Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/5e7141-9103-48eb-8dcd-ad5868825c36/1/wsFAyCGJcO9g5ok1Txa2OvSQCtU.mft
File:                     wsFAyCGJcO9g5ok1Txa2OvSQCtU.mft (raw, json)
Hash identifier:          m4gMr7Ql3u/B+3PKWfH+oOSwon/6uhJ0WK9/YGum7oU=
Subject key identifier:   3C:24:32:79:E6:C7:EE:C8:69:C5:85:9A:7B:31:E9:55:F5:22:DB:B1
Authority key identifier: C2:C1:40:C8:21:89:70:EF:60:E6:89:35:4F:16:B6:3A:F4:90:0A:D5
Certificate issuer:       /CN=c2c140c8218970ef60e689354f16b63af4900ad5
Certificate serial:       0199221E72860DC57AF7C9A69D43F05B329E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wsFAyCGJcO9g5ok1Txa2OvSQCtU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/5e7141-9103-48eb-8dcd-ad5868825c36/1/wsFAyCGJcO9g5ok1Txa2OvSQCtU.mft
Manifest number:          0AF0
Signing time:             Sun 07 Sep 2025 03:00:44 +0000
Manifest this update:     Sun 07 Sep 2025 03:00:44 +0000
Manifest next update:     Mon 08 Sep 2025 03:00:44 +0000
Files and hashes:         1: wsFAyCGJcO9g5ok1Txa2OvSQCtU.crl (hash: U7M9XegzMO0s5bHffE20C4tWkyjwu6RLEikio2g+21c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/5e7141-9103-48eb-8dcd-ad5868825c36/1/wsFAyCGJcO9g5ok1Txa2OvSQCtU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/5e7141-9103-48eb-8dcd-ad5868825c36/1/wsFAyCGJcO9g5ok1Txa2OvSQCtU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wsFAyCGJcO9g5ok1Txa2OvSQCtU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 03:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:1e:72:86:0d:c5:7a:f7:c9:a6:9d:43:f0:5b:32:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2c140c8218970ef60e689354f16b63af4900ad5
        Validity
            Not Before: Sep  7 03:00:44 2025 GMT
            Not After : Sep  8 03:00:44 2025 GMT
        Subject: CN=3c243279e6c7eec869c5859a7b31e955f522dbb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:58:5e:61:7c:4c:83:37:39:f0:23:65:71:02:
                    ac:2e:bc:07:b8:c3:b0:2b:35:3d:5b:16:b4:ad:6a:
                    70:87:d4:be:ce:fb:68:be:61:bf:1c:04:a5:03:20:
                    0d:f9:57:84:22:0c:81:b7:2c:27:09:60:2e:0d:1c:
                    33:5b:4a:a8:41:c7:87:45:29:9a:62:1a:78:5d:f3:
                    3c:65:a9:c2:7f:04:43:97:c2:f7:8c:6f:96:69:48:
                    1c:d9:78:5d:e4:e4:c4:a2:50:50:4e:79:a2:bb:43:
                    f2:93:bb:6e:08:f1:c2:3c:f3:c8:2c:da:97:ee:9d:
                    f0:b2:4d:c5:35:06:98:6e:d1:27:6e:09:6a:e8:70:
                    1d:23:11:4d:34:ba:dc:68:3c:ba:f8:a1:cf:20:f4:
                    a8:32:e8:b1:0c:de:15:5b:1f:bb:36:86:44:ee:f3:
                    57:f8:64:b9:ab:ca:e0:4b:24:7f:96:3b:30:10:61:
                    2d:10:5f:06:ca:9c:f0:49:3f:c8:bf:c5:e6:95:0b:
                    4a:56:20:9f:fd:ea:a3:78:24:80:e0:24:b8:40:9e:
                    a2:bf:d2:63:1d:75:0c:f2:31:34:79:d1:aa:b2:5a:
                    0b:56:a1:09:1d:6b:c3:ad:e8:4d:c5:6a:63:f4:44:
                    7b:b6:73:0c:c3:f4:91:72:24:d4:2b:c0:34:0c:25:
                    b3:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:24:32:79:E6:C7:EE:C8:69:C5:85:9A:7B:31:E9:55:F5:22:DB:B1
