Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/491a89-5850-40b6-85f4-1546bb6d36bb/1/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.mft
File:                     wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.mft (raw, json)
Hash identifier:          Q/9ah1DP3jB78bOJo8Jp07LmbIc/eYhRjNdN0mLsWLg=
Subject key identifier:   9B:47:F0:1A:8C:44:24:A4:E4:61:43:D2:D3:84:4D:E7:41:B5:52:35
Authority key identifier: C1:37:F6:38:C0:BE:46:00:B4:66:DE:8E:33:0D:4C:F6:A7:FF:3B:3E
Certificate issuer:       /CN=c137f638c0be4600b466de8e330d4cf6a7ff3b3e
Certificate serial:       01963E0BBF2CDE556DC59F74AACECF9D150F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/491a89-5850-40b6-85f4-1546bb6d36bb/1/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.mft
Manifest number:          12E2
Signing time:             Wed 16 Apr 2025 10:01:19 +0000
Manifest this update:     Wed 16 Apr 2025 10:01:19 +0000
Manifest next update:     Thu 17 Apr 2025 10:01:19 +0000
Files and hashes:         1: wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.crl (hash: PfjMvAIGHQEu6TQzSR6ouLT4yp+Qkp47gxX9vZXz8M4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/491a89-5850-40b6-85f4-1546bb6d36bb/1/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/491a89-5850-40b6-85f4-1546bb6d36bb/1/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 17 Apr 2025 10:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:3e:0b:bf:2c:de:55:6d:c5:9f:74:aa:ce:cf:9d:15:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c137f638c0be4600b466de8e330d4cf6a7ff3b3e
        Validity
            Not Before: Apr 16 10:01:19 2025 GMT
            Not After : Apr 17 10:01:19 2025 GMT
        Subject: CN=9b47f01a8c4424a4e46143d2d3844de741b55235
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:97:51:f5:a0:c2:70:e7:e5:ea:21:0c:64:00:
                    76:17:5f:70:cd:77:d8:8e:f3:aa:7b:0d:af:a8:16:
                    02:43:cc:68:91:bf:95:86:06:b8:69:83:47:b1:3e:
                    2d:94:c3:47:04:40:13:db:df:a1:31:2d:75:a8:4e:
                    0e:ea:38:f7:51:ac:38:47:24:b3:a1:7c:31:dd:7a:
                    a2:a9:d4:ab:26:1e:38:d4:6e:ba:31:2e:ef:06:e5:
                    74:a1:8b:54:17:f7:4e:78:1e:b4:af:13:37:1e:c9:
                    41:73:c8:ec:81:77:52:da:fb:b8:0d:f7:8c:b8:95:
                    99:69:bd:3d:43:a8:84:23:07:71:20:fd:dd:1c:a1:
                    d1:52:61:7f:26:89:47:b2:1e:97:0f:f5:e0:25:58:
                    24:90:a0:ab:05:5c:75:6d:91:1a:5b:d1:e7:5d:97:
                    48:a3:29:6c:a2:bc:c8:33:75:f3:df:15:18:d6:c8:
                    f4:25:c8:16:af:b6:93:2f:36:9c:a3:ad:86:b8:dd:
                    d2:6f:fa:1e:74:c3:1b:ed:6f:66:4f:9f:70:37:f6:
                    05:e7:db:2b:4c:16:aa:52:7a:b9:9c:76:65:2d:1d:
                    a2:5b:53:f3:8c:02:db:32:72:2f:48:24:85:a3:fe:
                    58:ab:1f:c2:f9:3a:4c:b7:dc:60:65:e5:8b:dd:88:
                    d8:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:47:F0:1A:8C:44:24:A4:E4:61:43:D2:D3:84:4D:E7:41:B5:52:35
            X509v3 Authority Key Identifier:
                keyid:C1:37:F6:38:C0:BE:46:00:B4:66:DE:8E:33:0D:4C:F6:A7:FF:3B:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/491a89-5850-40b6-85f4-1546bb6d36bb/1/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/491a89-5850-40b6-85f4-1546bb6d36bb/1/wTf2OMC-RgC0Zt6OMw1M9qf_Oz4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:db:95:00:77:b8:e1:f5:fc:cf:26:2b:ed:0a:d0:66:57:c7:
         0e:38:63:14:ac:2f:d5:f2:e3:75:7e:10:5d:c5:9e:42:3d:24:
         5b:09:4c:c1:ac:98:ac:9b:ec:a3:e8:5f:5e:34:cc:26:28:f7:
         ca:e7:31:d5:a8:eb:16:8d:fd:9b:30:3f:a6:04:d2:e6:a4:e8:
         cd:3c:68:5b:29:d9:72:14:15:75:7e:30:3e:2e:03:a4:a5:b8:
         3c:f7:ee:d2:57:97:ef:62:31:55:52:c7:b5:b6:aa:a0:a0:06:
         7f:7d:a2:23:32:65:be:54:2b:6f:f5:bf:02:f8:93:92:43:cd:
         33:a4:4b:59:3a:37:32:7e:df:db:53:24:53:9d:7e:ef:f5:a7:
         42:ee:48:ce:7c:19:29:ec:01:24:86:72:1d:7b:e8:2f:bd:95:
         4a:0c:3d:cf:7a:9c:07:fa:17:0b:d7:5b:6e:a5:d8:65:e1:b5:
         20:9c:ec:0f:89:15:70:d2:a4:b0:e5:41:79:1d:76:5d:7a:a7:
         66:02:b1:26:20:bf:7a:d7:8f:11:5b:3a:39:ae:c2:90:92:3a:
         77:b2:b7:21:88:69:ff:2b:ac:ae:31:b6:1e:ab:60:56:21:dd:
         83:82:60:1c:62:07:32:36:13:ed:a9:7b:20:85:f3:08:80:d8:
         92:ea:b0:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 15:13:44 2025 by rpki-client