Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/3990c2-51be-4b87-af62-e0e099640eac/1/ws_pT97DCaxVMFrJDnw9Yo39QGo.mft
File:                     ws_pT97DCaxVMFrJDnw9Yo39QGo.mft (raw, json)
Hash identifier:          66p+oQ8q/ycRh9k+LpVZESpRYYiZwKiKfAEGjuhjB/4=
Subject key identifier:   53:A7:3B:59:E7:3B:DD:E4:14:71:F5:AD:F2:37:6E:E9:46:C5:1C:75
Authority key identifier: C2:CF:E9:4F:DE:C3:09:AC:55:30:5A:C9:0E:7C:3D:62:8D:FD:40:6A
Certificate issuer:       /CN=c2cfe94fdec309ac55305ac90e7c3d628dfd406a
Certificate serial:       019746D47BCD50CA45439A3CF78A54A70224
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ws_pT97DCaxVMFrJDnw9Yo39QGo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3d/3990c2-51be-4b87-af62-e0e099640eac/1/ws_pT97DCaxVMFrJDnw9Yo39QGo.mft
Manifest number:          FC
Signing time:             Fri 06 Jun 2025 20:00:19 +0000
Manifest this update:     Fri 06 Jun 2025 20:00:19 +0000
Manifest next update:     Sat 07 Jun 2025 20:00:19 +0000
Files and hashes:         1: ws_pT97DCaxVMFrJDnw9Yo39QGo.crl (hash: 2qt2i4kH3MWOalnudJeSP5EmlblA/F6yTGyKfpE422A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3d/3990c2-51be-4b87-af62-e0e099640eac/1/ws_pT97DCaxVMFrJDnw9Yo39QGo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3d/3990c2-51be-4b87-af62-e0e099640eac/1/ws_pT97DCaxVMFrJDnw9Yo39QGo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ws_pT97DCaxVMFrJDnw9Yo39QGo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:d4:7b:cd:50:ca:45:43:9a:3c:f7:8a:54:a7:02:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2cfe94fdec309ac55305ac90e7c3d628dfd406a
        Validity
            Not Before: Jun  6 20:00:19 2025 GMT
            Not After : Jun  7 20:00:19 2025 GMT
        Subject: CN=53a73b59e73bdde41471f5adf2376ee946c51c75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:fb:99:96:d7:69:e0:67:3f:53:67:16:c8:63:
                    29:e7:7b:06:5c:55:ac:55:22:1e:30:d2:3c:a8:92:
                    bc:95:35:12:cc:85:4b:ea:7b:a2:6e:7e:ce:c0:37:
                    85:36:5e:77:08:54:f6:e6:2b:5c:e4:f3:b4:a4:6f:
                    e6:97:2b:d1:af:28:3a:d8:11:80:bd:66:fb:30:5b:
                    1f:7f:e1:6c:14:0c:7c:4a:e7:0a:39:06:20:3a:7a:
                    23:e9:8a:93:59:d7:95:7c:5c:d2:30:4d:72:69:94:
                    b9:46:85:89:1e:f0:3f:b7:90:6a:35:9f:16:87:23:
                    b7:5e:96:41:4d:23:f6:c0:c2:94:70:16:06:65:18:
                    5b:ae:d3:0c:06:5e:c9:95:14:d2:9a:2a:53:27:5e:
                    a1:14:ff:2a:2f:ec:b9:51:6f:b3:60:df:36:22:39:
                    0b:8e:b7:10:d0:0d:f6:54:0a:1b:8a:68:58:da:80:
                    fa:e1:41:15:ff:a8:57:4e:f1:f7:0a:5f:66:31:ac:
                    a7:84:e9:02:aa:75:ec:ab:d6:ac:69:78:86:ae:5c:
                    b1:6d:59:ac:e8:fc:8a:c5:ab:60:21:da:56:10:ec:
                    b6:ab:7e:70:61:5f:65:d5:f8:1e:74:83:82:58:79:
                    0d:dc:8d:6c:c3:89:18:b6:f9:37:01:29:9c:99:b1:
                    8b:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:A7:3B:59:E7:3B:DD:E4:14:71:F5:AD:F2:37:6E:E9:46:C5:1C:75
            X509v3 Authority Key Identifier:
                keyid:C2:CF:E9:4F:DE:C3:09:AC:55:30:5A:C9:0E:7C:3D:62:8D:FD:40:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ws_pT97DCaxVMFrJDnw9Yo39QGo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3990c2-51be-4b87-af62-e0e099640eac/1/ws_pT97DCaxVMFrJDnw9Yo39QGo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/3990c2-51be-4b87-af62-e0e099640eac/1/ws_pT97DCaxVMFrJDnw9Yo39QGo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:50:5a:28:22:4e:7e:87:10:ee:2a:a3:00:f9:86:82:b6:7d:
         ff:2a:35:87:21:e7:ae:57:ef:58:7c:34:d0:0c:7d:9c:f0:75:
         14:e9:56:72:2a:45:0d:d9:24:01:3e:3c:bc:b5:cb:40:e9:e2:
         83:73:c4:89:dc:8a:6e:cd:c3:70:ae:43:e0:5f:07:e7:c8:84:
         eb:4a:77:4a:8e:46:e7:9c:6a:f0:ab:c6:8c:24:23:d4:70:32:
         d8:d6:1e:71:b3:32:11:c1:8b:a4:bd:d9:b0:33:42:03:44:d0:
         e3:42:19:2c:fa:82:40:91:6f:1f:a6:45:23:3d:2b:25:c3:e9:
         48:8d:7a:b1:b8:ee:c6:40:4a:48:de:d8:21:07:c2:87:1f:12:
         0d:15:f3:76:8f:cf:bf:3d:9e:e7:56:bc:1e:54:d3:f0:77:34:
         ea:c6:2c:49:0d:6f:eb:64:f5:dd:ee:17:bb:4f:73:2e:7b:d3:
         c7:73:48:de:35:38:b2:d0:37:75:64:f0:4b:52:78:d5:34:c9:
         93:7d:df:c6:76:58:a3:e7:c9:9f:7c:c1:21:9a:05:a5:e9:d1:
         54:4f:7a:ec:8b:67:ad:6d:d3:af:b0:5e:ab:e1:d7:e6:dc:5b:
         ba:56:e6:c8:c9:59:65:91:2b:e2:c6:6e:a8:e2:7c:16:12:a3:
         6a:68:43:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:10:24 2025 by rpki-client