Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/a99a2a-6025-4f5b-9aaf-b10eaf864bb8/1/wUuc2uDH11fKow4dR7Nz3uffdW0.mft
File:                     wUuc2uDH11fKow4dR7Nz3uffdW0.mft (raw, json)
Hash identifier:          SEDrkosERT1rfF9vy8hLjLHZsGFmtTLmp4w8QlAOKVE=
Subject key identifier:   64:81:21:F7:69:1E:8B:D9:B8:65:1C:7C:20:39:46:1B:DF:45:2D:D5
Authority key identifier: C1:4B:9C:DA:E0:C7:D7:57:CA:A3:0E:1D:47:B3:73:DE:E7:DF:75:6D
Certificate issuer:       /CN=c14b9cdae0c7d757caa30e1d47b373dee7df756d
Certificate serial:       01969F081A58FAED41A4C0B602AB954F0B5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wUuc2uDH11fKow4dR7Nz3uffdW0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/a99a2a-6025-4f5b-9aaf-b10eaf864bb8/1/wUuc2uDH11fKow4dR7Nz3uffdW0.mft
Manifest number:          01A8
Signing time:             Mon 05 May 2025 06:00:30 +0000
Manifest this update:     Mon 05 May 2025 06:00:30 +0000
Manifest next update:     Tue 06 May 2025 06:00:30 +0000
Files and hashes:         1: wUuc2uDH11fKow4dR7Nz3uffdW0.crl (hash: wiBah+BYDhZhh4u2vElGG4lApDCXmS9v4W3WhWemr3k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9c/a99a2a-6025-4f5b-9aaf-b10eaf864bb8/1/wUuc2uDH11fKow4dR7Nz3uffdW0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9c/a99a2a-6025-4f5b-9aaf-b10eaf864bb8/1/wUuc2uDH11fKow4dR7Nz3uffdW0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wUuc2uDH11fKow4dR7Nz3uffdW0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9f:08:1a:58:fa:ed:41:a4:c0:b6:02:ab:95:4f:0b:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c14b9cdae0c7d757caa30e1d47b373dee7df756d
        Validity
            Not Before: May  5 06:00:30 2025 GMT
            Not After : May  6 06:00:30 2025 GMT
        Subject: CN=648121f7691e8bd9b8651c7c2039461bdf452dd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:14:26:5b:6a:8c:eb:e3:a0:f1:fc:b0:c8:8e:
                    8e:89:fe:78:be:2d:8e:f3:12:b3:d2:a4:49:9c:af:
                    95:7f:b4:ec:16:f7:3a:62:29:3d:d3:d8:0c:34:90:
                    49:6d:49:5e:6c:d5:d1:f9:18:f5:02:76:8e:78:97:
                    55:7f:6d:f5:54:12:ce:b7:9b:3c:4c:66:40:5e:91:
                    ce:18:f2:4a:c9:31:25:2c:7f:6c:5a:6c:f0:2a:3d:
                    93:a2:d8:15:33:fc:e2:16:0c:62:7a:e6:20:17:1b:
                    90:f7:02:20:63:5a:5c:8d:b0:20:1d:db:32:ce:e8:
                    b1:f7:e5:3f:02:82:33:8f:32:4d:14:b8:65:39:5a:
                    97:a2:f4:45:1c:aa:69:a9:48:1a:99:78:b6:5c:5d:
                    6f:2c:18:34:b7:d5:f2:b0:70:4c:cf:2e:dc:19:6a:
                    d3:96:43:eb:48:80:74:4e:01:1f:f3:ed:b8:af:04:
                    72:62:ae:ce:5c:0b:89:72:6e:83:d7:19:8a:7a:dd:
                    a0:db:be:db:f9:9e:f5:cc:fa:e9:96:d9:71:7b:03:
                    e9:10:8d:82:f7:db:2c:c2:02:05:04:77:9f:7e:a6:
                    44:39:71:51:99:d2:dc:0a:2b:b0:62:46:2e:8a:c3:
                    d0:50:c6:e5:09:6d:b8:2c:48:95:e6:c1:4a:1a:52:
                    a7:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:81:21:F7:69:1E:8B:D9:B8:65:1C:7C:20:39:46:1B:DF:45:2D:D5
            X509v3 Authority Key Identifier:
                keyid:C1:4B:9C:DA:E0:C7:D7:57:CA:A3:0E:1D:47:B3:73:DE:E7:DF:75:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wUuc2uDH11fKow4dR7Nz3uffdW0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/a99a2a-6025-4f5b-9aaf-b10eaf864bb8/1/wUuc2uDH11fKow4dR7Nz3uffdW0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/a99a2a-6025-4f5b-9aaf-b10eaf864bb8/1/wUuc2uDH11fKow4dR7Nz3uffdW0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:23:fd:9a:a8:1a:0c:ae:3c:87:89:40:92:09:33:dd:00:e6:
         f1:db:60:e9:aa:9f:ed:7f:28:f3:3c:ff:60:43:bc:24:c3:e4:
         ad:f3:8d:34:cc:80:e8:e3:40:bb:9d:95:b1:b8:24:07:de:d0:
         ab:69:b9:d4:e6:d1:da:5b:97:9c:99:92:e0:aa:25:45:85:4d:
         2f:9a:4b:b7:dc:9c:be:3d:54:a2:1b:5d:c4:ef:b3:23:58:6d:
         c4:c3:7d:05:56:e4:06:fe:28:be:6e:74:fc:bf:72:1f:0d:84:
         da:30:86:ab:4a:76:54:e9:17:39:be:0c:78:72:0f:9a:c3:bd:
         6a:21:e1:34:a7:3a:4f:68:cd:bb:65:15:88:97:be:61:00:c9:
         77:6d:5c:29:27:9b:bf:fa:c9:0f:e6:80:90:f1:45:02:dc:a9:
         f3:38:84:cd:5b:75:5c:ca:97:31:93:b2:b4:01:5c:e5:8b:03:
         27:e6:2e:92:a8:37:5e:78:3b:3f:2c:db:32:8a:83:2b:16:95:
         24:08:25:45:ad:2c:ef:61:5b:e6:8f:7c:b0:1c:a2:ca:5d:78:
         d2:a0:f5:c5:17:b8:74:6f:2a:95:e6:9c:7d:a6:7b:38:f5:fb:
         66:77:21:7d:05:2e:1d:b8:ee:dd:d9:f1:b4:43:72:81:64:b6:
         62:7d:7a:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 11:20:39 2025 by rpki-client