Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/6a1681-3ea8-463c-93ed-2f2d23903688/1/WcO0Sc8TL-kakwCloOU1948MVow.mft
File:                     WcO0Sc8TL-kakwCloOU1948MVow.mft (raw, json)
Hash identifier:          GM759jjw0UDBFoN08PLRqWaoXt1Bh0VA8c8lg9dMGyE=
Subject key identifier:   B3:C1:32:EC:8D:DD:50:68:6D:99:E4:13:DF:72:4A:3B:27:6E:D7:13
Authority key identifier: 59:C3:B4:49:CF:13:2F:E9:1A:93:00:A5:A0:E5:35:F7:8F:0C:56:8C
Certificate issuer:       /CN=59c3b449cf132fe91a9300a5a0e535f78f0c568c
Certificate serial:       01992255B619453B73939A4B7A51BECD0EF9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WcO0Sc8TL-kakwCloOU1948MVow.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/6a1681-3ea8-463c-93ed-2f2d23903688/1/WcO0Sc8TL-kakwCloOU1948MVow.mft
Manifest number:          0756
Signing time:             Sun 07 Sep 2025 04:01:06 +0000
Manifest this update:     Sun 07 Sep 2025 04:01:06 +0000
Manifest next update:     Mon 08 Sep 2025 04:01:06 +0000
Files and hashes:         1: WcO0Sc8TL-kakwCloOU1948MVow.crl (hash: Pvpeq9bRIF8XFHo8fXm2/vf7mcbSvmhdLFWRhJ89gm8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/6a1681-3ea8-463c-93ed-2f2d23903688/1/WcO0Sc8TL-kakwCloOU1948MVow.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/6a1681-3ea8-463c-93ed-2f2d23903688/1/WcO0Sc8TL-kakwCloOU1948MVow.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WcO0Sc8TL-kakwCloOU1948MVow.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 04:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:22:55:b6:19:45:3b:73:93:9a:4b:7a:51:be:cd:0e:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59c3b449cf132fe91a9300a5a0e535f78f0c568c
        Validity
            Not Before: Sep  7 04:01:06 2025 GMT
            Not After : Sep  8 04:01:06 2025 GMT
        Subject: CN=b3c132ec8ddd50686d99e413df724a3b276ed713
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:6f:5f:bd:8f:31:fd:8c:01:a1:7d:ca:02:de:
                    09:4e:10:45:ff:5d:aa:55:e3:10:a5:27:25:4a:17:
                    4f:43:5b:11:ae:0c:12:7d:a1:c5:de:fa:66:cc:fb:
                    1c:07:d5:4f:53:e7:3a:2c:88:f3:71:46:a2:a9:5c:
                    50:2e:5e:1b:31:8e:31:a4:96:78:5b:fc:ee:f2:e6:
                    54:ca:eb:89:f4:af:61:d2:1b:9a:eb:73:84:46:34:
                    fa:3c:ea:c9:26:db:37:0e:b0:55:62:58:b0:bc:23:
                    04:28:c1:33:d3:1f:8d:bc:03:0f:40:c1:61:38:9f:
                    ac:dd:ff:c7:99:4f:74:67:af:5f:a6:8f:cf:b0:1a:
                    ba:82:09:8c:fa:d0:dc:3a:77:bb:f5:05:21:5b:ab:
                    37:32:53:fc:4a:c1:47:30:17:26:47:23:cb:e7:0f:
                    47:1b:ba:54:85:ef:84:41:bf:98:b8:a1:3b:f4:74:
                    0e:f1:b1:87:ff:f6:4f:c2:c8:c2:d7:aa:79:33:59:
                    f3:ea:86:7a:86:c1:ef:b5:53:d0:62:65:60:0e:f5:
                    29:c7:e9:94:50:21:4c:0e:9e:90:70:10:c3:f6:b6:
                    68:eb:59:06:08:85:52:86:69:51:dc:98:4a:cd:08:
                    5f:e7:da:cd:7a:1e:8d:a8:4a:85:96:39:82:bd:43:
                    b7:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:C1:32:EC:8D:DD:50:68:6D:99:E4:13:DF:72:4A:3B:27:6E:D7:13
            X509v3 Authority Key Identifier:
                keyid:59:C3:B4:49:CF:13:2F:E9:1A:93:00:A5:A0:E5:35:F7:8F:0C:56:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WcO0Sc8TL-kakwCloOU1948MVow.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/6a1681-3ea8-463c-93ed-2f2d23903688/1/WcO0Sc8TL-kakwCloOU1948MVow.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/6a1681-3ea8-463c-93ed-2f2d23903688/1/WcO0Sc8TL-kakwCloOU1948MVow.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:fd:42:99:b1:8e:de:17:c3:87:3d:bd:a4:5a:55:5a:4f:ee:
         d0:25:16:68:81:0e:45:80:37:a7:ba:83:d2:e3:43:cc:be:bc:
         98:c1:a1:60:54:6f:a7:b2:5d:da:f6:04:5a:47:15:69:d2:5a:
         a5:dc:39:08:3d:31:f6:e2:9c:2c:37:03:6e:10:12:00:2d:93:
         de:37:e8:d4:a0:1f:c3:19:4e:dc:0d:3a:54:00:d7:6c:28:2d:
         b6:27:70:3a:18:79:ea:a8:2e:bb:fc:45:9a:a8:6f:86:21:bd:
         96:37:b7:fe:5e:60:f8:2d:ca:0d:a8:0f:69:0c:d2:a8:5f:1f:
         86:0a:bb:4e:53:52:ef:f4:b3:34:f7:f4:79:d3:9b:f2:4c:d9:
         5d:97:3b:2f:b1:fe:6c:12:e0:5e:f6:03:b8:6f:5d:6c:d2:41:
         f0:27:a4:29:b3:be:19:24:7e:cb:2d:78:85:5b:aa:77:6b:3e:
         be:06:98:b9:4b:ba:21:dd:9f:c6:6a:ae:40:74:49:12:1b:36:
         18:e2:89:eb:ba:36:3a:7f:2a:13:ba:4b:cf:19:d9:5e:ea:b8:
         3d:9e:38:82:bb:da:ed:6c:b6:d8:f9:07:90:52:70:8a:94:37:
         1e:7a:1e:f0:af:6e:75:05:6b:63:be:bf:c8:9a:cd:5e:08:a3:
         08:71:e8:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:21:37 2025 by rpki-client