Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/da7fe1-4627-483d-8832-269a6b823b7e/1/w27RUSe_ywvNemOGi0mck8szURM.mft
File:                     w27RUSe_ywvNemOGi0mck8szURM.mft (raw, json)
Hash identifier:          O/stFKBEyev3RAl0fIY2T2+Z4Jg0HbRZYYXWnpkSZXI=
Subject key identifier:   B9:63:7C:E3:A6:21:51:51:C2:22:59:E6:0B:FC:64:2E:25:1D:90:84
Authority key identifier: C3:6E:D1:51:27:BF:CB:0B:CD:7A:63:86:8B:49:9C:93:CB:33:51:13
Certificate issuer:       /CN=c36ed15127bfcb0bcd7a63868b499c93cb335113
Certificate serial:       0198D473F53969EE960FDD331E0FBB9A52E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w27RUSe_ywvNemOGi0mck8szURM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/da7fe1-4627-483d-8832-269a6b823b7e/1/w27RUSe_ywvNemOGi0mck8szURM.mft
Manifest number:          FD
Signing time:             Sat 23 Aug 2025 01:03:45 +0000
Manifest this update:     Sat 23 Aug 2025 01:03:45 +0000
Manifest next update:     Sun 24 Aug 2025 01:03:45 +0000
Files and hashes:         1: w27RUSe_ywvNemOGi0mck8szURM.crl (hash: y7dQZvwRd7it7uREoD3J+0x1zHkiWpsNkDfemP9JoQM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/da7fe1-4627-483d-8832-269a6b823b7e/1/w27RUSe_ywvNemOGi0mck8szURM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/da7fe1-4627-483d-8832-269a6b823b7e/1/w27RUSe_ywvNemOGi0mck8szURM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w27RUSe_ywvNemOGi0mck8szURM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 01:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:73:f5:39:69:ee:96:0f:dd:33:1e:0f:bb:9a:52:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c36ed15127bfcb0bcd7a63868b499c93cb335113
        Validity
            Not Before: Aug 23 01:03:45 2025 GMT
            Not After : Aug 24 01:03:45 2025 GMT
        Subject: CN=b9637ce3a6215151c22259e60bfc642e251d9084
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:a0:93:4f:64:13:b0:a7:5d:7f:9f:f7:7d:52:
                    a3:21:54:a5:d9:de:28:df:5e:9c:44:67:c5:af:0e:
                    06:7f:34:34:83:3d:2d:f9:e6:e6:a6:1a:6b:c5:5c:
                    0e:b0:f9:bb:d3:c7:ed:4a:52:99:2d:c3:22:9a:47:
                    20:31:0e:e3:2e:27:e7:c0:82:e8:7e:1a:3f:69:3b:
                    a1:d9:d8:63:b0:c1:b4:c5:e3:c2:b9:7e:12:b9:8d:
                    6b:7b:b7:71:b5:8f:da:6f:08:f9:2a:9d:16:9f:22:
                    c2:77:05:b5:b9:bc:1e:cd:f8:06:fc:6a:37:d0:9d:
                    0d:34:1f:ad:03:18:67:34:cc:18:f8:08:a9:af:49:
                    fd:19:19:56:a4:c8:bb:8e:d0:4f:f1:1c:d0:c8:2c:
                    66:34:bf:0a:02:24:20:d6:36:02:ac:46:44:71:e5:
                    79:f8:35:c1:9a:e5:c2:69:99:85:50:bd:a6:be:0e:
                    9b:c0:8a:80:9e:00:6b:c0:fa:3a:ae:ce:60:d1:00:
                    28:0c:3e:f4:1b:63:be:3a:14:f2:f8:e8:e1:20:f3:
                    b0:ed:19:f4:70:bf:8e:02:3d:48:1f:ad:56:40:9e:
                    b0:ea:a9:44:59:4c:55:7a:28:92:fe:f5:14:73:10:
                    34:3b:98:91:c3:07:0c:f1:ab:ad:03:a6:6b:5e:43:
                    10:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:63:7C:E3:A6:21:51:51:C2:22:59:E6:0B:FC:64:2E:25:1D:90:84
            X509v3 Authority Key Identifier:
                keyid:C3:6E:D1:51:27:BF:CB:0B:CD:7A:63:86:8B:49:9C:93:CB:33:51:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w27RUSe_ywvNemOGi0mck8szURM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/da7fe1-4627-483d-8832-269a6b823b7e/1/w27RUSe_ywvNemOGi0mck8szURM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/da7fe1-4627-483d-8832-269a6b823b7e/1/w27RUSe_ywvNemOGi0mck8szURM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:d3:33:db:fe:4b:4f:e3:13:d0:15:28:8a:b5:46:e9:ca:ab:
         66:d6:87:1e:26:bd:4f:32:34:d6:42:9d:9f:e8:18:1c:e5:aa:
         43:92:d5:ca:f3:3f:c4:15:86:a3:5a:ff:86:24:e8:83:39:2d:
         67:ee:e2:dd:d3:3f:d6:94:8c:22:a5:ad:0f:4c:89:5a:0d:e1:
         94:2e:9c:ed:86:91:d1:5b:94:6f:9f:e7:01:46:81:9a:cc:11:
         00:91:9c:9b:c2:64:48:8a:bc:ad:e4:44:1a:4b:1d:ad:aa:50:
         2c:4b:0f:8f:dc:c7:82:e0:1f:bc:26:b1:38:b2:bf:25:e9:9f:
         f0:1f:f4:70:40:16:12:b8:bb:cc:a0:6a:e4:3f:20:fe:f8:64:
         af:3c:ac:e8:50:ee:f1:bc:5e:07:f4:9a:61:e8:b1:e7:ba:4a:
         58:b6:97:8c:f8:75:e4:2a:11:8e:59:45:7c:b5:19:4e:06:54:
         51:c5:9d:ff:ba:fd:9d:22:3c:10:8c:cd:b2:12:34:6c:49:9e:
         05:9d:01:53:88:30:f6:fb:50:14:31:a5:04:fa:68:66:e1:56:
         11:dc:69:41:0b:ba:cb:62:3e:95:4d:36:16:32:8d:48:15:f7:
         47:40:6b:ee:63:8b:c5:e2:d1:d9:cd:f8:9e:6f:53:38:08:68:
         d5:87:26:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:39:30 2025 by rpki-client