Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/cc76b4-e711-44a5-b823-8e6eff16a6f8/1/DWb-4PMIhlf7_SOngt9Xec-ROmM.mft
File:                     DWb-4PMIhlf7_SOngt9Xec-ROmM.mft (raw, json)
Hash identifier:          9oXbuWc+HYEGtyDYTN/KLifl9uiA/WcPPXHDmDcLrlc=
Subject key identifier:   67:C8:51:EB:B3:BA:AF:55:7C:5B:32:14:57:0E:8F:0D:A5:F4:AF:73
Authority key identifier: 0D:66:FE:E0:F3:08:86:57:FB:FD:23:A7:82:DF:57:79:CF:91:3A:63
Certificate issuer:       /CN=0d66fee0f3088657fbfd23a782df5779cf913a63
Certificate serial:       0196A23FE3DEC81999FBE232C47AF1ED6551
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DWb-4PMIhlf7_SOngt9Xec-ROmM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/cc76b4-e711-44a5-b823-8e6eff16a6f8/1/DWb-4PMIhlf7_SOngt9Xec-ROmM.mft
Manifest number:          0DE6
Signing time:             Mon 05 May 2025 21:00:18 +0000
Manifest this update:     Mon 05 May 2025 21:00:18 +0000
Manifest next update:     Tue 06 May 2025 21:00:18 +0000
Files and hashes:         1: DWb-4PMIhlf7_SOngt9Xec-ROmM.crl (hash: B/uMTsCXUNc4jam7XfLe4XObzQpVZ2MQoxwG4BvLA9E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/cc76b4-e711-44a5-b823-8e6eff16a6f8/1/DWb-4PMIhlf7_SOngt9Xec-ROmM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/cc76b4-e711-44a5-b823-8e6eff16a6f8/1/DWb-4PMIhlf7_SOngt9Xec-ROmM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DWb-4PMIhlf7_SOngt9Xec-ROmM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 18:19:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a2:3f:e3:de:c8:19:99:fb:e2:32:c4:7a:f1:ed:65:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d66fee0f3088657fbfd23a782df5779cf913a63
        Validity
            Not Before: May  5 21:00:18 2025 GMT
            Not After : May  6 21:00:18 2025 GMT
        Subject: CN=67c851ebb3baaf557c5b3214570e8f0da5f4af73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:0c:e0:c9:e8:79:6b:99:b0:ee:a5:eb:9f:58:
                    0c:fd:d3:5b:2c:9d:10:44:61:ba:9a:18:58:cc:63:
                    05:58:58:aa:ff:e5:a0:5b:13:41:b8:66:d9:38:19:
                    cf:21:18:2f:90:a1:84:ac:e3:ee:c2:3c:bb:43:1c:
                    24:64:3a:7e:92:7c:30:64:71:d5:16:f0:52:ba:ae:
                    2a:6f:35:84:b0:5a:a0:01:a5:c1:1b:36:4b:ae:ac:
                    88:4e:d4:7b:f3:e8:69:11:24:0b:5b:cf:c6:08:81:
                    39:13:78:cf:cc:66:b0:2c:0e:29:f7:63:01:5b:1d:
                    e3:66:98:37:f2:ef:46:b4:f4:cf:db:83:3f:6a:2a:
                    58:17:60:bc:fe:44:c0:10:e2:ed:af:95:ae:d1:70:
                    c9:16:20:4d:01:f4:3c:37:62:18:63:19:1a:24:97:
                    92:f2:6a:fc:1b:bb:11:13:bb:b0:ed:14:a3:0a:a5:
                    d9:1c:a7:9c:d7:68:e5:f4:3d:60:2a:0e:78:29:79:
                    6b:16:20:71:d1:b9:cd:67:df:4e:b9:87:a9:38:1b:
                    bc:df:c8:c2:8b:18:49:88:76:06:cb:91:0f:c2:d7:
                    b2:af:55:09:71:58:10:c5:94:50:b7:be:5f:d5:09:
                    ed:a4:1b:e1:38:47:9a:a3:4f:f6:09:11:e1:44:85:
                    de:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:C8:51:EB:B3:BA:AF:55:7C:5B:32:14:57:0E:8F:0D:A5:F4:AF:73
            X509v3 Authority Key Identifier:
                keyid:0D:66:FE:E0:F3:08:86:57:FB:FD:23:A7:82:DF:57:79:CF:91:3A:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DWb-4PMIhlf7_SOngt9Xec-ROmM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/cc76b4-e711-44a5-b823-8e6eff16a6f8/1/DWb-4PMIhlf7_SOngt9Xec-ROmM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/cc76b4-e711-44a5-b823-8e6eff16a6f8/1/DWb-4PMIhlf7_SOngt9Xec-ROmM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:19:1d:54:6f:27:06:00:b5:61:8d:73:03:5a:c4:d8:4d:5a:
         b3:4e:0a:2f:26:c1:d7:c6:2b:ea:81:3c:88:74:a8:96:71:db:
         2e:0d:ec:24:d6:f1:f3:52:d9:2a:c8:62:92:05:2f:1d:3d:37:
         b7:70:f8:6e:d3:35:28:f2:39:ca:85:9d:c2:e7:79:61:14:a3:
         bc:3f:48:c9:9b:47:9b:94:82:65:02:a5:e9:22:a9:9e:4f:71:
         14:23:f9:94:80:9f:4a:57:e7:8a:58:f3:53:12:f4:89:c1:16:
         60:f7:25:47:71:be:60:68:38:6f:c4:48:ec:50:72:d1:2c:ea:
         f7:a0:8b:f7:d5:80:ab:2c:42:8a:5c:f8:dd:a0:99:40:f8:26:
         0a:be:34:c7:f2:e3:9c:57:a3:ed:d2:3c:cd:27:e5:64:a1:c5:
         01:8f:63:fb:e2:a2:97:39:d9:64:cb:fc:e6:19:10:e7:93:49:
         55:82:23:b0:45:3e:23:b4:af:ad:70:6e:cf:a7:b1:fd:30:21:
         2a:22:5e:9d:8c:4e:92:11:66:ea:65:f6:12:8c:c9:0e:71:79:
         4e:0a:6f:98:5a:16:31:54:44:32:82:2a:44:53:d3:e8:b8:c9:
         03:8b:ac:08:f1:de:7b:84:47:10:86:e6:da:5a:4f:07:4e:b9:
         85:07:10:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 23:57:24 2025 by rpki-client