Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/9c64e2-4b64-43da-b904-10b907ffd08f/1/wZXJC6JdDegZV1eMeMt7JOjJPsk.mft
File:                     wZXJC6JdDegZV1eMeMt7JOjJPsk.mft (raw, json)
Hash identifier:          00PqNf/DY4lOM6eMV1neL38X1w2kmX69ICyPYby/1sM=
Subject key identifier:   06:68:66:3D:EA:B7:22:70:89:AD:1B:9E:98:29:E6:89:1A:25:DE:7B
Authority key identifier: C1:95:C9:0B:A2:5D:0D:E8:19:57:57:8C:78:CB:7B:24:E8:C9:3E:C9
Certificate issuer:       /CN=c195c90ba25d0de81957578c78cb7b24e8c93ec9
Certificate serial:       01974666C87B71166051C337CE00466A875B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wZXJC6JdDegZV1eMeMt7JOjJPsk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/9c64e2-4b64-43da-b904-10b907ffd08f/1/wZXJC6JdDegZV1eMeMt7JOjJPsk.mft
Manifest number:          97
Signing time:             Fri 06 Jun 2025 18:00:30 +0000
Manifest this update:     Fri 06 Jun 2025 18:00:30 +0000
Manifest next update:     Sat 07 Jun 2025 18:00:30 +0000
Files and hashes:         1: wZXJC6JdDegZV1eMeMt7JOjJPsk.crl (hash: PgJe2dHqVbRtdubZdDV5VXAZao705nRaHdw+SnDFlX0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/9c64e2-4b64-43da-b904-10b907ffd08f/1/wZXJC6JdDegZV1eMeMt7JOjJPsk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/9c64e2-4b64-43da-b904-10b907ffd08f/1/wZXJC6JdDegZV1eMeMt7JOjJPsk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wZXJC6JdDegZV1eMeMt7JOjJPsk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:66:c8:7b:71:16:60:51:c3:37:ce:00:46:6a:87:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c195c90ba25d0de81957578c78cb7b24e8c93ec9
        Validity
            Not Before: Jun  6 18:00:30 2025 GMT
            Not After : Jun  7 18:00:30 2025 GMT
        Subject: CN=0668663deab7227089ad1b9e9829e6891a25de7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:48:45:e2:5f:9c:4d:2c:25:65:1a:73:5e:8c:
                    51:fb:2f:09:44:3c:06:85:16:90:1d:a7:40:21:a7:
                    24:05:7d:aa:18:c9:62:2d:c1:bd:c9:74:97:ac:81:
                    80:b2:e1:6b:f9:5b:44:62:3a:23:00:5a:6a:a2:58:
                    54:b4:43:db:2e:10:2e:47:7a:24:45:21:67:12:23:
                    f4:5e:67:73:f1:bc:5d:cf:9a:11:a7:5d:3f:4c:9f:
                    68:cd:a5:3e:a7:59:7f:0f:b0:b1:0e:c9:7c:12:b5:
                    3a:52:a8:8e:00:aa:fe:54:7f:a0:1b:1d:b5:bb:a8:
                    67:1b:70:6b:cf:97:96:5c:8c:78:f9:ed:3c:da:c7:
                    5e:42:92:e2:f5:bf:d9:f1:65:8c:fd:08:ab:57:a2:
                    b0:c6:99:28:07:b5:a5:f3:07:90:c8:b1:da:f0:b3:
                    09:c4:97:37:32:d6:11:cd:55:e5:3b:67:34:64:17:
                    8a:81:de:f6:ad:e3:31:5a:35:8c:41:3d:9f:64:74:
                    53:c1:6d:4b:ed:c1:85:72:78:9c:f0:fb:61:45:5f:
                    b0:e4:db:7d:13:54:42:65:00:be:ea:79:64:32:3d:
                    e0:84:fa:b2:25:b5:09:9c:88:42:4e:4e:c9:05:3f:
                    b8:9e:ac:f5:b0:1a:ca:79:5b:7f:03:e9:3c:2d:37:
                    a3:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:68:66:3D:EA:B7:22:70:89:AD:1B:9E:98:29:E6:89:1A:25:DE:7B
            X509v3 Authority Key Identifier:
                keyid:C1:95:C9:0B:A2:5D:0D:E8:19:57:57:8C:78:CB:7B:24:E8:C9:3E:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wZXJC6JdDegZV1eMeMt7JOjJPsk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9c64e2-4b64-43da-b904-10b907ffd08f/1/wZXJC6JdDegZV1eMeMt7JOjJPsk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9c64e2-4b64-43da-b904-10b907ffd08f/1/wZXJC6JdDegZV1eMeMt7JOjJPsk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:13:c0:b6:b3:bd:8e:d1:2f:cc:9d:16:f2:5d:1c:f1:3a:ee:
         5d:3b:06:6a:99:76:30:41:8b:2b:31:2c:e8:e7:4a:7c:e3:c5:
         0a:0b:10:8a:c1:67:7b:15:75:85:3e:d9:ab:c6:5e:a7:43:85:
         bf:90:e6:ca:63:7e:75:c2:73:cb:d1:7f:bf:09:b1:c2:c0:96:
         c9:53:c7:e8:a2:96:5b:71:19:ce:d7:80:61:f8:5a:eb:59:ef:
         d5:53:c0:94:6e:a6:f6:59:a7:32:95:aa:00:d7:e2:99:fe:f7:
         f2:dd:d5:af:e8:60:c2:39:8a:13:9c:d2:aa:d0:cf:51:44:1d:
         8a:f7:0b:34:f5:20:c5:28:8e:a1:92:48:83:ec:c2:17:55:d1:
         b1:fa:56:7a:72:8b:ac:21:93:46:74:5c:dd:74:0d:3b:85:27:
         48:60:e7:b7:e5:68:5e:9a:6a:2e:af:86:59:42:1a:97:3c:a7:
         bf:9b:6a:b2:d3:ff:93:99:99:45:f3:56:bf:a3:f3:ba:1e:2a:
         b5:35:e3:e3:a4:34:75:73:74:c8:05:06:03:53:51:03:73:0b:
         83:41:79:07:0a:cc:f5:05:9a:66:9b:33:d6:24:f3:df:a1:9b:
         05:f3:bc:5e:b9:bc:57:10:28:94:5a:21:8c:77:b6:d3:d4:51:
         fd:ab:32:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:10:15 2025 by rpki-client