            X509v3 Authority Key Identifier:
                keyid:C2:C1:40:C8:21:89:70:EF:60:E6:89:35:4F:16:B6:3A:F4:90:0A:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsFAyCGJcO9g5ok1Txa2OvSQCtU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/5e7141-9103-48eb-8dcd-ad5868825c36/1/wsFAyCGJcO9g5ok1Txa2OvSQCtU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/5e7141-9103-48eb-8dcd-ad5868825c36/1/wsFAyCGJcO9g5ok1Txa2OvSQCtU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:9d:d9:81:ae:0b:24:a2:3a:2c:13:13:31:40:85:42:b3:fa:
         57:7f:3d:68:1b:c5:e1:f7:59:9f:ec:de:f9:06:56:e9:ce:a9:
         2f:d8:92:50:91:3c:13:d9:2c:4d:36:37:66:82:d6:97:86:1b:
         b7:43:b8:7f:50:75:54:0a:79:e0:0b:37:27:c5:3e:1d:63:79:
         22:83:82:8c:8d:b3:63:f1:a0:d6:13:40:f1:dd:99:a0:ff:9a:
         79:8e:db:01:9d:3f:40:db:de:5b:69:91:33:ea:38:79:98:22:
         ad:42:50:2c:fb:37:a1:fc:41:43:d7:d4:2c:de:a8:01:97:5a:
         f2:cd:f1:c0:d4:50:ae:2e:2d:8e:e6:c2:1c:c5:a4:8f:12:1d:
         37:55:06:3e:6d:de:aa:07:21:05:f6:da:7f:2d:53:17:21:33:
         ec:e1:41:65:ee:cd:74:3e:ab:34:0e:9a:5f:c9:f8:54:22:64:
         f0:c2:39:e6:e0:14:b2:f8:0a:a3:0d:29:f4:e3:75:44:bf:13:
         d1:38:e5:c9:d8:d9:1c:d9:7a:ae:58:9b:f0:6e:ec:d2:4a:ce:
         fe:4a:fc:70:2c:bf:cd:62:d8:ab:ee:a1:9b:f4:e8:a4:b9:b4:
         f0:52:4e:da:91:d9:5c:5f:84:a3:56:f2:f1:2d:01:14:68:5d:
         ef:35:9a:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiHnKGDcV698mmnUPwWzKeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyYzE0MGM4MjE4OTcwZWY2MGU2ODkzNTRmMTZiNjNhZjQ5
MDBhZDUwHhcNMjUwOTA3MDMwMDQ0WhcNMjUwOTA4MDMwMDQ0WjAzMTEwLwYDVQQD
EygzYzI0MzI3OWU2YzdlZWM4NjljNTg1OWE3YjMxZTk1NWY1MjJkYmIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAolheYXxMgzc58CNlcQKsLrwHuMOw
KzU9Wxa0rWpwh9S+zvtovmG/HASlAyAN+VeEIgyBtywnCWAuDRwzW0qoQceHRSma
Yhp4XfM8ZanCfwRDl8L3jG+WaUgc2Xhd5OTEolBQTnmiu0Pyk7tuCPHCPPPILNqX
7p3wsk3FNQaYbtEnbglq6HAdIxFNNLrcaDy6+KHPIPSoMuixDN4VWx+7NoZE7vNX
+GS5q8rgSyR/ljswEGEtEF8GypzwST/Iv8XmlQtKViCf/eqjeCSA4CS4QJ6iv9Jj
HXUM8jE0edGqsloLVqEJHWvDrehNxWpj9ER7tnMMw/SRciTUK8A0DCWzNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDwkMnnmx+7IacWFmnsx6VX1ItuxMB8GA1UdIwQY
MBaAFMLBQMghiXDvYOaJNU8Wtjr0kArVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3NGQXlDR0pjTzlnNW9rMVR4YTJPdlNRQ3RVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS81ZTcxNDEtOTEwMy00OGViLThkY2Qt
YWQ1ODY4ODI1YzM2LzEvd3NGQXlDR0pjTzlnNW9rMVR4YTJPdlNRQ3RVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS81ZTcxNDEtOTEwMy00OGViLThkY2QtYWQ1ODY4ODI1YzM2
LzEvd3NGQXlDR0pjTzlnNW9rMVR4YTJPdlNRQ3RVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV53Zga4L
JKI6LBMTMUCFQrP6V389aBvF4fdZn+ze+QZW6c6pL9iSUJE8E9ksTTY3ZoLWl4Yb
t0O4f1B1VAp54As3J8U+HWN5IoOCjI2zY/Gg1hNA8d2ZoP+aeY7bAZ0/QNveW2mR
M+o4eZgirUJQLPs3ofxBQ9fULN6oAZda8s3xwNRQri4tjubCHMWkjxIdN1UGPm3e
qgchBfbafy1TFyEz7OFBZe7NdD6rNA6aX8n4VCJk8MI55uAUsvgKow0p9ON1RL8T
0TjlydjZHNl6rlib8G7s0krO/kr8cCy/zWLYq+6hm/TopLm08FJO2pHZXF+Eo1by
8S0BFGhd7zWabw==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:11:42 2025 by rpki-client