Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/164986-fb3f-42ec-9635-0c8431acd68a/1/WWQcBXT0mlJRLm3QM7d7v5Es7cU.mft
File:                     WWQcBXT0mlJRLm3QM7d7v5Es7cU.mft (raw, json)
Hash identifier:          U7KutgVpgywZl0zF2zloAUWDCRYDaMPPfvJNKRDGn3k=
Subject key identifier:   AC:80:24:05:28:D9:38:38:00:C8:44:C2:2C:84:FC:00:B8:E4:5E:28
Authority key identifier: 59:64:1C:05:74:F4:9A:52:51:2E:6D:D0:33:B7:7B:BF:91:2C:ED:C5
Certificate issuer:       /CN=59641c0574f49a52512e6dd033b77bbf912cedc5
Certificate serial:       0196C7CD021F5BFC609780482E107E671110
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WWQcBXT0mlJRLm3QM7d7v5Es7cU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/164986-fb3f-42ec-9635-0c8431acd68a/1/WWQcBXT0mlJRLm3QM7d7v5Es7cU.mft
Manifest number:          04F3
Signing time:             Tue 13 May 2025 04:00:23 +0000
Manifest this update:     Tue 13 May 2025 04:00:23 +0000
Manifest next update:     Wed 14 May 2025 04:00:23 +0000
Files and hashes:         1: WWQcBXT0mlJRLm3QM7d7v5Es7cU.crl (hash: 6wxsD8q7yxy/0aRPFRhEXB5iB2ZDCckG76zAA34o3yo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/164986-fb3f-42ec-9635-0c8431acd68a/1/WWQcBXT0mlJRLm3QM7d7v5Es7cU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/164986-fb3f-42ec-9635-0c8431acd68a/1/WWQcBXT0mlJRLm3QM7d7v5Es7cU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WWQcBXT0mlJRLm3QM7d7v5Es7cU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 May 2025 04:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c7:cd:02:1f:5b:fc:60:97:80:48:2e:10:7e:67:11:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59641c0574f49a52512e6dd033b77bbf912cedc5
        Validity
            Not Before: May 13 04:00:23 2025 GMT
            Not After : May 14 04:00:23 2025 GMT
        Subject: CN=ac80240528d9383800c844c22c84fc00b8e45e28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b2:4b:a2:63:bf:65:75:c7:4d:8d:f6:13:4d:
                    97:b9:74:75:15:3a:c8:9b:ef:01:f2:68:67:99:3d:
                    10:69:c9:6b:7f:1a:ad:5c:61:74:14:f4:a1:e5:8e:
                    20:b9:d4:00:85:36:cf:3a:fd:e1:8a:d7:06:73:45:
                    7b:80:a6:8c:6c:b6:56:92:38:0d:59:78:aa:5f:83:
                    1f:91:d9:67:df:c9:1d:3b:eb:81:be:81:35:85:1c:
                    bd:7c:12:be:ba:29:60:51:06:98:2f:0b:62:50:b1:
                    79:dd:2c:78:8b:29:e3:dc:0b:80:fe:4f:73:8d:a1:
                    4e:e1:eb:3e:b5:28:f3:1f:67:45:80:90:e0:08:70:
                    0a:be:3e:f9:4f:8e:a8:6c:4f:8d:a7:d0:43:75:52:
                    ca:35:8d:bb:90:c5:8e:d8:ed:1e:97:2f:0e:68:52:
                    cc:bd:7f:26:30:5c:9c:f5:10:b8:03:3d:1b:0f:e2:
                    70:f8:a8:4e:98:1b:53:2a:54:d6:d4:21:f9:b9:9a:
                    6c:d0:f0:1e:aa:a6:92:0e:18:14:d2:d1:5c:8a:ca:
                    66:af:34:37:8d:39:5a:46:8e:8d:db:a0:8c:66:76:
                    11:75:97:d8:ea:45:65:09:fa:89:30:30:45:3e:a8:
                    4a:2f:67:75:13:62:9e:e9:ad:07:af:f4:fb:f5:49:
                    3f:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:80:24:05:28:D9:38:38:00:C8:44:C2:2C:84:FC:00:B8:E4:5E:28
            X509v3 Authority Key Identifier:
                keyid:59:64:1C:05:74:F4:9A:52:51:2E:6D:D0:33:B7:7B:BF:91:2C:ED:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WWQcBXT0mlJRLm3QM7d7v5Es7cU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/164986-fb3f-42ec-9635-0c8431acd68a/1/WWQcBXT0mlJRLm3QM7d7v5Es7cU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/164986-fb3f-42ec-9635-0c8431acd68a/1/WWQcBXT0mlJRLm3QM7d7v5Es7cU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:8d:e2:81:e1:61:15:24:1c:fe:98:d3:be:b6:24:a5:bc:d5:
         a2:0b:a6:d9:43:a5:2d:82:2d:88:dd:83:0c:13:ba:0a:9a:7a:
         dc:cd:cb:01:92:85:da:1a:09:f4:99:90:14:e4:6b:00:21:59:
         61:fc:de:e7:08:84:12:12:c9:b5:27:cb:f1:d2:a6:87:19:d1:
         c1:86:dc:96:1e:0d:75:05:d0:c9:6d:89:9c:53:8e:04:5e:0c:
         ca:1c:21:c2:7a:12:61:a0:cf:89:aa:14:eb:86:1e:17:a1:b6:
         f6:d5:b1:d1:a5:00:f4:30:b4:a2:34:2b:49:f8:a3:8c:72:72:
         e5:be:f9:b7:11:db:2e:39:bf:59:b3:b3:86:db:3a:df:ac:b7:
         30:3b:f0:8b:b5:49:07:eb:26:3f:e6:dd:eb:88:76:7c:8b:70:
         1a:81:ea:0b:29:cf:c1:20:2d:d0:28:3f:da:27:32:0d:52:c9:
         2c:06:1c:38:59:c8:b3:5c:19:ca:3d:70:0c:0b:14:e0:c1:19:
         e9:2c:e3:26:ff:22:1f:ea:cd:25:5e:87:06:8d:17:5f:d2:b2:
         2a:9a:42:69:22:52:15:e1:ce:5e:1a:bc:53:cd:ca:b2:95:45:
         a0:0a:2b:ab:45:d8:15:78:b4:6c:2f:56:dc:b9:f5:58:f3:1d:
         83:49:39:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 13:32:26 2025 by rpki-client