Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/afced8-5c48-4740-a635-1611c90ba33b/1/wOG4t6HaZANISTucb06tSW44Yc8.mft
File:                     wOG4t6HaZANISTucb06tSW44Yc8.mft (raw, json)
Hash identifier:          awwjQyGrOjfUBAeIXA3cEalZXYoP2rjjqL4vKIBvUEE=
Subject key identifier:   38:00:A6:B6:88:50:C9:14:95:AD:F6:4E:38:03:5C:68:19:87:53:AE
Authority key identifier: C0:E1:B8:B7:A1:DA:64:03:48:49:3B:9C:6F:4E:AD:49:6E:38:61:CF
Certificate issuer:       /CN=c0e1b8b7a1da640348493b9c6f4ead496e3861cf
Certificate serial:       019776778B86D54E609018FFCB9DAF0AEDFC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wOG4t6HaZANISTucb06tSW44Yc8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/afced8-5c48-4740-a635-1611c90ba33b/1/wOG4t6HaZANISTucb06tSW44Yc8.mft
Manifest number:          0B
Signing time:             Mon 16 Jun 2025 02:00:35 +0000
Manifest this update:     Mon 16 Jun 2025 02:00:35 +0000
Manifest next update:     Tue 17 Jun 2025 02:00:35 +0000
Files and hashes:         1: wOG4t6HaZANISTucb06tSW44Yc8.crl (hash: Lj8nyIuqglPCsN1DJFG+BXPAN4Y72XBs46jkr6b2c+E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/afced8-5c48-4740-a635-1611c90ba33b/1/wOG4t6HaZANISTucb06tSW44Yc8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/afced8-5c48-4740-a635-1611c90ba33b/1/wOG4t6HaZANISTucb06tSW44Yc8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wOG4t6HaZANISTucb06tSW44Yc8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 02:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:76:77:8b:86:d5:4e:60:90:18:ff:cb:9d:af:0a:ed:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0e1b8b7a1da640348493b9c6f4ead496e3861cf
        Validity
            Not Before: Jun 16 02:00:35 2025 GMT
            Not After : Jun 17 02:00:35 2025 GMT
        Subject: CN=3800a6b68850c91495adf64e38035c68198753ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ba:16:6f:ec:28:04:e9:f6:28:cc:e3:4c:3d:
                    82:48:6b:6f:cf:14:db:e1:06:5e:72:8f:b8:4c:86:
                    88:76:50:be:51:7e:ad:f0:ad:b2:1b:46:c9:26:7f:
                    80:c3:91:f7:2b:01:95:45:37:97:17:d8:4f:74:f7:
                    2e:35:66:9c:2f:f8:f5:9e:d8:68:df:54:f2:43:57:
                    6f:f8:e3:09:6f:5b:38:01:6d:35:dc:ae:ac:48:87:
                    d5:c9:59:5a:52:fa:44:d7:67:f0:b3:a0:67:b5:95:
                    af:18:ba:df:2e:a0:40:e2:cb:51:c4:3b:8e:80:b6:
                    68:a2:d9:49:0a:77:48:84:b6:89:59:7d:78:b6:69:
                    22:3b:3b:e0:58:85:c3:00:a4:c3:28:d5:59:cd:a2:
                    ea:31:d2:f0:15:75:53:9e:09:23:4d:a8:b3:85:aa:
                    f0:3a:98:52:23:99:fa:57:82:f1:1f:0c:ea:13:cb:
                    77:9e:38:47:55:33:cd:9b:be:12:9c:fc:63:79:43:
                    06:25:06:3c:ee:9d:ba:fa:5c:14:57:f8:ce:6e:9e:
                    01:b5:82:06:68:2a:a5:70:e0:36:b2:5d:c9:06:01:
                    b0:cf:49:a0:9e:88:49:67:d1:e0:8d:73:af:d8:a6:
                    d4:7f:c1:b0:77:8c:08:8d:fd:0e:f8:b5:43:f7:2b:
                    85:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:00:A6:B6:88:50:C9:14:95:AD:F6:4E:38:03:5C:68:19:87:53:AE
            X509v3 Authority Key Identifier:
                keyid:C0:E1:B8:B7:A1:DA:64:03:48:49:3B:9C:6F:4E:AD:49:6E:38:61:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOG4t6HaZANISTucb06tSW44Yc8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/afced8-5c48-4740-a635-1611c90ba33b/1/wOG4t6HaZANISTucb06tSW44Yc8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/afced8-5c48-4740-a635-1611c90ba33b/1/wOG4t6HaZANISTucb06tSW44Yc8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:9f:9e:b1:9d:a7:1c:61:78:d3:b6:3e:b6:94:ea:31:33:05:
         0a:39:c3:cc:33:1a:6b:f8:86:c0:01:1c:03:40:ad:93:0d:2b:
         21:06:ca:c3:fc:81:76:e1:19:dd:c1:23:d7:d0:b2:f7:6d:36:
         13:26:ec:2b:46:19:8e:a3:18:61:8e:d4:c9:3d:a2:c4:00:29:
         ab:0d:a0:1d:2e:23:19:a3:ce:e8:a5:a3:05:05:04:82:16:73:
         af:9d:fe:dc:c4:ed:3e:5b:57:5c:f2:e4:ae:72:58:47:75:35:
         d5:46:5a:ff:f4:fb:28:42:cf:3e:c9:c1:bf:6e:0d:24:82:e0:
         8a:b8:ac:7b:00:a6:1c:d3:c8:67:13:1f:2c:28:89:18:24:78:
         85:88:c4:b6:3d:83:8b:00:e9:c8:00:00:9b:f4:dc:dd:6b:54:
         70:0c:8d:14:c8:8c:b1:c0:e2:39:12:56:72:13:fc:b4:9f:0a:
         a5:54:8d:d0:0d:d5:02:f8:b8:10:76:90:2a:c5:85:85:94:35:
         10:23:8b:5f:1a:80:55:fe:bc:c2:a9:64:0b:43:16:9a:5e:4e:
         d2:b3:a0:f2:d4:34:05:ab:77:ad:99:8e:ee:07:94:6e:f4:c2:
         ff:0f:73:7a:21:a5:a2:17:9a:59:f2:2c:bf:b6:29:a9:b4:fa:
         b0:9d:46:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:22:29 2025 by rpki-client