Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/6af142-0ac6-4e76-9042-71481bb0a52f/1/w3zXlUPxp3KZ0GmqNhUYVFMN2GI.mft
File:                     w3zXlUPxp3KZ0GmqNhUYVFMN2GI.mft (raw, json)
Hash identifier:          mzbgo6Euz952vN8R/u263FwceUDDtVJYG+pekfZrRVI=
Subject key identifier:   CD:30:79:A4:26:B1:EF:A2:DD:D7:19:F2:CB:0A:92:EA:F0:6D:F1:07
Authority key identifier: C3:7C:D7:95:43:F1:A7:72:99:D0:69:AA:36:15:18:54:53:0D:D8:62
Certificate issuer:       /CN=c37cd79543f1a77299d069aa36151854530dd862
Certificate serial:       0196A0885D76679BFB31D12B56C107339361
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w3zXlUPxp3KZ0GmqNhUYVFMN2GI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/6af142-0ac6-4e76-9042-71481bb0a52f/1/w3zXlUPxp3KZ0GmqNhUYVFMN2GI.mft
Manifest number:          067C
Signing time:             Mon 05 May 2025 13:00:13 +0000
Manifest this update:     Mon 05 May 2025 13:00:13 +0000
Manifest next update:     Tue 06 May 2025 13:00:13 +0000
Files and hashes:         1: w3zXlUPxp3KZ0GmqNhUYVFMN2GI.crl (hash: mUkYQMJJfskIEbh7ocg4Hg0AMn+XqN1vrzl7J2jKRuU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/6af142-0ac6-4e76-9042-71481bb0a52f/1/w3zXlUPxp3KZ0GmqNhUYVFMN2GI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/6af142-0ac6-4e76-9042-71481bb0a52f/1/w3zXlUPxp3KZ0GmqNhUYVFMN2GI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w3zXlUPxp3KZ0GmqNhUYVFMN2GI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a0:88:5d:76:67:9b:fb:31:d1:2b:56:c1:07:33:93:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c37cd79543f1a77299d069aa36151854530dd862
        Validity
            Not Before: May  5 13:00:13 2025 GMT
            Not After : May  6 13:00:13 2025 GMT
        Subject: CN=cd3079a426b1efa2ddd719f2cb0a92eaf06df107
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:25:18:38:34:0a:3f:60:9d:69:8e:6b:c7:63:
                    7e:dd:b6:92:36:40:49:da:c4:3a:aa:a6:47:99:6c:
                    eb:0b:09:91:6a:b1:ee:a7:99:01:7b:5f:3a:c0:15:
                    9a:fc:c2:47:64:7d:8c:b3:f6:28:47:10:b8:f3:2a:
                    89:17:be:c0:21:3f:58:c1:5c:af:4e:ce:fc:df:2e:
                    67:4c:69:35:40:d4:1b:a7:ed:86:ce:23:cd:c0:cc:
                    10:18:0b:a1:7d:a6:5a:0d:79:2e:5e:80:2f:68:2d:
                    60:62:ba:c9:49:18:5d:7c:6d:2e:b5:f3:bb:e6:64:
                    52:c0:cc:22:a6:e7:16:5c:9c:0a:88:95:85:cd:8c:
                    58:81:06:83:6e:63:c8:1f:41:ba:6a:20:ec:1e:43:
                    3f:bf:70:57:ae:23:5c:9e:d5:2c:04:8a:6b:9e:8e:
                    83:a3:cc:c7:74:79:fa:77:71:67:ff:9a:f8:c8:b4:
                    0d:4e:5a:40:e7:37:6c:3c:7a:ba:33:23:b6:02:e0:
                    a7:28:d4:44:45:93:44:23:20:a8:a8:c7:fe:bb:56:
                    40:73:72:c5:fb:00:ec:5d:b5:da:4f:e4:29:9b:d5:
                    07:24:64:b7:a1:62:17:46:74:7c:e1:cb:3c:10:1e:
                    c5:fe:53:b1:6f:f8:e4:55:8f:be:c5:d9:06:42:92:
                    d6:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:30:79:A4:26:B1:EF:A2:DD:D7:19:F2:CB:0A:92:EA:F0:6D:F1:07
            X509v3 Authority Key Identifier:
                keyid:C3:7C:D7:95:43:F1:A7:72:99:D0:69:AA:36:15:18:54:53:0D:D8:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3zXlUPxp3KZ0GmqNhUYVFMN2GI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/6af142-0ac6-4e76-9042-71481bb0a52f/1/w3zXlUPxp3KZ0GmqNhUYVFMN2GI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/6af142-0ac6-4e76-9042-71481bb0a52f/1/w3zXlUPxp3KZ0GmqNhUYVFMN2GI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:fd:b7:2e:f7:3c:b3:5d:79:63:82:88:75:8f:7a:91:7f:20:
         15:14:8f:b2:01:39:d9:71:e8:b6:ae:2c:0a:be:a1:f2:ba:4a:
         af:9b:ae:41:7f:67:04:a7:73:e6:e5:3b:b8:6e:0d:47:42:52:
         53:46:45:cd:64:0b:be:f5:9f:e0:14:41:19:1d:20:4e:4b:65:
         0e:4e:34:57:1f:8f:8e:a7:00:4a:da:47:f5:16:88:2d:76:dc:
         ec:35:56:8f:56:3a:79:94:3a:c7:e0:dd:67:45:0f:b3:8d:d1:
         c7:c8:91:61:78:2e:04:f3:b4:8d:31:d6:d3:5f:8d:24:22:51:
         b9:a0:e3:63:6a:47:6c:20:68:41:87:54:e4:86:70:43:c3:57:
         fc:b2:27:7c:70:77:4a:e7:b7:1d:1d:f0:34:4d:ff:91:1e:b2:
         45:12:fc:36:3e:1f:28:9f:fe:cf:00:94:2e:69:91:38:86:ec:
         1b:2b:31:bc:d3:f6:f1:76:e2:de:4b:20:9f:f3:98:17:2a:d8:
         a9:81:df:e1:43:25:54:09:49:9a:b7:0b:6f:b1:f5:b8:dc:31:
         b5:b0:ba:d6:5f:29:53:f4:8f:20:61:d7:28:c6:f7:57:d9:89:
         9e:57:62:f4:e2:31:50:d2:70:b9:40:92:01:2e:cb:d6:8a:1f:
         59:50:68:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 15:36:03 2025 by rpki-client