Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/9e388d-3990-4fd8-82b3-d775117af12f/1/w91X4yvXbbd77fxSETY8SAgPBgU.mft
File:                     w91X4yvXbbd77fxSETY8SAgPBgU.mft (raw, json)
Hash identifier:          soJF/miH6YGvLxhuxawQGuUDPWk8jHlqPcTSQXCq3qQ=
Subject key identifier:   5A:46:FA:08:37:8E:9E:A4:B1:25:46:8C:54:BB:31:6F:C3:59:23:D9
Authority key identifier: C3:DD:57:E3:2B:D7:6D:B7:7B:ED:FC:52:11:36:3C:48:08:0F:06:05
Certificate issuer:       /CN=c3dd57e32bd76db77bedfc5211363c48080f0605
Certificate serial:       0196B069D82CCD9D6F740E74762D44BEA790
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w91X4yvXbbd77fxSETY8SAgPBgU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/9e388d-3990-4fd8-82b3-d775117af12f/1/w91X4yvXbbd77fxSETY8SAgPBgU.mft
Manifest number:          0B98
Signing time:             Thu 08 May 2025 15:00:48 +0000
Manifest this update:     Thu 08 May 2025 15:00:48 +0000
Manifest next update:     Fri 09 May 2025 15:00:48 +0000
Files and hashes:         1: w91X4yvXbbd77fxSETY8SAgPBgU.crl (hash: 8c7BNTw3HfeN1+C4sDjIhOvZuEU+UiRobPKiIi3/EvA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/9e388d-3990-4fd8-82b3-d775117af12f/1/w91X4yvXbbd77fxSETY8SAgPBgU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/9e388d-3990-4fd8-82b3-d775117af12f/1/w91X4yvXbbd77fxSETY8SAgPBgU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w91X4yvXbbd77fxSETY8SAgPBgU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 May 2025 07:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b0:69:d8:2c:cd:9d:6f:74:0e:74:76:2d:44:be:a7:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3dd57e32bd76db77bedfc5211363c48080f0605
        Validity
            Not Before: May  8 15:00:48 2025 GMT
            Not After : May  9 15:00:48 2025 GMT
        Subject: CN=5a46fa08378e9ea4b125468c54bb316fc35923d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:92:c2:40:cf:cf:e8:71:26:2a:f6:b4:28:b4:
                    47:8c:2f:63:d0:33:f8:16:07:22:17:cc:c5:28:e7:
                    38:3a:90:28:08:f0:7e:18:d3:59:48:4d:68:a5:1a:
                    78:90:a7:18:77:6b:93:31:94:14:ff:57:ff:eb:85:
                    a8:4c:8f:71:e0:f3:de:b7:8e:dc:b1:81:82:dd:b6:
                    b9:0c:97:e0:19:52:4b:2b:35:a2:24:6e:72:a0:6f:
                    a0:15:04:02:83:7a:2e:98:74:bb:2c:32:3f:e5:3d:
                    02:02:8a:95:2d:46:a9:b3:9c:dd:85:26:ad:b2:f7:
                    ea:7b:98:fa:57:fb:34:15:27:d9:14:33:9c:28:cb:
                    66:7d:65:c8:c2:a7:f1:7a:48:0e:52:47:b9:5f:bb:
                    d4:77:39:ed:39:88:fc:3a:8a:04:6c:6b:c9:ca:55:
                    47:31:2c:14:8b:61:38:8d:bc:7f:77:3c:b4:c9:e1:
                    10:47:be:98:d7:89:7e:80:ab:43:5b:35:aa:90:8d:
                    78:2c:04:f2:ea:0e:c9:a9:d9:a9:69:d0:82:c3:55:
                    fc:5c:4a:dd:0d:34:82:e5:89:bb:86:95:86:e6:9f:
                    6e:5c:02:50:3f:f1:ef:e2:b2:e5:77:c3:30:7d:e2:
                    25:1b:38:2b:03:0c:11:c0:2a:8a:02:66:6b:4b:1b:
                    ca:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:46:FA:08:37:8E:9E:A4:B1:25:46:8C:54:BB:31:6F:C3:59:23:D9
            X509v3 Authority Key Identifier:
                keyid:C3:DD:57:E3:2B:D7:6D:B7:7B:ED:FC:52:11:36:3C:48:08:0F:06:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w91X4yvXbbd77fxSETY8SAgPBgU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9e388d-3990-4fd8-82b3-d775117af12f/1/w91X4yvXbbd77fxSETY8SAgPBgU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9e388d-3990-4fd8-82b3-d775117af12f/1/w91X4yvXbbd77fxSETY8SAgPBgU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:c9:28:ad:81:94:93:14:e9:69:14:22:96:f8:7a:8f:1c:d6:
         4b:b0:50:8b:fc:77:17:cf:db:1a:04:c3:9c:91:94:55:e2:ab:
         73:7a:10:5c:5e:68:f3:76:db:73:c5:48:cd:b5:39:b7:6a:b4:
         da:64:ab:81:e4:ff:03:41:0f:0f:0d:2e:58:19:06:c5:aa:5d:
         0d:77:47:f6:d5:89:21:9c:65:d2:8d:9c:73:6e:8d:f4:b4:78:
         4b:43:d8:ab:ba:76:8d:0f:64:d5:cc:0a:ac:36:2f:e0:f1:a8:
         74:61:ea:07:68:4b:3d:3a:ca:f7:72:39:03:d0:79:a2:c9:a9:
         34:26:91:cc:21:90:a6:9a:40:c0:ce:4b:69:61:c0:e2:af:bd:
         a3:b7:be:77:a9:80:e3:6b:10:cc:0a:59:8b:7b:70:c2:44:db:
         42:84:e4:5a:41:6c:0c:b2:a2:ff:f9:db:d7:0a:d8:22:f4:c9:
         cb:b5:54:90:d2:e8:6b:e0:61:2b:12:5f:0b:53:37:d2:36:8c:
         67:57:a4:51:43:3f:6c:33:12:05:50:f4:b5:60:56:b4:e0:c1:
         44:64:5d:f7:54:ab:8d:80:10:d0:5d:85:82:5c:c6:6d:e6:29:
         7a:d3:f2:b2:a9:94:3b:f4:75:de:02:3b:95:0d:d3:34:3d:0f:
         d1:d0:3e:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 17:13:22 2025 by rpki-client