Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/6b7485-a265-4e29-b27d-1bc0c7baf5e3/1/w_W0TiSnGM-yONFLvHVe8VLylcE.mft
File:                     w_W0TiSnGM-yONFLvHVe8VLylcE.mft (raw, json)
Hash identifier:          etTUCJNpb5W7atttpEDtJO766jjdkIGfIun5CoPKtgo=
Subject key identifier:   E4:E5:0E:92:C0:A1:BA:88:C4:23:02:1A:25:E1:6C:52:C3:6C:6C:22
Authority key identifier: C3:F5:B4:4E:24:A7:18:CF:B2:38:D1:4B:BC:75:5E:F1:52:F2:95:C1
Certificate issuer:       /CN=c3f5b44e24a718cfb238d14bbc755ef152f295c1
Certificate serial:       0198D4E0C96727FE78063BCCBED8AF177235
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w_W0TiSnGM-yONFLvHVe8VLylcE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/6b7485-a265-4e29-b27d-1bc0c7baf5e3/1/w_W0TiSnGM-yONFLvHVe8VLylcE.mft
Manifest number:          0C23
Signing time:             Sat 23 Aug 2025 03:02:38 +0000
Manifest this update:     Sat 23 Aug 2025 03:02:38 +0000
Manifest next update:     Sun 24 Aug 2025 03:02:38 +0000
Files and hashes:         1: w_W0TiSnGM-yONFLvHVe8VLylcE.crl (hash: pE1GtH7ZLpvM/YJxjP0F5bleQlHKcze1LNCH9P6bFJk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/6b7485-a265-4e29-b27d-1bc0c7baf5e3/1/w_W0TiSnGM-yONFLvHVe8VLylcE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/6b7485-a265-4e29-b27d-1bc0c7baf5e3/1/w_W0TiSnGM-yONFLvHVe8VLylcE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w_W0TiSnGM-yONFLvHVe8VLylcE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 00:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d4:e0:c9:67:27:fe:78:06:3b:cc:be:d8:af:17:72:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3f5b44e24a718cfb238d14bbc755ef152f295c1
        Validity
            Not Before: Aug 23 03:02:38 2025 GMT
            Not After : Aug 24 03:02:38 2025 GMT
        Subject: CN=e4e50e92c0a1ba88c423021a25e16c52c36c6c22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:2c:f0:40:20:a7:d6:f3:3a:7e:55:85:d7:0f:
                    6e:33:99:c1:d2:42:d5:a0:38:80:8c:3a:aa:1e:1e:
                    07:7c:43:0c:8b:8f:f8:7d:26:21:ea:84:75:b8:5e:
                    ca:6f:5b:70:1b:11:bc:ae:f2:8b:f3:73:1f:86:9f:
                    25:21:55:f6:21:34:12:d7:99:4b:8a:72:49:e9:f2:
                    b6:b7:14:62:e6:4f:6e:8b:ea:74:7e:f9:2b:6e:53:
                    ab:f2:fb:20:6f:e7:0e:90:d6:b3:18:b6:25:a9:1f:
                    83:21:6c:b5:f2:35:a8:9e:61:9e:c6:82:5a:87:bf:
                    0b:56:a7:f4:71:28:b6:23:a0:b0:31:02:af:60:32:
                    9e:46:20:4c:9f:b0:4e:ec:90:01:92:9f:d7:a2:e4:
                    26:95:ee:74:02:c3:a2:5d:dc:28:2d:50:c2:c2:57:
                    f5:d6:2d:be:a7:41:a4:a4:8c:8a:7e:d2:1d:ec:36:
                    ad:95:9a:0a:c3:9c:60:64:12:6f:74:0d:68:5a:ed:
                    3f:46:4e:64:2d:1a:e5:76:71:06:98:84:c3:73:8a:
                    c2:1c:8d:73:dc:fb:9b:c6:33:b6:15:4b:67:4a:51:
                    bb:41:11:08:72:dd:c9:f5:39:b9:61:68:e5:b0:08:
                    03:65:1c:b7:1f:bc:19:39:36:e0:df:e0:f6:d5:27:
                    49:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:E5:0E:92:C0:A1:BA:88:C4:23:02:1A:25:E1:6C:52:C3:6C:6C:22
            X509v3 Authority Key Identifier:
                keyid:C3:F5:B4:4E:24:A7:18:CF:B2:38:D1:4B:BC:75:5E:F1:52:F2:95:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w_W0TiSnGM-yONFLvHVe8VLylcE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6b7485-a265-4e29-b27d-1bc0c7baf5e3/1/w_W0TiSnGM-yONFLvHVe8VLylcE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6b7485-a265-4e29-b27d-1bc0c7baf5e3/1/w_W0TiSnGM-yONFLvHVe8VLylcE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:47:c6:e7:34:2c:bb:44:de:84:87:8a:02:f4:4c:b6:fa:76:
         03:5f:63:26:ed:f8:42:ac:14:38:2f:36:0a:20:77:d4:fc:db:
         d4:89:bd:23:d5:3d:8a:ab:08:1e:f4:56:4e:24:26:4b:47:6e:
         93:f0:05:e6:65:39:dd:d6:b9:35:84:32:36:ae:81:1e:38:2c:
         2a:24:fe:24:cb:44:da:d1:3c:5f:6d:90:d7:92:e0:0f:93:70:
         62:7c:aa:dc:15:19:0d:c5:b0:cf:b7:28:bd:1e:99:e8:b4:b1:
         2c:06:5b:89:fc:7d:e8:75:8e:2c:03:ec:94:b8:29:ed:41:2e:
         cb:4a:a6:ba:63:fc:76:6a:d0:77:9f:0c:34:0e:c0:99:7e:53:
         97:d5:62:9a:76:d3:f0:d7:26:8e:9b:30:89:47:2f:73:50:21:
         71:c1:12:e4:84:9b:29:e3:90:7c:31:ad:be:24:33:b7:e8:81:
         08:b6:2f:72:13:c7:81:20:4c:6c:e6:18:b0:a0:80:c0:ea:26:
         e1:55:92:f4:73:74:a4:d0:39:39:4b:bb:94:bd:0d:49:5b:80:
         32:9d:22:30:68:ee:37:16:4b:a1:99:cc:01:a6:2a:9c:0f:cf:
         b6:bb:1e:26:76:62:00:f6:d9:92:e6:aa:04:e9:d5:0a:11:6e:
         2b:c0:76:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:18:06 2025 by rpki-client