Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/491a89-5850-40b6-85f4-1546bb6d36bb/1/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.mft
File:                     wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.mft (raw, json)
Hash identifier:          DWG/KTLsMbCXhn9EASCVCJWRDFTHEsnC0rZs8jf6OKk=
Subject key identifier:   69:ED:7F:A1:0C:33:47:D6:63:A3:57:5D:61:68:2F:D1:5A:55:9B:3E
Authority key identifier: C1:37:F6:38:C0:BE:46:00:B4:66:DE:8E:33:0D:4C:F6:A7:FF:3B:3E
Certificate issuer:       /CN=c137f638c0be4600b466de8e330d4cf6a7ff3b3e
Certificate serial:       01987D8B01A785F6621008BB62568469ED1E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/491a89-5850-40b6-85f4-1546bb6d36bb/1/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.mft
Manifest number:          140C
Signing time:             Wed 06 Aug 2025 04:01:58 +0000
Manifest this update:     Wed 06 Aug 2025 04:01:58 +0000
Manifest next update:     Thu 07 Aug 2025 04:01:58 +0000
Files and hashes:         1: wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.crl (hash: jCqxhfUIRpCs7dHIVGLTgKKZTfwTe3r00BOiy1OUL9w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/491a89-5850-40b6-85f4-1546bb6d36bb/1/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/491a89-5850-40b6-85f4-1546bb6d36bb/1/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 04:01:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7d:8b:01:a7:85:f6:62:10:08:bb:62:56:84:69:ed:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c137f638c0be4600b466de8e330d4cf6a7ff3b3e
        Validity
            Not Before: Aug  6 04:01:58 2025 GMT
            Not After : Aug  7 04:01:58 2025 GMT
        Subject: CN=69ed7fa10c3347d663a3575d61682fd15a559b3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:1c:09:e2:ad:e1:97:af:2d:4c:44:2e:1f:e2:
                    3c:2b:03:4c:6c:7a:d7:a2:8c:ed:4d:f2:be:74:fc:
                    28:0a:ba:b7:76:ca:92:af:d1:50:7b:a8:e9:8b:b6:
                    9d:1b:92:ed:98:64:b7:6f:19:1f:fc:5f:64:05:59:
                    07:50:fc:ac:f1:9a:4e:a3:99:3f:c6:49:33:65:0a:
                    5e:43:b6:42:4b:01:97:33:00:9e:fa:f8:e8:77:06:
                    09:39:09:d8:2d:31:fc:bb:70:d7:01:2a:3a:1d:14:
                    87:f3:6d:8f:53:6a:e4:0b:9a:8f:61:02:da:cb:18:
                    2f:96:10:e8:de:24:95:a2:d6:34:ad:85:bc:4b:94:
                    d1:c3:f6:1e:56:f4:f6:60:6d:85:e7:fe:bb:a4:98:
                    f5:83:18:70:3e:13:60:5a:5f:ad:e3:ab:4c:ba:66:
                    76:33:11:a8:4d:89:86:6c:0f:8b:b5:5d:59:31:11:
                    47:7f:4a:9c:38:e6:db:14:1c:59:d0:e2:5b:05:37:
                    08:5a:12:5d:3d:47:dc:dd:c6:99:a0:fe:81:5e:48:
                    aa:38:89:23:f3:65:a5:81:48:56:38:61:f4:f1:a8:
                    7a:54:81:5e:93:a6:9c:20:37:2c:61:6d:2a:c9:e2:
                    44:93:f6:44:91:9e:52:b0:1a:d5:14:79:6c:85:90:
                    92:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:ED:7F:A1:0C:33:47:D6:63:A3:57:5D:61:68:2F:D1:5A:55:9B:3E
            X509v3 Authority Key Identifier:
                keyid:C1:37:F6:38:C0:BE:46:00:B4:66:DE:8E:33:0D:4C:F6:A7:FF:3B:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/491a89-5850-40b6-85f4-1546bb6d36bb/1/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/491a89-5850-40b6-85f4-1546bb6d36bb/1/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:a3:3b:11:ec:9b:86:12:38:a4:cd:04:cc:6d:3e:7f:2a:d5:
         dd:4a:9a:41:04:17:6a:78:37:ff:c0:d5:d3:a0:dc:54:05:ee:
         2a:16:c4:5e:17:dd:9d:fb:74:06:44:d3:26:62:c9:c2:bc:30:
         c3:80:b8:62:8e:7f:4c:47:4c:7f:ce:05:d1:f0:4c:ef:a0:2a:
         4f:5e:5a:e8:db:8d:ca:39:32:92:56:fa:9c:98:82:26:9c:63:
         cf:a5:2d:7f:aa:19:db:05:e2:b5:dd:50:01:b7:cd:d0:a1:91:
         3a:43:8c:19:5d:91:4f:ae:79:fd:37:ac:a5:98:a6:55:f5:2c:
         0d:b1:2f:93:09:83:7e:f5:6e:41:16:7f:40:43:c7:9e:d1:40:
         8e:c1:65:77:52:50:e1:3d:1c:15:b2:bd:70:c7:1b:e1:7d:67:
         8b:fe:e6:4a:72:fb:78:42:1b:d9:b5:f2:74:40:a2:92:d7:6f:
         a1:0d:2b:d9:cb:48:5c:f3:1c:4f:85:37:c4:eb:b1:01:f6:35:
         3a:c1:93:b4:07:8e:cd:07:0b:ca:2f:5e:76:bf:48:95:df:70:
         95:58:19:f2:32:36:15:4c:de:bb:82:0c:83:e1:6d:b6:1e:20:
         ac:c2:b6:cd:64:36:7c:24:cb:ed:70:43:10:7b:32:0d:27:e9:
         44:88:1a:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:14:41 2025 by rpki-client