Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/5a0095-5f5e-4ee6-ac02-1655aca78cf2/1/wXVIbzm_JeEU_XKI4Nu2v8fd8cY.mft
File:                     wXVIbzm_JeEU_XKI4Nu2v8fd8cY.mft (raw, json)
Hash identifier:          eVdQ5MlMSz+HMddIDL+nzgmxmwOTtMF37k8VkRjyaJY=
Subject key identifier:   EC:AB:99:1A:3E:A9:D4:C3:E7:08:EB:D5:AF:70:5B:64:E7:7D:DB:8D
Authority key identifier: C1:75:48:6F:39:BF:25:E1:14:FD:72:88:E0:DB:B6:BF:C7:DD:F1:C6
Certificate issuer:       /CN=c175486f39bf25e114fd7288e0dbb6bfc7ddf1c6
Certificate serial:       0198820C0E3F4404B18EB68939BCB1174BA6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wXVIbzm_JeEU_XKI4Nu2v8fd8cY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/5a0095-5f5e-4ee6-ac02-1655aca78cf2/1/wXVIbzm_JeEU_XKI4Nu2v8fd8cY.mft
Manifest number:          10D4
Signing time:             Thu 07 Aug 2025 01:01:24 +0000
Manifest this update:     Thu 07 Aug 2025 01:01:24 +0000
Manifest next update:     Fri 08 Aug 2025 01:01:24 +0000
Files and hashes:         1: wXVIbzm_JeEU_XKI4Nu2v8fd8cY.crl (hash: zyzN8J2WBD3SM6yezexyQoWWefhHcQda8uhURzexVSg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/5a0095-5f5e-4ee6-ac02-1655aca78cf2/1/wXVIbzm_JeEU_XKI4Nu2v8fd8cY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/5a0095-5f5e-4ee6-ac02-1655aca78cf2/1/wXVIbzm_JeEU_XKI4Nu2v8fd8cY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wXVIbzm_JeEU_XKI4Nu2v8fd8cY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:46:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:82:0c:0e:3f:44:04:b1:8e:b6:89:39:bc:b1:17:4b:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c175486f39bf25e114fd7288e0dbb6bfc7ddf1c6
        Validity
            Not Before: Aug  7 01:01:24 2025 GMT
            Not After : Aug  8 01:01:24 2025 GMT
        Subject: CN=ecab991a3ea9d4c3e708ebd5af705b64e77ddb8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:2c:a0:44:e1:b5:32:36:30:93:08:8a:db:be:
                    24:35:14:78:4c:77:91:e4:52:51:b7:8d:8f:94:21:
                    cf:a8:aa:1e:26:00:74:94:bc:67:7d:d5:51:96:cf:
                    0f:fa:c1:af:1d:aa:a3:66:1b:1d:2a:4b:cc:90:02:
                    8e:b6:d8:17:f0:ed:b9:14:90:4d:75:fa:4f:57:08:
                    d9:3a:2d:ae:05:2b:67:a4:82:21:81:75:ed:5b:75:
                    d8:51:d1:9b:89:9c:dd:af:11:fb:f5:82:81:46:42:
                    52:3f:c2:6a:5b:19:02:21:78:bc:7e:5e:df:e4:fa:
                    a4:b9:90:1a:cd:e4:74:e0:7d:1b:8b:c0:2d:90:ae:
                    a2:f9:1a:27:f7:bd:c5:59:1e:7b:28:87:99:60:08:
                    6b:8b:79:a3:c9:d7:0b:e5:db:4b:2c:32:02:6d:ae:
                    08:f8:e1:88:11:fd:64:43:79:e5:ef:0a:10:92:f3:
                    e6:97:88:d4:e4:f3:3b:ba:c1:14:d3:32:3e:03:cd:
                    13:7f:2b:1c:ad:a1:8b:7b:56:83:b8:39:df:b7:de:
                    8a:96:e3:81:ba:8e:b0:0f:53:ad:a7:e0:0d:44:0c:
                    90:bd:41:f7:56:d7:7c:e0:df:5d:74:d8:6c:5f:2a:
                    b0:30:b7:e0:80:33:1a:1b:6a:ca:a7:29:3d:e5:81:
                    95:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:AB:99:1A:3E:A9:D4:C3:E7:08:EB:D5:AF:70:5B:64:E7:7D:DB:8D
            X509v3 Authority Key Identifier:
                keyid:C1:75:48:6F:39:BF:25:E1:14:FD:72:88:E0:DB:B6:BF:C7:DD:F1:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wXVIbzm_JeEU_XKI4Nu2v8fd8cY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/5a0095-5f5e-4ee6-ac02-1655aca78cf2/1/wXVIbzm_JeEU_XKI4Nu2v8fd8cY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/5a0095-5f5e-4ee6-ac02-1655aca78cf2/1/wXVIbzm_JeEU_XKI4Nu2v8fd8cY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:60:ab:28:28:d3:3c:f3:0a:ff:c0:eb:97:d4:00:27:fd:a0:
         f4:a5:db:f9:39:49:0c:3f:50:5f:de:4c:eb:cf:f8:5a:f9:2d:
         4a:3a:ed:61:ab:1d:57:c6:71:63:34:e5:75:cc:4f:0a:ac:64:
         18:1d:1f:9e:46:07:e9:11:78:6f:35:c0:b9:e2:ca:0c:82:b3:
         e4:80:2d:73:ff:cb:00:ef:31:27:f6:69:82:e5:dc:a4:26:fc:
         f9:97:df:b2:7a:fa:73:16:a9:d4:eb:57:67:da:b1:0c:74:35:
         2c:04:cb:e5:fd:b9:ff:ee:f4:c5:be:79:55:b3:86:55:01:a2:
         cd:81:d4:34:a6:61:6f:92:77:22:b3:c8:ab:c8:db:e7:2e:31:
         a8:66:3e:5e:d1:b8:7c:23:26:04:5c:4a:2f:f1:6a:15:99:7c:
         9a:ec:b6:52:3d:28:f5:c5:f6:d5:a6:27:c7:6a:2c:df:24:be:
         a2:77:3f:48:f3:c6:60:d3:e7:4a:62:1a:3f:dc:1a:8a:ea:09:
         2e:d9:6b:df:a4:91:50:83:71:7f:5c:90:0a:e2:84:66:4d:86:
         1a:e2:7e:b2:11:8a:44:ff:a3:9f:db:ad:87:bf:f5:4a:71:2e:
         b5:b2:23:39:cf:b6:0e:a3:48:43:bc:2b:7c:7a:f0:7a:cb:c6:
         8c:75:46:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:29:12 2025 by rpki-client