Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/0ee692-6d64-473a-a063-2cfe8366660f/1/wOuGHF00WeA57O8QTP2T8ggnx0U.mft
File:                     wOuGHF00WeA57O8QTP2T8ggnx0U.mft (raw, json)
Hash identifier:          CrXuEuD97TRh9TiiT0vLARFgk3zFHBOKmL3VNwW4VFY=
Subject key identifier:   70:72:C1:2A:F0:1C:50:0E:92:CC:A4:20:2D:DA:BF:BD:C9:60:B9:A5
Authority key identifier: C0:EB:86:1C:5D:34:59:E0:39:EC:EF:10:4C:FD:93:F2:08:27:C7:45
Certificate issuer:       /CN=c0eb861c5d3459e039ecef104cfd93f20827c745
Certificate serial:       01964EFEF7084E2A06D78839300214EC456D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wOuGHF00WeA57O8QTP2T8ggnx0U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/0ee692-6d64-473a-a063-2cfe8366660f/1/wOuGHF00WeA57O8QTP2T8ggnx0U.mft
Manifest number:          9B
Signing time:             Sat 19 Apr 2025 17:00:54 +0000
Manifest this update:     Sat 19 Apr 2025 17:00:54 +0000
Manifest next update:     Sun 20 Apr 2025 17:00:54 +0000
Files and hashes:         1: wOuGHF00WeA57O8QTP2T8ggnx0U.crl (hash: 0dLvsj5KDXMy/cqHkTdyPeWs/GmXS2lQWzrNvun/shY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/0ee692-6d64-473a-a063-2cfe8366660f/1/wOuGHF00WeA57O8QTP2T8ggnx0U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/0ee692-6d64-473a-a063-2cfe8366660f/1/wOuGHF00WeA57O8QTP2T8ggnx0U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wOuGHF00WeA57O8QTP2T8ggnx0U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 20 Apr 2025 16:41:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:4e:fe:f7:08:4e:2a:06:d7:88:39:30:02:14:ec:45:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0eb861c5d3459e039ecef104cfd93f20827c745
        Validity
            Not Before: Apr 19 17:00:54 2025 GMT
            Not After : Apr 20 17:00:54 2025 GMT
        Subject: CN=7072c12af01c500e92cca4202ddabfbdc960b9a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f2:59:40:ec:9e:3a:f8:e7:bd:d6:ab:3a:ec:
                    68:35:0a:34:81:6d:88:57:0a:bb:d2:ff:26:6e:ff:
                    bd:e1:8f:0a:96:75:fa:db:cb:7b:30:91:cb:c2:e6:
                    d0:b3:6b:8b:16:ea:dd:83:88:e3:c3:04:20:37:aa:
                    e6:c9:b3:b7:f3:1e:8f:69:a9:eb:c6:f4:58:65:66:
                    f9:be:1b:a6:c7:fe:14:c9:01:3c:37:54:62:fc:d7:
                    8d:55:07:08:3f:87:63:ea:d9:02:4e:da:6f:89:32:
                    9e:55:42:b0:df:f3:29:f2:be:2b:13:1a:fa:ac:ce:
                    72:8a:16:d4:4b:5d:ec:71:9b:2d:65:3e:2f:6d:fc:
                    33:9f:65:21:7b:31:ce:df:1c:b0:9c:1a:da:ae:eb:
                    f4:70:0c:b9:f2:20:78:09:ff:c0:56:1e:71:1f:2d:
                    d3:94:e0:58:9d:a8:15:c2:a4:60:22:b4:c8:6f:22:
                    e1:58:c5:e3:ee:dd:71:0c:2b:6a:c4:60:a9:73:01:
                    e1:50:67:d9:97:b9:de:42:fc:8e:42:09:c5:8f:ed:
                    52:c4:9f:1c:88:50:1a:05:55:2c:08:9e:14:e4:27:
                    2d:c2:17:ea:4d:b0:3e:ec:8a:2c:77:67:25:00:18:
                    89:fb:e0:e5:40:bc:40:84:0d:74:90:76:15:68:48:
                    46:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:72:C1:2A:F0:1C:50:0E:92:CC:A4:20:2D:DA:BF:BD:C9:60:B9:A5
            X509v3 Authority Key Identifier:
                keyid:C0:EB:86:1C:5D:34:59:E0:39:EC:EF:10:4C:FD:93:F2:08:27:C7:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOuGHF00WeA57O8QTP2T8ggnx0U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/0ee692-6d64-473a-a063-2cfe8366660f/1/wOuGHF00WeA57O8QTP2T8ggnx0U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/0ee692-6d64-473a-a063-2cfe8366660f/1/wOuGHF00WeA57O8QTP2T8ggnx0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:3e:4b:5e:34:7e:23:96:14:36:81:ec:24:8e:7d:0a:1c:f6:
         d6:04:ec:fa:71:2a:3b:b1:d6:04:d8:7d:c6:03:c6:f7:f3:48:
         44:10:5e:40:08:47:23:37:41:eb:fa:58:8e:28:ae:34:6f:e2:
         32:1a:70:72:de:e2:ea:f2:80:94:c9:72:89:e1:20:de:80:11:
         14:7d:10:43:1c:a0:71:99:b0:95:66:a1:ee:56:1c:de:0d:88:
         e7:37:35:b3:1c:a1:a0:2e:a5:62:07:83:80:7c:88:08:90:08:
         30:62:e7:60:a5:b0:80:3c:01:2c:ae:0d:85:b7:1c:ef:84:63:
         b0:c7:8f:c8:23:2f:e9:24:a8:fc:7b:d1:89:ca:fe:a0:b5:43:
         ed:c7:2e:6c:9c:54:07:7c:47:ce:5a:74:db:0a:5b:00:54:0f:
         1a:c7:02:95:ab:53:8d:38:c1:1f:d2:cd:55:9f:9e:91:79:de:
         e0:51:9e:5c:65:04:12:21:41:63:e7:ca:c0:2f:46:7f:df:bc:
         2d:35:4b:d5:9c:16:a1:a8:5d:d8:58:6f:cd:31:96:b8:9c:aa:
         e2:f0:a2:de:8c:52:79:e3:3f:a1:fc:22:e2:6e:92:36:c6:36:
         47:40:4f:73:f0:c9:de:23:da:f4:b2:13:e7:87:0b:b4:61:8a:
         d7:14:17:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:51:41 2025 by rpki-client