Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/80790b-891f-4e03-bd56-9fb6b4ea250a/1/wR_52bpVx9lQjFpNwe7MDilWHC4.mft
File:                     wR_52bpVx9lQjFpNwe7MDilWHC4.mft (raw, json)
Hash identifier:          jp2kPnze7H4jB4VfFoTOh/cJdxl0XxnCGNHz4TldhSk=
Subject key identifier:   33:20:66:DE:8E:67:82:CD:28:27:0A:DD:11:3C:13:7C:B3:CD:CC:D8
Authority key identifier: C1:1F:F9:D9:BA:55:C7:D9:50:8C:5A:4D:C1:EE:CC:0E:29:56:1C:2E
Certificate issuer:       /CN=c11ff9d9ba55c7d9508c5a4dc1eecc0e29561c2e
Certificate serial:       01974D454AD82E7D641DFA1E108B994773B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wR_52bpVx9lQjFpNwe7MDilWHC4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/80790b-891f-4e03-bd56-9fb6b4ea250a/1/wR_52bpVx9lQjFpNwe7MDilWHC4.mft
Manifest number:          157C
Signing time:             Sun 08 Jun 2025 02:01:16 +0000
Manifest this update:     Sun 08 Jun 2025 02:01:16 +0000
Manifest next update:     Mon 09 Jun 2025 02:01:16 +0000
Files and hashes:         1: wR_52bpVx9lQjFpNwe7MDilWHC4.crl (hash: 4j8IE6VNEzs27T86pIk+uP9b76po9NLoT2LMBCFNTv4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/80790b-891f-4e03-bd56-9fb6b4ea250a/1/wR_52bpVx9lQjFpNwe7MDilWHC4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/80790b-891f-4e03-bd56-9fb6b4ea250a/1/wR_52bpVx9lQjFpNwe7MDilWHC4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wR_52bpVx9lQjFpNwe7MDilWHC4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 02:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4d:45:4a:d8:2e:7d:64:1d:fa:1e:10:8b:99:47:73:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c11ff9d9ba55c7d9508c5a4dc1eecc0e29561c2e
        Validity
            Not Before: Jun  8 02:01:16 2025 GMT
            Not After : Jun  9 02:01:16 2025 GMT
        Subject: CN=332066de8e6782cd28270add113c137cb3cdccd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:64:65:52:10:8e:f2:73:7e:eb:a4:e5:ab:e1:
                    65:ee:b4:67:bd:8d:21:92:08:7e:60:23:e1:01:b1:
                    45:4a:24:a0:ca:48:bf:d5:25:44:70:88:4e:1f:88:
                    10:d8:23:42:43:b8:a2:94:c7:e6:31:7a:c0:8b:4a:
                    c1:4d:c6:d0:b2:3c:d8:86:b0:69:e3:9b:08:35:c2:
                    05:cb:0a:c3:9b:81:97:d7:2b:5a:e0:31:c5:ee:50:
                    dd:62:61:d5:d7:02:4d:b8:3c:6e:70:7b:57:70:9b:
                    44:c5:1a:f9:f5:51:c5:97:77:53:8e:10:59:b3:3e:
                    33:b5:68:a1:46:15:f6:35:6f:74:03:bb:f3:93:36:
                    05:8f:b0:2e:cb:8c:e8:59:dd:42:f7:e3:5a:ce:a6:
                    d9:7f:d1:ac:0d:42:43:46:40:69:f3:a3:b1:73:57:
                    a8:da:e8:32:cd:99:70:97:c2:be:a0:c3:e4:5d:3d:
                    63:09:c1:9a:e9:c4:77:cb:40:10:83:05:86:24:06:
                    01:e9:4f:8f:c2:32:54:a8:75:ed:c9:d1:38:07:42:
                    c3:27:fd:94:e4:e3:c5:a7:f2:10:03:2d:e5:b1:79:
                    2b:8f:c0:a4:d1:47:76:68:b8:6d:2c:bd:15:ba:15:
                    bd:ea:22:f7:b1:fa:5b:60:61:c9:fa:dc:3f:07:c5:
                    03:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:20:66:DE:8E:67:82:CD:28:27:0A:DD:11:3C:13:7C:B3:CD:CC:D8
            X509v3 Authority Key Identifier:
                keyid:C1:1F:F9:D9:BA:55:C7:D9:50:8C:5A:4D:C1:EE:CC:0E:29:56:1C:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wR_52bpVx9lQjFpNwe7MDilWHC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/80790b-891f-4e03-bd56-9fb6b4ea250a/1/wR_52bpVx9lQjFpNwe7MDilWHC4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/80790b-891f-4e03-bd56-9fb6b4ea250a/1/wR_52bpVx9lQjFpNwe7MDilWHC4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:63:00:2e:4c:e0:a8:51:da:c0:e2:7f:8b:26:de:43:20:34:
         94:6a:7e:0a:cf:15:c4:ee:4c:bc:0b:8d:31:d7:dd:ae:5a:5d:
         43:22:f0:ee:7d:10:d0:93:c7:11:78:d0:f4:4a:cc:de:ae:8a:
         26:f1:9f:19:e5:20:e4:76:84:76:22:2c:10:dd:26:61:73:a2:
         9b:36:e6:9c:86:97:26:b1:fb:f8:e3:f3:ee:52:51:ab:1a:f0:
         a9:85:6f:5b:27:a6:3e:99:fe:6e:a0:12:25:76:65:93:ba:42:
         bc:ed:ad:b5:47:bf:13:ef:ab:33:05:b2:90:b2:1b:95:28:1b:
         a2:eb:27:77:98:cf:86:5a:0b:29:06:38:b1:5f:19:e3:6b:b8:
         28:4f:56:e1:43:4e:e5:f6:33:d9:b7:43:87:cd:9b:3b:b0:ad:
         c4:50:fd:21:49:b8:24:7e:2a:31:eb:a7:00:c8:fa:7d:0a:b6:
         1d:ba:39:ef:2e:af:25:52:92:dc:4f:3f:d5:78:d4:9a:17:6c:
         f2:f9:62:cb:24:98:37:c4:b2:3e:76:db:6e:69:87:ce:30:91:
         fc:44:0d:73:0e:c2:1e:ab:8b:52:1e:7b:06:c4:9c:4f:17:c6:
         87:e2:6f:af:35:f9:12:2a:4a:3a:72:4d:30:a1:11:2a:92:d1:
         2c:18:ed:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 08:58:31 2025 by rpki-client