Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/722bd6-bcef-434f-b011-948d86913538/1/WwrDjepqcErbq6k4HB3AI1bTqpA.mft
File:                     WwrDjepqcErbq6k4HB3AI1bTqpA.mft (raw, json)
Hash identifier:          0lNtjeGu3IjwEHd8kNp7ks4F9JEGO3LFl44q6D6lhMk=
Subject key identifier:   A3:3D:74:47:50:54:3B:EA:13:8D:7F:FD:37:CA:CD:20:AD:A3:23:0E
Authority key identifier: 5B:0A:C3:8D:EA:6A:70:4A:DB:AB:A9:38:1C:1D:C0:23:56:D3:AA:90
Certificate issuer:       /CN=5b0ac38dea6a704adbaba9381c1dc02356d3aa90
Certificate serial:       0199221E3CCFCF27D5D587AC35758DDCD85A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WwrDjepqcErbq6k4HB3AI1bTqpA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/722bd6-bcef-434f-b011-948d86913538/1/WwrDjepqcErbq6k4HB3AI1bTqpA.mft
Manifest number:          09CD
Signing time:             Sun 07 Sep 2025 03:00:30 +0000
Manifest this update:     Sun 07 Sep 2025 03:00:30 +0000
Manifest next update:     Mon 08 Sep 2025 03:00:30 +0000
Files and hashes:         1: WwrDjepqcErbq6k4HB3AI1bTqpA.crl (hash: UUbKeRu/7PshUjhzyXMSW7ibBEAjecXEkLOsrnJGOFE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/722bd6-bcef-434f-b011-948d86913538/1/WwrDjepqcErbq6k4HB3AI1bTqpA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/722bd6-bcef-434f-b011-948d86913538/1/WwrDjepqcErbq6k4HB3AI1bTqpA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WwrDjepqcErbq6k4HB3AI1bTqpA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 03:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:1e:3c:cf:cf:27:d5:d5:87:ac:35:75:8d:dc:d8:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b0ac38dea6a704adbaba9381c1dc02356d3aa90
        Validity
            Not Before: Sep  7 03:00:30 2025 GMT
            Not After : Sep  8 03:00:30 2025 GMT
        Subject: CN=a33d744750543bea138d7ffd37cacd20ada3230e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:23:62:1b:38:68:c0:91:aa:6a:cf:ae:07:07:
                    84:fe:16:3c:87:47:2e:87:bd:4a:19:88:77:d1:e4:
                    56:66:30:87:59:00:d2:27:c4:d1:d3:08:50:97:41:
                    85:fb:8b:c3:c7:cd:4d:17:3d:bc:97:e4:e8:86:cc:
                    0c:97:6c:9e:34:64:3e:52:a5:1e:08:10:4d:74:32:
                    47:17:c5:5d:12:8f:3b:3d:a0:c2:88:dc:20:f0:99:
                    9b:4d:b8:f3:3b:23:3e:bf:f0:bf:62:18:97:1b:ef:
                    6d:30:b5:8d:9a:3d:12:d9:e4:30:6f:a5:26:05:2c:
                    44:ff:60:98:b3:d4:06:c6:9d:a2:92:70:f5:80:68:
                    c7:16:67:32:41:64:8d:ea:f8:b0:71:06:62:64:45:
                    82:f5:a2:5b:6c:33:af:5a:83:65:c6:9a:bf:ad:f4:
                    d9:10:36:82:56:be:b3:02:3c:2f:3c:51:a5:c7:81:
                    8a:28:cc:1c:f6:9a:70:ef:85:3e:80:7e:24:dd:ed:
                    21:3e:79:75:3e:d3:c2:ba:9f:22:76:87:12:64:da:
                    a3:61:d9:a7:31:b5:bf:68:31:28:81:d3:23:61:23:
                    09:82:1b:b7:72:d4:e5:fc:13:08:be:d0:11:38:fe:
                    cc:71:62:08:fe:2e:a2:bf:bd:9c:63:6f:e8:95:44:
                    7c:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:3D:74:47:50:54:3B:EA:13:8D:7F:FD:37:CA:CD:20:AD:A3:23:0E
            X509v3 Authority Key Identifier:
                keyid:5B:0A:C3:8D:EA:6A:70:4A:DB:AB:A9:38:1C:1D:C0:23:56:D3:AA:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WwrDjepqcErbq6k4HB3AI1bTqpA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/722bd6-bcef-434f-b011-948d86913538/1/WwrDjepqcErbq6k4HB3AI1bTqpA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/722bd6-bcef-434f-b011-948d86913538/1/WwrDjepqcErbq6k4HB3AI1bTqpA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:e0:1a:39:f5:9f:58:7a:f5:44:c4:50:7e:24:3e:99:19:4a:
         89:e6:72:a3:22:4c:9f:b7:c1:78:50:60:36:22:e1:10:95:7f:
         3b:68:ca:58:8c:2d:38:c0:ff:df:6f:42:68:f5:b7:de:bd:10:
         76:ad:77:5c:aa:4c:0c:f7:68:6a:8d:3f:23:0d:46:dc:26:88:
         2e:aa:a5:42:80:2d:39:22:28:5b:36:83:d3:d1:a3:35:29:62:
         64:c8:0b:a4:be:2b:cb:1c:b7:63:6c:96:24:07:40:0a:4d:d5:
         6f:b3:71:ff:ee:47:7f:c2:b1:50:b1:fd:2f:47:3a:7b:0e:7e:
         bc:8f:3d:48:f4:2e:40:7a:e1:e9:72:9f:9f:9b:d3:15:2f:6c:
         62:ed:57:59:a7:bc:48:02:ee:7e:cc:82:46:6d:7a:80:33:e7:
         cb:f8:00:58:65:0e:a7:75:9c:87:98:90:5c:2a:15:56:bf:05:
         86:04:78:30:b7:23:ef:d4:be:20:03:7d:03:66:e8:ee:3d:5e:
         7e:f1:06:fb:ad:b9:6b:39:89:20:45:2e:3f:55:55:a2:f8:18:
         6b:d2:f0:d6:7d:14:9b:65:87:10:14:8d:58:65:aa:c9:d7:2f:
         a4:6d:e5:15:7f:b6:d9:4d:b5:8c:ee:b4:4f:29:94:9e:08:46:
         52:f1:fc:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:09:26 2025 by rpki-client