Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/9e388d-3990-4fd8-82b3-d775117af12f/1/w91X4yvXbbd77fxSETY8SAgPBgU.mft
File:                     w91X4yvXbbd77fxSETY8SAgPBgU.mft (raw, json)
Hash identifier:          oNiLP9XKrLcTFJrrPZ5omy/BzkyFncCyeF5jJRVNfmI=
Subject key identifier:   4E:66:E8:3F:F6:FE:0E:AA:79:C9:2D:E1:EE:8F:61:82:BC:71:73:A2
Authority key identifier: C3:DD:57:E3:2B:D7:6D:B7:7B:ED:FC:52:11:36:3C:48:08:0F:06:05
Certificate issuer:       /CN=c3dd57e32bd76db77bedfc5211363c48080f0605
Certificate serial:       019A26D46D51C6E1D81157C7FE14B1DE6693
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w91X4yvXbbd77fxSETY8SAgPBgU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/9e388d-3990-4fd8-82b3-d775117af12f/1/w91X4yvXbbd77fxSETY8SAgPBgU.mft
Manifest number:          0D63
Signing time:             Mon 27 Oct 2025 18:00:47 +0000
Manifest this update:     Mon 27 Oct 2025 18:00:47 +0000
Manifest next update:     Tue 28 Oct 2025 18:00:47 +0000
Files and hashes:         1: w91X4yvXbbd77fxSETY8SAgPBgU.crl (hash: foJuUP/ZH3EijIHJ8+qUxOUd5+TbjIBqwuKuhWX9kW0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/9e388d-3990-4fd8-82b3-d775117af12f/1/w91X4yvXbbd77fxSETY8SAgPBgU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/9e388d-3990-4fd8-82b3-d775117af12f/1/w91X4yvXbbd77fxSETY8SAgPBgU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w91X4yvXbbd77fxSETY8SAgPBgU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Oct 2025 18:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9a:26:d4:6d:51:c6:e1:d8:11:57:c7:fe:14:b1:de:66:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3dd57e32bd76db77bedfc5211363c48080f0605
        Validity
            Not Before: Oct 27 18:00:47 2025 GMT
            Not After : Oct 28 18:00:47 2025 GMT
        Subject: CN=4e66e83ff6fe0eaa79c92de1ee8f6182bc7173a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:7c:c3:55:ec:4d:8c:8e:b2:91:dd:6a:4d:ba:
                    cc:f4:db:83:a7:e5:64:26:4d:05:8f:10:40:73:f2:
                    ae:80:75:d9:fa:29:66:33:ad:b9:49:6c:cf:e3:d9:
                    dc:48:48:8d:7e:c9:7c:80:16:20:b5:d6:5a:54:29:
                    cc:ee:fe:2a:33:3f:67:56:3b:00:2e:3b:45:b1:d6:
                    f2:5a:41:27:38:ea:a6:7c:f1:c2:63:53:7b:25:09:
                    37:86:0a:c0:ca:de:99:18:43:1f:99:92:c6:c9:82:
                    77:a3:46:39:02:5c:59:3d:22:2b:87:00:b0:e1:5a:
                    43:ca:34:f2:3f:78:14:56:49:83:e0:90:39:e8:be:
                    b5:51:79:85:7b:b8:45:a4:41:7b:e3:c9:c8:2d:99:
                    72:b5:2e:e9:ed:23:fa:12:ed:97:c9:60:3c:1f:00:
                    da:5a:ed:3d:92:86:0a:28:b7:92:1f:f2:a5:99:b3:
                    07:9d:af:dd:2d:59:91:ba:a2:e7:6a:84:81:4f:4c:
                    f0:4b:b1:1b:64:e2:22:55:67:8c:12:54:86:a6:35:
                    e3:de:88:11:09:2d:d8:28:f9:f2:d6:0d:6e:79:74:
                    69:c8:55:73:54:a8:b5:40:d1:e7:e2:a2:00:ad:4f:
                    e7:06:0a:30:77:f1:ea:4a:e1:16:32:6a:47:77:f6:
                    9e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:66:E8:3F:F6:FE:0E:AA:79:C9:2D:E1:EE:8F:61:82:BC:71:73:A2
            X509v3 Authority Key Identifier:
                keyid:C3:DD:57:E3:2B:D7:6D:B7:7B:ED:FC:52:11:36:3C:48:08:0F:06:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w91X4yvXbbd77fxSETY8SAgPBgU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9e388d-3990-4fd8-82b3-d775117af12f/1/w91X4yvXbbd77fxSETY8SAgPBgU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9e388d-3990-4fd8-82b3-d775117af12f/1/w91X4yvXbbd77fxSETY8SAgPBgU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:54:20:d4:33:fa:13:a1:51:17:71:f2:c2:f9:0e:f6:01:e1:
         39:89:4d:3a:b4:7b:0c:36:ea:bc:3c:4e:a1:a3:15:c8:27:ba:
         92:4f:f8:39:ba:ec:f1:cb:aa:5e:14:8c:47:d6:dd:2b:3a:a6:
         34:19:28:81:86:94:13:a0:56:b1:2f:95:03:b3:70:ae:9f:6d:
         3f:c3:0d:4d:92:53:32:0a:a3:14:3c:4a:30:64:72:f3:b8:38:
         15:2a:dc:e5:d1:7b:db:54:fa:1b:30:07:3a:3b:3f:46:b2:8f:
         7e:f4:34:22:cb:06:fb:06:10:95:61:d5:ae:8c:03:9c:9b:73:
         2b:26:dd:3d:54:9e:2c:15:f7:e7:25:dc:ea:4b:b0:87:c1:8e:
         54:70:05:0b:9e:7d:67:1f:e8:08:1f:47:c9:3b:8e:8a:4a:96:
         5c:78:e7:2a:24:fd:0d:c2:63:92:d4:7e:7e:56:e4:62:b5:2c:
         ad:3f:6f:95:42:7d:24:fe:cf:77:4c:bd:2d:86:92:b2:b4:1a:
         26:2a:6f:a5:a2:f8:a2:cb:19:58:67:c4:cc:4e:b7:bf:91:48:
         69:55:f3:3f:80:ec:49:93:9c:4b:35:a2:6c:08:aa:ab:3b:a3:
         95:73:bb:fd:01:5b:1b:02:03:c6:55:b2:d6:8c:84:85:77:9e:
         b5:d9:ec:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 02:25:31 2025 by rpki-client