Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/420a13-f0a5-4db0-9048-15958a89a012/1/wOOV6sUDfy5HhZVvjai4aeu-_OA.mft
File:                     wOOV6sUDfy5HhZVvjai4aeu-_OA.mft (raw, json)
Hash identifier:          dPAEA6Jsx7uuVtHJ0LR+tu9Wo/SVsMvqGU/42RBxMtQ=
Subject key identifier:   95:F7:6D:91:1E:66:61:5F:F3:98:07:67:6D:56:04:76:85:24:1C:FD
Authority key identifier: C0:E3:95:EA:C5:03:7F:2E:47:85:95:6F:8D:A8:B8:69:EB:BE:FC:E0
Certificate issuer:       /CN=c0e395eac5037f2e4785956f8da8b869ebbefce0
Certificate serial:       01974C6922BB3A26A6A6BD703B4D44F2D430
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wOOV6sUDfy5HhZVvjai4aeu-_OA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/420a13-f0a5-4db0-9048-15958a89a012/1/wOOV6sUDfy5HhZVvjai4aeu-_OA.mft
Manifest number:          0C72
Signing time:             Sat 07 Jun 2025 22:00:47 +0000
Manifest this update:     Sat 07 Jun 2025 22:00:47 +0000
Manifest next update:     Sun 08 Jun 2025 22:00:47 +0000
Files and hashes:         1: wOOV6sUDfy5HhZVvjai4aeu-_OA.crl (hash: P34/AE40hTELqmnw+UKDOwlDyJPi5ztZB7RJpni8MVA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/420a13-f0a5-4db0-9048-15958a89a012/1/wOOV6sUDfy5HhZVvjai4aeu-_OA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/420a13-f0a5-4db0-9048-15958a89a012/1/wOOV6sUDfy5HhZVvjai4aeu-_OA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wOOV6sUDfy5HhZVvjai4aeu-_OA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4c:69:22:bb:3a:26:a6:a6:bd:70:3b:4d:44:f2:d4:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0e395eac5037f2e4785956f8da8b869ebbefce0
        Validity
            Not Before: Jun  7 22:00:47 2025 GMT
            Not After : Jun  8 22:00:47 2025 GMT
        Subject: CN=95f76d911e66615ff39807676d56047685241cfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a7:06:36:37:38:3f:a7:76:0a:fe:39:3d:c5:
                    ea:31:9e:47:74:58:aa:9f:27:ab:2f:f0:0f:8e:ef:
                    45:a8:01:4d:69:9b:39:35:3b:bb:c9:38:f8:26:7f:
                    97:93:42:f5:0e:c6:81:82:43:d4:2f:42:8e:19:e3:
                    f7:d3:79:08:14:e5:6f:40:9e:b0:27:51:ba:1d:dd:
                    39:32:95:3a:38:f9:de:7e:de:c0:0e:01:31:d8:4b:
                    0c:6c:49:fb:62:01:05:96:0c:56:1b:55:6c:b4:01:
                    8f:57:51:f6:ee:51:f3:c5:7d:bb:d1:29:e6:00:d2:
                    ee:30:d3:b7:d6:0d:d7:63:3a:b2:ad:97:b1:c9:68:
                    2b:34:88:00:5d:d7:77:e3:cf:42:0b:6a:ce:22:24:
                    18:c2:ac:ae:09:fd:5b:29:27:ba:f9:f3:ed:97:75:
                    e7:12:0b:3e:0d:72:aa:11:66:e4:48:0f:8a:85:22:
                    5c:cf:94:7a:c9:7b:c9:40:4e:ae:47:d9:09:ac:0c:
                    ed:d2:8b:ca:be:01:f7:a2:27:b0:a8:51:65:83:83:
                    15:79:88:c4:9e:0d:39:3f:4f:1c:0e:49:fd:2f:e4:
                    30:aa:01:17:93:bb:b2:46:dc:8a:47:9c:22:97:aa:
                    a7:aa:0e:aa:64:67:23:15:9a:90:8f:be:eb:38:f8:
                    50:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:F7:6D:91:1E:66:61:5F:F3:98:07:67:6D:56:04:76:85:24:1C:FD
            X509v3 Authority Key Identifier:
                keyid:C0:E3:95:EA:C5:03:7F:2E:47:85:95:6F:8D:A8:B8:69:EB:BE:FC:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOOV6sUDfy5HhZVvjai4aeu-_OA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/420a13-f0a5-4db0-9048-15958a89a012/1/wOOV6sUDfy5HhZVvjai4aeu-_OA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/420a13-f0a5-4db0-9048-15958a89a012/1/wOOV6sUDfy5HhZVvjai4aeu-_OA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:e8:6c:d6:cd:d5:00:ca:95:1b:8d:a6:06:c4:4c:6e:20:67:
         ad:9f:79:19:96:bc:14:03:33:fc:33:3d:10:a0:75:ae:b2:1b:
         75:b0:77:5e:fc:29:99:b4:2c:1c:a0:7b:36:ac:ae:a5:96:12:
         82:52:a0:9a:db:1e:79:a4:4f:bb:76:49:6c:db:e7:86:70:e4:
         cc:2e:f0:b0:8b:fa:36:0a:58:11:f6:b2:65:6c:eb:5e:d0:de:
         91:d2:4c:65:e1:9d:0e:ed:31:68:a4:fb:db:d8:02:d4:e6:b8:
         56:f4:f9:e7:9e:fc:a1:74:a6:fd:a8:11:9f:d7:f1:49:ed:0f:
         b2:ab:2a:41:08:e2:7f:3c:b8:4b:3f:01:4b:73:5a:9f:a0:3c:
         7e:62:a4:d7:6f:f5:9f:2a:36:db:88:b4:8d:1d:87:9b:c0:9d:
         f2:ec:9d:fa:08:cf:54:87:9a:6b:51:34:7b:34:b2:49:71:2a:
         e4:dd:9c:ee:87:c7:89:66:d2:aa:51:34:a3:97:11:84:20:f3:
         08:f7:1e:8e:9b:a3:3c:b6:4a:5f:da:9b:4f:55:74:d3:7e:33:
         61:44:6c:ad:55:2d:af:15:da:65:44:70:6c:96:80:78:c8:79:
         73:79:cc:c3:c8:49:ff:15:f8:ce:e3:25:3a:17:4c:6a:a8:23:
         fe:73:2f:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:40:17 2025 by rpki-client