Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/eae1f3-884f-48f9-88c8-edc325ae7b18/1/wK1Je4BBY5xLPSIQeCy10ZgUxOA.mft
File:                     wK1Je4BBY5xLPSIQeCy10ZgUxOA.mft (raw, json)
Hash identifier:          NAsSnTePhuDqPkUsI/dA8vVpEgdKhq+YcaOrbwqURMo=
Subject key identifier:   A2:5B:F7:8F:4B:5E:03:6F:E7:3F:74:58:B1:29:E5:09:73:08:D6:7D
Authority key identifier: C0:AD:49:7B:80:41:63:9C:4B:3D:22:10:78:2C:B5:D1:98:14:C4:E0
Certificate issuer:       /CN=c0ad497b8041639c4b3d2210782cb5d19814c4e0
Certificate serial:       0197462FEFCFA4AC1601E0847C7B295F71BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wK1Je4BBY5xLPSIQeCy10ZgUxOA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/eae1f3-884f-48f9-88c8-edc325ae7b18/1/wK1Je4BBY5xLPSIQeCy10ZgUxOA.mft
Manifest number:          010D
Signing time:             Fri 06 Jun 2025 17:00:36 +0000
Manifest this update:     Fri 06 Jun 2025 17:00:36 +0000
Manifest next update:     Sat 07 Jun 2025 17:00:36 +0000
Files and hashes:         1: wK1Je4BBY5xLPSIQeCy10ZgUxOA.crl (hash: cnBWDiP8AHzZDspzEl+/srhefMjiz0igMsY7WCkiIlc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/eae1f3-884f-48f9-88c8-edc325ae7b18/1/wK1Je4BBY5xLPSIQeCy10ZgUxOA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/eae1f3-884f-48f9-88c8-edc325ae7b18/1/wK1Je4BBY5xLPSIQeCy10ZgUxOA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wK1Je4BBY5xLPSIQeCy10ZgUxOA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 17:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:2f:ef:cf:a4:ac:16:01:e0:84:7c:7b:29:5f:71:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0ad497b8041639c4b3d2210782cb5d19814c4e0
        Validity
            Not Before: Jun  6 17:00:36 2025 GMT
            Not After : Jun  7 17:00:36 2025 GMT
        Subject: CN=a25bf78f4b5e036fe73f7458b129e5097308d67d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:b9:bf:b8:f8:4f:62:de:64:46:35:48:73:a3:
                    15:f2:96:14:7a:fb:55:e6:e5:08:a8:3e:7a:3b:ce:
                    9b:80:01:17:50:87:e6:0a:5e:6c:fb:01:1e:df:22:
                    a9:0d:2f:83:1f:16:d1:d8:6a:c2:f5:f0:ac:2e:e5:
                    09:ae:a5:b6:4f:6d:45:42:dc:eb:93:c2:a6:e9:6f:
                    82:04:9e:1d:f0:54:30:67:d0:5c:25:74:11:37:fd:
                    66:ee:77:83:99:e4:95:fe:1b:48:a5:db:04:7b:01:
                    94:5c:b8:44:10:c2:49:d7:20:27:30:7f:aa:96:bf:
                    38:cf:68:b5:b3:70:c2:7f:74:95:75:1e:71:27:a6:
                    c3:51:d1:79:67:32:3e:8d:1d:bd:01:a0:ae:60:67:
                    13:f3:a6:65:59:16:93:2f:18:da:37:7b:56:55:b3:
                    5d:8d:ed:25:8a:7f:f6:f2:93:e0:e3:3b:78:dd:49:
                    cb:33:e9:ab:7f:31:af:85:e3:e8:bf:3a:a1:f5:45:
                    e3:9c:76:62:77:8c:34:2e:b6:6a:86:32:b9:2f:e0:
                    fc:b1:70:fd:72:1a:29:ee:c9:20:5b:2b:3b:a5:b2:
                    79:9d:88:b9:5c:f3:0a:53:42:05:43:eb:4d:e7:45:
                    ce:8a:66:17:2b:f9:e0:a7:53:52:74:b1:c8:bf:38:
                    34:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:5B:F7:8F:4B:5E:03:6F:E7:3F:74:58:B1:29:E5:09:73:08:D6:7D
            X509v3 Authority Key Identifier:
                keyid:C0:AD:49:7B:80:41:63:9C:4B:3D:22:10:78:2C:B5:D1:98:14:C4:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wK1Je4BBY5xLPSIQeCy10ZgUxOA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/eae1f3-884f-48f9-88c8-edc325ae7b18/1/wK1Je4BBY5xLPSIQeCy10ZgUxOA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/eae1f3-884f-48f9-88c8-edc325ae7b18/1/wK1Je4BBY5xLPSIQeCy10ZgUxOA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:6c:a0:3e:93:d0:ba:61:fd:bc:bc:cf:20:d3:ee:7b:14:91:
         43:c6:4d:5a:d2:e5:5d:9e:0f:45:c1:47:6b:ab:e9:ac:19:2b:
         7e:01:0d:aa:71:11:ff:53:68:b8:e3:08:37:49:43:c0:97:b2:
         c8:16:53:0f:4d:5a:95:59:38:d2:96:be:8b:8e:db:fc:ef:3a:
         f1:b2:67:d0:d5:f3:e1:cc:7a:0b:81:6b:31:09:26:33:bd:90:
         a7:dd:e3:1d:f8:91:10:2a:33:77:f0:76:bf:7e:c0:4f:77:96:
         3d:b3:44:94:ff:e3:1d:8a:fe:30:62:37:6d:e9:b2:ac:3e:f9:
         dd:6d:bd:ba:2c:69:ec:0c:0a:2d:7f:06:e2:da:96:8d:2c:95:
         3f:ee:3a:30:aa:e2:d1:0a:2d:f0:77:12:3e:71:fb:b5:43:8f:
         18:fd:95:16:63:8e:c1:7a:c9:aa:df:d8:b9:45:cd:9f:16:8a:
         dd:be:9d:a7:1c:63:de:ff:7d:65:99:1a:82:85:70:aa:77:3e:
         cf:dd:a2:90:24:95:02:1c:f0:07:48:72:59:40:c4:d0:73:23:
         b7:16:a8:66:f3:62:55:03:c0:da:86:30:25:47:9a:a1:26:13:
         d6:b6:c9:c4:ce:30:71:f8:cb:d2:22:31:dc:3f:43:29:81:d9:
         df:cd:53:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:21:09 2025 by rpki-client