Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/b27a3b-acf8-4668-989f-83cf46689375/1/WujsvmlVEtpODwK23A572pYNwzo.mft
File:                     WujsvmlVEtpODwK23A572pYNwzo.mft (raw, json)
Hash identifier:          qTqQE2BwVtF3qLdiMTGKoYM5+8AtT8CycFwCnlXQkc8=
Subject key identifier:   C8:F1:56:36:D8:DC:C5:6D:4A:E1:8E:1C:80:74:25:FA:10:DB:AD:0F
Authority key identifier: 5A:E8:EC:BE:69:55:12:DA:4E:0F:02:B6:DC:0E:7B:DA:96:0D:C3:3A
Certificate issuer:       /CN=5ae8ecbe695512da4e0f02b6dc0e7bda960dc33a
Certificate serial:       019752345D7CB6B0D34F05E4293FE0AB9052
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WujsvmlVEtpODwK23A572pYNwzo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/b27a3b-acf8-4668-989f-83cf46689375/1/WujsvmlVEtpODwK23A572pYNwzo.mft
Manifest number:          0679
Signing time:             Mon 09 Jun 2025 01:00:52 +0000
Manifest this update:     Mon 09 Jun 2025 01:00:52 +0000
Manifest next update:     Tue 10 Jun 2025 01:00:52 +0000
Files and hashes:         1: WujsvmlVEtpODwK23A572pYNwzo.crl (hash: 6pOwd/HoBNookBY++AHA8m3MXtWYeImdcDktvq9cTiQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/b27a3b-acf8-4668-989f-83cf46689375/1/WujsvmlVEtpODwK23A572pYNwzo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/b27a3b-acf8-4668-989f-83cf46689375/1/WujsvmlVEtpODwK23A572pYNwzo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WujsvmlVEtpODwK23A572pYNwzo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 17:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:52:34:5d:7c:b6:b0:d3:4f:05:e4:29:3f:e0:ab:90:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ae8ecbe695512da4e0f02b6dc0e7bda960dc33a
        Validity
            Not Before: Jun  9 01:00:52 2025 GMT
            Not After : Jun 10 01:00:52 2025 GMT
        Subject: CN=c8f15636d8dcc56d4ae18e1c807425fa10dbad0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:94:36:8f:ba:42:85:00:45:9d:69:19:85:65:
                    57:74:06:ef:64:50:67:02:f1:4d:6d:f9:f4:3e:42:
                    97:41:4c:bf:02:be:e2:4c:6d:27:aa:8e:8c:de:16:
                    a3:57:35:87:75:c8:06:d9:70:b5:3c:3f:ce:19:05:
                    95:c0:87:96:34:60:aa:25:33:88:4a:51:d0:b8:3c:
                    8f:6b:75:44:5a:52:1d:7f:c6:a7:1a:ec:db:9c:39:
                    c3:8a:02:25:6a:0d:51:05:2e:29:d0:84:3c:0e:72:
                    03:0b:fd:a3:a2:ea:a1:b1:2e:44:fe:be:50:6f:19:
                    ad:a7:68:43:e1:12:e5:92:2c:47:a6:07:6e:b8:c1:
                    c1:33:50:0d:3c:3b:74:85:f7:a0:f7:5c:50:59:01:
                    21:a4:99:f3:5c:d8:08:bf:be:1a:cc:70:6d:fa:49:
                    b4:83:a6:86:48:5d:28:1b:dc:14:b9:a3:46:8a:92:
                    69:b7:27:b5:ee:08:84:9d:dd:8f:c3:9e:17:55:2d:
                    9f:b8:73:02:f5:8c:15:f4:29:a3:36:18:4d:8f:6e:
                    e1:ca:94:fa:3a:42:56:24:7c:41:24:b0:f1:57:f8:
                    d3:f6:48:f5:37:65:da:82:f9:ed:bc:a0:0f:1f:fa:
                    0c:0e:43:e8:81:b3:91:65:c9:83:65:ca:06:10:c6:
                    11:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:F1:56:36:D8:DC:C5:6D:4A:E1:8E:1C:80:74:25:FA:10:DB:AD:0F
            X509v3 Authority Key Identifier:
                keyid:5A:E8:EC:BE:69:55:12:DA:4E:0F:02:B6:DC:0E:7B:DA:96:0D:C3:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WujsvmlVEtpODwK23A572pYNwzo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b27a3b-acf8-4668-989f-83cf46689375/1/WujsvmlVEtpODwK23A572pYNwzo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b27a3b-acf8-4668-989f-83cf46689375/1/WujsvmlVEtpODwK23A572pYNwzo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:f2:cc:ca:e7:d4:51:cf:3b:66:0d:06:c1:7e:57:60:bd:ff:
         f8:d4:a8:0f:47:ee:1f:8f:c1:72:23:8e:14:e9:02:f7:f4:5f:
         78:6f:1e:93:69:fd:8f:b8:dc:ae:0a:b0:3b:83:30:ad:8a:ba:
         9f:a8:68:b9:da:8d:2f:7e:2d:3b:a2:09:70:e7:1f:dc:9c:34:
         e1:84:7c:07:02:9a:66:1f:87:ea:38:9f:9f:cf:4b:ff:cb:1d:
         da:38:8b:18:74:d6:75:5f:c2:92:10:9e:68:40:99:74:07:60:
         8c:e8:f2:59:6a:57:1a:67:0c:1e:32:be:83:7a:0d:d6:0c:47:
         88:8e:ba:60:fb:77:8f:15:68:d3:f4:fe:7e:1a:f3:4a:10:b9:
         e9:bf:bb:a7:8d:72:3a:6e:53:b7:15:8e:59:eb:b0:30:1f:93:
         6d:b0:a5:d6:c3:02:12:97:73:be:1e:cd:ed:6b:26:b1:0d:3b:
         ec:f4:c3:96:81:69:b4:ee:3a:1f:d5:e8:64:bf:ff:11:25:9e:
         3c:90:a8:5e:f6:1c:7b:cc:6f:1c:1c:6e:37:1d:63:5a:4d:a2:
         c0:11:b1:7f:8e:75:fd:65:6d:9f:5e:48:91:9e:14:d8:1b:93:
         e1:af:3e:be:33:6c:26:a0:7f:08:31:2f:32:8f:fb:aa:30:8c:
         85:fa:ff:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 02:24:39 2025 by rpki-client