Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/173035-88ba-4452-903d-4ba85efdb266/1/wi7Wzo-2x52t12WDpeotOruaQy8.mft
File:                     wi7Wzo-2x52t12WDpeotOruaQy8.mft (raw, json)
Hash identifier:          ViauomxzLyQA703r7R93JxMnTO1PvrvxmwdbndRdxPM=
Subject key identifier:   73:07:A2:E6:8C:9D:80:02:95:10:38:F5:2E:A8:4E:26:AC:50:C6:62
Authority key identifier: C2:2E:D6:CE:8F:B6:C7:9D:AD:D7:65:83:A5:EA:2D:3A:BB:9A:43:2F
Certificate issuer:       /CN=c22ed6ce8fb6c79dadd76583a5ea2d3abb9a432f
Certificate serial:       0198A1965640CFAE72F87EE8CC2CAC5FAD8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wi7Wzo-2x52t12WDpeotOruaQy8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/173035-88ba-4452-903d-4ba85efdb266/1/wi7Wzo-2x52t12WDpeotOruaQy8.mft
Manifest number:          3E
Signing time:             Wed 13 Aug 2025 04:00:40 +0000
Manifest this update:     Wed 13 Aug 2025 04:00:40 +0000
Manifest next update:     Thu 14 Aug 2025 04:00:40 +0000
Files and hashes:         1: wi7Wzo-2x52t12WDpeotOruaQy8.crl (hash: OPCDsB8QMJSGuVqRhzdN26EC1/6fQXJHTyJihxCXByk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/173035-88ba-4452-903d-4ba85efdb266/1/wi7Wzo-2x52t12WDpeotOruaQy8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/173035-88ba-4452-903d-4ba85efdb266/1/wi7Wzo-2x52t12WDpeotOruaQy8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wi7Wzo-2x52t12WDpeotOruaQy8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 Aug 2025 22:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:a1:96:56:40:cf:ae:72:f8:7e:e8:cc:2c:ac:5f:ad:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c22ed6ce8fb6c79dadd76583a5ea2d3abb9a432f
        Validity
            Not Before: Aug 13 04:00:40 2025 GMT
            Not After : Aug 14 04:00:40 2025 GMT
        Subject: CN=7307a2e68c9d8002951038f52ea84e26ac50c662
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:f6:56:79:9a:72:b8:e6:0a:b3:12:d0:6d:0a:
                    4e:35:c4:48:61:55:ed:75:dc:44:8e:ad:c3:27:9d:
                    8f:9b:d8:fe:09:fe:99:66:c7:3d:46:d1:cb:b7:d8:
                    9d:0c:ff:26:fd:43:6f:67:6c:4d:55:d1:1c:3d:dd:
                    7b:93:de:7b:1b:94:83:a9:4d:82:d3:63:f9:f8:ce:
                    e0:fc:25:d1:59:c3:03:40:1b:6d:0e:60:85:6f:e5:
                    0c:f8:08:7d:03:16:16:4c:5e:03:7b:42:40:96:94:
                    18:bc:fd:70:c0:25:15:4f:cf:f3:d1:3e:35:e6:02:
                    7a:b2:e3:89:d1:b7:87:94:f2:0d:18:00:3d:9b:77:
                    df:26:3b:0f:64:c4:3a:7a:fb:d8:6a:e8:57:1c:b0:
                    43:c1:4b:eb:ac:59:57:6a:2f:13:9d:e5:11:0d:8a:
                    3c:c5:19:da:bd:a7:0c:62:bb:cd:c4:92:1c:ba:5e:
                    0a:38:5f:db:00:0c:3f:03:88:85:9a:34:a1:49:7f:
                    dd:a2:8f:9d:5d:6d:38:35:79:a6:48:e8:d8:fa:8d:
                    58:5b:d8:d0:f7:4d:92:e0:0e:0e:29:98:f5:38:90:
                    19:f8:30:25:70:c7:34:4a:17:9a:55:c5:d1:04:bc:
                    87:a3:2d:d7:30:e0:be:28:29:78:6c:09:41:75:c6:
                    f1:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:07:A2:E6:8C:9D:80:02:95:10:38:F5:2E:A8:4E:26:AC:50:C6:62
            X509v3 Authority Key Identifier:
                keyid:C2:2E:D6:CE:8F:B6:C7:9D:AD:D7:65:83:A5:EA:2D:3A:BB:9A:43:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wi7Wzo-2x52t12WDpeotOruaQy8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/173035-88ba-4452-903d-4ba85efdb266/1/wi7Wzo-2x52t12WDpeotOruaQy8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/173035-88ba-4452-903d-4ba85efdb266/1/wi7Wzo-2x52t12WDpeotOruaQy8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:2a:5b:50:6d:2c:51:4b:c0:3d:81:f0:f4:ba:93:0d:89:9a:
         f8:08:a8:ca:34:3c:be:14:16:a1:0b:77:3f:28:55:8c:da:5c:
         e8:14:88:ca:77:19:bc:d6:ef:25:d4:e1:b3:a7:c3:d7:76:6d:
         16:31:fb:e8:33:2c:84:92:20:a8:3f:dd:13:1b:99:0f:bc:bc:
         b1:47:7e:03:7c:0e:30:fa:96:da:41:4e:bb:89:e8:eb:01:18:
         4a:3d:4c:85:cd:d3:22:03:6f:31:e6:51:3f:87:77:7b:52:06:
         1a:07:99:db:de:6e:93:ba:99:0c:f2:de:12:93:bc:b3:eb:b0:
         6f:20:f5:90:28:ed:ed:22:a8:fe:1a:0f:26:ac:d9:3b:e0:86:
         b1:d5:a3:14:8f:ab:5c:10:8f:71:ad:17:a0:a9:18:db:8b:2d:
         52:36:84:6b:9f:6e:f3:00:28:ef:dc:51:9b:e3:20:de:32:55:
         9a:57:75:82:00:a8:99:50:5d:d5:b0:22:88:76:dc:88:18:e7:
         98:e5:e5:06:80:b3:c4:19:c6:34:95:56:a2:f7:d7:ab:fe:ff:
         49:e5:b9:cc:23:fd:0f:f7:1c:a3:a2:79:70:af:43:6a:ac:b3:
         c8:55:4e:b9:25:01:c5:3f:91:75:c8:e7:04:52:f3:fc:7b:b5:
         7c:f3:20:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:32:52 2025 by rpki-client