Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/a99a2a-6025-4f5b-9aaf-b10eaf864bb8/1/wUuc2uDH11fKow4dR7Nz3uffdW0.mft
File:                     wUuc2uDH11fKow4dR7Nz3uffdW0.mft (raw, json)
Hash identifier:          59z9PCCgkeSNI3vuene1rRb7t/qGQXW/BTbERxzmH2c=
Subject key identifier:   70:E2:79:81:27:2C:DF:E1:F6:7C:22:C2:F6:BE:65:C1:1D:A5:76:56
Authority key identifier: C1:4B:9C:DA:E0:C7:D7:57:CA:A3:0E:1D:47:B3:73:DE:E7:DF:75:6D
Certificate issuer:       /CN=c14b9cdae0c7d757caa30e1d47b373dee7df756d
Certificate serial:       0199221E73843D08FF4708A7BBEA8517C785
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wUuc2uDH11fKow4dR7Nz3uffdW0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/a99a2a-6025-4f5b-9aaf-b10eaf864bb8/1/wUuc2uDH11fKow4dR7Nz3uffdW0.mft
Manifest number:          02F5
Signing time:             Sun 07 Sep 2025 03:00:44 +0000
Manifest this update:     Sun 07 Sep 2025 03:00:44 +0000
Manifest next update:     Mon 08 Sep 2025 03:00:44 +0000
Files and hashes:         1: wUuc2uDH11fKow4dR7Nz3uffdW0.crl (hash: ONCEgOF1/whWJEhgX8xLe86oYAM4GhTZKIirQt+knAI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/a99a2a-6025-4f5b-9aaf-b10eaf864bb8/1/wUuc2uDH11fKow4dR7Nz3uffdW0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/a99a2a-6025-4f5b-9aaf-b10eaf864bb8/1/wUuc2uDH11fKow4dR7Nz3uffdW0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wUuc2uDH11fKow4dR7Nz3uffdW0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 03:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:1e:73:84:3d:08:ff:47:08:a7:bb:ea:85:17:c7:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c14b9cdae0c7d757caa30e1d47b373dee7df756d
        Validity
            Not Before: Sep  7 03:00:44 2025 GMT
            Not After : Sep  8 03:00:44 2025 GMT
        Subject: CN=70e27981272cdfe1f67c22c2f6be65c11da57656
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:65:37:53:de:0d:6c:28:fc:fa:c7:d0:cb:85:
                    2f:97:65:ea:a1:71:e0:2d:e1:5c:5a:33:ea:2d:48:
                    7e:05:1d:a5:86:8c:34:c6:b9:28:07:20:8a:52:33:
                    2b:f9:f7:ad:ac:c0:bd:09:a6:93:61:0b:80:c8:44:
                    26:1c:1b:bf:ce:2a:dd:01:4d:0e:42:4a:66:73:d9:
                    2f:0c:c5:3a:c8:8d:34:e3:10:ef:88:a7:21:36:3b:
                    71:1b:51:45:19:b5:7a:8d:a7:32:2f:a0:65:f9:14:
                    e9:da:d7:d0:57:90:f1:fb:2a:9d:a8:60:c5:e5:27:
                    68:ce:16:87:f4:e5:9c:0a:39:94:7e:97:4e:75:f1:
                    18:cd:33:5e:c7:05:04:aa:3d:da:7f:52:64:7d:14:
                    5a:ee:b9:96:6b:02:ff:be:43:66:95:1a:1f:55:5a:
                    1f:15:b8:5a:63:6a:2f:92:c8:a6:35:b2:8a:34:6b:
                    91:92:c1:24:35:d9:8e:4a:3c:48:da:23:b0:1d:17:
                    8c:bb:f5:20:bf:2a:f5:9f:ff:a3:b5:e1:48:39:c5:
                    9f:7c:58:3c:1e:ea:d4:ea:4c:7e:8f:ba:0f:02:1b:
                    a0:6a:83:22:a0:09:c8:72:c3:f1:20:b6:0f:a7:ba:
                    a6:9b:77:17:15:b4:4d:2c:38:31:b9:b9:ee:3b:0f:
                    10:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:E2:79:81:27:2C:DF:E1:F6:7C:22:C2:F6:BE:65:C1:1D:A5:76:56
            X509v3 Authority Key Identifier:
                keyid:C1:4B:9C:DA:E0:C7:D7:57:CA:A3:0E:1D:47:B3:73:DE:E7:DF:75:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wUuc2uDH11fKow4dR7Nz3uffdW0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/a99a2a-6025-4f5b-9aaf-b10eaf864bb8/1/wUuc2uDH11fKow4dR7Nz3uffdW0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/a99a2a-6025-4f5b-9aaf-b10eaf864bb8/1/wUuc2uDH11fKow4dR7Nz3uffdW0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:21:60:9e:e2:f6:57:67:cc:9a:fc:ea:29:d1:6d:be:d0:28:
         04:cc:c5:3e:00:c5:a9:ff:96:80:1a:92:17:77:86:40:5f:97:
         cd:61:fb:4d:1a:e0:d2:59:a6:2a:3d:e0:30:ff:2c:7b:e2:86:
         0e:ee:6d:b8:79:7b:90:83:b0:1c:c9:dd:0b:d6:39:17:47:71:
         f5:30:7d:3a:1f:5c:f1:47:7f:22:39:8a:ba:f3:a5:42:30:16:
         a5:11:1b:6d:fb:39:6f:46:6e:8b:86:8c:bb:2e:13:7c:9b:a7:
         f3:a4:af:bb:78:64:d0:64:0d:7e:ae:64:3e:3a:37:79:b7:ef:
         ec:34:f4:ad:43:a5:cd:d2:c5:74:7b:53:e7:20:9c:e7:f4:75:
         a8:63:46:26:54:9b:48:56:46:03:85:5c:f8:a1:fa:7a:8c:34:
         d6:68:b4:60:71:ed:c2:09:f4:dd:63:67:57:ec:b2:a2:a6:f1:
         e0:d4:38:40:5f:22:a6:58:e1:75:52:dd:b1:45:7c:61:27:35:
         16:4c:24:6d:b4:84:b0:a0:d8:7e:fb:a3:92:38:17:3b:8b:5d:
         52:07:f7:3b:78:e5:2f:9b:5a:43:b2:d6:48:c8:54:03:43:fa:
         0a:00:9d:9a:35:f2:0b:3f:8b:e9:6e:54:5e:38:c4:b6:dc:c2:
         79:fb:81:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:30:49 2025 by rpki-client