Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/420a13-f0a5-4db0-9048-15958a89a012/1/wOOV6sUDfy5HhZVvjai4aeu-_OA.mft
File:                     wOOV6sUDfy5HhZVvjai4aeu-_OA.mft (raw, json)
Hash identifier:          lkYei7sAXI0JyYn2UGTzvzM/LDozwtyaRABqc0+gMeQ=
Subject key identifier:   C4:E5:FA:CC:32:F5:D4:91:B4:F6:2B:90:E5:BB:5E:48:78:29:85:B5
Authority key identifier: C0:E3:95:EA:C5:03:7F:2E:47:85:95:6F:8D:A8:B8:69:EB:BE:FC:E0
Certificate issuer:       /CN=c0e395eac5037f2e4785956f8da8b869ebbefce0
Certificate serial:       0196B9A36FDCF540C1CDD806AD6ECEB277EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wOOV6sUDfy5HhZVvjai4aeu-_OA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/420a13-f0a5-4db0-9048-15958a89a012/1/wOOV6sUDfy5HhZVvjai4aeu-_OA.mft
Manifest number:          0C26
Signing time:             Sat 10 May 2025 10:00:17 +0000
Manifest this update:     Sat 10 May 2025 10:00:17 +0000
Manifest next update:     Sun 11 May 2025 10:00:17 +0000
Files and hashes:         1: wOOV6sUDfy5HhZVvjai4aeu-_OA.crl (hash: b/4OCRYJPkLwilczQRK6oEciUAd2Ol/Au5tiEACiWFs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/420a13-f0a5-4db0-9048-15958a89a012/1/wOOV6sUDfy5HhZVvjai4aeu-_OA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/420a13-f0a5-4db0-9048-15958a89a012/1/wOOV6sUDfy5HhZVvjai4aeu-_OA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wOOV6sUDfy5HhZVvjai4aeu-_OA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 10:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b9:a3:6f:dc:f5:40:c1:cd:d8:06:ad:6e:ce:b2:77:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0e395eac5037f2e4785956f8da8b869ebbefce0
        Validity
            Not Before: May 10 10:00:17 2025 GMT
            Not After : May 11 10:00:17 2025 GMT
        Subject: CN=c4e5facc32f5d491b4f62b90e5bb5e48782985b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:49:e6:fd:f0:b4:76:fb:50:eb:f4:7f:c4:90:
                    db:8a:92:9a:61:3a:15:6b:ae:07:c0:2b:6b:15:66:
                    2d:04:de:f5:7a:b2:84:ac:61:dc:91:c6:64:fa:ee:
                    15:e6:fc:4a:f0:c1:14:ca:a3:04:7d:86:f7:e3:f1:
                    ff:6c:df:5f:83:f3:2b:cf:c7:3e:7c:15:cd:c9:af:
                    c9:50:46:bc:66:27:26:2f:fc:96:08:08:d5:21:62:
                    dd:3a:d1:64:98:f8:c7:58:00:37:ad:c5:5a:bb:df:
                    32:23:c2:51:34:9c:fd:f3:46:a7:51:6a:fd:4f:3c:
                    a0:8f:90:b8:21:0c:f3:0b:d8:bb:cf:26:88:8a:cc:
                    16:f1:f7:d7:44:57:5c:fc:06:9b:0c:c4:da:48:cf:
                    8e:ee:a0:43:dd:72:2d:be:25:ac:10:1f:56:4b:d3:
                    da:c8:39:73:a7:70:1b:92:64:0e:22:48:44:f5:94:
                    a4:3c:3a:c5:c2:79:7c:29:52:e0:a1:55:2b:22:b9:
                    d6:83:05:6c:fc:07:d3:5b:64:2b:b7:92:96:f8:a7:
                    07:1c:07:5f:92:e9:81:ec:08:b7:d3:cb:f9:b8:a5:
                    bc:b5:0b:e1:a8:3f:d7:21:0c:b3:67:c5:2a:d7:15:
                    47:e5:2e:5e:a5:67:43:1c:1a:1e:35:58:05:33:e3:
                    96:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:E5:FA:CC:32:F5:D4:91:B4:F6:2B:90:E5:BB:5E:48:78:29:85:B5
            X509v3 Authority Key Identifier:
                keyid:C0:E3:95:EA:C5:03:7F:2E:47:85:95:6F:8D:A8:B8:69:EB:BE:FC:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOOV6sUDfy5HhZVvjai4aeu-_OA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/420a13-f0a5-4db0-9048-15958a89a012/1/wOOV6sUDfy5HhZVvjai4aeu-_OA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/420a13-f0a5-4db0-9048-15958a89a012/1/wOOV6sUDfy5HhZVvjai4aeu-_OA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:f0:3c:a0:e2:13:69:e9:0a:84:60:4b:a2:ce:bb:51:ca:0c:
         e6:4a:9d:38:50:3a:29:bd:6d:12:ff:43:63:5e:c3:9a:cc:21:
         57:21:38:eb:49:81:b2:0c:6d:fc:77:f8:45:78:ed:5b:bb:cc:
         aa:ae:db:8d:ca:93:1d:89:07:3a:b9:27:59:17:d3:36:18:e8:
         ad:0a:ad:7c:1a:2e:0b:12:45:8c:eb:80:38:39:f9:8f:f3:a1:
         53:28:c1:49:96:21:4f:96:30:93:a1:6d:59:a2:61:69:29:43:
         94:2c:84:63:70:47:ae:99:3f:c5:26:21:d2:bc:30:ae:c6:7b:
         16:56:72:6c:e4:e5:71:2e:f1:5d:c7:e8:bc:54:9f:e5:dc:6c:
         7f:2b:4e:eb:8a:75:15:a9:22:ec:c1:94:2d:9b:8c:2b:8e:1d:
         39:cd:68:a0:27:e2:19:d0:45:ac:b1:ec:cf:b9:bf:60:60:27:
         d0:42:38:c7:5c:49:b5:ae:f4:82:2b:0d:52:7f:b0:94:c1:df:
         ff:2d:2d:2e:92:6e:2c:79:f7:1c:5a:ce:6b:93:bb:54:81:79:
         0e:26:5f:49:b5:ff:8c:88:1c:96:d7:e3:c7:c5:23:9d:5c:28:
         fd:c8:f6:04:96:99:47:b2:61:dd:db:1f:60:2a:5b:12:25:9b:
         bf:02:3a:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 18:48:35 2025 by rpki-client