Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/b2e4bf-17ac-4690-86c7-a40ea47b69cc/1/W1mW18RE1mpSvKEBsGynOKf8qps.mft
File:                     W1mW18RE1mpSvKEBsGynOKf8qps.mft (raw, json)
Hash identifier:          ZH48FJlyEnWl8iGTDn1Ic3PvyS9ujK0kPCwY4jFJVoY=
Subject key identifier:   7F:9A:2B:A0:63:96:91:AB:D9:A9:ED:E3:57:A9:3F:46:7D:32:45:A8
Authority key identifier: 5B:59:96:D7:C4:44:D6:6A:52:BC:A1:01:B0:6C:A7:38:A7:FC:AA:9B
Certificate issuer:       /CN=5b5996d7c444d66a52bca101b06ca738a7fcaa9b
Certificate serial:       019923A08FD76181716AD07FB0BF60390E51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W1mW18RE1mpSvKEBsGynOKf8qps.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/b2e4bf-17ac-4690-86c7-a40ea47b69cc/1/W1mW18RE1mpSvKEBsGynOKf8qps.mft
Manifest number:          021B
Signing time:             Sun 07 Sep 2025 10:02:29 +0000
Manifest this update:     Sun 07 Sep 2025 10:02:29 +0000
Manifest next update:     Mon 08 Sep 2025 10:02:29 +0000
Files and hashes:         1: W1mW18RE1mpSvKEBsGynOKf8qps.crl (hash: sde60Z/BXomjSTHa34PiVGMH9GxTPmxMW4/y4ZT6sj8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/b2e4bf-17ac-4690-86c7-a40ea47b69cc/1/W1mW18RE1mpSvKEBsGynOKf8qps.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/b2e4bf-17ac-4690-86c7-a40ea47b69cc/1/W1mW18RE1mpSvKEBsGynOKf8qps.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W1mW18RE1mpSvKEBsGynOKf8qps.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:23:a0:8f:d7:61:81:71:6a:d0:7f:b0:bf:60:39:0e:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b5996d7c444d66a52bca101b06ca738a7fcaa9b
        Validity
            Not Before: Sep  7 10:02:29 2025 GMT
            Not After : Sep  8 10:02:29 2025 GMT
        Subject: CN=7f9a2ba0639691abd9a9ede357a93f467d3245a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:31:88:ae:28:fa:46:70:0f:58:7d:25:5e:d2:
                    6d:f5:63:6a:6d:d7:fb:eb:fc:e8:86:ae:e9:62:3a:
                    59:60:bc:24:21:1e:56:8d:22:9d:97:ea:76:46:71:
                    24:5e:b1:09:a3:5e:65:92:4c:50:ee:2c:77:93:51:
                    87:50:fd:eb:03:21:d5:ce:74:55:e8:f1:fc:e2:18:
                    25:c3:5d:b7:94:9e:18:8e:cc:79:7d:c1:98:8e:e1:
                    41:7b:4d:11:dc:cd:d9:97:44:03:d9:5e:1b:b2:46:
                    96:e4:54:84:2f:fc:d9:48:fc:e9:47:d8:28:0c:e7:
                    7b:79:be:b9:b6:e8:d9:e0:14:ff:f0:3b:99:d7:d9:
                    60:0b:7e:54:88:01:6c:08:58:79:db:a8:c7:e4:23:
                    24:20:7f:39:23:9e:45:66:e0:ba:2a:2f:cf:a3:d9:
                    b2:20:72:dd:6c:e7:d9:f9:fd:59:c9:53:70:1a:23:
                    e4:d2:83:65:12:54:c8:4f:f1:2f:5f:51:11:cf:0d:
                    82:c5:b2:f0:ff:04:bf:5b:3c:a1:66:7b:c4:9e:9a:
                    91:38:74:0c:2c:99:76:1a:2b:02:db:25:8e:3d:16:
                    4c:19:73:d7:cf:ad:d7:9d:70:b3:ab:c3:75:23:18:
                    5a:d7:43:0d:b5:81:f4:00:17:92:5b:14:f5:f4:79:
                    4e:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:9A:2B:A0:63:96:91:AB:D9:A9:ED:E3:57:A9:3F:46:7D:32:45:A8
            X509v3 Authority Key Identifier:
                keyid:5B:59:96:D7:C4:44:D6:6A:52:BC:A1:01:B0:6C:A7:38:A7:FC:AA:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W1mW18RE1mpSvKEBsGynOKf8qps.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/b2e4bf-17ac-4690-86c7-a40ea47b69cc/1/W1mW18RE1mpSvKEBsGynOKf8qps.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/b2e4bf-17ac-4690-86c7-a40ea47b69cc/1/W1mW18RE1mpSvKEBsGynOKf8qps.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:6f:32:f4:1f:ff:39:f7:5e:32:58:14:70:c9:1a:6e:33:27:
         0c:04:b1:da:3c:d9:53:e4:57:27:a6:98:c4:c7:56:ad:a1:72:
         e9:56:58:28:23:53:8f:e4:e7:c7:3d:f4:fc:7f:85:77:42:2f:
         d0:31:7c:d0:27:e8:21:df:69:b5:46:61:03:c2:09:24:1a:2d:
         2a:25:46:35:b6:c4:ca:5e:53:e9:fd:7b:84:89:1d:62:66:d0:
         1a:7e:99:a8:90:88:13:6d:27:35:d8:c1:d8:1b:f2:f7:4f:bc:
         d8:ad:f1:c0:f2:5e:c6:c7:48:34:36:96:b2:cd:93:51:86:cc:
         c3:54:ab:45:4f:c1:f8:6b:f3:ee:a3:ef:17:d3:5e:47:2a:a6:
         6b:6e:64:74:e4:64:68:b0:db:2f:97:1a:e1:0b:fa:c0:e2:a4:
         c0:96:5b:30:86:76:59:fc:f7:40:af:3d:5c:54:ec:f0:c4:9d:
         a7:db:50:26:46:fc:38:22:a0:dc:7c:68:f3:09:f6:32:5b:f3:
         d5:79:69:57:b8:73:79:b7:71:09:dc:fe:a0:2b:12:08:6c:b6:
         d0:b4:c2:77:e7:30:39:f1:5d:d7:db:e1:2c:34:11:36:cf:0d:
         75:16:30:12:d5:26:2e:10:84:47:ea:a0:d7:34:b9:3e:6d:1a:
         82:63:28:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:22:51 2025 by rpki-client