Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/9e388d-3990-4fd8-82b3-d775117af12f/1/w91X4yvXbbd77fxSETY8SAgPBgU.mft
File:                     w91X4yvXbbd77fxSETY8SAgPBgU.mft (raw, json)
Hash identifier:          k8IiSj1+jAzHBqoWj0MxmIoHSANZThIegsSdoRNJD18=
Subject key identifier:   5E:6E:84:1D:F8:DA:A5:F8:65:9D:2C:4E:1C:33:28:84:05:0C:B3:71
Authority key identifier: C3:DD:57:E3:2B:D7:6D:B7:7B:ED:FC:52:11:36:3C:48:08:0F:06:05
Certificate issuer:       /CN=c3dd57e32bd76db77bedfc5211363c48080f0605
Certificate serial:       0198D4E068C1C9296D63AF49C8A620AB4D8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w91X4yvXbbd77fxSETY8SAgPBgU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/9e388d-3990-4fd8-82b3-d775117af12f/1/w91X4yvXbbd77fxSETY8SAgPBgU.mft
Manifest number:          0CB4
Signing time:             Sat 23 Aug 2025 03:02:13 +0000
Manifest this update:     Sat 23 Aug 2025 03:02:13 +0000
Manifest next update:     Sun 24 Aug 2025 03:02:13 +0000
Files and hashes:         1: w91X4yvXbbd77fxSETY8SAgPBgU.crl (hash: 5lIoDL0yNS/EdsTbV/1jX1PrWQ29096NUdMoatX5fkc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/9e388d-3990-4fd8-82b3-d775117af12f/1/w91X4yvXbbd77fxSETY8SAgPBgU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/9e388d-3990-4fd8-82b3-d775117af12f/1/w91X4yvXbbd77fxSETY8SAgPBgU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w91X4yvXbbd77fxSETY8SAgPBgU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 03:02:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:e0:68:c1:c9:29:6d:63:af:49:c8:a6:20:ab:4d:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3dd57e32bd76db77bedfc5211363c48080f0605
        Validity
            Not Before: Aug 23 03:02:13 2025 GMT
            Not After : Aug 24 03:02:13 2025 GMT
        Subject: CN=5e6e841df8daa5f8659d2c4e1c332884050cb371
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:f8:6a:9c:a0:c3:e7:6d:6c:bc:84:33:7a:29:
                    4b:df:a7:5b:71:79:34:08:3a:17:8f:fc:3b:70:ef:
                    04:50:d6:bd:44:6b:a7:be:24:d6:82:89:53:b6:26:
                    18:89:fe:5c:78:2d:49:e9:c1:2e:c2:d8:53:b9:cf:
                    67:f3:ff:08:e9:b2:a6:aa:04:eb:8c:f2:db:e8:96:
                    a6:b2:83:7c:0f:38:44:b5:28:b0:b3:7c:66:2e:60:
                    3c:bb:e3:ba:a4:48:de:17:33:e9:8c:e1:53:1c:98:
                    9d:f3:6c:2d:b5:bf:ec:3b:eb:74:4a:27:16:2a:75:
                    dd:9e:4e:e6:16:aa:d9:a3:1c:a6:54:0e:7e:2d:d3:
                    55:42:0f:3d:83:e3:11:06:a2:c1:39:0a:06:c2:38:
                    75:8c:f9:e4:14:ef:c8:6a:e1:f2:53:d7:4f:3a:09:
                    9c:d2:3c:5c:ce:cb:d1:32:08:7b:ae:e4:24:1e:eb:
                    42:99:e5:d6:8f:6b:60:06:b6:da:4d:c1:80:a3:cc:
                    74:81:35:5e:56:f6:63:56:47:3b:e1:52:88:5a:1e:
                    7c:c5:8a:3e:0b:9b:6a:06:11:cb:13:4d:52:3a:e5:
                    28:de:cb:f5:83:35:7d:44:a0:2d:6e:db:21:56:80:
                    84:a7:6c:81:d2:c6:32:04:87:d2:a5:88:5d:54:ca:
                    04:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:6E:84:1D:F8:DA:A5:F8:65:9D:2C:4E:1C:33:28:84:05:0C:B3:71
            X509v3 Authority Key Identifier:
                keyid:C3:DD:57:E3:2B:D7:6D:B7:7B:ED:FC:52:11:36:3C:48:08:0F:06:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w91X4yvXbbd77fxSETY8SAgPBgU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9e388d-3990-4fd8-82b3-d775117af12f/1/w91X4yvXbbd77fxSETY8SAgPBgU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9e388d-3990-4fd8-82b3-d775117af12f/1/w91X4yvXbbd77fxSETY8SAgPBgU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:e5:4d:6c:8c:cc:53:a6:17:5b:46:1e:9a:2f:21:dc:de:25:
         07:2a:1a:99:d1:e8:d8:81:51:58:0b:8f:24:37:f9:17:c3:78:
         d3:0b:f7:09:3b:c2:d4:64:ab:45:a8:1b:62:a0:1a:02:8d:a1:
         3f:90:56:5c:c3:96:e2:26:68:b6:40:a7:29:10:28:97:90:0c:
         01:e9:63:35:e1:47:9f:3a:0e:e7:94:ec:50:cb:22:1f:8c:3a:
         e3:aa:e4:e3:ad:fb:0c:92:44:9b:cb:5e:42:2c:2e:6e:c9:aa:
         99:be:4a:1f:de:b4:90:12:f1:6e:64:c6:bf:f0:fd:63:5b:6e:
         ee:cb:ff:3f:e7:ec:e0:c7:c2:d1:ba:e5:fe:8d:5b:ca:79:52:
         df:71:f9:b7:7e:dc:d4:04:af:10:71:b8:88:3d:31:70:f5:11:
         be:54:9b:1a:06:46:36:f8:b7:2f:64:a4:56:11:96:14:f2:89:
         ea:5b:45:bb:2b:18:72:ca:c6:f0:9e:9a:89:dd:a3:15:53:c7:
         f6:e2:fe:71:d6:dc:b0:99:6d:80:8a:11:1a:f2:39:b6:3a:af:
         33:50:93:6e:2f:91:68:b0:e7:70:4a:b4:eb:00:d7:32:47:6a:
         5e:1b:01:dc:a7:98:00:3e:8c:72:54:70:b6:83:6c:1f:6f:2d:
         d7:3b:ad:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:13:24 2025 by rpki-client