Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/e1b2d7-2702-4831-ba50-4a5756649e01/1/wt1HUtedQ4jB9rKFYD1AtaS2lTY.mft
File:                     wt1HUtedQ4jB9rKFYD1AtaS2lTY.mft (raw, json)
Hash identifier:          3gDyFbEK5aIFNL/PsyLY1b/hR/BdfRRCINZyY2P+c9g=
Subject key identifier:   54:CA:21:33:B1:45:3B:88:97:32:03:3E:5D:96:D4:8E:5A:54:6E:DD
Authority key identifier: C2:DD:47:52:D7:9D:43:88:C1:F6:B2:85:60:3D:40:B5:A4:B6:95:36
Certificate issuer:       /CN=c2dd4752d79d4388c1f6b285603d40b5a4b69536
Certificate serial:       019922FA8B76757E531A019912AFF2106EDE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wt1HUtedQ4jB9rKFYD1AtaS2lTY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/e1b2d7-2702-4831-ba50-4a5756649e01/1/wt1HUtedQ4jB9rKFYD1AtaS2lTY.mft
Manifest number:          0977
Signing time:             Sun 07 Sep 2025 07:01:08 +0000
Manifest this update:     Sun 07 Sep 2025 07:01:08 +0000
Manifest next update:     Mon 08 Sep 2025 07:01:08 +0000
Files and hashes:         1: wt1HUtedQ4jB9rKFYD1AtaS2lTY.crl (hash: PbJhb7wPB2WXmGyLVvzoHGVTyCo53cUCu/jzV6MCllc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/e1b2d7-2702-4831-ba50-4a5756649e01/1/wt1HUtedQ4jB9rKFYD1AtaS2lTY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/e1b2d7-2702-4831-ba50-4a5756649e01/1/wt1HUtedQ4jB9rKFYD1AtaS2lTY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wt1HUtedQ4jB9rKFYD1AtaS2lTY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:fa:8b:76:75:7e:53:1a:01:99:12:af:f2:10:6e:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2dd4752d79d4388c1f6b285603d40b5a4b69536
        Validity
            Not Before: Sep  7 07:01:08 2025 GMT
            Not After : Sep  8 07:01:08 2025 GMT
        Subject: CN=54ca2133b1453b889732033e5d96d48e5a546edd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:38:f9:f0:23:9a:5d:36:6f:c3:38:51:bc:f7:
                    49:65:f7:8e:cd:1c:7b:a3:73:6b:bb:f3:f7:c3:b4:
                    8a:61:98:f3:03:0b:10:df:17:26:f5:22:0d:9a:a7:
                    8b:bf:54:ba:f4:2f:70:12:2b:01:f8:87:08:6b:84:
                    11:ab:3c:2a:cd:e4:3d:f2:19:a1:0b:0e:50:39:70:
                    f9:c1:ef:ca:51:f7:ab:cf:b7:d6:04:f7:6b:85:88:
                    f6:7e:7d:1d:c2:5b:3a:ce:b3:18:eb:d2:37:5d:cd:
                    b2:b1:eb:ba:24:15:76:b9:e1:b2:51:7a:a4:15:25:
                    18:a8:88:b4:ee:bb:aa:81:9c:00:2b:2d:33:d7:2a:
                    42:d3:65:51:08:5d:e6:2c:d0:5a:f4:7f:f8:c2:9f:
                    01:99:27:84:e4:bc:2b:80:68:e1:89:ff:fd:c3:53:
                    1e:e1:57:5a:ba:28:28:66:c3:bf:f2:8d:80:0a:15:
                    34:8d:7c:51:9c:f7:a9:89:4b:bd:09:48:43:52:95:
                    0a:92:d3:87:d5:97:75:3f:d3:09:ee:9c:09:ab:74:
                    f7:d6:e6:6c:8f:f6:36:69:c9:8a:5f:b4:8a:d3:b7:
                    07:39:10:f4:cc:a9:43:f2:70:7a:be:ad:91:5c:7e:
                    6b:f1:b5:60:8e:63:50:79:92:57:e1:73:0a:3a:a3:
                    79:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:CA:21:33:B1:45:3B:88:97:32:03:3E:5D:96:D4:8E:5A:54:6E:DD
