Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/3b4869-8e02-47e0-a6ed-813e096b3395/1/WR6VnKuSEDQ4rA9fG66HB6ycxtM.mft
File:                     WR6VnKuSEDQ4rA9fG66HB6ycxtM.mft (raw, json)
Hash identifier:          WzRvv7sHDhc/WZtRLHT0mHlwJbLucID/4rdavAc5nXA=
Subject key identifier:   63:45:69:60:6B:AC:23:0E:98:07:15:60:22:43:E8:EE:D4:50:18:01
Authority key identifier: 59:1E:95:9C:AB:92:10:34:38:AC:0F:5F:1B:AE:87:07:AC:9C:C6:D3
Certificate issuer:       /CN=591e959cab92103438ac0f5f1bae8707ac9cc6d3
Certificate serial:       0196B3D8E92753BE9BF273337945322BF607
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WR6VnKuSEDQ4rA9fG66HB6ycxtM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/3b4869-8e02-47e0-a6ed-813e096b3395/1/WR6VnKuSEDQ4rA9fG66HB6ycxtM.mft
Manifest number:          137F
Signing time:             Fri 09 May 2025 07:00:59 +0000
Manifest this update:     Fri 09 May 2025 07:00:59 +0000
Manifest next update:     Sat 10 May 2025 07:00:59 +0000
Files and hashes:         1: WR6VnKuSEDQ4rA9fG66HB6ycxtM.crl (hash: EoZPO0QNW6kYnnIxSUkQUu9cA06QgzP0SVjWawya5RY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/3b4869-8e02-47e0-a6ed-813e096b3395/1/WR6VnKuSEDQ4rA9fG66HB6ycxtM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/3b4869-8e02-47e0-a6ed-813e096b3395/1/WR6VnKuSEDQ4rA9fG66HB6ycxtM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WR6VnKuSEDQ4rA9fG66HB6ycxtM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 May 2025 07:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b3:d8:e9:27:53:be:9b:f2:73:33:79:45:32:2b:f6:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=591e959cab92103438ac0f5f1bae8707ac9cc6d3
        Validity
            Not Before: May  9 07:00:59 2025 GMT
            Not After : May 10 07:00:59 2025 GMT
        Subject: CN=634569606bac230e980715602243e8eed4501801
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d1:52:0b:ce:68:a2:f0:66:4a:32:85:49:76:
                    ab:0b:48:00:8a:35:65:6e:c4:28:f3:7b:d4:26:07:
                    df:82:09:f4:a1:11:8a:b6:42:dc:aa:64:46:e0:ff:
                    59:1b:e3:e8:ff:cb:6d:c4:29:ee:10:5a:a0:98:54:
                    20:5e:6d:f4:fb:5f:7f:79:c0:3d:2a:cf:77:8b:1e:
                    72:ef:3e:05:fc:3f:5d:2b:1d:9a:2a:d7:a1:b2:17:
                    23:02:a5:19:9b:f3:77:69:87:a3:53:de:a1:49:ef:
                    38:37:6a:a4:ea:50:6f:35:4f:7d:9d:57:c8:b1:ce:
                    7d:7a:05:00:cc:ed:a3:8b:d4:4e:22:3c:4a:5f:96:
                    af:24:63:9e:8d:d6:03:db:2d:89:48:bd:d2:9e:42:
                    11:73:6f:28:f5:9c:f0:56:76:f1:72:76:60:3c:80:
                    0c:64:b1:4e:00:18:8d:66:6c:48:ad:29:09:8b:fb:
                    16:27:6b:da:50:8f:4b:fd:93:e6:40:74:25:63:9b:
                    52:63:98:c8:c7:b1:d0:72:23:87:43:c7:57:33:3f:
                    43:5a:67:c5:25:a1:c0:e0:8c:9e:cc:7e:17:77:7e:
                    be:31:e2:5b:3c:be:0c:70:ee:e7:75:89:fb:53:5d:
                    c8:27:bb:e4:7e:ad:e4:f7:96:d1:df:64:43:a8:ce:
                    dc:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:45:69:60:6B:AC:23:0E:98:07:15:60:22:43:E8:EE:D4:50:18:01
