Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/5fcaea-2f14-4d4d-b55d-c8d84985bbd9/1/0wJwbz3eK7EuK6kRqb4FyNSXjIY.mft
File:                     0wJwbz3eK7EuK6kRqb4FyNSXjIY.mft (raw, json)
Hash identifier:          3NFIkWwSHw9BO71GTeJVSBDaOxwZzbf8EFAuxMZG5SE=
Subject key identifier:   41:68:5C:21:58:8C:78:59:7A:48:B2:69:D6:E2:9A:29:1A:C2:DA:46
Authority key identifier: D3:02:70:6F:3D:DE:2B:B1:2E:2B:A9:11:A9:BE:05:C8:D4:97:8C:86
Certificate issuer:       /CN=d302706f3dde2bb12e2ba911a9be05c8d4978c86
Certificate serial:       0198D5F1830B55F5833210CAE452ADD6A033
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0wJwbz3eK7EuK6kRqb4FyNSXjIY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/5fcaea-2f14-4d4d-b55d-c8d84985bbd9/1/0wJwbz3eK7EuK6kRqb4FyNSXjIY.mft
Manifest number:          31
Signing time:             Sat 23 Aug 2025 08:00:31 +0000
Manifest this update:     Sat 23 Aug 2025 08:00:31 +0000
Manifest next update:     Sun 24 Aug 2025 08:00:31 +0000
Files and hashes:         1: 0wJwbz3eK7EuK6kRqb4FyNSXjIY.crl (hash: ew+8g+sw7x5W+drH5cJKWlUd56xjUlGgSUftCvt5FNM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/5fcaea-2f14-4d4d-b55d-c8d84985bbd9/1/0wJwbz3eK7EuK6kRqb4FyNSXjIY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/5fcaea-2f14-4d4d-b55d-c8d84985bbd9/1/0wJwbz3eK7EuK6kRqb4FyNSXjIY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0wJwbz3eK7EuK6kRqb4FyNSXjIY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d5:f1:83:0b:55:f5:83:32:10:ca:e4:52:ad:d6:a0:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d302706f3dde2bb12e2ba911a9be05c8d4978c86
        Validity
            Not Before: Aug 23 08:00:31 2025 GMT
            Not After : Aug 24 08:00:31 2025 GMT
        Subject: CN=41685c21588c78597a48b269d6e29a291ac2da46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:33:6c:1b:8f:8d:be:34:2a:44:40:43:0f:b4:
                    a6:14:b9:53:10:83:76:14:0f:25:d4:33:63:f2:8e:
                    1c:c2:e8:bf:70:88:57:cc:ca:3e:3f:1d:30:a2:fc:
                    57:73:ed:ef:3d:31:bd:f8:2c:9c:cd:7e:67:54:f3:
                    32:9b:47:01:98:75:35:08:7f:a0:d7:32:39:61:33:
                    41:e0:03:3a:32:ef:33:bb:55:47:0e:fb:3e:7f:c2:
                    b9:56:06:7a:71:32:8d:75:0a:53:1d:b7:4b:5c:ea:
                    8a:3f:72:b1:ee:10:60:e9:a2:6e:76:6c:3a:f2:56:
                    bd:62:b7:ee:26:05:ca:b1:73:fe:20:70:65:ef:5a:
                    77:9d:b0:0c:48:e4:bb:88:50:ca:c2:6e:14:df:9c:
                    82:00:3e:44:f1:ae:9c:21:2e:75:a4:84:2f:64:b5:
                    f7:1a:b8:33:fa:88:c0:ad:56:3d:b0:fb:50:26:ce:
                    a4:b3:ef:df:91:b8:a0:69:8e:6b:d0:93:c2:ca:1e:
                    63:8c:be:fd:72:8a:d9:98:d2:1f:ea:ec:f4:f2:fa:
                    07:0d:66:ce:02:aa:7e:45:0b:6a:0c:27:3e:e3:1e:
                    fd:f0:76:b2:40:e4:1c:ee:16:86:0d:a6:43:0b:04:
                    09:8f:4c:19:79:5b:bf:03:0e:46:2b:4f:4d:cf:07:
                    62:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:68:5C:21:58:8C:78:59:7A:48:B2:69:D6:E2:9A:29:1A:C2:DA:46
            X509v3 Authority Key Identifier:
                keyid:D3:02:70:6F:3D:DE:2B:B1:2E:2B:A9:11:A9:BE:05:C8:D4:97:8C:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0wJwbz3eK7EuK6kRqb4FyNSXjIY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5fcaea-2f14-4d4d-b55d-c8d84985bbd9/1/0wJwbz3eK7EuK6kRqb4FyNSXjIY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/5fcaea-2f14-4d4d-b55d-c8d84985bbd9/1/0wJwbz3eK7EuK6kRqb4FyNSXjIY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:e9:e0:16:38:c6:67:29:a5:13:cb:2f:6b:ed:d4:d3:82:bf:
         fe:73:53:63:5c:74:5f:8a:15:31:66:f3:b9:a6:a2:c8:e7:52:
         91:cf:78:74:59:73:33:98:9a:26:55:10:87:a3:51:21:20:24:
         d0:b4:76:de:4f:63:84:2b:9b:42:56:29:7f:36:d0:5b:b2:76:
         6a:4c:86:1a:3a:8a:a4:30:6a:c1:aa:bb:be:36:59:32:2c:40:
         2a:c3:3a:4f:cd:29:e5:a4:b0:82:0a:ee:a3:36:eb:bb:93:eb:
         34:1e:ae:a4:f9:1b:53:e4:c0:49:fd:e2:30:41:ce:45:29:33:
         16:49:ab:55:5b:98:0b:da:be:cc:35:a4:89:72:47:14:5c:78:
         af:bb:12:ca:a5:18:d6:93:da:ab:5e:af:29:69:f3:70:28:64:
         c0:4f:b4:a9:de:da:59:dd:46:0f:e3:30:71:99:c8:41:5b:db:
         2f:fa:1a:e1:74:da:1f:7d:14:ca:36:aa:23:bd:9a:64:05:f4:
         49:a1:b2:bc:7c:f5:0c:83:b2:26:9c:81:63:d5:90:44:42:f7:
         b8:7b:62:37:e6:5c:d7:0b:0c:34:49:d2:5d:0c:82:b3:e5:b7:
         ff:c6:5c:c0:52:75:b7:71:7c:32:52:0c:40:18:23:1e:bd:bc:
         3c:d4:92:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:02:42 2025 by rpki-client