Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/5e7141-9103-48eb-8dcd-ad5868825c36/1/wsFAyCGJcO9g5ok1Txa2OvSQCtU.mft
File:                     wsFAyCGJcO9g5ok1Txa2OvSQCtU.mft (raw, json)
Hash identifier:          KMngtLzsYFVGcYeRUCuQOFsNtfxK9gzOBtPMV+IlIBM=
Subject key identifier:   2E:15:8A:DD:21:B0:55:B1:58:38:73:91:61:C5:69:14:CD:85:F3:97
Authority key identifier: C2:C1:40:C8:21:89:70:EF:60:E6:89:35:4F:16:B6:3A:F4:90:0A:D5
Certificate issuer:       /CN=c2c140c8218970ef60e689354f16b63af4900ad5
Certificate serial:       019769CEEB1C5B8E421350106E505B526167
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wsFAyCGJcO9g5ok1Txa2OvSQCtU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/5e7141-9103-48eb-8dcd-ad5868825c36/1/wsFAyCGJcO9g5ok1Txa2OvSQCtU.mft
Manifest number:          0A0C
Signing time:             Fri 13 Jun 2025 15:00:57 +0000
Manifest this update:     Fri 13 Jun 2025 15:00:57 +0000
Manifest next update:     Sat 14 Jun 2025 15:00:57 +0000
Files and hashes:         1: wsFAyCGJcO9g5ok1Txa2OvSQCtU.crl (hash: eUS5YuDMDKG96Dvvo59qJLDo2MN9Z8nqiI/DWAOvsMc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/5e7141-9103-48eb-8dcd-ad5868825c36/1/wsFAyCGJcO9g5ok1Txa2OvSQCtU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/5e7141-9103-48eb-8dcd-ad5868825c36/1/wsFAyCGJcO9g5ok1Txa2OvSQCtU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wsFAyCGJcO9g5ok1Txa2OvSQCtU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 15:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:ce:eb:1c:5b:8e:42:13:50:10:6e:50:5b:52:61:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2c140c8218970ef60e689354f16b63af4900ad5
        Validity
            Not Before: Jun 13 15:00:57 2025 GMT
            Not After : Jun 14 15:00:57 2025 GMT
        Subject: CN=2e158add21b055b15838739161c56914cd85f397
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:12:2d:38:7b:7c:44:4c:9b:d7:d2:46:ff:9b:
                    9a:63:a7:f8:f4:89:8d:28:8c:1e:02:3e:05:a7:ce:
                    77:91:58:90:d1:08:29:dc:fc:ef:3d:5d:5e:4d:97:
                    67:7c:1f:0c:94:34:c1:b2:e9:56:9f:aa:14:11:70:
                    0d:0c:ce:6a:94:ac:33:cd:98:d0:26:74:29:ab:c9:
                    23:e2:5a:08:c3:4e:80:8a:17:4c:e6:23:b6:81:09:
                    f3:13:87:93:25:be:ee:1c:1a:95:36:5d:52:a6:ec:
                    bb:f0:db:9e:d2:fd:c8:13:4b:55:71:94:16:6d:94:
                    a9:fd:33:61:8f:cf:64:d4:07:75:e2:79:98:47:17:
                    9d:d2:fb:cf:7b:a9:f8:06:a9:31:a0:10:2e:bd:7a:
                    db:f5:b0:b1:5b:e3:d3:8a:8a:ed:ef:21:36:a1:8b:
                    e8:a0:a9:ed:8c:1d:01:ca:4a:57:bb:ad:a8:67:34:
                    2e:03:82:b3:7c:af:a1:1c:d8:22:fa:eb:5a:ef:d0:
                    07:f2:de:36:a4:3a:d8:d3:89:a9:af:05:73:13:12:
                    73:82:d8:1a:34:2b:e2:39:75:2e:a1:db:8f:0a:69:
                    80:7f:07:f7:e4:84:45:80:7a:7b:9a:f9:17:4a:0a:
                    15:ec:52:46:06:90:fc:d1:e4:7c:80:5c:a0:a8:9f:
                    c5:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:15:8A:DD:21:B0:55:B1:58:38:73:91:61:C5:69:14:CD:85:F3:97
