Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/0ee692-6d64-473a-a063-2cfe8366660f/1/wOuGHF00WeA57O8QTP2T8ggnx0U.mft
File:                     wOuGHF00WeA57O8QTP2T8ggnx0U.mft (raw, json)
Hash identifier:          XpQVfwVRgz6tso/0GKO0ao8z6YVaFbqfAsUkXZXwQWU=
Subject key identifier:   16:AE:47:E5:E6:F4:42:A0:0E:24:1C:B3:AD:1B:AA:33:50:CC:33:4D
Authority key identifier: C0:EB:86:1C:5D:34:59:E0:39:EC:EF:10:4C:FD:93:F2:08:27:C7:45
Certificate issuer:       /CN=c0eb861c5d3459e039ecef104cfd93f20827c745
Certificate serial:       0196BD12904B0EC9A7BE216B8C1D0FDDB8D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wOuGHF00WeA57O8QTP2T8ggnx0U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/0ee692-6d64-473a-a063-2cfe8366660f/1/wOuGHF00WeA57O8QTP2T8ggnx0U.mft
Manifest number:          D4
Signing time:             Sun 11 May 2025 02:00:32 +0000
Manifest this update:     Sun 11 May 2025 02:00:32 +0000
Manifest next update:     Mon 12 May 2025 02:00:32 +0000
Files and hashes:         1: wOuGHF00WeA57O8QTP2T8ggnx0U.crl (hash: 21FMTewRLVJ4rnF8FwpicWx6HTGEIwhQIhMzIpyzCx0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/0ee692-6d64-473a-a063-2cfe8366660f/1/wOuGHF00WeA57O8QTP2T8ggnx0U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/0ee692-6d64-473a-a063-2cfe8366660f/1/wOuGHF00WeA57O8QTP2T8ggnx0U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wOuGHF00WeA57O8QTP2T8ggnx0U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:bd:12:90:4b:0e:c9:a7:be:21:6b:8c:1d:0f:dd:b8:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0eb861c5d3459e039ecef104cfd93f20827c745
        Validity
            Not Before: May 11 02:00:32 2025 GMT
            Not After : May 12 02:00:32 2025 GMT
        Subject: CN=16ae47e5e6f442a00e241cb3ad1baa3350cc334d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:9e:7f:19:7d:53:45:3f:25:1e:d3:3d:7c:24:
                    98:49:e2:ca:96:eb:c4:f9:d0:04:bc:30:c4:af:34:
                    f6:58:17:fb:b3:75:cf:48:6c:de:b5:f0:ba:df:43:
                    19:db:58:a0:fa:9e:c7:82:c7:d6:66:33:c4:b3:96:
                    4c:78:fd:da:df:d5:15:9f:9e:77:91:c7:2e:a9:51:
                    e9:56:a9:6e:3c:cd:96:73:4e:9d:df:4d:c7:f0:ac:
                    90:bd:8f:04:77:15:d8:fc:2e:7f:36:e3:84:9a:96:
                    47:bc:d4:f1:47:95:88:09:e7:9d:46:35:9e:63:66:
                    e4:81:b6:b3:13:a7:dc:3c:c8:18:cc:cc:1a:8c:98:
                    e0:95:9e:b6:c6:30:12:46:da:af:9d:26:ff:27:0c:
                    f4:bd:56:22:ad:92:43:35:4e:a5:cd:87:4a:7c:8b:
                    ae:5e:8d:70:f8:0e:45:4e:5b:44:f4:a3:3d:18:bb:
                    f3:fa:39:aa:7c:70:9e:e4:e5:20:2a:ba:5d:81:61:
                    3e:4d:bf:20:fd:66:5a:ad:59:30:c3:5c:60:c2:72:
                    6d:ae:77:82:1e:85:5d:77:ce:a7:c8:79:f7:2d:a2:
                    40:1b:6b:ac:44:0d:a6:41:55:54:db:bb:74:c2:0a:
                    28:5c:2d:73:48:b6:f9:08:c1:01:2f:ce:e5:0e:4e:
                    b2:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:AE:47:E5:E6:F4:42:A0:0E:24:1C:B3:AD:1B:AA:33:50:CC:33:4D
            X509v3 Authority Key Identifier:
                keyid:C0:EB:86:1C:5D:34:59:E0:39:EC:EF:10:4C:FD:93:F2:08:27:C7:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOuGHF00WeA57O8QTP2T8ggnx0U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/0ee692-6d64-473a-a063-2cfe8366660f/1/wOuGHF00WeA57O8QTP2T8ggnx0U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/0ee692-6d64-473a-a063-2cfe8366660f/1/wOuGHF00WeA57O8QTP2T8ggnx0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:e8:c7:39:d4:10:7e:4a:8a:2a:44:68:74:eb:9d:d9:d9:75:
         7d:a9:64:c7:95:77:b6:50:6f:43:d7:e1:27:c4:79:b3:55:65:
         2c:8e:54:df:e5:4a:9f:99:6e:cf:14:2a:09:aa:ea:76:94:58:
         c5:48:ac:a1:b8:25:7e:be:26:6b:79:78:79:c2:fd:5e:67:bf:
         15:60:1b:dc:e9:d1:25:06:e3:90:57:fd:d3:bb:d0:ef:54:3f:
         38:b5:f9:99:3d:4d:70:14:56:d3:7e:68:5c:16:06:c6:58:41:
         e1:c9:b9:cd:8a:a4:6f:37:e1:60:f7:b5:80:46:9f:87:6a:85:
         3d:01:d8:e0:ad:6f:e9:0c:75:bd:17:20:a1:14:7d:30:c5:d4:
         8b:d7:ff:dc:13:ba:46:68:06:9e:f6:c9:5b:92:0e:32:8b:a1:
         1c:e2:3a:a9:3f:61:f4:60:b4:e3:d4:a3:c5:12:0f:79:f7:51:
         a2:fc:91:1d:84:2c:36:4e:92:28:44:31:10:9e:4e:d4:76:19:
         98:e5:c4:dc:0f:f4:44:03:b4:56:9b:c3:74:cd:d9:23:a9:ec:
         9a:4e:73:f6:c2:65:2e:00:e6:84:da:5e:57:43:24:49:88:7d:
         27:dc:2a:2c:21:4f:b6:d7:b4:86:b6:d6:2c:df:da:5e:e3:61:
         c0:c8:32:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 08:26:22 2025 by rpki-client