Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/b3afc9-41f0-4667-b919-55e70209be32/1/WwQLOc2ZSQn1UEENxHlFu1tJUvk.mft
File:                     WwQLOc2ZSQn1UEENxHlFu1tJUvk.mft (raw, json)
Hash identifier:          6m5spxEKLh4Wx9j+LI/kHlB59ToYzETSkDIFtd79efw=
Subject key identifier:   46:84:E9:F4:2A:BC:F6:09:1D:7C:70:F7:8E:C5:96:21:01:2A:DB:CC
Authority key identifier: 5B:04:0B:39:CD:99:49:09:F5:50:41:0D:C4:79:45:BB:5B:49:52:F9
Certificate issuer:       /CN=5b040b39cd994909f550410dc47945bb5b4952f9
Certificate serial:       019873E3240FC7D8500337DD8891FC0C98BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WwQLOc2ZSQn1UEENxHlFu1tJUvk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/b3afc9-41f0-4667-b919-55e70209be32/1/WwQLOc2ZSQn1UEENxHlFu1tJUvk.mft
Manifest number:          1613
Signing time:             Mon 04 Aug 2025 07:02:02 +0000
Manifest this update:     Mon 04 Aug 2025 07:02:02 +0000
Manifest next update:     Tue 05 Aug 2025 07:02:02 +0000
Files and hashes:         1: WwQLOc2ZSQn1UEENxHlFu1tJUvk.crl (hash: 2KTjaqbbNz+PunmGdyYYAz2pBU2HMTE5/7x+eydNWQU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/b3afc9-41f0-4667-b919-55e70209be32/1/WwQLOc2ZSQn1UEENxHlFu1tJUvk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/b3afc9-41f0-4667-b919-55e70209be32/1/WwQLOc2ZSQn1UEENxHlFu1tJUvk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WwQLOc2ZSQn1UEENxHlFu1tJUvk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 03:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:73:e3:24:0f:c7:d8:50:03:37:dd:88:91:fc:0c:98:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b040b39cd994909f550410dc47945bb5b4952f9
        Validity
            Not Before: Aug  4 07:02:02 2025 GMT
            Not After : Aug  5 07:02:02 2025 GMT
        Subject: CN=4684e9f42abcf6091d7c70f78ec59621012adbcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:23:c1:24:35:a8:28:f6:b4:2f:a3:eb:73:09:
                    5d:fc:a7:79:b7:9d:10:90:c8:25:af:4f:60:90:59:
                    a6:e4:b3:50:74:78:9d:9c:cc:11:ca:80:d5:61:39:
                    69:5d:72:91:b6:0a:c6:64:b8:68:27:70:98:bf:dc:
                    99:7b:f4:44:c1:ba:c9:84:8b:1f:e2:57:36:af:f5:
                    03:16:78:99:4e:e6:2c:8a:35:f1:8c:ae:9b:40:47:
                    a6:6d:ed:07:38:2b:c0:08:fc:80:22:53:de:e7:ff:
                    7b:47:0f:d6:92:e7:6c:50:8c:3f:79:e1:40:2e:4f:
                    d4:03:3a:c4:c6:f8:b4:89:e7:73:ee:fe:97:b4:04:
                    bc:b4:39:e7:36:dc:b0:2f:41:f3:5a:8d:47:b6:9e:
                    22:33:4a:b9:b6:1e:2b:be:52:af:1d:7c:40:82:ed:
                    59:30:3b:c8:43:4c:23:a7:ed:75:2f:3b:a5:02:23:
                    39:92:36:15:a3:98:5f:63:d2:a9:a2:69:08:28:69:
                    d0:0b:e9:6b:1a:d0:1f:9d:37:a5:18:88:d2:fa:24:
                    00:88:91:6b:a6:eb:21:ff:1a:06:77:b6:55:76:19:
                    62:9f:0e:a7:82:8f:77:7d:bd:ae:dc:bb:a9:ee:90:
                    13:ba:0f:ac:51:d8:f9:dd:9e:d3:20:b7:fa:06:08:
                    18:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:84:E9:F4:2A:BC:F6:09:1D:7C:70:F7:8E:C5:96:21:01:2A:DB:CC
            X509v3 Authority Key Identifier:
                keyid:5B:04:0B:39:CD:99:49:09:F5:50:41:0D:C4:79:45:BB:5B:49:52:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WwQLOc2ZSQn1UEENxHlFu1tJUvk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b3afc9-41f0-4667-b919-55e70209be32/1/WwQLOc2ZSQn1UEENxHlFu1tJUvk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/b3afc9-41f0-4667-b919-55e70209be32/1/WwQLOc2ZSQn1UEENxHlFu1tJUvk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:66:13:da:07:8f:54:42:c2:cb:27:26:23:29:c5:e1:bd:ec:
         ec:06:ff:fa:83:52:ce:94:ed:5c:eb:45:f1:ef:dd:9d:9d:1e:
         04:5c:14:2d:c2:1a:73:67:ac:70:bc:5b:f9:00:13:34:93:77:
         f1:f2:9e:32:e8:ec:7c:3b:4f:c2:6e:d9:31:88:11:68:68:ab:
         32:a6:b4:c7:ef:17:7f:97:86:05:3e:d4:c8:5d:1a:5b:3f:2d:
         4d:66:c0:d1:59:4e:06:f2:b0:39:76:78:ed:3c:6f:76:3d:e4:
         fb:b8:0d:51:f9:4c:83:b7:b3:c1:2d:0b:65:6d:b4:17:dc:63:
         36:1a:1b:ef:be:3f:46:94:01:59:41:04:b3:92:45:d5:a4:83:
         a3:45:ef:78:68:e4:a7:86:7c:26:0b:c2:fd:23:cc:c7:f6:ad:
         2b:92:93:8e:67:d9:a8:5d:7b:d7:63:ec:22:b2:bf:61:40:42:
         15:cc:fa:65:c1:29:89:47:80:0d:9e:d2:bc:6c:31:4d:c3:9e:
         ad:a6:9e:49:39:c4:18:0a:0c:ed:92:3a:33:b0:9c:5a:2e:bc:
         a1:a3:0c:d0:e9:b3:3a:19:f1:15:35:5c:98:6b:64:a9:7f:bf:
         33:46:45:35:33:9b:a6:f0:4b:96:13:ff:4a:03:12:81:80:29:
         17:3d:aa:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:25:12 2025 by rpki-client