Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/26cacb-9e91-4911-8456-5ded766a5506/1/Wx-lLx6fNRDCzSriRhVSoa0uPTo.mft
File:                     Wx-lLx6fNRDCzSriRhVSoa0uPTo.mft (raw, json)
Hash identifier:          r5r9vE1+4eyrhOVJ/S4PwhxX0WS0KGAhzPaoS54WqRk=
Subject key identifier:   51:DA:2C:15:21:F7:19:FD:41:40:74:BF:D1:C6:BA:E5:D1:DD:B9:8F
Authority key identifier: 5B:1F:A5:2F:1E:9F:35:10:C2:CD:2A:E2:46:15:52:A1:AD:2E:3D:3A
Certificate issuer:       /CN=5b1fa52f1e9f3510c2cd2ae2461552a1ad2e3d3a
Certificate serial:       0196B9A41CA83C18C034FEDCB3B9EE9E6BC2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wx-lLx6fNRDCzSriRhVSoa0uPTo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/26cacb-9e91-4911-8456-5ded766a5506/1/Wx-lLx6fNRDCzSriRhVSoa0uPTo.mft
Manifest number:          0FB7
Signing time:             Sat 10 May 2025 10:01:02 +0000
Manifest this update:     Sat 10 May 2025 10:01:02 +0000
Manifest next update:     Sun 11 May 2025 10:01:02 +0000
Files and hashes:         1: Wx-lLx6fNRDCzSriRhVSoa0uPTo.crl (hash: JonXlX8lvvc4ir1TyXpHyPkgqidxZC8GKi20kGvIG1k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/26cacb-9e91-4911-8456-5ded766a5506/1/Wx-lLx6fNRDCzSriRhVSoa0uPTo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/26cacb-9e91-4911-8456-5ded766a5506/1/Wx-lLx6fNRDCzSriRhVSoa0uPTo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Wx-lLx6fNRDCzSriRhVSoa0uPTo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 10:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b9:a4:1c:a8:3c:18:c0:34:fe:dc:b3:b9:ee:9e:6b:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b1fa52f1e9f3510c2cd2ae2461552a1ad2e3d3a
        Validity
            Not Before: May 10 10:01:02 2025 GMT
            Not After : May 11 10:01:02 2025 GMT
        Subject: CN=51da2c1521f719fd414074bfd1c6bae5d1ddb98f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a4:67:55:e7:21:18:16:43:94:de:c8:d9:4d:
                    df:cb:ae:50:f8:70:09:a5:6c:a0:5b:9b:33:27:31:
                    fc:de:40:13:ab:f3:8c:7d:40:29:65:b5:76:43:66:
                    1e:60:93:1c:51:f8:93:29:cc:08:53:3f:1e:d7:02:
                    9a:76:02:df:e2:1d:88:00:89:4c:ef:cb:cb:45:f9:
                    04:ec:5d:af:c8:0b:30:af:2d:87:b4:88:9e:fe:31:
                    64:19:fd:bf:bf:29:af:48:f5:ce:41:60:3b:e9:fc:
                    3e:22:c0:2f:93:fb:19:24:19:75:6e:4f:42:75:df:
                    c5:7c:ac:45:24:2f:45:8a:90:e1:14:63:60:2c:51:
                    af:62:73:4b:da:9f:c0:a9:52:90:7b:18:f7:61:ef:
                    db:21:b6:86:0e:5e:bd:9c:02:72:fe:b1:20:80:1e:
                    88:16:47:e1:8f:cc:90:13:00:96:92:6c:0c:ca:29:
                    fc:0b:d4:d6:e4:21:8f:fa:16:33:ef:ed:d5:25:7e:
                    19:c3:9a:94:71:48:56:d3:58:3e:7a:ee:a0:e3:aa:
                    53:0e:d1:d9:32:be:d0:95:53:57:91:a1:00:65:84:
                    2c:ad:5c:31:d9:9a:6b:bf:e3:6d:60:0e:b4:57:30:
                    52:8a:5d:65:fb:4b:0c:3f:83:bb:e8:07:4f:64:7b:
                    d8:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:DA:2C:15:21:F7:19:FD:41:40:74:BF:D1:C6:BA:E5:D1:DD:B9:8F
            X509v3 Authority Key Identifier:
                keyid:5B:1F:A5:2F:1E:9F:35:10:C2:CD:2A:E2:46:15:52:A1:AD:2E:3D:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wx-lLx6fNRDCzSriRhVSoa0uPTo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/26cacb-9e91-4911-8456-5ded766a5506/1/Wx-lLx6fNRDCzSriRhVSoa0uPTo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/26cacb-9e91-4911-8456-5ded766a5506/1/Wx-lLx6fNRDCzSriRhVSoa0uPTo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:99:81:78:f5:81:0e:ac:d0:b5:29:e8:58:ed:cc:a5:62:f2:
         4f:7b:3e:33:cf:25:88:a7:84:90:ad:2b:ea:d6:fe:b6:45:a9:
         7a:51:31:de:d4:c0:91:bd:93:6a:43:17:f0:d1:1d:5f:a6:b0:
         fd:8f:5f:1a:20:3c:43:dd:1d:3c:c5:3b:a1:85:f4:dd:63:e9:
         63:f5:95:99:0b:9f:19:0b:1c:f2:bc:04:e4:bf:33:a6:3f:3f:
         b0:0b:70:88:14:97:c8:c4:25:92:13:95:c2:8d:33:69:7d:bd:
         84:00:a8:e2:11:51:b2:8f:83:2f:fa:da:9f:3b:ca:e6:0f:7a:
         03:08:02:b7:7a:b5:b1:a3:51:34:bc:61:dd:28:82:bd:47:c3:
         78:cc:71:c6:9f:51:20:ee:b5:06:a6:dc:c2:a1:3f:f5:78:8a:
         56:3e:13:c8:50:7e:3c:ea:15:d8:22:58:29:36:09:11:ac:c2:
         44:4d:5d:20:df:a8:a7:8b:5d:f4:e6:53:57:07:b6:ec:f2:e5:
         d7:42:4c:d1:2c:dc:37:d2:3f:48:63:1b:71:ee:ec:cb:df:12:
         dc:00:20:5f:96:c2:0f:7c:a6:2d:64:f4:03:f0:6a:92:ad:c2:
         3b:c4:dc:2a:87:76:aa:43:7c:5d:41:fd:68:72:8a:2a:cb:c1:
         95:e5:8a:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 18:59:25 2025 by rpki-client