Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/d881e7-e2dc-4ed9-a759-6bfe902ef034/1/wU3JWO0VLcdwKeyPhs8BiuK7-Qk.mft
File:                     wU3JWO0VLcdwKeyPhs8BiuK7-Qk.mft (raw, json)
Hash identifier:          p7ikeb82JB2zsKvwIXr5W1J2ES5rk0FkTQ9KE8mzmL4=
Subject key identifier:   D9:F8:EC:4E:53:1C:9E:6C:9E:D0:CE:53:7F:3D:B5:34:72:53:63:27
Authority key identifier: C1:4D:C9:58:ED:15:2D:C7:70:29:EC:8F:86:CF:01:8A:E2:BB:F9:09
Certificate issuer:       /CN=c14dc958ed152dc77029ec8f86cf018ae2bbf909
Certificate serial:       019872CF1B63EAD0646B39B9AD11D898BB17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wU3JWO0VLcdwKeyPhs8BiuK7-Qk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/d881e7-e2dc-4ed9-a759-6bfe902ef034/1/wU3JWO0VLcdwKeyPhs8BiuK7-Qk.mft
Manifest number:          1612
Signing time:             Mon 04 Aug 2025 02:00:32 +0000
Manifest this update:     Mon 04 Aug 2025 02:00:32 +0000
Manifest next update:     Tue 05 Aug 2025 02:00:32 +0000
Files and hashes:         1: wU3JWO0VLcdwKeyPhs8BiuK7-Qk.crl (hash: bB9EzE51nZRsPC0dTyiOLsSYM12ZTYvs/aQElYvkAR4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/76/d881e7-e2dc-4ed9-a759-6bfe902ef034/1/wU3JWO0VLcdwKeyPhs8BiuK7-Qk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/76/d881e7-e2dc-4ed9-a759-6bfe902ef034/1/wU3JWO0VLcdwKeyPhs8BiuK7-Qk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wU3JWO0VLcdwKeyPhs8BiuK7-Qk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 02:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:72:cf:1b:63:ea:d0:64:6b:39:b9:ad:11:d8:98:bb:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c14dc958ed152dc77029ec8f86cf018ae2bbf909
        Validity
            Not Before: Aug  4 02:00:32 2025 GMT
            Not After : Aug  5 02:00:32 2025 GMT
        Subject: CN=d9f8ec4e531c9e6c9ed0ce537f3db53472536327
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a3:6d:6c:e5:4b:3c:22:ab:9a:d3:d6:f9:2e:
                    66:bb:88:ba:99:d8:3d:a2:e2:8e:a9:3a:e5:40:13:
                    89:a8:f9:11:39:6c:e7:9f:c1:99:93:86:b8:92:d5:
                    c6:6b:c8:7e:e9:a2:e3:40:e5:31:2b:29:ee:84:4a:
                    fa:5a:55:af:63:58:e8:92:ff:0b:e7:bf:f8:d5:38:
                    55:32:29:04:49:65:93:9c:0a:35:bb:3f:50:c4:e1:
                    03:84:e9:71:64:7f:db:01:77:f2:52:08:d4:8a:85:
                    6f:97:c9:1f:57:d9:3e:7b:6a:a8:d5:f5:f5:ed:3f:
                    a5:84:9d:2d:e4:18:f8:07:68:b2:80:b1:b2:51:ca:
                    b4:71:dd:d8:ec:30:13:35:fd:b9:25:3b:a8:15:43:
                    97:11:d1:4b:9a:f0:60:19:e7:2b:58:e1:48:de:5d:
                    23:29:fa:34:e1:46:3a:67:97:09:35:4d:04:21:c1:
                    43:83:71:15:97:90:df:f8:8e:b5:bf:3e:d0:5b:6b:
                    89:00:2b:81:7f:4d:b4:53:04:66:f0:26:81:6a:2c:
                    de:b3:bc:35:c9:82:0b:2f:bc:e5:c3:20:e1:86:ef:
                    45:9d:76:b8:d8:8f:f4:fa:55:84:f6:b4:5a:e7:a8:
                    8a:14:f2:20:c4:5d:6d:4c:9e:cc:7a:48:86:b7:2d:
                    f9:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:F8:EC:4E:53:1C:9E:6C:9E:D0:CE:53:7F:3D:B5:34:72:53:63:27
            X509v3 Authority Key Identifier:
                keyid:C1:4D:C9:58:ED:15:2D:C7:70:29:EC:8F:86:CF:01:8A:E2:BB:F9:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wU3JWO0VLcdwKeyPhs8BiuK7-Qk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/d881e7-e2dc-4ed9-a759-6bfe902ef034/1/wU3JWO0VLcdwKeyPhs8BiuK7-Qk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/d881e7-e2dc-4ed9-a759-6bfe902ef034/1/wU3JWO0VLcdwKeyPhs8BiuK7-Qk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:d0:de:fd:17:3b:e1:de:2c:76:95:a6:c8:ec:90:3d:a9:b8:
         ae:c6:60:ca:28:1d:19:e7:df:fe:e5:77:3d:ca:65:af:1d:b9:
         1b:59:a9:ec:3d:f0:b6:7e:28:e6:cc:69:8e:50:c7:c5:fa:15:
         ec:6b:71:07:d9:f3:d1:73:6b:8c:52:d6:4f:8f:f3:29:6d:3e:
         67:59:d8:53:ec:78:a1:a1:35:15:29:8b:ca:4f:3d:2e:b7:dc:
         82:b6:4a:68:73:1a:95:08:e9:53:33:96:53:9c:d2:99:ac:cb:
         64:a4:0b:44:d8:14:81:80:f6:a9:30:6e:ac:56:0b:46:d2:7f:
         59:23:4a:da:1e:60:21:37:e3:63:6d:a2:ac:3f:86:1e:d0:59:
         28:fa:8b:20:5d:52:b5:8a:7d:99:29:aa:8d:d0:9a:d1:cd:00:
         bd:d1:b4:57:a4:71:db:a1:59:74:ab:89:2e:aa:ea:99:87:06:
         cf:c9:f5:60:88:fa:68:e2:e1:38:a5:88:b4:cc:63:06:3e:8d:
         0c:0a:2a:1a:25:57:68:5f:0a:4c:88:8f:6a:63:76:41:a0:a0:
         d8:c1:3f:54:f4:7c:00:1b:28:aa:c1:ca:0a:25:3f:30:65:b0:
         5d:7d:dd:97:31:8d:71:a7:af:07:5f:57:40:cf:fa:bd:b7:81:
         f8:8c:9b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:27:14 2025 by rpki-client