            X509v3 Authority Key Identifier:
                keyid:C2:C1:40:C8:21:89:70:EF:60:E6:89:35:4F:16:B6:3A:F4:90:0A:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsFAyCGJcO9g5ok1Txa2OvSQCtU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/5e7141-9103-48eb-8dcd-ad5868825c36/1/wsFAyCGJcO9g5ok1Txa2OvSQCtU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/5e7141-9103-48eb-8dcd-ad5868825c36/1/wsFAyCGJcO9g5ok1Txa2OvSQCtU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:de:78:13:68:b1:b6:22:d5:cb:79:45:7c:22:a3:52:b3:05:
         57:e7:84:e1:2f:c1:94:37:7f:16:b8:13:a3:a2:98:4c:3d:d2:
         4f:46:f3:22:14:ad:52:8f:ee:f2:ac:db:fd:63:79:24:09:c1:
         b5:df:c5:6e:3e:b1:be:7f:8c:59:9d:f3:af:61:29:1b:5c:dc:
         3b:8c:8d:1f:06:9c:db:a9:80:e7:d7:10:a5:7b:46:9e:b0:79:
         ea:6b:d2:d6:35:f7:08:3f:7f:10:c7:08:de:96:82:c5:ba:bd:
         b4:1f:1f:ba:e0:81:8e:ad:6f:91:3e:4f:5b:29:eb:fc:f8:1f:
         8b:54:72:dd:cc:fd:cf:7d:c0:d1:13:cd:40:03:b8:6c:14:92:
         49:be:90:8e:95:fb:65:47:9f:1f:67:14:b2:d0:21:12:7f:d8:
         ac:58:ac:13:e3:29:f4:88:0c:45:98:54:bc:95:35:24:4a:a9:
         48:cb:9e:77:c5:ea:4d:d5:94:eb:9e:db:74:6c:ea:82:1f:6c:
         30:18:92:5b:31:61:bf:68:36:99:f4:25:34:a8:4a:ed:74:2a:
         b6:37:df:d5:2c:8b:ea:5c:f9:fd:28:40:7c:59:41:f5:44:7a:
         6f:2e:d5:24:69:b1:a4:6b:ff:91:d5:d2:9d:f4:ac:0a:35:f9:
         ea:a4:2f:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdpzuscW45CE1AQblBbUmFnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyYzE0MGM4MjE4OTcwZWY2MGU2ODkzNTRmMTZiNjNhZjQ5
MDBhZDUwHhcNMjUwNjEzMTUwMDU3WhcNMjUwNjE0MTUwMDU3WjAzMTEwLwYDVQQD
EygyZTE1OGFkZDIxYjA1NWIxNTgzODczOTE2MWM1NjkxNGNkODVmMzk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2hItOHt8REyb19JG/5uaY6f49ImN
KIweAj4Fp853kViQ0Qgp3PzvPV1eTZdnfB8MlDTBsulWn6oUEXANDM5qlKwzzZjQ
JnQpq8kj4loIw06AihdM5iO2gQnzE4eTJb7uHBqVNl1Spuy78Nue0v3IE0tVcZQW
bZSp/TNhj89k1Ad14nmYRxed0vvPe6n4BqkxoBAuvXrb9bCxW+PTiort7yE2oYvo
oKntjB0BykpXu62oZzQuA4KzfK+hHNgi+uta79AH8t42pDrY04mprwVzExJzgtga
NCviOXUuoduPCmmAfwf35IRFgHp7mvkXSgoV7FJGBpD80eR8gFygqJ/FGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC4Vit0hsFWxWDhzkWHFaRTNhfOXMB8GA1UdIwQY
MBaAFMLBQMghiXDvYOaJNU8Wtjr0kArVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3NGQXlDR0pjTzlnNW9rMVR4YTJPdlNRQ3RVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS81ZTcxNDEtOTEwMy00OGViLThkY2Qt
YWQ1ODY4ODI1YzM2LzEvd3NGQXlDR0pjTzlnNW9rMVR4YTJPdlNRQ3RVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS81ZTcxNDEtOTEwMy00OGViLThkY2QtYWQ1ODY4ODI1YzM2
LzEvd3NGQXlDR0pjTzlnNW9rMVR4YTJPdlNRQ3RVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt954E2ix
tiLVy3lFfCKjUrMFV+eE4S/BlDd/FrgTo6KYTD3ST0bzIhStUo/u8qzb/WN5JAnB
td/Fbj6xvn+MWZ3zr2EpG1zcO4yNHwac26mA59cQpXtGnrB56mvS1jX3CD9/EMcI
3paCxbq9tB8fuuCBjq1vkT5PWynr/Pgfi1Ry3cz9z33A0RPNQAO4bBSSSb6QjpX7
ZUefH2cUstAhEn/YrFisE+Mp9IgMRZhUvJU1JEqpSMued8XqTdWU657bdGzqgh9s
MBiSWzFhv2g2mfQlNKhK7XQqtjff1SyL6lz5/ShAfFlB9UR6by7VJGmxpGv/kdXS
nfSsCjX56qQvig==
-----END CERTIFICATE-----
Generated at Fri Jun 13 22:10:26 2025 by rpki-client