Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/2b693b-28fd-43bd-ba25-50d38b373913/1/wqmG2jXxcQTosRZSb4BjFXoW25c.mft
File:                     wqmG2jXxcQTosRZSb4BjFXoW25c.mft (raw, json)
Hash identifier:          XoTbX8NVT3HBA35tR6At00cNhbJOS9luvvM5Gja5+XQ=
Subject key identifier:   51:C3:E7:B6:58:66:A0:BD:93:A5:9F:D0:84:B7:40:A6:3D:F3:F8:C1
Authority key identifier: C2:A9:86:DA:35:F1:71:04:E8:B1:16:52:6F:80:63:15:7A:16:DB:97
Certificate issuer:       /CN=c2a986da35f17104e8b116526f8063157a16db97
Certificate serial:       019848C0A3BAEDB7BAF2A4B2552ED910EEB8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wqmG2jXxcQTosRZSb4BjFXoW25c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/2b693b-28fd-43bd-ba25-50d38b373913/1/wqmG2jXxcQTosRZSb4BjFXoW25c.mft
Manifest number:          1099
Signing time:             Sat 26 Jul 2025 22:00:41 +0000
Manifest this update:     Sat 26 Jul 2025 22:00:41 +0000
Manifest next update:     Sun 27 Jul 2025 22:00:41 +0000
Files and hashes:         1: wqmG2jXxcQTosRZSb4BjFXoW25c.crl (hash: AgGwBNURtfJ3vgCwHdRA7WsQbS5ZLS2EiWmHsu1+9Us=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/2b693b-28fd-43bd-ba25-50d38b373913/1/wqmG2jXxcQTosRZSb4BjFXoW25c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/2b693b-28fd-43bd-ba25-50d38b373913/1/wqmG2jXxcQTosRZSb4BjFXoW25c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wqmG2jXxcQTosRZSb4BjFXoW25c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:48:c0:a3:ba:ed:b7:ba:f2:a4:b2:55:2e:d9:10:ee:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2a986da35f17104e8b116526f8063157a16db97
        Validity
            Not Before: Jul 26 22:00:41 2025 GMT
            Not After : Jul 27 22:00:41 2025 GMT
        Subject: CN=51c3e7b65866a0bd93a59fd084b740a63df3f8c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:90:e4:07:64:2c:a1:1f:c6:3b:9e:1d:6d:31:
                    9d:b4:75:69:89:9a:6a:75:a4:1e:43:04:b8:a5:80:
                    1d:41:f6:2e:3b:dc:7d:92:a5:25:69:a4:1d:7e:2a:
                    c2:58:53:90:e1:a1:22:f0:fe:2e:61:05:b5:67:e3:
                    78:80:2b:71:89:4a:5f:77:ff:d6:e1:6b:86:fe:ca:
                    63:8e:23:63:0e:ef:19:0a:60:fb:e9:db:c2:9e:ed:
                    2b:79:0e:b5:66:af:86:4a:01:a4:5b:5a:de:76:e9:
                    1e:d2:68:f3:8b:98:66:c0:9f:1f:e9:f1:89:b6:dd:
                    5e:04:d3:9c:64:1e:e8:07:f9:f0:a8:92:50:37:c7:
                    1a:2c:a7:1c:57:20:8a:2e:8c:fc:3f:77:f3:71:be:
                    14:54:af:df:34:fa:c9:fe:ab:36:84:80:2f:ef:ec:
                    13:96:d6:3a:1e:9d:06:4c:5d:5e:20:06:a2:f7:00:
                    d6:ae:7f:05:a3:b4:cd:96:af:0a:b4:ef:9f:8c:38:
                    a5:03:8a:96:80:a4:48:ac:88:f4:f1:85:ae:d6:bd:
                    e2:58:82:68:16:e6:34:11:79:a9:cf:bb:2c:c8:c7:
                    50:1b:31:d0:da:d6:c1:b4:2c:71:8f:d3:7c:f0:ac:
                    6a:92:9f:5b:f9:ce:20:44:06:74:60:2c:e8:89:98:
                    9e:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:C3:E7:B6:58:66:A0:BD:93:A5:9F:D0:84:B7:40:A6:3D:F3:F8:C1
            X509v3 Authority Key Identifier:
                keyid:C2:A9:86:DA:35:F1:71:04:E8:B1:16:52:6F:80:63:15:7A:16:DB:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wqmG2jXxcQTosRZSb4BjFXoW25c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2b693b-28fd-43bd-ba25-50d38b373913/1/wqmG2jXxcQTosRZSb4BjFXoW25c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2b693b-28fd-43bd-ba25-50d38b373913/1/wqmG2jXxcQTosRZSb4BjFXoW25c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:03:61:b7:bf:6f:24:21:6c:05:78:88:03:d0:d9:81:af:dc:
         8a:68:f9:9c:02:eb:05:bb:9b:a6:90:76:d2:a2:f1:da:1c:c5:
         15:d8:cc:c0:36:ad:33:29:ad:be:dd:45:d3:ca:a0:6b:b3:2d:
         14:6a:d5:71:d8:37:2a:b8:f2:ba:49:62:f7:36:23:77:a1:60:
         95:2c:aa:bf:d2:1c:e2:6e:5d:02:15:11:20:c3:1c:64:5f:e2:
         48:c9:9d:05:e0:e6:0f:0a:5f:86:ed:74:39:c1:24:1b:11:48:
         76:e8:4c:95:a2:cb:13:8e:27:f9:2a:b5:5d:c6:27:d9:49:40:
         8a:58:ee:3e:e3:4b:c0:f5:28:fd:7f:ad:62:a3:f5:f5:d5:e9:
         4c:55:60:36:78:82:89:f7:99:7f:ba:a5:20:56:09:4a:0f:38:
         b8:70:9f:e9:9d:48:cc:6c:f1:18:be:c1:92:72:8b:9e:51:fc:
         bb:d6:63:79:4f:0d:6e:2a:79:bc:a6:2f:1d:82:84:39:48:5d:
         91:4a:6f:a7:c7:56:c3:58:0d:db:93:f5:da:a6:6b:f4:31:74:
         37:70:ea:b9:ef:a9:aa:91:d5:cb:a0:dd:f7:06:5e:fa:48:ff:
         5f:1b:ba:f2:14:56:bd:15:d1:b1:af:b0:b3:d6:6b:ef:ac:02:
         c7:11:f8:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 02:00:49 2025 by rpki-client