Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/1be093-c108-43b3-bb52-0b9bfb19f2ee/1/wLi5L51itcMXfVLrNqUyVn70sPI.mft
File:                     wLi5L51itcMXfVLrNqUyVn70sPI.mft (raw, json)
Hash identifier:          rmM+PIGiBID+Rgdpo58039jZa5W+KJMQOtmdpnnwLEQ=
Subject key identifier:   2C:7B:FA:2D:34:63:45:65:83:CD:0D:7F:58:A7:B9:70:91:31:47:6B
Authority key identifier: C0:B8:B9:2F:9D:62:B5:C3:17:7D:52:EB:36:A5:32:56:7E:F4:B0:F2
Certificate issuer:       /CN=c0b8b92f9d62b5c3177d52eb36a532567ef4b0f2
Certificate serial:       019921B29061AD87531C60EB898EAF6BF064
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wLi5L51itcMXfVLrNqUyVn70sPI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/1be093-c108-43b3-bb52-0b9bfb19f2ee/1/wLi5L51itcMXfVLrNqUyVn70sPI.mft
Manifest number:          0AC2
Signing time:             Sun 07 Sep 2025 01:02:54 +0000
Manifest this update:     Sun 07 Sep 2025 01:02:54 +0000
Manifest next update:     Mon 08 Sep 2025 01:02:54 +0000
Files and hashes:         1: wLi5L51itcMXfVLrNqUyVn70sPI.crl (hash: JabRf+qzmB3ty3OlMjbY/RsQDZYmPErXx4sDj/EhrGw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/1be093-c108-43b3-bb52-0b9bfb19f2ee/1/wLi5L51itcMXfVLrNqUyVn70sPI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/1be093-c108-43b3-bb52-0b9bfb19f2ee/1/wLi5L51itcMXfVLrNqUyVn70sPI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wLi5L51itcMXfVLrNqUyVn70sPI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 01:02:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:21:b2:90:61:ad:87:53:1c:60:eb:89:8e:af:6b:f0:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0b8b92f9d62b5c3177d52eb36a532567ef4b0f2
        Validity
            Not Before: Sep  7 01:02:54 2025 GMT
            Not After : Sep  8 01:02:54 2025 GMT
        Subject: CN=2c7bfa2d3463456583cd0d7f58a7b9709131476b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:51:68:dd:d7:2d:ce:45:16:29:a2:ac:bd:3e:
                    f6:83:11:5b:b1:ca:84:9d:28:e8:57:4a:e7:45:3d:
                    8d:3d:78:87:55:f2:bb:53:31:50:05:3e:8f:94:38:
                    ef:47:66:6b:bc:eb:42:29:b8:e2:1e:6a:53:ff:53:
                    e2:2d:75:c5:0b:60:83:ff:a6:0c:89:4c:c0:b3:e0:
                    41:71:84:cb:f3:83:84:b5:27:9c:f0:7d:40:9b:0f:
                    80:fa:ee:ee:91:ad:00:2b:ad:3a:fb:46:08:48:b8:
                    a5:ea:6d:75:b6:5d:42:f0:df:e4:00:38:80:bf:df:
                    c1:ae:6b:96:05:1c:bf:62:59:c6:47:78:26:31:d1:
                    eb:29:bd:75:33:ff:cf:ff:5b:ee:e7:f7:47:ac:73:
                    da:95:6f:e0:35:6a:04:38:fc:97:b2:54:f4:83:3b:
                    1a:e0:ec:5e:d8:50:dd:67:e1:9e:34:0c:29:46:60:
                    b8:70:31:ce:99:77:ca:aa:b6:e6:79:88:83:09:11:
                    12:e1:aa:cf:03:2b:6a:8f:35:38:1f:90:a6:ff:0d:
                    f3:c1:f7:fa:40:71:4e:8c:7e:47:59:87:11:c5:04:
                    eb:24:c5:16:45:4a:45:53:f0:3d:4d:44:5f:7d:7e:
                    82:d6:08:61:f0:9b:46:c3:24:b5:68:30:87:58:a0:
                    dd:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:7B:FA:2D:34:63:45:65:83:CD:0D:7F:58:A7:B9:70:91:31:47:6B
            X509v3 Authority Key Identifier:
                keyid:C0:B8:B9:2F:9D:62:B5:C3:17:7D:52:EB:36:A5:32:56:7E:F4:B0:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wLi5L51itcMXfVLrNqUyVn70sPI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/1be093-c108-43b3-bb52-0b9bfb19f2ee/1/wLi5L51itcMXfVLrNqUyVn70sPI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/1be093-c108-43b3-bb52-0b9bfb19f2ee/1/wLi5L51itcMXfVLrNqUyVn70sPI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:25:06:7b:cb:56:70:97:1b:02:5e:41:59:bf:be:73:bd:3e:
         81:87:0c:c1:ed:82:be:8a:fb:56:b2:5d:e7:eb:0a:bb:97:d1:
         9a:99:40:35:44:48:a6:77:2d:3d:7c:51:50:30:db:53:b4:34:
         a7:5c:cd:e9:58:f9:d6:8a:69:10:a4:c6:05:99:3a:f2:02:97:
         65:92:5d:9f:ac:c5:c3:84:49:bf:71:50:1c:30:e7:6e:3b:a9:
         e0:d2:ef:e3:93:b1:97:32:92:a3:49:06:06:5b:c6:c8:ce:a8:
         f2:52:1d:e9:10:ed:50:b6:db:0a:66:23:11:63:58:73:f4:bb:
         cd:66:52:34:63:6f:1c:9a:85:0e:64:5f:58:d3:7b:f0:a7:71:
         5b:9b:b7:1f:0e:41:a1:b0:b1:46:a6:1a:80:b1:8d:e1:61:ea:
         07:00:75:4a:cd:0c:7f:a0:f9:25:b1:56:20:c5:f6:d4:e0:bb:
         80:d2:c4:2a:86:ce:03:53:da:a7:00:a3:7c:ec:ae:19:46:8e:
         2f:90:7a:8f:57:7b:76:13:9c:71:0d:8e:06:b7:7a:27:77:55:
         f4:95:2c:61:0a:3e:63:fa:ad:66:76:ab:16:4c:79:4d:ef:ff:
         0e:a0:11:01:91:ea:7f:a2:12:72:11:74:21:a0:a4:69:a8:92:
         43:8f:dc:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:59:53 2025 by rpki-client