Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/461a83-810c-43ae-ac25-64e2bd619318/1/wWD3u-jXY2d3YUisuMTKNflr6Vc.mft
File:                     wWD3u-jXY2d3YUisuMTKNflr6Vc.mft (raw, json)
Hash identifier:          EyFINpEcRLjwfUbfztb5CditXc2qRbViiVFL5iMEnEc=
Subject key identifier:   EB:DB:F7:2F:C0:BC:47:EB:12:30:88:B1:A3:DD:4B:0B:15:E6:63:C7
Authority key identifier: C1:60:F7:BB:E8:D7:63:67:77:61:48:AC:B8:C4:CA:35:F9:6B:E9:57
Certificate issuer:       /CN=c160f7bbe8d76367776148acb8c4ca35f96be957
Certificate serial:       0196BB92BC141395EDB5EB2090C74B9C4423
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wWD3u-jXY2d3YUisuMTKNflr6Vc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/461a83-810c-43ae-ac25-64e2bd619318/1/wWD3u-jXY2d3YUisuMTKNflr6Vc.mft
Manifest number:          1505
Signing time:             Sat 10 May 2025 19:01:17 +0000
Manifest this update:     Sat 10 May 2025 19:01:17 +0000
Manifest next update:     Sun 11 May 2025 19:01:17 +0000
Files and hashes:         1: wWD3u-jXY2d3YUisuMTKNflr6Vc.crl (hash: 4yRA3CBPKtzMpSSVOH4pBKz5bVzysGSOIvA812u1KVk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/461a83-810c-43ae-ac25-64e2bd619318/1/wWD3u-jXY2d3YUisuMTKNflr6Vc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/461a83-810c-43ae-ac25-64e2bd619318/1/wWD3u-jXY2d3YUisuMTKNflr6Vc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wWD3u-jXY2d3YUisuMTKNflr6Vc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 19:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bb:92:bc:14:13:95:ed:b5:eb:20:90:c7:4b:9c:44:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c160f7bbe8d76367776148acb8c4ca35f96be957
        Validity
            Not Before: May 10 19:01:17 2025 GMT
            Not After : May 11 19:01:17 2025 GMT
        Subject: CN=ebdbf72fc0bc47eb123088b1a3dd4b0b15e663c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:4e:ed:39:2d:41:82:66:6f:79:1b:8c:8e:23:
                    19:01:5d:b2:af:9b:6e:04:85:c5:6f:d4:e9:f2:94:
                    22:58:a1:69:b6:0c:f6:c9:fb:3f:5e:fe:31:1a:7c:
                    ac:ed:35:34:d0:6d:93:6d:ac:45:ca:7f:95:b9:8d:
                    7c:a2:81:5f:17:a5:48:14:98:04:63:c4:90:0e:c9:
                    70:92:fa:45:dd:9b:b5:83:84:d9:2e:21:f3:69:00:
                    e9:b5:60:9c:2a:50:25:78:4b:2e:e4:30:55:13:b4:
                    98:e7:96:0c:f4:a9:7c:88:5b:cc:6a:0f:0c:69:86:
                    9a:9d:01:79:3d:d5:87:f9:15:0d:51:67:3d:27:8c:
                    d7:29:ba:93:1e:1b:d6:ac:64:93:11:f8:3d:31:dc:
                    79:29:c9:da:a5:00:42:83:ea:80:a6:08:14:0c:b2:
                    fb:ce:35:a3:e4:b9:f8:9e:ec:ef:d9:96:c5:64:22:
                    7d:84:90:82:f1:2c:d6:ff:fc:54:2d:b3:26:d1:fe:
                    35:05:ab:dd:94:ff:6d:d3:d9:94:44:db:09:12:fa:
                    1c:2f:37:62:13:75:95:dc:8f:c9:54:c1:82:53:64:
                    bf:03:47:84:f1:13:6d:70:c6:57:37:8d:3b:83:ea:
                    02:fc:c2:d6:e2:73:00:43:a1:b0:b1:9e:84:ab:81:
                    a0:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:DB:F7:2F:C0:BC:47:EB:12:30:88:B1:A3:DD:4B:0B:15:E6:63:C7
            X509v3 Authority Key Identifier:
                keyid:C1:60:F7:BB:E8:D7:63:67:77:61:48:AC:B8:C4:CA:35:F9:6B:E9:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wWD3u-jXY2d3YUisuMTKNflr6Vc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/461a83-810c-43ae-ac25-64e2bd619318/1/wWD3u-jXY2d3YUisuMTKNflr6Vc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/461a83-810c-43ae-ac25-64e2bd619318/1/wWD3u-jXY2d3YUisuMTKNflr6Vc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:61:7f:66:83:92:55:27:29:75:27:35:00:0b:37:8e:ba:ab:
         22:4d:3e:cd:2c:b5:c4:7a:14:4c:98:9d:a7:de:08:d1:27:14:
         8a:56:d6:62:aa:8a:f1:97:93:9b:d1:45:b8:9e:4c:2a:b8:9f:
         88:0d:3e:b5:08:4c:da:da:d1:53:fc:a4:a9:7f:84:da:85:13:
         83:60:e0:ac:ad:b3:10:92:e9:ed:b7:79:4f:9d:89:07:05:44:
         73:ed:eb:02:20:d9:60:c9:e8:0d:88:66:2c:8e:ac:fc:d1:4b:
         38:ca:ca:bb:f7:81:4c:ae:2b:3c:3b:89:e5:07:f6:ed:ca:c5:
         97:69:9a:f8:90:6d:1e:a5:a2:56:1f:f3:4f:e8:84:4a:63:eb:
         a7:14:18:5f:2d:7f:fa:85:59:71:06:b0:d0:ad:02:9c:d2:fc:
         7b:88:cc:36:93:2e:0f:10:6d:76:fe:1a:fd:a7:92:0a:5a:e2:
         80:0a:8f:f5:f4:ae:d7:84:80:23:09:85:3e:53:7d:db:ee:aa:
         9e:db:ed:9d:20:84:73:c0:71:c5:00:54:32:4f:82:2b:b2:2e:
         86:93:9d:1d:13:b3:16:be:fb:ab:57:7f:36:5c:21:0e:fd:19:
         58:e0:81:c5:36:b9:bd:7c:7d:5c:9f:64:c4:72:ba:cd:84:c5:
         6c:e5:f0:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 03:56:25 2025 by rpki-client