Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/63db93-6077-4953-a6d1-3bfa583e77db/1/wwOJmXRU-gA-H_yM0ui35l2T9OI.mft
File:                     wwOJmXRU-gA-H_yM0ui35l2T9OI.mft (raw, json)
Hash identifier:          0IWoaLFOESeTNhkbEJlAkETWWj4+o20e3lG/z3XTTfI=
Subject key identifier:   A5:D4:52:65:CB:F6:35:B4:E5:79:CD:24:98:1E:58:14:BF:9B:D0:16
Authority key identifier: C3:03:89:99:74:54:FA:00:3E:1F:FC:8C:D2:E8:B7:E6:5D:93:F4:E2
Certificate issuer:       /CN=c30389997454fa003e1ffc8cd2e8b7e65d93f4e2
Certificate serial:       0195903DFFCE9565BBE2FDD69A3E4D072FF0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wwOJmXRU-gA-H_yM0ui35l2T9OI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/63db93-6077-4953-a6d1-3bfa583e77db/1/wwOJmXRU-gA-H_yM0ui35l2T9OI.mft
Manifest number:          08A4
Signing time:             Thu 13 Mar 2025 16:02:16 +0000
Manifest this update:     Thu 13 Mar 2025 16:02:16 +0000
Manifest next update:     Fri 14 Mar 2025 16:02:16 +0000
Files and hashes:         1: wwOJmXRU-gA-H_yM0ui35l2T9OI.crl (hash: Qp0f5Tfq0TB7/tUfe63An4bGZ25E/kmyUZzZA2R1mt4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/63db93-6077-4953-a6d1-3bfa583e77db/1/wwOJmXRU-gA-H_yM0ui35l2T9OI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/63db93-6077-4953-a6d1-3bfa583e77db/1/wwOJmXRU-gA-H_yM0ui35l2T9OI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wwOJmXRU-gA-H_yM0ui35l2T9OI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Mar 2025 15:28:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:90:3d:ff:ce:95:65:bb:e2:fd:d6:9a:3e:4d:07:2f:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c30389997454fa003e1ffc8cd2e8b7e65d93f4e2
        Validity
            Not Before: Mar 13 16:02:16 2025 GMT
            Not After : Mar 14 16:02:16 2025 GMT
        Subject: CN=a5d45265cbf635b4e579cd24981e5814bf9bd016
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:02:5b:a7:6f:0e:c1:0e:48:56:e2:32:23:ac:
                    0b:0a:68:a3:9b:67:a1:14:fb:0e:35:8a:1b:d1:55:
                    92:60:f7:f1:de:6f:70:cf:0b:78:58:ba:80:aa:d8:
                    53:f8:60:b8:24:f8:7c:5b:2d:e7:e9:e0:cd:f1:52:
                    1b:02:85:fe:ce:14:d2:89:06:2e:df:6e:43:50:b0:
                    c3:b0:8f:bf:55:fc:c8:c3:12:b6:a9:a4:ec:47:a1:
                    40:de:88:d4:fb:cd:9f:f2:bd:21:2f:0f:08:62:63:
                    a3:7f:81:69:47:c8:ef:17:27:90:8d:41:f6:b4:b0:
                    df:18:cc:da:5b:c2:3d:c8:bf:8e:4a:d0:45:9f:1c:
                    8c:75:35:00:e0:8a:67:0e:45:fb:fd:3f:c7:0f:ff:
                    b4:39:63:33:64:8a:86:8f:2a:1b:46:79:34:6c:80:
                    10:c4:d4:9d:c3:82:dc:32:71:75:57:cd:79:b2:b2:
                    57:a3:de:21:c5:bb:38:31:12:b9:8c:62:dd:fc:ce:
                    28:40:a9:c8:f0:0d:d8:f6:50:cc:e3:34:6e:68:d9:
                    d3:b8:e3:f2:84:29:c5:dc:bd:b7:c8:ea:4b:e9:91:
                    81:1d:b6:d3:5b:b3:ab:99:f3:3b:9d:43:d5:8a:e4:
                    d6:c2:8c:c3:3d:d7:5c:90:16:0a:af:d0:8f:40:1d:
                    90:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:D4:52:65:CB:F6:35:B4:E5:79:CD:24:98:1E:58:14:BF:9B:D0:16
            X509v3 Authority Key Identifier:
                keyid:C3:03:89:99:74:54:FA:00:3E:1F:FC:8C:D2:E8:B7:E6:5D:93:F4:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wwOJmXRU-gA-H_yM0ui35l2T9OI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/63db93-6077-4953-a6d1-3bfa583e77db/1/wwOJmXRU-gA-H_yM0ui35l2T9OI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/63db93-6077-4953-a6d1-3bfa583e77db/1/wwOJmXRU-gA-H_yM0ui35l2T9OI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:99:d2:14:cc:cc:13:27:7c:91:84:a7:08:a1:7b:b6:a8:99:
         bb:6f:26:a7:29:b4:85:63:d5:86:ba:86:4a:b0:53:ec:5f:b6:
         46:79:3c:5c:1b:04:85:a0:c0:d4:28:16:0f:4d:ae:7d:e6:d9:
         8d:8f:a5:71:7a:04:df:da:c7:a2:bf:0e:ad:17:0a:d1:3b:26:
         a7:4b:9f:2d:0c:62:a4:1e:f5:3d:a7:d0:1d:4e:6f:fe:3a:dd:
         3f:45:28:29:0b:34:a2:f8:a6:7c:25:40:03:97:4e:ab:e3:ff:
         0f:92:e8:d7:34:84:1e:c1:81:0f:7f:e9:7f:99:0d:6f:92:c3:
         48:b7:00:3d:73:13:16:bc:68:0d:d0:6f:b1:15:49:23:ae:9b:
         c2:fb:93:0e:0a:a3:ee:f2:9e:28:61:21:47:e1:25:10:5a:5f:
         f6:69:4e:c0:79:25:3e:ae:99:35:c5:e4:23:1a:be:38:d7:c3:
         4e:97:16:eb:26:7a:ea:f0:c6:45:7a:fd:92:dc:f9:dd:df:57:
         59:fe:36:bd:f2:a2:cf:60:56:99:90:02:87:ac:14:49:17:b2:
         ea:ff:ce:d9:52:7f:d3:4e:66:d3:71:45:42:51:00:b1:92:80:
         ad:1b:07:75:11:c5:cc:e9:75:74:ad:9f:ae:b6:b4:f2:fe:7d:
         ed:40:4a:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----