Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/7905aa-3546-4c2d-9031-0982bbd31dd4/1/wsVutD8iDrUUHthhUwr_JSGyHu0.mft
File:                     wsVutD8iDrUUHthhUwr_JSGyHu0.mft (raw, json)
Hash identifier:          3DS0C7cJfyPu56ntrPHKIgbhZhm9W/4ad9z73Bsqy5A=
Subject key identifier:   FD:46:1B:78:A0:14:A7:AB:90:47:92:77:6D:68:42:AB:E8:B9:08:63
Authority key identifier: C2:C5:6E:B4:3F:22:0E:B5:14:1E:D8:61:53:0A:FF:25:21:B2:1E:ED
Certificate issuer:       /CN=c2c56eb43f220eb5141ed861530aff2521b21eed
Certificate serial:       019922FA1D244D3B70D18F9461B0CCF583B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wsVutD8iDrUUHthhUwr_JSGyHu0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/7905aa-3546-4c2d-9031-0982bbd31dd4/1/wsVutD8iDrUUHthhUwr_JSGyHu0.mft
Manifest number:          166E
Signing time:             Sun 07 Sep 2025 07:00:40 +0000
Manifest this update:     Sun 07 Sep 2025 07:00:40 +0000
Manifest next update:     Mon 08 Sep 2025 07:00:40 +0000
Files and hashes:         1: wsVutD8iDrUUHthhUwr_JSGyHu0.crl (hash: IKcRCqrISPM+T3yKD2ExoiSzeITVkvmm2BicDdFpH88=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/7905aa-3546-4c2d-9031-0982bbd31dd4/1/wsVutD8iDrUUHthhUwr_JSGyHu0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/7905aa-3546-4c2d-9031-0982bbd31dd4/1/wsVutD8iDrUUHthhUwr_JSGyHu0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wsVutD8iDrUUHthhUwr_JSGyHu0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:fa:1d:24:4d:3b:70:d1:8f:94:61:b0:cc:f5:83:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2c56eb43f220eb5141ed861530aff2521b21eed
        Validity
            Not Before: Sep  7 07:00:40 2025 GMT
            Not After : Sep  8 07:00:40 2025 GMT
        Subject: CN=fd461b78a014a7ab904792776d6842abe8b90863
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:9c:32:23:bc:63:da:17:dd:d2:66:e3:f7:63:
                    bf:02:21:a8:ad:1b:1c:00:a9:00:6a:a1:63:3e:36:
                    dc:f5:e8:01:59:cc:99:f4:d5:11:78:85:df:9e:2d:
                    2a:35:6a:d5:5d:9a:5e:04:be:85:de:d6:56:88:5e:
                    b9:5c:83:52:3f:cd:b7:e5:78:5b:29:f3:bb:7f:d7:
                    e6:32:23:f1:74:cc:dd:36:69:c6:e0:50:d1:35:5f:
                    c4:1b:ef:11:f4:fd:17:01:89:dd:e7:6f:99:8f:72:
                    6f:96:28:f7:10:0f:b3:3e:64:b2:90:5e:f7:7b:cd:
                    b0:8c:da:87:2d:7b:0e:f7:12:09:53:50:dd:52:b2:
                    e8:95:83:67:c7:0c:ac:62:f3:d8:6b:23:21:6d:dd:
                    51:b2:67:d7:55:7b:f6:53:88:5b:94:9d:ae:1d:87:
                    c5:cf:bd:fa:35:47:50:37:5e:08:83:2a:24:6f:5c:
                    c9:74:60:7d:64:1d:82:66:89:50:65:5a:4f:39:11:
                    ad:53:76:f1:95:98:77:c6:21:42:5b:c3:cd:a1:8f:
                    ff:71:1c:20:3b:b1:4c:a2:3f:51:26:4e:10:55:5e:
                    62:94:f4:7f:7f:78:57:55:e9:d2:a3:be:b0:ec:f9:
                    ad:b8:a9:47:c9:a7:6d:e3:e5:51:21:7e:57:52:9f:
                    d5:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:46:1B:78:A0:14:A7:AB:90:47:92:77:6D:68:42:AB:E8:B9:08:63
            X509v3 Authority Key Identifier:
                keyid:C2:C5:6E:B4:3F:22:0E:B5:14:1E:D8:61:53:0A:FF:25:21:B2:1E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsVutD8iDrUUHthhUwr_JSGyHu0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/7905aa-3546-4c2d-9031-0982bbd31dd4/1/wsVutD8iDrUUHthhUwr_JSGyHu0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/7905aa-3546-4c2d-9031-0982bbd31dd4/1/wsVutD8iDrUUHthhUwr_JSGyHu0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:86:b2:5e:a9:f7:d3:25:3e:ea:55:d4:d4:74:95:33:e8:0c:
         db:3e:18:7f:84:c4:aa:c2:79:b8:40:ed:71:60:18:c3:c7:ae:
         52:49:ab:30:35:29:df:54:6f:ca:9b:d5:5b:8b:b6:00:78:e1:
         df:13:f9:68:52:49:1e:49:99:38:a0:f2:13:e4:ce:62:4f:9d:
         05:9c:ce:26:39:ad:e6:26:05:ed:e7:03:ab:3e:45:c8:64:b4:
         dc:16:aa:5b:ee:67:17:63:e6:77:f5:d1:33:70:db:29:6b:57:
         aa:1b:22:1e:e6:99:7e:ad:e2:2a:54:bc:52:6f:86:c8:76:9e:
         46:a5:cc:a2:4a:64:f3:48:d4:50:21:cb:2c:a0:83:ee:f2:58:
         b8:5a:c1:f8:2c:69:94:a6:3b:27:6a:36:aa:4e:4e:d7:99:64:
         a5:ed:2a:9c:e9:26:63:9a:ac:c2:e6:89:ce:20:27:47:ce:eb:
         68:1d:0f:c8:f5:45:cf:42:c7:fb:87:b3:33:d5:69:12:e1:a2:
         e6:8a:43:2a:58:e6:90:d6:db:e9:04:ce:a1:c5:bc:b9:2d:ec:
         45:e6:6d:52:d1:b9:5b:d9:37:4c:36:6c:5b:8e:e6:fa:ab:34:
         76:de:b3:3f:47:e0:a7:d5:3b:d0:d9:ed:c6:12:38:4a:a8:fb:
         6a:45:7c:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:53:03 2025 by rpki-client