Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/5a0095-5f5e-4ee6-ac02-1655aca78cf2/1/wXVIbzm_JeEU_XKI4Nu2v8fd8cY.mft
File:                     wXVIbzm_JeEU_XKI4Nu2v8fd8cY.mft (raw, json)
Hash identifier:          TX0Hbc1LILdYllw+GesDio/6X58NG77GW7RKEsfjANM=
Subject key identifier:   B2:D6:EE:C9:F3:82:9D:98:E7:2D:03:D7:FA:9E:8F:86:17:81:DE:3E
Authority key identifier: C1:75:48:6F:39:BF:25:E1:14:FD:72:88:E0:DB:B6:BF:C7:DD:F1:C6
Certificate issuer:       /CN=c175486f39bf25e114fd7288e0dbb6bfc7ddf1c6
Certificate serial:       0197797909DFCFAB0BAC8AEBFA06CE87F2F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wXVIbzm_JeEU_XKI4Nu2v8fd8cY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/5a0095-5f5e-4ee6-ac02-1655aca78cf2/1/wXVIbzm_JeEU_XKI4Nu2v8fd8cY.mft
Manifest number:          104B
Signing time:             Mon 16 Jun 2025 16:01:04 +0000
Manifest this update:     Mon 16 Jun 2025 16:01:04 +0000
Manifest next update:     Tue 17 Jun 2025 16:01:04 +0000
Files and hashes:         1: wXVIbzm_JeEU_XKI4Nu2v8fd8cY.crl (hash: /zjKTNxD/6qDbIVdU4LfGLgFNogFq3nsfyUDFgmLTdI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/5a0095-5f5e-4ee6-ac02-1655aca78cf2/1/wXVIbzm_JeEU_XKI4Nu2v8fd8cY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/5a0095-5f5e-4ee6-ac02-1655aca78cf2/1/wXVIbzm_JeEU_XKI4Nu2v8fd8cY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wXVIbzm_JeEU_XKI4Nu2v8fd8cY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:25:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:79:79:09:df:cf:ab:0b:ac:8a:eb:fa:06:ce:87:f2:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c175486f39bf25e114fd7288e0dbb6bfc7ddf1c6
        Validity
            Not Before: Jun 16 16:01:04 2025 GMT
            Not After : Jun 17 16:01:04 2025 GMT
        Subject: CN=b2d6eec9f3829d98e72d03d7fa9e8f861781de3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:d3:fc:38:68:25:51:78:81:c0:d6:14:3b:52:
                    89:a5:ba:c2:7c:cd:2e:df:42:f0:a0:2c:5d:96:fb:
                    bb:43:ad:e2:81:30:41:47:9b:84:28:6d:47:2f:33:
                    ac:73:e0:f5:a8:23:4d:57:69:ca:5b:41:71:1e:71:
                    2f:17:c2:0e:55:6c:50:55:bb:7b:6c:7c:46:3c:59:
                    3a:61:da:41:c5:24:7f:0c:84:8d:35:98:71:72:db:
                    ce:ad:22:32:28:68:f4:bf:90:c3:77:54:a3:97:e9:
                    e6:e2:98:34:f4:d4:ce:86:97:f1:02:27:1b:9b:a8:
                    b2:85:77:a9:ac:15:e8:d8:8d:1d:53:aa:60:ec:01:
                    49:66:d4:31:54:8b:63:81:6a:55:01:5b:0b:b7:5f:
                    d0:44:63:a6:ca:ff:60:d3:37:b6:9f:d9:c2:dd:d2:
                    25:24:72:32:cf:32:8d:45:fe:48:0b:3c:a2:49:76:
                    99:53:59:bb:d1:69:e9:49:94:1f:9b:ea:8f:70:2a:
                    bc:8a:52:60:59:80:58:04:da:e4:5e:e1:31:68:86:
                    88:c5:0d:e2:99:c6:3f:fb:40:ec:50:27:32:d6:a0:
                    40:cc:1a:6e:aa:c4:80:4f:11:81:e4:51:31:2f:6f:
                    40:97:3d:ea:31:4a:90:39:cb:47:71:f5:b0:b5:f9:
                    ee:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:D6:EE:C9:F3:82:9D:98:E7:2D:03:D7:FA:9E:8F:86:17:81:DE:3E
            X509v3 Authority Key Identifier:
                keyid:C1:75:48:6F:39:BF:25:E1:14:FD:72:88:E0:DB:B6:BF:C7:DD:F1:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wXVIbzm_JeEU_XKI4Nu2v8fd8cY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/5a0095-5f5e-4ee6-ac02-1655aca78cf2/1/wXVIbzm_JeEU_XKI4Nu2v8fd8cY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/5a0095-5f5e-4ee6-ac02-1655aca78cf2/1/wXVIbzm_JeEU_XKI4Nu2v8fd8cY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:b8:d8:e5:13:ee:26:51:f5:ea:76:e0:95:95:bd:f9:1c:b0:
         8a:48:b2:20:b7:fc:09:1b:50:ef:05:81:6b:59:2e:d6:5d:2b:
         1a:10:f7:a9:1c:fd:1b:ce:90:d5:fe:03:46:d7:3c:af:6c:dc:
         a7:ac:c9:2f:d4:2c:8d:fc:98:4b:a1:7e:b4:64:42:5b:95:54:
         bd:d8:28:db:a1:d9:2f:f0:53:13:94:ef:c1:73:73:99:6f:a2:
         38:17:76:04:57:2e:d1:5b:76:8e:9c:76:3a:e5:45:b7:cf:8c:
         78:df:be:01:33:e6:28:ca:49:11:73:c5:fe:6c:cf:5b:c8:6d:
         d0:4f:87:fa:29:50:c8:8b:bc:b0:2c:e0:10:94:a6:46:a7:7b:
         51:8c:2f:3f:cc:ae:78:e4:1e:97:c4:ce:9c:c2:8d:f3:0b:78:
         65:75:84:df:23:58:c8:7d:c1:76:8b:7b:90:dc:b8:f4:68:bb:
         54:28:25:88:81:8e:ab:c3:1e:fa:4e:0b:49:1a:b2:6b:4b:7d:
         15:3a:69:ac:b9:0d:53:03:39:19:4c:a9:a4:e9:29:32:9f:f3:
         9f:c3:fd:7a:ea:39:13:47:48:77:00:2d:b6:d8:c3:73:fa:cd:
         c4:86:00:6b:9d:ef:7b:d9:48:c8:0d:4e:93:34:b8:1e:ae:b4:
         f6:2f:11:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 22:02:45 2025 by rpki-client