Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/da7fe1-4627-483d-8832-269a6b823b7e/1/w27RUSe_ywvNemOGi0mck8szURM.mft
File:                     w27RUSe_ywvNemOGi0mck8szURM.mft (raw, json)
Hash identifier:          ltKZWc9NN8cvPB2azAAWyTLySWVesyrUfIFz9X8dFX8=
Subject key identifier:   22:2E:03:9E:76:66:73:6E:8C:9D:04:C5:C6:F4:7A:16:D2:9D:54:81
Authority key identifier: C3:6E:D1:51:27:BF:CB:0B:CD:7A:63:86:8B:49:9C:93:CB:33:51:13
Certificate issuer:       /CN=c36ed15127bfcb0bcd7a63868b499c93cb335113
Certificate serial:       019923A0086A38A3845D2DCBF3E1F397143E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w27RUSe_ywvNemOGi0mck8szURM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/da7fe1-4627-483d-8832-269a6b823b7e/1/w27RUSe_ywvNemOGi0mck8szURM.mft
Manifest number:          0126
Signing time:             Sun 07 Sep 2025 10:01:54 +0000
Manifest this update:     Sun 07 Sep 2025 10:01:54 +0000
Manifest next update:     Mon 08 Sep 2025 10:01:54 +0000
Files and hashes:         1: w27RUSe_ywvNemOGi0mck8szURM.crl (hash: AVaQYOYz5Ut5S2MyeLvjz8lcvFGqw/5Y6+10XXsbHxs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/da7fe1-4627-483d-8832-269a6b823b7e/1/w27RUSe_ywvNemOGi0mck8szURM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/da7fe1-4627-483d-8832-269a6b823b7e/1/w27RUSe_ywvNemOGi0mck8szURM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w27RUSe_ywvNemOGi0mck8szURM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:23:a0:08:6a:38:a3:84:5d:2d:cb:f3:e1:f3:97:14:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c36ed15127bfcb0bcd7a63868b499c93cb335113
        Validity
            Not Before: Sep  7 10:01:54 2025 GMT
            Not After : Sep  8 10:01:54 2025 GMT
        Subject: CN=222e039e7666736e8c9d04c5c6f47a16d29d5481
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:6f:a1:f1:5d:82:0b:14:d3:aa:74:51:59:0e:
                    bf:43:45:38:bf:ba:b2:1e:70:1f:70:9e:54:67:85:
                    1f:24:31:8e:e0:a1:70:2d:50:3c:59:d8:86:e9:1d:
                    92:49:fb:0c:8a:b7:ed:75:e1:df:95:ac:43:01:dd:
                    a4:c9:84:d1:7d:d8:39:4f:c9:b9:f3:96:89:65:55:
                    c4:22:ff:86:dc:30:f6:74:f1:de:53:f7:55:9a:cd:
                    f9:25:b6:01:d1:d2:f9:8c:bc:c0:f0:1d:7f:a5:85:
                    cb:c0:e4:81:bd:f7:eb:f3:4c:d4:53:4a:49:43:77:
                    c2:0f:7c:11:f1:84:59:9c:7e:08:1f:5a:2a:90:d2:
                    53:5b:ca:e2:15:ba:a1:0e:a7:b4:24:25:5c:1e:16:
                    87:f2:55:04:9e:79:db:3a:9a:2f:8d:e9:60:47:c3:
                    49:0e:a7:1f:fc:70:c6:4a:be:b3:47:c4:9a:2d:89:
                    03:b5:23:d3:65:29:22:33:e7:ba:e7:93:05:cc:71:
                    88:ff:5f:c1:fe:20:ac:6f:aa:67:ab:ce:e3:25:28:
                    d0:d3:e8:29:02:20:12:b9:22:bf:67:17:98:ee:3e:
                    31:39:0c:73:05:9a:13:45:5b:2c:d6:e1:c7:ef:4f:
                    15:d5:5f:4c:15:12:85:6c:04:d3:05:56:13:b2:1b:
                    2e:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:2E:03:9E:76:66:73:6E:8C:9D:04:C5:C6:F4:7A:16:D2:9D:54:81
            X509v3 Authority Key Identifier:
                keyid:C3:6E:D1:51:27:BF:CB:0B:CD:7A:63:86:8B:49:9C:93:CB:33:51:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w27RUSe_ywvNemOGi0mck8szURM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/da7fe1-4627-483d-8832-269a6b823b7e/1/w27RUSe_ywvNemOGi0mck8szURM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/da7fe1-4627-483d-8832-269a6b823b7e/1/w27RUSe_ywvNemOGi0mck8szURM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:07:bd:37:63:87:c6:23:b4:d5:51:cc:de:91:07:a4:ef:52:
         37:31:ec:5a:73:8c:c7:8f:af:70:73:b3:70:f0:a3:4e:dc:58:
         bf:f4:7e:9d:51:12:20:42:f9:87:ed:c8:60:2a:ac:8e:b4:c6:
         29:b0:98:ee:97:65:56:93:6d:46:ec:93:be:32:29:60:5f:e7:
         8e:7e:33:88:54:d5:c9:69:b0:8c:a0:81:d0:aa:40:20:28:01:
         36:f1:19:89:10:cb:2a:51:ac:1b:9a:8c:12:c7:8c:4d:33:e7:
         01:4b:67:1e:3a:30:93:98:8c:d6:4b:5b:3a:7d:3b:f5:dc:e7:
         d1:b2:69:64:92:a6:38:b7:f9:d4:d0:fa:11:4d:1e:cc:c7:b9:
         5a:8a:37:8e:23:6c:4d:dd:04:2a:b4:9c:1d:42:90:13:3e:df:
         32:27:6b:a1:22:dd:48:03:9a:51:0b:4c:e5:fb:5f:15:a7:2d:
         f9:e4:a2:3d:10:de:17:09:96:c7:15:74:cb:51:33:68:c4:5b:
         f3:35:7f:61:91:a4:e6:62:68:c0:3e:65:ca:4b:f6:fc:dd:cc:
         46:7c:04:8c:74:ab:76:8e:95:63:b6:2d:01:d4:42:c6:60:c4:
         30:42:0d:aa:81:c0:30:79:90:fa:9b:ed:fb:a4:44:57:55:94:
         68:28:4e:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:26:39 2025 by rpki-client