Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/bb7335-b8c9-4e41-b124-bf9e37b7b870/1/wFLV2TVyLCxcxJ8FLNWlqPFFc2s.mft
File:                     wFLV2TVyLCxcxJ8FLNWlqPFFc2s.mft (raw, json)
Hash identifier:          WZ6beZFMZob35h4+wQzLHw9tQy5cODVHsN97hcfw5Yk=
Subject key identifier:   CD:CA:4C:79:51:FA:5B:74:47:EE:64:5C:F2:9C:11:20:13:64:2C:68
Authority key identifier: C0:52:D5:D9:35:72:2C:2C:5C:C4:9F:05:2C:D5:A5:A8:F1:45:73:6B
Certificate issuer:       /CN=c052d5d935722c2c5cc49f052cd5a5a8f145736b
Certificate serial:       0197B7EA5EF16944F5A070DDB739DA8F59DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wFLV2TVyLCxcxJ8FLNWlqPFFc2s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/bb7335-b8c9-4e41-b124-bf9e37b7b870/1/wFLV2TVyLCxcxJ8FLNWlqPFFc2s.mft
Manifest number:          1484
Signing time:             Sat 28 Jun 2025 19:01:19 +0000
Manifest this update:     Sat 28 Jun 2025 19:01:19 +0000
Manifest next update:     Sun 29 Jun 2025 19:01:19 +0000
Files and hashes:         1: wFLV2TVyLCxcxJ8FLNWlqPFFc2s.crl (hash: mK7UThUuCr6McmDJAUcBrNE+bOtQlfongbW180fcysU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/bb7335-b8c9-4e41-b124-bf9e37b7b870/1/wFLV2TVyLCxcxJ8FLNWlqPFFc2s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/bb7335-b8c9-4e41-b124-bf9e37b7b870/1/wFLV2TVyLCxcxJ8FLNWlqPFFc2s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wFLV2TVyLCxcxJ8FLNWlqPFFc2s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:ea:5e:f1:69:44:f5:a0:70:dd:b7:39:da:8f:59:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c052d5d935722c2c5cc49f052cd5a5a8f145736b
        Validity
            Not Before: Jun 28 19:01:19 2025 GMT
            Not After : Jun 29 19:01:19 2025 GMT
        Subject: CN=cdca4c7951fa5b7447ee645cf29c112013642c68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:89:24:d1:66:c2:76:c7:f4:6c:21:51:52:1e:
                    12:de:87:d7:ba:5a:9b:e2:31:6a:32:47:a7:97:c0:
                    5f:dc:49:d5:04:b2:46:49:03:dc:fd:c1:72:96:df:
                    b1:a2:51:7d:8d:05:47:cc:30:45:80:47:87:c1:09:
                    be:e6:d5:1b:eb:b3:4f:64:1f:26:75:e7:23:6d:6a:
                    6f:e9:65:18:eb:27:38:75:3e:77:d7:25:fb:10:8e:
                    95:ee:68:49:91:20:d2:c4:d4:50:25:94:f3:d8:b3:
                    4c:d9:d3:37:71:c5:b8:00:b2:39:f6:63:98:9a:6c:
                    3a:ea:d2:bf:d2:cb:6d:86:f1:11:1a:01:8a:bb:98:
                    1c:7e:8d:96:53:3c:4f:0a:52:5e:4a:93:86:ec:84:
                    56:9b:89:4e:2e:35:70:7a:43:57:26:68:e2:bb:58:
                    99:c8:39:78:34:56:ea:77:d5:e7:f9:b0:37:f5:4b:
                    29:c3:ce:ca:87:c6:14:7c:12:7d:cd:cf:c7:bf:71:
                    24:0b:0b:86:05:9d:42:e1:66:7c:21:68:a7:1d:d4:
                    5f:b4:5e:c5:b9:e6:c8:7e:cf:60:c5:26:93:0e:9e:
                    de:72:f0:58:91:00:b8:a8:94:96:45:7d:0f:b6:4c:
                    f3:6b:3c:fd:dd:0d:df:34:00:d0:f8:9c:df:c2:60:
                    b8:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:CA:4C:79:51:FA:5B:74:47:EE:64:5C:F2:9C:11:20:13:64:2C:68
            X509v3 Authority Key Identifier:
                keyid:C0:52:D5:D9:35:72:2C:2C:5C:C4:9F:05:2C:D5:A5:A8:F1:45:73:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wFLV2TVyLCxcxJ8FLNWlqPFFc2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/bb7335-b8c9-4e41-b124-bf9e37b7b870/1/wFLV2TVyLCxcxJ8FLNWlqPFFc2s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/bb7335-b8c9-4e41-b124-bf9e37b7b870/1/wFLV2TVyLCxcxJ8FLNWlqPFFc2s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:ff:39:b7:fc:77:95:30:c6:d3:fd:dc:54:2d:ff:a6:d7:1d:
         0f:50:ce:90:57:99:95:d0:2c:99:52:d0:f6:2f:1a:f9:cc:ae:
         d7:fd:76:69:5a:f3:9c:d9:15:67:84:9e:23:20:8f:28:68:cd:
         0e:b8:74:d3:af:e1:c1:21:f5:5d:cb:f0:ee:d7:e4:91:81:9d:
         ea:f3:11:4f:0b:23:b4:00:bd:bb:66:bd:0b:11:94:d3:02:cd:
         ad:b6:07:2a:69:93:6f:86:45:04:be:1a:a1:f8:13:11:28:27:
         54:7b:cd:1c:ba:cf:95:5f:6b:08:69:d1:de:1e:51:5e:a7:ed:
         76:f1:8c:93:d4:69:26:f0:07:80:13:0d:8e:89:a9:82:51:bf:
         74:71:0b:be:85:6e:e7:26:34:2f:e7:c8:3b:39:05:bc:a7:81:
         93:75:9c:8c:45:03:8b:8d:8d:7a:a7:4f:29:ec:6d:3f:f3:5b:
         31:49:ae:62:d5:2e:30:00:cb:4c:8d:48:02:de:41:21:37:ee:
         e3:7b:83:04:b4:1f:67:eb:7e:89:b4:dc:15:68:c5:0e:e4:b0:
         3c:45:5e:77:50:cb:d9:b4:f7:49:ba:7d:1f:27:05:f8:ec:09:
         c8:ac:92:2e:40:20:ba:9d:83:f2:7b:b2:6d:ca:41:65:b6:99:
         4c:10:96:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:02:58 2025 by rpki-client