Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/9e388d-3990-4fd8-82b3-d775117af12f/1/w91X4yvXbbd77fxSETY8SAgPBgU.mft
File:                     w91X4yvXbbd77fxSETY8SAgPBgU.mft (raw, json)
Hash identifier:          WvwYDA/EFsyb7GGYbB58HfPmOZ+RYIFyFJXRk1kJv/0=
Subject key identifier:   4D:A5:1D:4E:EA:24:B8:A8:CD:34:28:F7:D0:9C:99:55:C9:96:CF:16
Authority key identifier: C3:DD:57:E3:2B:D7:6D:B7:7B:ED:FC:52:11:36:3C:48:08:0F:06:05
Certificate issuer:       /CN=c3dd57e32bd76db77bedfc5211363c48080f0605
Certificate serial:       019849D345DEF6D65B6F93770036180A9AE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w91X4yvXbbd77fxSETY8SAgPBgU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/9e388d-3990-4fd8-82b3-d775117af12f/1/w91X4yvXbbd77fxSETY8SAgPBgU.mft
Manifest number:          0C6C
Signing time:             Sun 27 Jul 2025 03:00:39 +0000
Manifest this update:     Sun 27 Jul 2025 03:00:39 +0000
Manifest next update:     Mon 28 Jul 2025 03:00:39 +0000
Files and hashes:         1: w91X4yvXbbd77fxSETY8SAgPBgU.crl (hash: P6fTbJt4JDA353edVZfrRjk+2+z4dz6h5MTWnRQiMKU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/9e388d-3990-4fd8-82b3-d775117af12f/1/w91X4yvXbbd77fxSETY8SAgPBgU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/9e388d-3990-4fd8-82b3-d775117af12f/1/w91X4yvXbbd77fxSETY8SAgPBgU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w91X4yvXbbd77fxSETY8SAgPBgU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Jul 2025 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:49:d3:45:de:f6:d6:5b:6f:93:77:00:36:18:0a:9a:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3dd57e32bd76db77bedfc5211363c48080f0605
        Validity
            Not Before: Jul 27 03:00:39 2025 GMT
            Not After : Jul 28 03:00:39 2025 GMT
        Subject: CN=4da51d4eea24b8a8cd3428f7d09c9955c996cf16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:2b:7b:5e:4c:22:9a:22:09:5f:62:09:28:81:
                    68:31:e5:70:dd:07:88:67:25:55:ed:12:6a:b3:8b:
                    98:17:96:4f:25:b8:dc:36:dc:53:1e:2d:61:76:f3:
                    be:7a:0f:2d:c5:73:9f:f0:2f:78:13:1d:d9:94:0b:
                    f6:94:25:c3:86:b4:01:57:94:38:be:d0:f9:30:11:
                    cd:4e:0a:c6:4f:90:d1:de:b5:40:bb:73:f1:e7:f6:
                    9a:d9:54:1e:87:c1:92:65:43:53:5b:e4:9b:ff:ae:
                    03:f1:3d:89:f6:21:ce:a2:b1:8a:03:26:2c:ca:3e:
                    83:e8:3d:25:ff:45:ed:ba:d1:06:c2:a5:60:25:27:
                    88:3d:43:f1:c3:d7:b7:7a:c8:1a:44:86:23:64:69:
                    06:cc:59:9a:e3:f2:e4:38:a4:39:ce:b3:08:f4:24:
                    d7:dc:2c:93:70:3e:76:b2:9a:17:6a:62:e7:8c:30:
                    f5:63:6e:59:23:3a:98:4c:f4:a2:96:bc:6c:b1:47:
                    a5:36:f3:b4:cf:10:4a:ef:07:67:79:09:52:9d:45:
                    c9:fa:80:b0:1b:08:c2:1b:32:fa:25:b3:c4:ca:06:
                    f4:d3:d6:a6:66:b5:2e:4e:ea:27:cb:0f:62:43:37:
                    b2:0f:40:b5:2c:4b:47:6e:03:6d:74:13:5d:f7:0f:
                    55:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:A5:1D:4E:EA:24:B8:A8:CD:34:28:F7:D0:9C:99:55:C9:96:CF:16
            X509v3 Authority Key Identifier:
                keyid:C3:DD:57:E3:2B:D7:6D:B7:7B:ED:FC:52:11:36:3C:48:08:0F:06:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w91X4yvXbbd77fxSETY8SAgPBgU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9e388d-3990-4fd8-82b3-d775117af12f/1/w91X4yvXbbd77fxSETY8SAgPBgU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9e388d-3990-4fd8-82b3-d775117af12f/1/w91X4yvXbbd77fxSETY8SAgPBgU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:88:48:91:89:7d:c5:0b:d3:e3:e5:ba:23:bb:52:6e:0a:78:
         6b:1c:f6:88:d9:29:b4:b0:1e:73:42:a1:ce:f0:69:38:43:e1:
         b9:1b:e4:7e:cb:bd:01:8a:07:90:a0:0a:89:ae:87:71:f5:69:
         33:3f:48:80:a3:63:56:59:36:3b:17:ca:6b:cd:8b:05:26:51:
         a1:b3:c3:db:50:07:7c:85:86:0c:8d:d6:c9:93:29:17:4e:c6:
         27:02:1d:dd:ad:f5:24:a8:72:63:3c:8e:14:10:70:d5:d0:46:
         2b:b8:e8:71:92:e0:ad:e9:fa:50:23:a9:56:a1:d8:77:19:94:
         22:99:2a:41:b5:3e:64:33:99:6f:ea:26:af:04:44:3e:2f:9f:
         50:85:84:54:0f:df:10:c0:26:ef:0d:0c:c9:46:a1:6a:fb:9a:
         d5:7b:e4:0a:1a:34:30:5a:d7:bd:b5:47:40:0e:5b:bf:7c:a8:
         bc:27:12:34:89:39:8d:0d:bc:57:e0:9c:d1:d8:e2:e7:72:d9:
         2e:e4:32:2c:bc:53:55:a4:eb:47:49:f4:a3:2d:f0:0e:32:5f:
         cd:cb:fc:1d:47:03:31:08:65:a7:92:c7:06:35:cd:bd:ff:30:
         cf:36:61:8e:8d:1d:73:73:8c:12:a6:2b:82:08:cb:6a:a9:01:
         bb:f3:4c:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:27:04 2025 by rpki-client