Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/f35424-944f-4064-afc0-1123cc9ddccc/1/wWz7mmhJxB5fEXBbj9cWCF1chUk.mft
File:                     wWz7mmhJxB5fEXBbj9cWCF1chUk.mft (raw, json)
Hash identifier:          ld5b2gitujI3DjS6fxb6OwIUWJriprvtM0ZfT/I6vrk=
Subject key identifier:   DB:3B:7D:20:77:18:0B:A4:E5:F9:33:E1:1D:58:F4:EC:D4:5C:11:74
Authority key identifier: C1:6C:FB:9A:68:49:C4:1E:5F:11:70:5B:8F:D7:16:08:5D:5C:85:49
Certificate issuer:       /CN=c16cfb9a6849c41e5f11705b8fd716085d5c8549
Certificate serial:       01974BFB265C1332149D7C2E677E4448007A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wWz7mmhJxB5fEXBbj9cWCF1chUk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/f35424-944f-4064-afc0-1123cc9ddccc/1/wWz7mmhJxB5fEXBbj9cWCF1chUk.mft
Manifest number:          045A
Signing time:             Sat 07 Jun 2025 20:00:39 +0000
Manifest this update:     Sat 07 Jun 2025 20:00:39 +0000
Manifest next update:     Sun 08 Jun 2025 20:00:39 +0000
Files and hashes:         1: wWz7mmhJxB5fEXBbj9cWCF1chUk.crl (hash: SydPzhg92wCoAM9IHtBze+21CFIPEqvQAh9evoVC3cM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/f35424-944f-4064-afc0-1123cc9ddccc/1/wWz7mmhJxB5fEXBbj9cWCF1chUk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/f35424-944f-4064-afc0-1123cc9ddccc/1/wWz7mmhJxB5fEXBbj9cWCF1chUk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wWz7mmhJxB5fEXBbj9cWCF1chUk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 18:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:fb:26:5c:13:32:14:9d:7c:2e:67:7e:44:48:00:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c16cfb9a6849c41e5f11705b8fd716085d5c8549
        Validity
            Not Before: Jun  7 20:00:39 2025 GMT
            Not After : Jun  8 20:00:39 2025 GMT
        Subject: CN=db3b7d2077180ba4e5f933e11d58f4ecd45c1174
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:49:b5:69:5b:63:77:2d:8e:a0:3c:58:17:55:
                    2e:43:4f:bc:f0:1e:cf:00:12:1c:e1:f7:18:4e:c3:
                    1f:cc:09:bf:2c:53:24:5d:83:4c:6c:a3:9a:20:0b:
                    c7:8b:2c:f8:b7:f4:45:c3:39:44:59:38:a5:6f:63:
                    11:24:d9:76:93:e3:1a:60:94:a5:37:9a:a9:47:e0:
                    a7:74:b1:a9:06:c6:96:e0:84:85:79:57:00:49:c4:
                    22:25:e4:aa:c8:54:b9:57:6a:47:9c:48:7b:b2:63:
                    85:09:ee:cd:a9:a1:68:2e:1b:e6:8f:04:90:6b:12:
                    5b:fc:ed:65:46:c5:92:cf:78:63:cb:9f:d8:7c:d7:
                    50:7c:06:7a:4a:76:cf:4c:d2:08:a0:25:c6:08:be:
                    43:c1:39:60:3c:15:6e:72:3f:dd:b3:3a:ae:2d:be:
                    6d:00:a1:00:cb:df:c3:93:bc:11:0b:86:83:de:67:
                    c7:35:0c:ed:b0:e2:1b:45:3a:df:6c:c4:8b:59:6c:
                    2a:7d:8c:2b:ab:31:6e:73:f5:e2:9d:28:01:4b:5a:
                    92:f5:26:76:e6:8d:fb:19:03:53:24:56:6e:19:30:
                    aa:b1:94:ac:af:9f:03:18:fc:17:9c:90:04:7c:46:
                    9d:0b:bb:42:e9:0d:9d:75:b1:bd:eb:0a:e4:06:bb:
                    0e:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:3B:7D:20:77:18:0B:A4:E5:F9:33:E1:1D:58:F4:EC:D4:5C:11:74
            X509v3 Authority Key Identifier:
                keyid:C1:6C:FB:9A:68:49:C4:1E:5F:11:70:5B:8F:D7:16:08:5D:5C:85:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wWz7mmhJxB5fEXBbj9cWCF1chUk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f35424-944f-4064-afc0-1123cc9ddccc/1/wWz7mmhJxB5fEXBbj9cWCF1chUk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f35424-944f-4064-afc0-1123cc9ddccc/1/wWz7mmhJxB5fEXBbj9cWCF1chUk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:af:e5:94:99:62:36:fe:ed:77:65:24:ca:39:59:1b:cc:b4:
         9a:d6:74:5b:8c:b7:31:f7:72:12:b4:fd:fb:cd:97:af:9f:43:
         f0:67:9f:9b:61:bd:92:9a:3f:5a:aa:70:d0:fa:9c:ae:1e:df:
         62:ee:17:62:89:bd:ca:3e:06:cb:97:0e:46:96:e3:95:ba:68:
         14:69:13:4f:0d:08:fb:2f:ac:20:60:97:99:4c:e7:e4:05:91:
         da:5c:3f:c1:77:50:54:82:ab:8a:a1:24:8a:ba:05:6e:ea:77:
         f8:8e:80:91:58:5c:1c:db:49:97:44:df:b5:2d:cb:36:49:b2:
         33:97:64:05:09:d6:0b:d6:39:39:3a:55:b6:d3:71:05:29:ce:
         85:65:d3:cc:01:a3:23:df:19:e0:7c:57:35:69:7c:9a:ba:38:
         c8:93:ff:61:fc:40:48:60:e7:a5:f6:e2:45:ff:56:27:b2:c0:
         97:1b:5c:60:77:b2:1f:13:9e:88:8c:2e:d2:76:00:71:ac:09:
         07:f0:ca:57:a9:ac:7b:36:50:13:01:9d:47:a9:c0:d6:d7:9f:
         6d:30:1d:a5:4c:26:ab:64:bd:da:ce:11:2a:a3:8d:10:dd:10:
         a7:a1:24:57:88:9c:c9:a0:81:a8:60:f6:d2:2b:e3:c8:96:ac:
         36:91:a9:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:24:32 2025 by rpki-client