Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/cc76b4-e711-44a5-b823-8e6eff16a6f8/1/DWb-4PMIhlf7_SOngt9Xec-ROmM.mft
File:                     DWb-4PMIhlf7_SOngt9Xec-ROmM.mft (raw, json)
Hash identifier:          CZiLVYdmg9ak13dJUhc+OhLT7uuNj3g178XTfiQZ2Oo=
Subject key identifier:   6C:E5:56:6C:0F:CC:D0:C3:E1:00:55:99:49:17:23:38:23:3A:47:20
Authority key identifier: 0D:66:FE:E0:F3:08:86:57:FB:FD:23:A7:82:DF:57:79:CF:91:3A:63
Certificate issuer:       /CN=0d66fee0f3088657fbfd23a782df5779cf913a63
Certificate serial:       019746672B9B04F2B6C2F6BDEA2361A4BA88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DWb-4PMIhlf7_SOngt9Xec-ROmM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/cc76b4-e711-44a5-b823-8e6eff16a6f8/1/DWb-4PMIhlf7_SOngt9Xec-ROmM.mft
Manifest number:          0E3B
Signing time:             Fri 06 Jun 2025 18:00:55 +0000
Manifest this update:     Fri 06 Jun 2025 18:00:55 +0000
Manifest next update:     Sat 07 Jun 2025 18:00:55 +0000
Files and hashes:         1: DWb-4PMIhlf7_SOngt9Xec-ROmM.crl (hash: FofgUqImR+f5ITHzgPNlT2xJopYD3eFQnPsFzTrDKvY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/cc76b4-e711-44a5-b823-8e6eff16a6f8/1/DWb-4PMIhlf7_SOngt9Xec-ROmM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/cc76b4-e711-44a5-b823-8e6eff16a6f8/1/DWb-4PMIhlf7_SOngt9Xec-ROmM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DWb-4PMIhlf7_SOngt9Xec-ROmM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:67:2b:9b:04:f2:b6:c2:f6:bd:ea:23:61:a4:ba:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d66fee0f3088657fbfd23a782df5779cf913a63
        Validity
            Not Before: Jun  6 18:00:55 2025 GMT
            Not After : Jun  7 18:00:55 2025 GMT
        Subject: CN=6ce5566c0fccd0c3e100559949172338233a4720
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e2:fd:3f:82:e1:21:fd:8f:83:57:83:99:14:
                    38:d9:14:b4:85:b4:9e:80:69:69:55:16:4b:be:b6:
                    76:59:08:99:ad:d7:d7:fa:b8:32:79:46:fb:22:b8:
                    66:b2:c2:a4:39:c2:fa:68:94:3f:7f:54:13:c9:9c:
                    bc:00:74:9a:81:9a:ce:4b:91:cc:ee:68:bb:ed:d3:
                    da:a9:6c:08:bc:ba:99:00:32:77:3b:93:82:37:2b:
                    e9:23:b1:3f:36:ce:03:61:db:53:c3:d1:83:21:6f:
                    47:8f:3e:aa:2d:73:c7:cb:f7:0e:06:96:ab:bc:0a:
                    60:44:d1:20:1a:c7:d2:35:a9:de:86:a7:72:c3:00:
                    21:7a:5e:b7:c0:e4:8f:2b:98:19:a9:70:79:03:b8:
                    79:bb:08:bd:2f:a1:c2:61:c3:bf:31:6f:9c:bf:ca:
                    b1:a3:e3:6c:d0:7a:66:cc:93:55:9c:3d:10:6c:b1:
                    78:e8:5c:cb:84:ad:66:ce:7b:ac:ca:6a:07:35:9b:
                    85:9d:87:a0:81:f2:64:96:68:8a:d4:f1:25:32:3f:
                    8d:9b:75:9a:61:74:b5:9a:97:c3:09:76:93:2d:8e:
                    f9:f2:a6:6f:f1:b2:bf:60:ca:1f:a8:b6:f5:20:62:
                    5d:ee:5b:1e:40:d2:f2:ef:39:a6:78:47:e6:9e:1f:
                    89:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:E5:56:6C:0F:CC:D0:C3:E1:00:55:99:49:17:23:38:23:3A:47:20
            X509v3 Authority Key Identifier:
                keyid:0D:66:FE:E0:F3:08:86:57:FB:FD:23:A7:82:DF:57:79:CF:91:3A:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DWb-4PMIhlf7_SOngt9Xec-ROmM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/cc76b4-e711-44a5-b823-8e6eff16a6f8/1/DWb-4PMIhlf7_SOngt9Xec-ROmM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/cc76b4-e711-44a5-b823-8e6eff16a6f8/1/DWb-4PMIhlf7_SOngt9Xec-ROmM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:fe:81:02:20:be:38:66:da:02:16:9c:28:88:49:37:89:89:
         e4:8c:c0:d8:e5:07:93:c9:7b:23:b2:bc:69:c5:8b:b5:1f:49:
         7f:70:65:b4:16:91:7a:87:19:d3:25:0e:c1:3f:c1:cf:02:01:
         51:d9:12:74:a3:47:94:64:b5:0f:e7:78:e1:59:94:92:b2:eb:
         e6:ad:47:39:98:bd:92:30:21:81:8c:8b:84:e1:ec:8b:69:9e:
         fe:a3:4e:63:2d:a1:ef:ff:dd:35:85:b7:19:c4:82:e2:dd:17:
         06:2c:04:16:10:b4:3b:cc:17:c2:7c:dc:d8:4a:4a:e5:78:18:
         cd:43:e7:91:ab:eb:69:90:2f:c7:12:17:9c:d6:c9:9d:87:ce:
         a8:24:0b:31:37:0a:bb:83:d3:f3:b1:61:cb:c5:47:a8:36:2a:
         49:8e:a3:41:fc:df:02:49:09:d5:5e:d1:7d:4f:48:c9:64:a3:
         5d:64:75:08:05:49:37:1c:f4:f3:c2:32:af:99:94:9b:00:a5:
         4b:04:ad:03:aa:53:be:30:6e:9e:1d:c1:ec:cc:19:83:da:4e:
         f0:58:85:cf:79:fa:e6:81:39:02:0b:94:a0:4e:04:3b:c7:40:
         f2:6b:2e:b5:f5:30:51:67:0f:cc:a7:91:e0:50:e8:70:6d:a4:
         d6:85:9b:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 00:59:13 2025 by rpki-client