Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/0ee692-6d64-473a-a063-2cfe8366660f/1/wOuGHF00WeA57O8QTP2T8ggnx0U.mft
File:                     wOuGHF00WeA57O8QTP2T8ggnx0U.mft (raw, json)
Hash identifier:          oJ8n7G/F7I9dhJ1TBgtFelJ8/ZTc41UJRcDQV0Q4ygk=
Subject key identifier:   AE:CB:0F:92:91:4D:6D:49:E5:21:F0:68:E0:BB:EF:A1:C1:B0:76:AD
Authority key identifier: C0:EB:86:1C:5D:34:59:E0:39:EC:EF:10:4C:FD:93:F2:08:27:C7:45
Certificate issuer:       /CN=c0eb861c5d3459e039ecef104cfd93f20827c745
Certificate serial:       019923313E109C7BE08946A94BCBE883E346
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wOuGHF00WeA57O8QTP2T8ggnx0U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/0ee692-6d64-473a-a063-2cfe8366660f/1/wOuGHF00WeA57O8QTP2T8ggnx0U.mft
Manifest number:          0212
Signing time:             Sun 07 Sep 2025 08:00:53 +0000
Manifest this update:     Sun 07 Sep 2025 08:00:53 +0000
Manifest next update:     Mon 08 Sep 2025 08:00:53 +0000
Files and hashes:         1: wOuGHF00WeA57O8QTP2T8ggnx0U.crl (hash: QGMCQBBYDdc2b0mKv5wC+JyMtFEEmoOFSN0eOkt4JQA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/0ee692-6d64-473a-a063-2cfe8366660f/1/wOuGHF00WeA57O8QTP2T8ggnx0U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/0ee692-6d64-473a-a063-2cfe8366660f/1/wOuGHF00WeA57O8QTP2T8ggnx0U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wOuGHF00WeA57O8QTP2T8ggnx0U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 07:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:23:31:3e:10:9c:7b:e0:89:46:a9:4b:cb:e8:83:e3:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0eb861c5d3459e039ecef104cfd93f20827c745
        Validity
            Not Before: Sep  7 08:00:53 2025 GMT
            Not After : Sep  8 08:00:53 2025 GMT
        Subject: CN=aecb0f92914d6d49e521f068e0bbefa1c1b076ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:df:cb:14:bd:75:9f:11:6f:41:ce:e6:d6:52:
                    49:eb:14:d1:24:7e:30:09:98:2b:50:08:71:ed:fa:
                    98:9f:ed:9d:09:e0:ab:4d:2e:00:0f:75:57:e9:ed:
                    f8:0e:14:a2:ad:38:28:e8:11:68:36:18:38:f4:17:
                    a8:2b:b7:b9:63:72:82:4e:c6:03:83:f0:7a:be:d2:
                    94:e7:55:59:de:1a:b1:dd:61:d5:33:ae:b2:2c:83:
                    5d:7d:f4:17:27:d0:94:3c:78:c3:c0:b7:f1:36:3d:
                    84:5d:49:fa:85:94:7e:79:4d:fe:6f:78:51:60:8c:
                    bd:d1:06:40:12:40:f0:23:ed:f9:8d:0d:16:25:77:
                    20:77:95:9d:84:a1:1d:cc:0d:b7:5a:f1:9d:62:40:
                    41:03:e9:5e:98:43:6a:53:a3:65:15:4d:2e:70:84:
                    82:75:be:44:a1:4c:72:8a:1d:00:49:74:95:a9:2a:
                    80:86:c8:d8:71:4d:d5:22:5d:1d:95:a3:0c:b5:e9:
                    b0:65:d1:ef:43:dc:3e:34:f8:44:9b:4b:3a:2f:eb:
                    10:92:bb:a8:01:4b:7a:66:4d:fb:a8:6a:0b:7c:ef:
                    0d:87:d2:f7:d9:41:b9:f5:ec:e5:02:f8:35:a0:3b:
                    18:ec:cb:8c:92:50:95:3b:18:af:a2:e4:af:80:72:
                    78:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:CB:0F:92:91:4D:6D:49:E5:21:F0:68:E0:BB:EF:A1:C1:B0:76:AD
