Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/491a89-5850-40b6-85f4-1546bb6d36bb/1/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.mft
File:                     wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.mft (raw, json)
Hash identifier:          2EBc/NpMYPvwPmItUtkgbuAVZM4gZfbTLTCsoCR/z2M=
Subject key identifier:   33:9A:8E:53:18:22:29:8C:32:30:E4:24:2C:EA:1E:7E:0C:B4:2A:EB
Authority key identifier: C1:37:F6:38:C0:BE:46:00:B4:66:DE:8E:33:0D:4C:F6:A7:FF:3B:3E
Certificate issuer:       /CN=c137f638c0be4600b466de8e330d4cf6a7ff3b3e
Certificate serial:       01974E580C6B537893506D2900A7451409EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/491a89-5850-40b6-85f4-1546bb6d36bb/1/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.mft
Manifest number:          136F
Signing time:             Sun 08 Jun 2025 07:01:22 +0000
Manifest this update:     Sun 08 Jun 2025 07:01:22 +0000
Manifest next update:     Mon 09 Jun 2025 07:01:22 +0000
Files and hashes:         1: wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.crl (hash: zPpkqlrileyB2LjR5JHvxi9pnHARzSAMTvsrSIwGHUA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/491a89-5850-40b6-85f4-1546bb6d36bb/1/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/491a89-5850-40b6-85f4-1546bb6d36bb/1/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4e:58:0c:6b:53:78:93:50:6d:29:00:a7:45:14:09:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c137f638c0be4600b466de8e330d4cf6a7ff3b3e
        Validity
            Not Before: Jun  8 07:01:22 2025 GMT
            Not After : Jun  9 07:01:22 2025 GMT
        Subject: CN=339a8e531822298c3230e4242cea1e7e0cb42aeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:7f:76:0d:9e:e4:8c:63:e7:db:a9:e3:a2:87:
                    15:bb:eb:53:b4:af:d4:1c:10:75:fe:14:45:96:40:
                    f2:c4:02:3e:3a:bb:53:31:f2:b0:89:b2:4c:86:60:
                    e9:39:c3:f8:84:e7:e4:12:f3:45:c1:8f:1f:74:96:
                    72:a4:cb:4d:c2:0f:64:74:a8:9c:fb:96:74:00:3f:
                    30:a1:d4:fb:94:31:1c:8b:ba:cc:99:8b:b8:31:47:
                    f2:cf:47:28:3a:4b:ca:50:fb:a5:4a:0f:d4:39:37:
                    ac:d4:68:6c:bd:ad:15:bd:35:7c:01:82:88:f6:69:
                    46:44:2b:32:61:67:6a:aa:c7:c9:3e:62:3c:0a:ae:
                    21:11:c6:22:70:96:2b:85:73:d3:f4:51:f5:22:68:
                    27:1c:23:c0:ad:78:a9:ad:97:aa:cc:cf:80:22:81:
                    a1:64:34:6c:2e:10:72:51:69:7f:a3:22:89:54:38:
                    3a:07:fb:25:94:13:8c:87:47:c4:d4:b8:32:a5:df:
                    ea:82:61:64:35:19:d8:5c:42:e4:ad:ef:05:21:53:
                    23:91:2f:6f:f2:90:6e:39:38:07:43:a6:46:e5:f5:
                    9d:76:b9:c5:85:18:da:85:46:9c:75:7b:06:5c:c5:
                    20:ac:a8:c2:e4:bf:d7:56:27:6d:ef:ac:c0:0c:32:
                    8f:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:9A:8E:53:18:22:29:8C:32:30:E4:24:2C:EA:1E:7E:0C:B4:2A:EB
            X509v3 Authority Key Identifier:
                keyid:C1:37:F6:38:C0:BE:46:00:B4:66:DE:8E:33:0D:4C:F6:A7:FF:3B:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/491a89-5850-40b6-85f4-1546bb6d36bb/1/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/491a89-5850-40b6-85f4-1546bb6d36bb/1/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:f9:26:d4:42:ac:a8:24:a7:52:45:06:a3:2c:03:e5:71:5c:
         d2:66:81:1d:8a:e1:96:0c:db:6c:f8:5e:e9:1b:8c:c7:78:fe:
         e8:18:0e:a5:16:4a:4d:76:0c:87:c4:9b:3c:55:79:30:ea:10:
         50:98:fc:09:6a:13:36:98:59:63:1d:5a:f0:3e:6c:28:6e:f8:
         27:df:40:e0:4f:24:1f:67:ef:87:a5:e9:2b:b8:0e:b9:0e:54:
         2c:6d:72:46:3d:3b:d4:a9:0a:1f:9a:91:51:55:74:5f:37:7d:
         8a:5b:25:27:3b:70:ff:20:c8:cf:05:ca:c1:b3:c4:fa:e6:3c:
         2d:b9:e8:3a:aa:a8:dd:c1:f9:70:59:53:86:3c:c0:bd:c7:9f:
         d7:ed:e0:c3:48:33:97:59:a9:e8:d7:9d:bd:75:e6:04:7c:58:
         7e:a2:83:6f:6e:78:8e:48:75:27:1b:d1:bb:71:ac:29:8d:59:
         9a:7c:25:68:09:42:e6:50:f9:ea:eb:46:18:8a:d6:ed:bc:c4:
         b4:2c:63:43:21:7d:78:7f:1f:1d:d6:13:c4:fa:9b:6c:20:be:
         ec:c1:a1:55:bb:46:eb:ba:34:57:ef:6a:a7:5f:56:c5:58:42:
         9e:21:99:67:58:33:ca:1b:38:23:2a:24:d6:cc:d1:70:43:ba:
         5c:b7:7d:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:17:12 2025 by rpki-client