Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/e139d8-68e0-4ffa-b4ef-d7364dd35b31/1/wIGiJnTcJaqlCFNn4g4HjekGTxI.mft
File:                     wIGiJnTcJaqlCFNn4g4HjekGTxI.mft (raw, json)
Hash identifier:          JUPbLpiF1vGtrT2zq97rWVzOrPdRrnBNxiOeuMdaUPg=
Subject key identifier:   C9:7F:66:77:AF:BE:33:7A:BB:E5:13:EE:65:02:BC:07:06:E8:4A:8A
Authority key identifier: C0:81:A2:26:74:DC:25:AA:A5:08:53:67:E2:0E:07:8D:E9:06:4F:12
Certificate issuer:       /CN=c081a22674dc25aaa5085367e20e078de9064f12
Certificate serial:       01988B0F31A376A034914709F659FB304F49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wIGiJnTcJaqlCFNn4g4HjekGTxI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/e139d8-68e0-4ffa-b4ef-d7364dd35b31/1/wIGiJnTcJaqlCFNn4g4HjekGTxI.mft
Manifest number:          0899
Signing time:             Fri 08 Aug 2025 19:01:25 +0000
Manifest this update:     Fri 08 Aug 2025 19:01:25 +0000
Manifest next update:     Sat 09 Aug 2025 19:01:25 +0000
Files and hashes:         1: wIGiJnTcJaqlCFNn4g4HjekGTxI.crl (hash: CeKAjiI3ZznzN8Tlf4daCnhBqAl2DyQGj3HFfsbAXfI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/e139d8-68e0-4ffa-b4ef-d7364dd35b31/1/wIGiJnTcJaqlCFNn4g4HjekGTxI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/e139d8-68e0-4ffa-b4ef-d7364dd35b31/1/wIGiJnTcJaqlCFNn4g4HjekGTxI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wIGiJnTcJaqlCFNn4g4HjekGTxI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 19:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:8b:0f:31:a3:76:a0:34:91:47:09:f6:59:fb:30:4f:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c081a22674dc25aaa5085367e20e078de9064f12
        Validity
            Not Before: Aug  8 19:01:25 2025 GMT
            Not After : Aug  9 19:01:25 2025 GMT
        Subject: CN=c97f6677afbe337abbe513ee6502bc0706e84a8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:cb:f9:32:60:07:d8:26:57:de:40:bd:9e:5f:
                    b5:61:17:79:fa:86:50:35:94:58:df:c8:7e:18:9a:
                    f8:e3:b2:8a:49:45:5f:ad:f2:2b:1f:0d:dd:7f:30:
                    bd:90:56:01:cc:59:a6:eb:44:95:90:e7:29:8c:a5:
                    6e:ce:f9:c9:b5:91:b3:55:55:74:5c:bf:72:5c:5b:
                    e1:73:f3:a7:22:10:43:2f:98:67:55:2e:bd:62:b8:
                    61:13:69:58:cf:04:28:98:37:00:5a:a6:d9:6f:e2:
                    33:96:13:b7:96:00:d6:d5:30:8e:17:05:63:46:07:
                    06:72:aa:1d:90:e5:f2:17:48:a4:6d:6f:43:e3:9b:
                    d0:f5:31:c0:82:a4:f8:78:39:20:cf:e7:75:6f:cc:
                    5f:fa:b1:f2:a1:76:0a:58:3a:2c:dc:7b:f2:ae:55:
                    a7:78:60:08:42:66:e7:d4:06:d6:21:34:e0:4d:cd:
                    2a:1e:f6:b9:01:48:07:c2:d4:06:f3:74:8d:2b:c0:
                    75:b2:5f:0d:5c:df:f3:43:5e:96:4e:8b:41:a6:d2:
                    8f:3d:27:11:0a:9f:0c:bf:09:b9:a4:25:2c:80:38:
                    bf:95:fe:4a:f1:05:a3:88:cf:b4:a1:23:bb:3b:24:
                    42:48:7b:1c:f0:46:20:51:46:f8:a7:c1:85:d3:25:
                    3a:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:7F:66:77:AF:BE:33:7A:BB:E5:13:EE:65:02:BC:07:06:E8:4A:8A
            X509v3 Authority Key Identifier:
                keyid:C0:81:A2:26:74:DC:25:AA:A5:08:53:67:E2:0E:07:8D:E9:06:4F:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wIGiJnTcJaqlCFNn4g4HjekGTxI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/e139d8-68e0-4ffa-b4ef-d7364dd35b31/1/wIGiJnTcJaqlCFNn4g4HjekGTxI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/e139d8-68e0-4ffa-b4ef-d7364dd35b31/1/wIGiJnTcJaqlCFNn4g4HjekGTxI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:04:fd:ce:d8:1d:dc:5d:03:bc:ca:9e:19:9c:f1:da:64:b1:
         a7:22:d3:c0:8f:14:3f:66:bc:f9:bf:f8:37:d4:dd:b8:51:7c:
         53:8f:58:73:cb:5c:49:80:46:c0:e9:1f:20:3c:5c:ce:ac:90:
         c3:d4:4c:7b:79:b4:e7:e8:61:20:b9:85:ca:4b:08:1a:95:a6:
         d9:6d:41:7e:76:66:ba:e5:6a:5b:41:b9:7b:76:a7:de:a9:ce:
         00:2e:72:8e:4c:eb:a1:0f:42:68:3c:31:93:48:70:de:32:a7:
         f5:72:ba:5a:1d:f6:14:8e:87:d4:29:64:7d:7f:db:82:07:44:
         35:40:65:b4:c5:2e:15:f7:2f:aa:da:3d:7c:ef:df:98:de:6c:
         8a:d8:1c:a1:83:95:39:a0:a1:a0:80:b4:00:af:44:eb:f3:47:
         65:52:b8:05:da:06:55:e5:15:ff:91:a4:25:39:d1:ae:34:21:
         31:d2:e9:83:4f:cf:b5:82:d9:51:61:55:ce:13:47:ea:f9:fc:
         48:6d:b1:44:34:4d:1e:dc:66:5c:79:2b:97:e6:ea:e2:f1:15:
         76:19:5b:cf:c8:3b:4d:56:6c:a4:9f:a8:54:e3:ed:c1:e4:c7:
         c6:1f:b2:9c:94:c3:b8:71:db:97:c4:7d:64:49:6f:0d:3b:8a:
         68:28:8c:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:22:26 2025 by rpki-client