Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/e47b35-3ff5-4ba3-97d6-676d37f3a29a/1/wW_hAJ--ZJH3sVze8Y75bA69RZs.mft
File:                     wW_hAJ--ZJH3sVze8Y75bA69RZs.mft (raw, json)
Hash identifier:          V5y++3Gcg2h8+D06LSNI12+LexFT8QpB4AWE8wR34j8=
Subject key identifier:   11:4E:BD:D1:C3:8B:3B:A9:A9:5B:17:CF:92:CF:F3:E3:B8:99:98:DB
Authority key identifier: C1:6F:E1:00:9F:BE:64:91:F7:B1:5C:DE:F1:8E:F9:6C:0E:BD:45:9B
Certificate issuer:       /CN=c16fe1009fbe6491f7b15cdef18ef96c0ebd459b
Certificate serial:       0198801DBC15748C5605602209DAB120A48F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wW_hAJ--ZJH3sVze8Y75bA69RZs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/e47b35-3ff5-4ba3-97d6-676d37f3a29a/1/wW_hAJ--ZJH3sVze8Y75bA69RZs.mft
Manifest number:          161A
Signing time:             Wed 06 Aug 2025 16:01:28 +0000
Manifest this update:     Wed 06 Aug 2025 16:01:28 +0000
Manifest next update:     Thu 07 Aug 2025 16:01:28 +0000
Files and hashes:         1: wW_hAJ--ZJH3sVze8Y75bA69RZs.crl (hash: LXD+LsNWc5M1X9lX3SKJ+Iphg1hAQESV6/VRF6nO8OY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/e47b35-3ff5-4ba3-97d6-676d37f3a29a/1/wW_hAJ--ZJH3sVze8Y75bA69RZs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/e47b35-3ff5-4ba3-97d6-676d37f3a29a/1/wW_hAJ--ZJH3sVze8Y75bA69RZs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wW_hAJ--ZJH3sVze8Y75bA69RZs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 14:26:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:80:1d:bc:15:74:8c:56:05:60:22:09:da:b1:20:a4:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c16fe1009fbe6491f7b15cdef18ef96c0ebd459b
        Validity
            Not Before: Aug  6 16:01:28 2025 GMT
            Not After : Aug  7 16:01:28 2025 GMT
        Subject: CN=114ebdd1c38b3ba9a95b17cf92cff3e3b89998db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:32:49:4f:3f:ec:cd:52:f9:e1:52:bb:65:9c:
                    3a:0d:37:2f:35:58:66:2a:29:a3:14:4a:c0:50:5b:
                    82:9e:d9:24:4e:bc:bc:d8:10:91:51:e1:14:3c:9d:
                    eb:64:50:74:cf:c1:fb:4d:ac:2b:bd:6c:52:3c:db:
                    36:70:d2:7c:5b:86:d4:d8:fa:a0:34:3a:bf:c3:74:
                    b8:90:af:32:d8:70:f1:c8:39:57:cd:e2:50:56:96:
                    b5:58:3f:b1:f6:38:e3:37:35:bf:e3:6f:b3:15:11:
                    1d:df:c7:98:cc:89:fe:b7:29:8e:7c:f6:28:6f:41:
                    f7:55:c0:02:7a:01:ea:2c:f2:b5:14:9c:6b:3d:f1:
                    ea:17:35:0b:ee:0c:ce:bc:92:7d:9d:d2:d0:56:38:
                    5a:f1:66:e6:e1:ff:ab:c9:1a:2d:5c:d7:b9:b7:48:
                    9d:bb:1a:79:c3:79:4e:f6:16:a4:24:df:a2:08:3e:
                    2f:5b:63:9d:c2:91:26:04:aa:2b:b3:55:6f:90:45:
                    fb:4c:66:3a:9a:5e:db:29:79:70:17:cc:07:32:02:
                    08:69:42:ab:6f:53:5b:6d:20:61:c5:85:94:f6:32:
                    2b:ad:42:fd:67:70:af:ad:3f:8e:f1:53:59:cd:f1:
                    b3:bb:97:fa:4f:f7:ed:5d:ff:6b:4a:ea:d4:c2:4c:
                    d3:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:4E:BD:D1:C3:8B:3B:A9:A9:5B:17:CF:92:CF:F3:E3:B8:99:98:DB
            X509v3 Authority Key Identifier:
                keyid:C1:6F:E1:00:9F:BE:64:91:F7:B1:5C:DE:F1:8E:F9:6C:0E:BD:45:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wW_hAJ--ZJH3sVze8Y75bA69RZs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e47b35-3ff5-4ba3-97d6-676d37f3a29a/1/wW_hAJ--ZJH3sVze8Y75bA69RZs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e47b35-3ff5-4ba3-97d6-676d37f3a29a/1/wW_hAJ--ZJH3sVze8Y75bA69RZs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:83:2e:3c:02:15:e3:ff:da:2b:f1:fb:d0:21:39:5b:e3:66:
         37:38:a8:5e:dd:9d:d1:dd:de:6c:8d:6f:e0:cd:a3:b7:18:ac:
         29:30:ad:5c:8a:aa:49:e2:5b:d6:e1:01:bd:05:56:77:04:df:
         0c:66:de:37:81:3d:86:d7:88:f7:0d:7d:af:2e:c0:ba:0e:97:
         f9:c3:77:53:79:19:9a:78:78:1e:ce:d1:bd:72:57:99:e2:e8:
         a5:50:a1:bf:e2:48:a3:4f:24:e4:6f:5c:94:d9:65:d5:e8:17:
         40:32:a5:32:e5:e7:eb:f6:e7:03:24:84:f2:9c:2a:40:bb:de:
         53:ea:4b:9d:51:e0:a9:8f:86:1c:4d:17:ba:90:5a:b9:41:ca:
         32:0d:99:6f:a1:64:ac:ce:6d:5a:40:10:c3:45:5d:6c:85:d2:
         25:6f:99:a2:76:2c:ae:9d:ea:f8:a1:70:9b:b0:b0:69:d4:97:
         33:d4:a5:63:da:e9:bb:66:04:80:71:d4:30:1b:e9:60:d0:4a:
         31:05:3a:12:9b:5c:34:4c:c0:35:a4:e8:b7:93:c9:79:67:8e:
         98:65:1f:3a:7f:4f:cc:9f:6c:a5:73:a0:d7:86:da:88:10:6d:
         54:eb:51:fe:6a:ec:e4:b4:85:cc:f8:c3:b6:14:bc:6e:5d:f7:
         bb:ac:59:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 18:24:47 2025 by rpki-client