:ed:c2:f5:50:fc:10:
                    ae:8b:47:94:bf:7b:63:38:f5:f7:4e:e5:dd:b8:85:
                    40:21:a0:c9:a5:99:13:fe:fc:04:f8:5c:8e:b6:c8:
                    10:e6:6d:9b:0f:31:25:fd:a4:77:59:82:a6:5e:1b:
                    b0:57:9b:8d:b1:31:37:d4:99:80:05:44:e0:5e:ae:
                    76:31:3b:d7:9e:9e:bb:15:f0:61:20:6f:db:d8:09:
                    b4:1e:0c:e4:c8:2b:21:dd:4d:19:47:9c:ac:d6:f1:
                    48:1f:74:20:bf:52:8e:b8:a2:a4:5e:36:eb:eb:bd:
                    55:99:01:ac:6b:46:66:cb:d6:21:74:4c:ed:ff:0a:
                    26:b7:bc:c0:1c:13:fb:85:61:ae:e3:a4:07:4e:a4:
                    8b:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:A0:DE:78:84:71:1F:77:B6:16:B3:CC:8A:E0:92:B5:80:2A:47:18
            X509v3 Authority Key Identifier:
                keyid:C1:07:4F:DA:57:29:F7:05:E5:FD:92:F2:25:EC:AF:5B:93:CB:82:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQdP2lcp9wXl_ZLyJeyvW5PLgog.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1e0d60-8752-4b6d-85f8-5e96c232e3d5/1/wQdP2lcp9wXl_ZLyJeyvW5PLgog.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1e0d60-8752-4b6d-85f8-5e96c232e3d5/1/wQdP2lcp9wXl_ZLyJeyvW5PLgog.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:eb:4e:e9:79:8f:72:72:a4:07:bd:f0:91:fe:8b:82:2d:78:
         41:57:d9:52:9c:c3:51:0a:59:fd:8f:ac:cd:c1:c9:d8:f8:f7:
         a6:9b:b1:3b:31:cf:40:02:93:52:da:0c:3f:c7:61:53:2b:a0:
         b7:68:3d:dd:90:e1:85:51:83:cb:1b:64:7f:68:69:5f:5c:81:
         34:98:e7:20:73:80:5e:c0:c0:89:79:8f:71:d6:be:6a:87:d1:
         42:47:bf:bf:aa:7f:ae:f5:c7:23:67:03:8d:44:c2:b1:9c:3e:
         f2:8a:13:36:38:bd:b6:c0:38:02:18:43:aa:94:4c:21:1e:e9:
         83:05:eb:68:97:e8:4e:b7:6d:31:d1:76:04:5e:19:9c:32:e5:
         96:27:b6:df:10:6d:7b:83:e6:b8:4e:64:94:bd:35:86:d5:9d:
         59:e3:ff:3a:ac:fa:d6:dc:e7:58:16:de:ed:be:12:17:9a:e0:
         e4:3f:42:fa:71:5f:7f:08:3d:cc:af:4f:09:07:43:6d:bd:cc:
         88:8d:3a:28:f9:f3:10:03:a1:0e:e2:e5:e1:27:69:f4:79:ad:
         67:92:12:ff:d2:b7:d6:be:03:1a:c2:91:5c:d2:4b:fb:45:de:
         c7:04:7e:8c:f7:5a:b5:a2:e1:15:64:01:dd:b8:21:f2:b4:c3:
         f8:ad:05:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:21:54 2025 by rpki-client