Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/b2e4bf-17ac-4690-86c7-a40ea47b69cc/1/W1mW18RE1mpSvKEBsGynOKf8qps.mft
File:                     W1mW18RE1mpSvKEBsGynOKf8qps.mft (raw, json)
Hash identifier:          7ahtBkL7n8gduCZFoT4GRCtRikPddD9QqTI33XUza3k=
Subject key identifier:   04:4E:75:54:E5:55:A1:49:92:14:28:FF:BC:C4:51:A7:A2:81:74:38
Authority key identifier: 5B:59:96:D7:C4:44:D6:6A:52:BC:A1:01:B0:6C:A7:38:A7:FC:AA:9B
Certificate issuer:       /CN=5b5996d7c444d66a52bca101b06ca738a7fcaa9b
Certificate serial:       0197BA7E6B4AFC3AAC2AB8DCB1DCC7F18CDE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W1mW18RE1mpSvKEBsGynOKf8qps.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/b2e4bf-17ac-4690-86c7-a40ea47b69cc/1/W1mW18RE1mpSvKEBsGynOKf8qps.mft
Manifest number:          0160
Signing time:             Sun 29 Jun 2025 07:02:16 +0000
Manifest this update:     Sun 29 Jun 2025 07:02:16 +0000
Manifest next update:     Mon 30 Jun 2025 07:02:16 +0000
Files and hashes:         1: W1mW18RE1mpSvKEBsGynOKf8qps.crl (hash: xOa0rofuDEwPl0QAr+Tm57/1CW+xL0Y8UTFig1Cd5OQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/b2e4bf-17ac-4690-86c7-a40ea47b69cc/1/W1mW18RE1mpSvKEBsGynOKf8qps.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/b2e4bf-17ac-4690-86c7-a40ea47b69cc/1/W1mW18RE1mpSvKEBsGynOKf8qps.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W1mW18RE1mpSvKEBsGynOKf8qps.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Jun 2025 04:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:ba:7e:6b:4a:fc:3a:ac:2a:b8:dc:b1:dc:c7:f1:8c:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b5996d7c444d66a52bca101b06ca738a7fcaa9b
        Validity
            Not Before: Jun 29 07:02:16 2025 GMT
            Not After : Jun 30 07:02:16 2025 GMT
        Subject: CN=044e7554e555a149921428ffbcc451a7a2817438
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e2:60:40:3a:2a:c9:04:88:b5:ad:c2:b7:20:
                    c4:6d:07:3e:48:54:7f:57:0c:e7:16:2b:aa:dd:dd:
                    ff:9a:71:4c:72:31:6f:8c:b7:66:ea:37:16:76:25:
                    68:1d:53:c3:4a:50:f8:29:f8:1c:e9:88:40:3e:25:
                    57:5a:1b:7c:f8:14:c2:3c:b7:12:0f:63:bf:98:d3:
                    ca:07:c9:60:51:4e:86:66:35:04:b6:9b:2f:b9:8a:
                    8f:ad:06:12:65:e4:d2:6d:92:be:cc:0f:59:cd:50:
                    f1:21:d5:4c:7e:b4:35:3b:04:1d:40:40:b1:87:2c:
                    2d:7d:c2:7d:3d:35:80:c5:cc:5c:51:a8:70:20:e2:
                    66:29:cb:94:4e:d6:f4:7c:5b:ca:31:82:b7:ed:fd:
                    c7:69:78:2d:da:b0:a5:18:97:9d:fb:86:78:ab:ce:
                    0f:69:d2:39:61:9d:91:c6:42:26:c8:48:28:60:c0:
                    d1:f4:08:bd:23:a9:57:ed:cf:be:dc:84:75:32:1d:
                    1d:33:96:f2:3d:cd:9b:8e:75:94:bc:b8:e4:b7:88:
                    23:df:56:7a:08:a5:27:7c:3e:ce:5a:8d:45:1f:e8:
                    e9:38:82:80:0d:bb:28:99:4b:c1:76:53:68:8d:99:
                    16:53:25:f2:4f:f4:ca:29:5d:b2:6b:db:d6:1a:96:
                    a1:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:4E:75:54:E5:55:A1:49:92:14:28:FF:BC:C4:51:A7:A2:81:74:38
            X509v3 Authority Key Identifier:
                keyid:5B:59:96:D7:C4:44:D6:6A:52:BC:A1:01:B0:6C:A7:38:A7:FC:AA:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W1mW18RE1mpSvKEBsGynOKf8qps.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/b2e4bf-17ac-4690-86c7-a40ea47b69cc/1/W1mW18RE1mpSvKEBsGynOKf8qps.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/b2e4bf-17ac-4690-86c7-a40ea47b69cc/1/W1mW18RE1mpSvKEBsGynOKf8qps.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:96:3c:b0:8e:89:dd:71:a2:38:20:4f:b3:3f:50:c6:2e:24:
         f3:74:74:0c:53:d1:92:a8:c3:08:8f:ba:26:89:c5:bc:41:c5:
         64:17:35:06:7d:4d:10:72:c0:c3:d7:42:38:0c:5a:7c:57:63:
         7e:89:4f:56:29:6b:69:fd:40:1c:1b:60:18:a1:73:56:92:ba:
         88:00:35:2c:71:7c:6b:2d:68:59:24:98:ba:ce:eb:c2:bb:75:
         de:04:7f:e6:9b:84:6f:3b:7e:78:fc:ec:31:4c:2c:5e:47:db:
         36:84:29:fc:89:e9:ca:df:d8:49:8f:96:80:a8:85:03:59:d4:
         79:23:40:1b:0b:9c:ff:a3:dc:d1:ef:8d:63:d7:f3:8b:14:d4:
         b9:92:67:c1:98:6f:78:ab:f2:cb:f0:74:c2:0d:e3:7d:0d:4c:
         ed:14:5c:8a:b5:eb:8a:f7:91:5f:23:43:32:df:e2:1f:1f:44:
         8c:39:4b:00:03:c3:15:68:23:3b:81:9e:e4:23:61:4d:3d:6f:
         95:76:b7:d6:af:66:01:cb:aa:ae:a7:ea:b4:fc:58:7c:ca:2e:
         c7:53:14:60:e3:1c:aa:61:ec:a3:59:ed:57:68:48:71:22:e4:
         1d:e3:5f:80:03:3a:73:10:82:9b:1d:93:6c:12:a0:a6:1b:ea:
         1b:f8:14:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 14:15:15 2025 by rpki-client