Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/1be093-c108-43b3-bb52-0b9bfb19f2ee/1/wLi5L51itcMXfVLrNqUyVn70sPI.mft
File:                     wLi5L51itcMXfVLrNqUyVn70sPI.mft (raw, json)
Hash identifier:          CWU9EWYn2DhiLAW50lsz8Hb8//UaqpAsVsJs72SJME0=
Subject key identifier:   D7:23:34:E2:F9:A7:3C:F7:10:5F:A3:CD:F7:0E:C3:74:70:C0:4A:40
Authority key identifier: C0:B8:B9:2F:9D:62:B5:C3:17:7D:52:EB:36:A5:32:56:7E:F4:B0:F2
Certificate issuer:       /CN=c0b8b92f9d62b5c3177d52eb36a532567ef4b0f2
Certificate serial:       01974C692767840FE6BEC777A76E579647F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wLi5L51itcMXfVLrNqUyVn70sPI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/1be093-c108-43b3-bb52-0b9bfb19f2ee/1/wLi5L51itcMXfVLrNqUyVn70sPI.mft
Manifest number:          09CF
Signing time:             Sat 07 Jun 2025 22:00:49 +0000
Manifest this update:     Sat 07 Jun 2025 22:00:49 +0000
Manifest next update:     Sun 08 Jun 2025 22:00:49 +0000
Files and hashes:         1: wLi5L51itcMXfVLrNqUyVn70sPI.crl (hash: +d607V4UoH0uqUxxqYtZC0lAbw1//1lniR9QJjTKDVs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/1be093-c108-43b3-bb52-0b9bfb19f2ee/1/wLi5L51itcMXfVLrNqUyVn70sPI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/1be093-c108-43b3-bb52-0b9bfb19f2ee/1/wLi5L51itcMXfVLrNqUyVn70sPI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wLi5L51itcMXfVLrNqUyVn70sPI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 18:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4c:69:27:67:84:0f:e6:be:c7:77:a7:6e:57:96:47:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0b8b92f9d62b5c3177d52eb36a532567ef4b0f2
        Validity
            Not Before: Jun  7 22:00:49 2025 GMT
            Not After : Jun  8 22:00:49 2025 GMT
        Subject: CN=d72334e2f9a73cf7105fa3cdf70ec37470c04a40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:68:65:56:b8:ad:74:04:96:a1:a7:ff:cc:5f:
                    12:f0:d3:f5:f7:60:6a:13:3e:39:a7:a5:9e:47:6f:
                    b2:12:34:82:37:58:0d:40:8b:8d:37:b7:2a:55:45:
                    5b:9c:54:a7:9c:a3:c2:04:ac:13:30:00:03:35:42:
                    46:72:94:e4:39:48:0f:4e:5a:01:70:58:de:af:57:
                    53:98:65:9a:5d:4e:b4:2b:b5:14:80:49:5a:8d:80:
                    36:cd:13:33:1e:c0:02:90:26:f7:3d:bf:75:03:12:
                    34:3e:21:1e:e5:59:15:29:e0:e6:1a:34:8b:53:93:
                    36:b9:34:c9:76:eb:d5:29:d4:4f:a7:67:e3:ac:84:
                    42:98:19:00:14:df:78:c2:45:e0:1f:2c:ce:82:c6:
                    b1:a9:c8:8c:e7:57:c6:f7:fa:bd:54:64:cc:10:10:
                    4b:4e:ee:fd:53:0c:b0:a8:06:22:97:09:d1:f8:c0:
                    0a:4c:cf:1d:29:81:59:21:54:67:16:67:1e:69:a2:
                    d1:98:38:a2:c3:84:10:24:d2:5d:47:2f:88:6d:f8:
                    b4:27:a4:2b:28:d4:74:86:a5:3b:8b:c6:f3:01:03:
                    78:7b:bb:50:53:d9:98:3b:6e:59:fd:91:5f:13:50:
                    0d:6c:9d:e3:db:8f:82:30:ba:65:8b:2b:f8:ee:3f:
                    c6:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:23:34:E2:F9:A7:3C:F7:10:5F:A3:CD:F7:0E:C3:74:70:C0:4A:40
            X509v3 Authority Key Identifier:
                keyid:C0:B8:B9:2F:9D:62:B5:C3:17:7D:52:EB:36:A5:32:56:7E:F4:B0:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wLi5L51itcMXfVLrNqUyVn70sPI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/1be093-c108-43b3-bb52-0b9bfb19f2ee/1/wLi5L51itcMXfVLrNqUyVn70sPI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/1be093-c108-43b3-bb52-0b9bfb19f2ee/1/wLi5L51itcMXfVLrNqUyVn70sPI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:1a:88:98:53:c3:63:bd:91:6b:9a:68:e6:cb:fc:4d:39:38:
         62:ba:41:22:ae:8a:44:76:d1:3a:44:09:7a:99:d8:4b:12:47:
         17:9e:5a:c4:f9:11:ca:e7:b1:8f:00:7a:b5:b4:93:0f:c9:93:
         93:37:e9:6c:98:64:8a:ce:46:55:3f:f0:0a:8c:e7:8c:31:7f:
         18:52:fb:79:94:1d:01:41:2d:28:1e:ff:b7:c7:25:2e:f9:ab:
         b2:0c:61:2e:b1:52:27:ab:f0:ac:38:b5:3c:ab:3c:ea:d9:c7:
         41:f8:c6:f3:b7:2a:04:91:c9:5f:ec:b9:c6:1f:a2:f7:3b:6d:
         de:b9:97:14:8f:c5:85:f2:47:d0:5e:37:3d:62:2c:47:11:72:
         a5:52:7d:c5:4b:7e:3f:c5:ee:95:29:4d:1c:dc:4a:bd:75:36:
         58:7b:8d:b7:f1:0d:ec:77:c9:b1:11:42:ef:19:72:82:ba:8a:
         1a:82:17:79:3d:ff:04:cb:49:57:61:07:93:28:d4:34:f5:6c:
         95:c7:9e:72:8e:67:f5:b4:a3:9a:b0:1f:4d:ab:7a:f9:20:69:
         92:a0:27:94:06:84:7d:5f:14:ed:04:49:3a:b6:d2:d4:78:5e:
         0e:81:a1:8b:b6:e2:17:f1:ee:a2:f8:23:f3:7f:af:1a:40:bc:
         d8:61:f0:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:25:02 2025 by rpki-client