Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/5b3a89-62a8-421c-b74e-9577ff5dd338/1/wWorxbJu0grF0v3qnayGffkjIFo.mft
File:                     wWorxbJu0grF0v3qnayGffkjIFo.mft (raw, json)
Hash identifier:          X9xNKenWX4ftyVmFGsQSRJsh8b4SnHgliYcFhIzbe9E=
Subject key identifier:   7B:E9:3B:C8:6C:32:C0:C9:1F:06:BB:5D:7F:24:97:D7:5A:9C:AE:1E
Authority key identifier: C1:6A:2B:C5:B2:6E:D2:0A:C5:D2:FD:EA:9D:AC:86:7D:F9:23:20:5A
Certificate issuer:       /CN=c16a2bc5b26ed20ac5d2fdea9dac867df923205a
Certificate serial:       01976DAB6DC8FF98BCEF7954342185C63D75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wWorxbJu0grF0v3qnayGffkjIFo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/5b3a89-62a8-421c-b74e-9577ff5dd338/1/wWorxbJu0grF0v3qnayGffkjIFo.mft
Manifest number:          0565
Signing time:             Sat 14 Jun 2025 09:00:40 +0000
Manifest this update:     Sat 14 Jun 2025 09:00:40 +0000
Manifest next update:     Sun 15 Jun 2025 09:00:40 +0000
Files and hashes:         1: wWorxbJu0grF0v3qnayGffkjIFo.crl (hash: CUgw4gj8mu5gEeKwMbNdskmkc3/vvPUW7OqU3bTcuDs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/5b3a89-62a8-421c-b74e-9577ff5dd338/1/wWorxbJu0grF0v3qnayGffkjIFo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/5b3a89-62a8-421c-b74e-9577ff5dd338/1/wWorxbJu0grF0v3qnayGffkjIFo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wWorxbJu0grF0v3qnayGffkjIFo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 03:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6d:ab:6d:c8:ff:98:bc:ef:79:54:34:21:85:c6:3d:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c16a2bc5b26ed20ac5d2fdea9dac867df923205a
        Validity
            Not Before: Jun 14 09:00:40 2025 GMT
            Not After : Jun 15 09:00:40 2025 GMT
        Subject: CN=7be93bc86c32c0c91f06bb5d7f2497d75a9cae1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f1:ad:2c:49:c0:72:43:1b:b8:d4:bd:6f:77:
                    66:93:fe:56:47:79:30:74:00:b2:de:45:37:51:dc:
                    42:01:fe:8f:df:9d:bf:8c:93:bf:9b:0d:f5:48:9f:
                    18:d5:27:3c:a4:8b:88:91:a7:c7:a5:ff:25:13:09:
                    c1:5f:7f:b0:58:6d:e8:27:38:e1:7d:af:65:e7:cf:
                    3a:54:e2:8f:2d:a7:85:ac:6a:f5:38:25:81:5c:31:
                    64:ea:76:79:2e:f6:8d:5b:3a:eb:7e:49:ea:8d:4b:
                    36:ef:92:97:93:62:ff:e8:c1:4c:cd:88:f9:73:70:
                    47:f3:86:47:d6:b4:5c:bd:21:0c:b3:e0:65:a7:2c:
                    9c:88:bf:cc:9a:45:2b:4a:9d:dc:46:08:d5:af:ac:
                    38:c5:3e:b5:41:6b:09:b9:14:53:9e:d5:66:b8:3b:
                    55:fd:1d:cf:61:ec:8e:f9:1d:a3:80:25:27:c5:a4:
                    b5:8f:31:bf:78:f0:93:37:12:92:9c:cd:8e:1c:ce:
                    48:f4:8f:4f:41:dd:11:3e:24:f0:9b:8a:16:ca:1c:
                    69:ed:18:b5:49:60:eb:7b:03:b1:07:92:b8:bd:04:
                    ab:dc:91:96:17:17:99:28:eb:9e:b5:cb:80:19:ba:
                    f3:61:26:12:66:bd:95:95:4b:8d:ff:11:1a:e8:c8:
                    4a:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:E9:3B:C8:6C:32:C0:C9:1F:06:BB:5D:7F:24:97:D7:5A:9C:AE:1E
            X509v3 Authority Key Identifier:
                keyid:C1:6A:2B:C5:B2:6E:D2:0A:C5:D2:FD:EA:9D:AC:86:7D:F9:23:20:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wWorxbJu0grF0v3qnayGffkjIFo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/5b3a89-62a8-421c-b74e-9577ff5dd338/1/wWorxbJu0grF0v3qnayGffkjIFo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/5b3a89-62a8-421c-b74e-9577ff5dd338/1/wWorxbJu0grF0v3qnayGffkjIFo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:34:85:12:9f:ac:0b:b7:59:4f:12:39:56:13:8d:fa:1c:43:
         24:57:13:e5:0d:54:49:37:c6:53:81:c2:fb:26:94:a8:2c:2a:
         07:cc:44:c8:6d:da:c0:d2:d2:3f:c1:ca:53:c4:e1:c7:90:cd:
         be:dc:a5:d9:cc:d5:5c:e1:7d:3c:75:02:e9:c3:70:04:72:62:
         be:5e:20:85:b5:f3:fb:4d:5d:73:b9:d7:7f:e0:2a:78:12:29:
         98:68:c2:f7:1b:66:6e:24:71:3f:ab:78:b8:99:17:45:cd:95:
         cc:1a:1a:96:20:4f:69:79:87:82:ef:5b:13:bc:11:f4:e3:b9:
         f0:c8:98:80:e1:74:8e:f5:44:3c:06:13:eb:ea:33:21:bd:e2:
         d0:c3:14:e9:8a:83:f8:3b:8d:08:57:34:8d:50:7e:f2:51:34:
         03:d9:5b:bf:ea:82:d4:d7:07:93:41:cb:cc:5d:fe:15:e9:c8:
         63:ed:53:6e:07:c1:fc:08:aa:6d:d6:63:f7:a6:f0:2e:48:70:
         4b:bb:02:cb:21:7d:c0:9a:9a:d3:92:2c:d4:b5:03:f2:3d:66:
         f4:f3:9d:87:ef:c2:12:71:ca:9e:d4:02:79:80:20:d5:e1:43:
         8c:82:03:d6:94:e7:9e:5f:ef:88:63:58:b1:5c:fd:03:98:8d:
         ea:f0:47:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 13:04:35 2025 by rpki-client