            X509v3 Authority Key Identifier:
                keyid:C2:DD:47:52:D7:9D:43:88:C1:F6:B2:85:60:3D:40:B5:A4:B6:95:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wt1HUtedQ4jB9rKFYD1AtaS2lTY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/e1b2d7-2702-4831-ba50-4a5756649e01/1/wt1HUtedQ4jB9rKFYD1AtaS2lTY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/e1b2d7-2702-4831-ba50-4a5756649e01/1/wt1HUtedQ4jB9rKFYD1AtaS2lTY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:fd:cb:71:cd:ac:21:5d:db:5c:ef:bb:42:bd:b8:ff:cb:4e:
         18:5d:ba:e7:51:3f:5a:e6:46:62:46:c8:44:c8:9d:25:03:f1:
         c7:27:4d:a1:4b:bb:6a:f6:9f:5c:80:e7:94:bc:c4:e8:c1:a6:
         ef:3f:64:d3:7b:ef:f8:e1:1d:24:fc:4e:9c:8e:6e:f4:e9:59:
         3c:16:2b:55:d8:54:42:f2:af:b8:5b:c8:4a:83:21:17:b3:93:
         4e:d6:85:22:26:5b:71:b2:e2:f7:2e:aa:58:5c:8d:89:9f:12:
         ea:7d:b0:83:47:26:25:23:0b:d3:72:63:48:a3:12:7f:7b:be:
         87:a7:6c:04:84:2b:6f:82:92:24:84:d6:d8:d9:6c:d7:c0:20:
         dc:cd:10:63:b5:c2:96:60:6b:3f:ae:35:8f:57:b6:1b:09:33:
         34:a6:d7:f9:5c:6f:cd:30:3b:fe:03:51:00:44:8b:de:3c:0d:
         de:65:b1:90:d5:4b:a9:c5:22:0d:02:d5:22:55:f0:6d:2e:54:
         fa:87:31:15:0b:3f:7a:21:45:e5:00:33:b2:63:6e:ba:9b:d7:
         3f:25:03:46:a4:bd:2b:51:c6:f9:09:40:5d:b3:54:62:31:d6:
         da:29:9c:13:8a:9c:57:5e:c3:4a:5a:b1:9d:83:d5:bf:ce:10:
         6f:8a:6a:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZki+ot2dX5TGgGZEq/yEG7eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyZGQ0NzUyZDc5ZDQzODhjMWY2YjI4NTYwM2Q0MGI1YTRi
Njk1MzYwHhcNMjUwOTA3MDcwMTA4WhcNMjUwOTA4MDcwMTA4WjAzMTEwLwYDVQQD
Eyg1NGNhMjEzM2IxNDUzYjg4OTczMjAzM2U1ZDk2ZDQ4ZTVhNTQ2ZWRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzjj58COaXTZvwzhRvPdJZfeOzRx7
o3Nru/P3w7SKYZjzAwsQ3xcm9SINmqeLv1S69C9wEisB+IcIa4QRqzwqzeQ98hmh
Cw5QOXD5we/KUferz7fWBPdrhYj2fn0dwls6zrMY69I3Xc2yseu6JBV2ueGyUXqk
FSUYqIi07ruqgZwAKy0z1ypC02VRCF3mLNBa9H/4wp8BmSeE5LwrgGjhif/9w1Me
4VdauigoZsO/8o2AChU0jXxRnPepiUu9CUhDUpUKktOH1Zd1P9MJ7pwJq3T31uZs
j/Y2acmKX7SK07cHORD0zKlD8nB6vq2RXH5r8bVgjmNQeZJX4XMKOqN5hwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFTKITOxRTuIlzIDPl2W1I5aVG7dMB8GA1UdIwQY
MBaAFMLdR1LXnUOIwfayhWA9QLWktpU2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3QxSFV0ZWRRNGpCOXJLRllEMUF0YVMybFRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9lMWIyZDctMjcwMi00ODMxLWJhNTAt
NGE1NzU2NjQ5ZTAxLzEvd3QxSFV0ZWRRNGpCOXJLRllEMUF0YVMybFRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9lMWIyZDctMjcwMi00ODMxLWJhNTAtNGE1NzU2NjQ5ZTAx
LzEvd3QxSFV0ZWRRNGpCOXJLRllEMUF0YVMybFRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZf3Lcc2s
IV3bXO+7Qr24/8tOGF2651E/WuZGYkbIRMidJQPxxydNoUu7avafXIDnlLzE6MGm
7z9k03vv+OEdJPxOnI5u9OlZPBYrVdhUQvKvuFvISoMhF7OTTtaFIiZbcbLi9y6q
WFyNiZ8S6n2wg0cmJSML03JjSKMSf3u+h6dsBIQrb4KSJITW2Nls18Ag3M0QY7XC
lmBrP641j1e2GwkzNKbX+VxvzTA7/gNRAESL3jwN3mWxkNVLqcUiDQLVIlXwbS5U
+ocxFQs/eiFF5QAzsmNuupvXPyUDRqS9K1HG+QlAXbNUYjHW2imcE4qcV17DSlqx
nYPVv84Qb4pquQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:06:19 2025 by rpki-client