            X509v3 Authority Key Identifier:
                keyid:C0:EB:86:1C:5D:34:59:E0:39:EC:EF:10:4C:FD:93:F2:08:27:C7:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOuGHF00WeA57O8QTP2T8ggnx0U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/0ee692-6d64-473a-a063-2cfe8366660f/1/wOuGHF00WeA57O8QTP2T8ggnx0U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/0ee692-6d64-473a-a063-2cfe8366660f/1/wOuGHF00WeA57O8QTP2T8ggnx0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:20:7a:a8:d9:c2:37:da:ca:c6:49:24:62:5a:3f:0f:c9:8c:
         67:3e:50:33:2d:0d:d5:10:b3:d1:6f:ec:bd:3c:65:7e:81:53:
         0c:21:8a:58:9f:e5:66:6e:a1:3f:ed:ab:eb:79:78:16:01:f6:
         da:4d:36:1e:6c:cb:ce:46:63:79:ec:60:b0:9c:ee:bc:b9:91:
         3d:bc:cd:8f:67:c9:87:77:c9:cf:98:21:d2:cf:41:eb:25:a8:
         35:dd:61:fb:39:b5:59:8e:43:a2:4d:c4:39:e5:83:f9:09:a3:
         ba:78:78:9e:aa:50:57:42:77:6b:1b:e8:63:d5:48:4d:e4:5f:
         a8:5c:d3:81:e2:ea:c9:ef:8a:54:89:84:e8:9c:61:a1:62:07:
         f5:ac:c5:ee:03:83:3f:9d:ef:fa:49:59:81:2a:82:59:a9:2e:
         63:3a:f5:aa:05:11:61:74:23:14:69:e6:ee:7e:db:35:6f:8f:
         ab:69:f7:55:bc:44:ad:be:89:00:3d:01:27:fc:7d:de:b9:4c:
         2d:d3:38:8c:e8:89:15:94:36:c9:fb:44:9b:f4:82:d0:23:ac:
         cb:4c:8d:dd:00:ef:31:7f:e6:a7:35:6b:78:c3:59:75:77:bc:
         f3:3d:2b:0e:66:f9:cd:9d:1c:20:e3:cc:1d:91:f9:71:84:39:
         44:d8:09:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkjMT4QnHvgiUapS8vog+NGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMwZWI4NjFjNWQzNDU5ZTAzOWVjZWYxMDRjZmQ5M2YyMDgy
N2M3NDUwHhcNMjUwOTA3MDgwMDUzWhcNMjUwOTA4MDgwMDUzWjAzMTEwLwYDVQQD
EyhhZWNiMGY5MjkxNGQ2ZDQ5ZTUyMWYwNjhlMGJiZWZhMWMxYjA3NmFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9/LFL11nxFvQc7m1lJJ6xTRJH4w
CZgrUAhx7fqYn+2dCeCrTS4AD3VX6e34DhSirTgo6BFoNhg49BeoK7e5Y3KCTsYD
g/B6vtKU51VZ3hqx3WHVM66yLINdffQXJ9CUPHjDwLfxNj2EXUn6hZR+eU3+b3hR
YIy90QZAEkDwI+35jQ0WJXcgd5WdhKEdzA23WvGdYkBBA+lemENqU6NlFU0ucISC
db5EoUxyih0ASXSVqSqAhsjYcU3VIl0dlaMMtemwZdHvQ9w+NPhEm0s6L+sQkruo
AUt6Zk37qGoLfO8Nh9L32UG59ezlAvg1oDsY7MuMklCVOxivouSvgHJ4XQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK7LD5KRTW1J5SHwaOC776HBsHatMB8GA1UdIwQY
MBaAFMDrhhxdNFngOezvEEz9k/IIJ8dFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd091R0hGMDBXZUE1N084UVRQMlQ4Z2dueDBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8wZWU2OTItNmQ2NC00NzNhLWEwNjMt
MmNmZTgzNjY2NjBmLzEvd091R0hGMDBXZUE1N084UVRQMlQ4Z2dueDBVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC8wZWU2OTItNmQ2NC00NzNhLWEwNjMtMmNmZTgzNjY2NjBm
LzEvd091R0hGMDBXZUE1N084UVRQMlQ4Z2dueDBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATCB6qNnC
N9rKxkkkYlo/D8mMZz5QMy0N1RCz0W/svTxlfoFTDCGKWJ/lZm6hP+2r63l4FgH2
2k02HmzLzkZjeexgsJzuvLmRPbzNj2fJh3fJz5gh0s9B6yWoNd1h+zm1WY5Dok3E
OeWD+Qmjunh4nqpQV0J3axvoY9VITeRfqFzTgeLqye+KVImE6JxhoWIH9azF7gOD
P53v+klZgSqCWakuYzr1qgURYXQjFGnm7n7bNW+Pq2n3VbxErb6JAD0BJ/x93rlM
LdM4jOiJFZQ2yftEm/SC0COsy0yN3QDvMX/mpzVreMNZdXe88z0rDmb5zZ0cIOPM
HZH5cYQ5RNgJKA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 15:07:59 2025 by rpki-client