Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/491a89-5850-40b6-85f4-1546bb6d36bb/1/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.mft
File:                     wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.mft (raw, json)
Hash identifier:          R2dSldC0ZK/b5drDSo50zw9rWoeKZG0qpRh4DUPUsEI=
Subject key identifier:   CC:AF:E0:D2:79:23:48:F7:7E:CC:05:59:1C:10:28:99:D7:63:77:77
Authority key identifier: C1:37:F6:38:C0:BE:46:00:B4:66:DE:8E:33:0D:4C:F6:A7:FF:3B:3E
Certificate issuer:       /CN=c137f638c0be4600b466de8e330d4cf6a7ff3b3e
Certificate serial:       019A4EF46CE259F9B52A1329354E9E4BFD0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/491a89-5850-40b6-85f4-1546bb6d36bb/1/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.mft
Manifest number:          14FD
Signing time:             Tue 04 Nov 2025 13:00:32 +0000
Manifest this update:     Tue 04 Nov 2025 13:00:32 +0000
Manifest next update:     Wed 05 Nov 2025 13:00:32 +0000
Files and hashes:         1: wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.crl (hash: tjripz5RaCy9odF+pJg1XDqQqKsMjfeas8o8m4ALtNg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/491a89-5850-40b6-85f4-1546bb6d36bb/1/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/491a89-5850-40b6-85f4-1546bb6d36bb/1/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 09:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:4e:f4:6c:e2:59:f9:b5:2a:13:29:35:4e:9e:4b:fd:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c137f638c0be4600b466de8e330d4cf6a7ff3b3e
        Validity
            Not Before: Nov  4 13:00:32 2025 GMT
            Not After : Nov  5 13:00:32 2025 GMT
        Subject: CN=ccafe0d2792348f77ecc05591c102899d7637777
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:20:b4:b8:68:b9:d4:e0:33:6a:76:97:d2:19:
                    77:de:ad:29:51:25:b1:6e:3a:f0:e8:b9:35:c7:2c:
                    20:0c:1b:64:07:88:dd:94:1f:81:56:ce:58:0d:30:
                    2c:c3:3f:27:ad:b8:d8:9c:94:33:59:6f:5e:c8:8c:
                    45:a3:00:6f:be:8e:d6:9b:f2:28:c9:b7:0a:d2:78:
                    73:b6:34:ad:67:fa:96:af:58:4f:61:16:b0:9a:f3:
                    b7:14:34:a5:55:4f:4c:0c:40:13:f8:a6:73:5c:84:
                    9f:b1:88:0b:5a:0e:6a:69:4a:2d:51:39:87:6e:5d:
                    44:f7:ea:9e:b0:31:e9:ed:a7:0f:d1:c8:63:0f:e7:
                    e1:33:63:c5:2b:f5:02:e0:bd:70:a9:5d:55:5c:a1:
                    c8:3a:f8:b3:fb:87:b2:4f:13:71:ae:35:26:52:d3:
                    e7:75:4f:d6:3a:dd:ac:a2:dc:60:f7:24:93:0f:6f:
                    9e:35:aa:8e:bb:d4:37:63:23:a2:5e:42:72:f3:7f:
                    7b:56:a6:65:9c:04:15:8e:9e:6a:c7:b2:68:1d:b2:
                    f3:b5:4a:c1:51:65:c2:d5:05:5a:90:52:5b:21:ee:
                    a3:d7:e3:34:dc:6e:34:75:4e:8f:67:ac:52:a4:a7:
                    1b:cf:ce:6c:b8:55:ec:c9:b1:b3:35:07:86:87:63:
                    0b:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:AF:E0:D2:79:23:48:F7:7E:CC:05:59:1C:10:28:99:D7:63:77:77
            X509v3 Authority Key Identifier:
                keyid:C1:37:F6:38:C0:BE:46:00:B4:66:DE:8E:33:0D:4C:F6:A7:FF:3B:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/491a89-5850-40b6-85f4-1546bb6d36bb/1/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/491a89-5850-40b6-85f4-1546bb6d36bb/1/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:75:a5:52:dc:1a:6b:d6:82:da:8f:05:bd:73:54:8f:c5:d5:
         6a:28:04:ed:5e:c0:2d:5e:ed:90:50:e0:c1:90:65:55:53:30:
         f2:5b:9d:95:f7:a2:e4:da:3b:25:b8:d6:76:d7:91:71:97:8e:
         d6:5c:7d:91:93:9b:d0:53:4e:06:5b:13:40:1f:95:a7:e8:13:
         e4:61:26:be:76:09:46:df:47:ca:cc:fc:83:e3:c4:56:e0:4f:
         46:11:98:29:89:42:01:f9:1a:9f:d3:bd:84:ef:16:a3:ec:4f:
         69:62:bc:38:a9:10:0f:13:67:1c:02:b0:b2:f4:b8:9c:b1:73:
         ed:51:3d:a3:49:63:9e:23:fe:79:57:c2:3d:c4:35:b8:04:00:
         c2:0d:13:df:e6:b7:38:0e:cd:b5:b5:15:29:cd:40:d2:79:e6:
         0b:81:e8:c0:47:18:a6:4c:4d:cf:6a:f7:1b:84:f5:41:1b:15:
         b0:5b:47:03:b8:d2:7b:5d:8a:08:25:f0:c6:04:c4:22:85:3e:
         ff:f8:5b:17:c5:40:80:e0:a7:7f:ee:c0:51:ed:3f:eb:55:d1:
         f8:4b:6e:ea:9c:37:4d:c9:2b:bd:c5:21:93:ec:a6:85:1e:60:
         2c:95:9b:ae:4c:e5:f3:ab:f5:f0:fe:67:3e:9d:ae:29:86:92:
         f0:c7:e7:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:01:57 2025 by rpki-client