Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/af2dd5-3f6e-45d5-b10e-b55f70fb1142/1/WZypahnO8ifMM7NFhZaqRV0rePg.mft
File:                     WZypahnO8ifMM7NFhZaqRV0rePg.mft (raw, json)
Hash identifier:          LZDzZplju8oSBRH6NV5aJ0txoHFlU8pCtsaKdmIphig=
Subject key identifier:   B0:30:8B:03:E0:6B:E2:0D:33:6E:E0:8C:CA:67:DA:63:DC:CB:58:4C
Authority key identifier: 59:9C:A9:6A:19:CE:F2:27:CC:33:B3:45:85:96:AA:45:5D:2B:78:F8
Certificate issuer:       /CN=599ca96a19cef227cc33b3458596aa455d2b78f8
Certificate serial:       019746D48212DF65007749EB3CCCA97D7881
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WZypahnO8ifMM7NFhZaqRV0rePg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/af2dd5-3f6e-45d5-b10e-b55f70fb1142/1/WZypahnO8ifMM7NFhZaqRV0rePg.mft
Manifest number:          04D9
Signing time:             Fri 06 Jun 2025 20:00:21 +0000
Manifest this update:     Fri 06 Jun 2025 20:00:21 +0000
Manifest next update:     Sat 07 Jun 2025 20:00:21 +0000
Files and hashes:         1: WZypahnO8ifMM7NFhZaqRV0rePg.crl (hash: TmHdThLPuaH+xXdScmIG3ytJ+mN2qUogSYNqIyvLWqY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/af2dd5-3f6e-45d5-b10e-b55f70fb1142/1/WZypahnO8ifMM7NFhZaqRV0rePg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/af2dd5-3f6e-45d5-b10e-b55f70fb1142/1/WZypahnO8ifMM7NFhZaqRV0rePg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WZypahnO8ifMM7NFhZaqRV0rePg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:d4:82:12:df:65:00:77:49:eb:3c:cc:a9:7d:78:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=599ca96a19cef227cc33b3458596aa455d2b78f8
        Validity
            Not Before: Jun  6 20:00:21 2025 GMT
            Not After : Jun  7 20:00:21 2025 GMT
        Subject: CN=b0308b03e06be20d336ee08cca67da63dccb584c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:88:4e:df:33:e6:61:e4:73:4b:12:69:52:41:
                    78:2a:ec:35:15:f4:f1:41:16:52:8a:53:1e:d2:68:
                    9b:34:d9:28:de:cd:f0:e8:a9:f5:b7:19:9c:5e:5b:
                    59:cb:e1:43:23:ea:1e:5d:fa:93:55:44:3e:4c:25:
                    62:6a:5b:cc:4c:95:bf:83:63:02:13:94:59:b9:2a:
                    e6:c7:bb:69:c3:51:9a:d3:70:ca:74:ca:32:51:22:
                    48:c8:50:73:30:6c:bd:cf:6a:f1:83:97:0d:95:2a:
                    81:16:5e:af:ba:f4:3c:fe:b4:8b:15:c0:25:d7:32:
                    90:11:f3:03:f7:b9:5a:3e:21:44:35:c5:2e:db:09:
                    50:57:f6:d1:f1:b4:ea:a4:58:d2:c0:d9:19:54:82:
                    cd:fa:9a:d4:8b:63:d9:58:37:6f:ff:3d:27:e4:72:
                    66:04:55:c6:40:d7:93:f0:d6:d7:98:98:d2:56:c0:
                    fc:89:3b:01:ee:5c:34:90:1b:84:a2:09:4c:c1:f1:
                    d9:b2:da:7c:91:ff:57:a6:7e:52:55:d0:09:20:1e:
                    32:22:92:84:9d:c6:79:d2:3e:59:06:4b:f0:5e:16:
                    d0:5e:19:ab:d5:df:62:9d:e8:ec:a2:38:34:af:fd:
                    98:70:1b:90:eb:cf:3c:0a:88:b3:ce:fd:68:e1:72:
                    70:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:30:8B:03:E0:6B:E2:0D:33:6E:E0:8C:CA:67:DA:63:DC:CB:58:4C
            X509v3 Authority Key Identifier:
                keyid:59:9C:A9:6A:19:CE:F2:27:CC:33:B3:45:85:96:AA:45:5D:2B:78:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WZypahnO8ifMM7NFhZaqRV0rePg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/af2dd5-3f6e-45d5-b10e-b55f70fb1142/1/WZypahnO8ifMM7NFhZaqRV0rePg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/af2dd5-3f6e-45d5-b10e-b55f70fb1142/1/WZypahnO8ifMM7NFhZaqRV0rePg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:4c:69:57:03:89:ab:03:fd:48:20:98:0d:23:69:b1:53:22:
         fe:bd:74:3e:d8:42:47:b1:5c:68:bb:b0:53:8a:f0:82:47:39:
         b4:18:fa:7c:2e:d3:bc:e9:57:c0:b8:e7:e3:ad:48:2c:56:bb:
         ac:aa:0e:46:73:35:42:bb:d2:d2:c6:e8:31:a3:b8:5e:5a:a2:
         de:a5:50:b4:2b:8c:72:d4:84:0f:7f:23:03:84:90:ac:6a:ce:
         ae:1d:16:ed:37:b8:bf:db:eb:80:4d:26:d2:cf:f6:9d:a3:86:
         c6:64:d1:f2:c7:ae:ec:90:10:cc:02:a6:ff:e7:82:76:61:64:
         09:d0:d6:a1:b4:0b:55:e4:0f:2e:59:c6:7e:60:d7:4a:dd:85:
         15:c5:78:48:f7:b8:3f:af:9f:60:6b:6e:9b:0d:8a:7f:0a:de:
         12:aa:2c:d5:56:95:bb:3e:7d:69:5d:b6:88:45:1f:77:a0:37:
         5c:32:b9:60:85:94:3c:2e:20:57:e3:8d:bc:e7:24:63:07:f0:
         5a:a8:90:30:bc:3f:ea:54:47:e9:be:42:10:4a:21:a5:61:50:
         31:17:77:45:20:1d:30:91:89:df:d7:71:32:96:e8:56:58:71:
         a6:9b:16:6f:35:18:c8:22:10:b3:ef:7f:e1:db:22:b0:ee:20:
         62:34:0c:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:05:26 2025 by rpki-client