Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/461a83-810c-43ae-ac25-64e2bd619318/1/wWD3u-jXY2d3YUisuMTKNflr6Vc.mft
File:                     wWD3u-jXY2d3YUisuMTKNflr6Vc.mft (raw, json)
Hash identifier:          NsVQSzMS/RYdOLgWseBj+VENEzRfH2cj9jk4kC/CPEQ=
Subject key identifier:   C0:E7:FB:85:FA:1C:67:12:B9:66:D6:92:A3:1F:D3:1D:90:CC:0F:2F
Authority key identifier: C1:60:F7:BB:E8:D7:63:67:77:61:48:AC:B8:C4:CA:35:F9:6B:E9:57
Certificate issuer:       /CN=c160f7bbe8d76367776148acb8c4ca35f96be957
Certificate serial:       01974A7B1F8EBE4EC4A7BFD2A55EEF3AB856
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wWD3u-jXY2d3YUisuMTKNflr6Vc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/461a83-810c-43ae-ac25-64e2bd619318/1/wWD3u-jXY2d3YUisuMTKNflr6Vc.mft
Manifest number:          154F
Signing time:             Sat 07 Jun 2025 13:01:12 +0000
Manifest this update:     Sat 07 Jun 2025 13:01:12 +0000
Manifest next update:     Sun 08 Jun 2025 13:01:12 +0000
Files and hashes:         1: wWD3u-jXY2d3YUisuMTKNflr6Vc.crl (hash: A7Z+eybmU8tjDEw1506q3ymsjote7PIZWUZppCNJof4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/461a83-810c-43ae-ac25-64e2bd619318/1/wWD3u-jXY2d3YUisuMTKNflr6Vc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/461a83-810c-43ae-ac25-64e2bd619318/1/wWD3u-jXY2d3YUisuMTKNflr6Vc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wWD3u-jXY2d3YUisuMTKNflr6Vc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 09:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4a:7b:1f:8e:be:4e:c4:a7:bf:d2:a5:5e:ef:3a:b8:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c160f7bbe8d76367776148acb8c4ca35f96be957
        Validity
            Not Before: Jun  7 13:01:12 2025 GMT
            Not After : Jun  8 13:01:12 2025 GMT
        Subject: CN=c0e7fb85fa1c6712b966d692a31fd31d90cc0f2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:77:e9:d9:b8:67:73:a2:ab:ba:85:af:72:e3:
                    6e:02:66:5f:bc:9c:63:a1:95:9a:45:a1:59:c6:d1:
                    d3:f4:42:95:a4:8e:ea:d4:99:d7:e3:89:36:8e:d7:
                    6f:10:cf:cc:87:bd:66:60:78:6b:28:28:1e:37:1e:
                    6a:95:ca:6b:00:ba:a3:3b:6c:60:f0:0d:96:10:01:
                    09:41:96:45:9f:f6:c0:5b:45:e2:7c:28:dd:bd:fe:
                    f7:ba:94:db:50:50:1b:ae:86:ff:a9:98:17:10:7b:
                    45:f7:b3:2c:c0:6a:da:ef:e6:46:72:dc:2e:35:13:
                    f2:1e:68:25:50:9d:98:88:bb:70:2b:ac:18:59:93:
                    d6:f2:b7:39:ad:d2:ef:7a:64:be:48:40:83:ac:9b:
                    43:78:f3:9c:8c:14:34:fc:78:3c:c0:a3:3c:a1:c4:
                    8c:d8:18:c5:df:15:66:36:eb:82:3a:72:d3:1f:98:
                    41:86:1f:34:72:66:c9:84:3d:7f:5d:ce:fe:4e:a8:
                    42:96:ac:61:8b:fb:5d:35:d4:b8:f7:db:6a:28:5f:
                    b1:d5:78:44:9f:8d:99:06:92:90:e6:ab:57:02:0d:
                    e7:13:c2:c7:16:94:33:9d:5f:a5:b8:fe:ae:f3:8a:
                    c8:7a:19:60:23:a6:6d:1a:25:14:9e:71:d7:00:5c:
                    dd:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:E7:FB:85:FA:1C:67:12:B9:66:D6:92:A3:1F:D3:1D:90:CC:0F:2F
            X509v3 Authority Key Identifier:
                keyid:C1:60:F7:BB:E8:D7:63:67:77:61:48:AC:B8:C4:CA:35:F9:6B:E9:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wWD3u-jXY2d3YUisuMTKNflr6Vc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/461a83-810c-43ae-ac25-64e2bd619318/1/wWD3u-jXY2d3YUisuMTKNflr6Vc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/461a83-810c-43ae-ac25-64e2bd619318/1/wWD3u-jXY2d3YUisuMTKNflr6Vc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:b3:dd:e9:9b:d8:1c:05:6d:f8:cd:23:01:21:f6:ed:61:92:
         65:9d:9d:10:01:89:77:ba:3e:79:d8:67:ca:63:8f:6a:f8:ca:
         f8:f0:6f:48:c3:de:df:9c:a2:85:65:4b:e8:a1:a6:02:57:95:
         a0:f1:46:c8:2c:fd:98:78:8d:a7:27:14:ff:c0:67:f6:a9:4f:
         37:40:43:80:a4:0b:6a:c3:61:03:14:8a:b4:0f:c9:ad:42:03:
         99:07:c2:77:10:b5:aa:b1:d0:a7:b4:df:d1:a7:67:0c:36:db:
         79:f6:b1:74:4e:dc:53:01:7f:97:72:fe:b5:d2:dc:a6:37:d2:
         ee:54:be:eb:ca:2c:22:69:78:38:0c:7e:57:86:de:38:de:9d:
         c1:cb:52:18:ff:28:fa:51:8a:ad:b0:0b:e7:12:a2:e6:dc:93:
         f0:91:45:66:06:f5:88:e1:aa:96:87:cd:b6:7a:01:5f:c8:62:
         75:1d:36:cd:75:de:33:5a:a4:c2:b9:64:2e:02:cf:6c:74:07:
         ee:40:68:5f:86:0c:d6:32:e7:4d:3f:ce:04:84:1f:2f:45:42:
         12:7e:06:f1:a1:3a:2c:84:52:1d:65:4e:c1:0b:f3:94:cf:94:
         35:05:3d:ef:b4:ed:92:17:5a:47:e5:e8:a3:ae:22:16:0f:3e:
         20:07:55:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:12:12 2025 by rpki-client