            X509v3 Authority Key Identifier:
                keyid:59:1E:95:9C:AB:92:10:34:38:AC:0F:5F:1B:AE:87:07:AC:9C:C6:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WR6VnKuSEDQ4rA9fG66HB6ycxtM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/3b4869-8e02-47e0-a6ed-813e096b3395/1/WR6VnKuSEDQ4rA9fG66HB6ycxtM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/3b4869-8e02-47e0-a6ed-813e096b3395/1/WR6VnKuSEDQ4rA9fG66HB6ycxtM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:d4:0e:72:5a:ac:97:15:6d:5b:36:21:cd:af:0c:d7:25:fc:
         18:3a:21:bb:6e:c2:a5:38:9b:df:d8:7d:58:42:2e:26:28:8b:
         64:85:6d:0f:66:4e:f0:35:b9:ba:f1:18:ee:18:e8:b1:d7:41:
         68:b5:90:02:54:f3:b9:9e:bb:c6:10:e5:ec:b3:af:c2:cf:3f:
         d7:9d:a2:59:ee:39:f1:97:c3:ec:d1:fe:12:6d:6b:d9:6c:fa:
         cc:b8:ad:a9:d6:ce:98:3b:ac:ab:e3:f6:02:d5:96:62:79:c8:
         c7:ee:68:12:92:36:76:5a:68:4c:c9:d0:2c:5f:8b:a7:bd:af:
         37:2a:20:58:8f:33:a1:86:f3:c7:b9:9e:ac:ab:f2:63:8e:5c:
         90:5a:82:ad:c1:2f:3c:23:9e:b3:33:9b:c0:69:ab:12:ec:af:
         70:09:cb:e7:e0:fa:79:ce:55:2e:83:e6:4c:c1:0e:57:53:a6:
         05:4c:fb:73:d4:9a:11:06:7d:b2:a3:16:3e:76:b0:6e:db:d4:
         29:51:41:0c:9c:5d:b1:71:4c:56:9f:d4:60:33:f9:8b:c1:15:
         35:21:32:5d:19:38:dd:70:94:33:17:26:7c:2e:43:81:6b:02:
         ee:8b:39:5c:ae:34:ae:c7:b8:f7:83:72:01:12:e7:78:a8:04:
         0e:5f:d4:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaz2OknU76b8nMzeUUyK/YHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5MWU5NTljYWI5MjEwMzQzOGFjMGY1ZjFiYWU4NzA3YWM5
Y2M2ZDMwHhcNMjUwNTA5MDcwMDU5WhcNMjUwNTEwMDcwMDU5WjAzMTEwLwYDVQQD
Eyg2MzQ1Njk2MDZiYWMyMzBlOTgwNzE1NjAyMjQzZThlZWQ0NTAxODAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNFSC85oovBmSjKFSXarC0gAijVl
bsQo83vUJgffggn0oRGKtkLcqmRG4P9ZG+Po/8ttxCnuEFqgmFQgXm30+19/ecA9
Ks93ix5y7z4F/D9dKx2aKtehshcjAqUZm/N3aYejU96hSe84N2qk6lBvNU99nVfI
sc59egUAzO2ji9ROIjxKX5avJGOejdYD2y2JSL3SnkIRc28o9ZzwVnbxcnZgPIAM
ZLFOABiNZmxIrSkJi/sWJ2vaUI9L/ZPmQHQlY5tSY5jIx7HQciOHQ8dXMz9DWmfF
JaHA4IyezH4Xd36+MeJbPL4McO7ndYn7U13IJ7vkfq3k95bR32RDqM7cVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGNFaWBrrCMOmAcVYCJD6O7UUBgBMB8GA1UdIwQY
MBaAFFkelZyrkhA0OKwPXxuuhwesnMbTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1I2Vm5LdVNFRFE0ckE5Zkc2NkhCNnljeHRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi8zYjQ4NjktOGUwMi00N2UwLWE2ZWQt
ODEzZTA5NmIzMzk1LzEvV1I2Vm5LdVNFRFE0ckE5Zkc2NkhCNnljeHRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi8zYjQ4NjktOGUwMi00N2UwLWE2ZWQtODEzZTA5NmIzMzk1
LzEvV1I2Vm5LdVNFRFE0ckE5Zkc2NkhCNnljeHRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV9QOclqs
lxVtWzYhza8M1yX8GDohu27CpTib39h9WEIuJiiLZIVtD2ZO8DW5uvEY7hjosddB
aLWQAlTzuZ67xhDl7LOvws8/152iWe458ZfD7NH+Em1r2Wz6zLitqdbOmDusq+P2
AtWWYnnIx+5oEpI2dlpoTMnQLF+Lp72vNyogWI8zoYbzx7merKvyY45ckFqCrcEv
PCOeszObwGmrEuyvcAnL5+D6ec5VLoPmTMEOV1OmBUz7c9SaEQZ9sqMWPnawbtvU
KVFBDJxdsXFMVp/UYDP5i8EVNSEyXRk43XCUMxcmfC5DgWsC7os5XK40rse494Ny
ARLneKgEDl/UoA==
-----END CERTIFICATE-----
Generated at Fri May 9 15:28:27 2025 by rpki-client