Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/da7fe1-4627-483d-8832-269a6b823b7e/1/w27RUSe_ywvNemOGi0mck8szURM.mft
File:                     w27RUSe_ywvNemOGi0mck8szURM.mft (raw, json)
Hash identifier:          OPDV2WsONqqAb1fVy9ad3H1yqW2AJ061MwNuGmwqUro=
Subject key identifier:   36:F4:30:6C:B9:8F:4C:D2:51:ED:88:39:77:7E:C1:C7:72:3F:A2:96
Authority key identifier: C3:6E:D1:51:27:BF:CB:0B:CD:7A:63:86:8B:49:9C:93:CB:33:51:13
Certificate issuer:       /CN=c36ed15127bfcb0bcd7a63868b499c93cb335113
Certificate serial:       019892C812202F536111F2A34417E83B02EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w27RUSe_ywvNemOGi0mck8szURM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/da7fe1-4627-483d-8832-269a6b823b7e/1/w27RUSe_ywvNemOGi0mck8szURM.mft
Manifest number:          DB
Signing time:             Sun 10 Aug 2025 07:00:41 +0000
Manifest this update:     Sun 10 Aug 2025 07:00:41 +0000
Manifest next update:     Mon 11 Aug 2025 07:00:41 +0000
Files and hashes:         1: w27RUSe_ywvNemOGi0mck8szURM.crl (hash: gpXvnVNDLgdOG5jFYFLfQDO2fvxX4ap1uoYU9PjiJMw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/da7fe1-4627-483d-8832-269a6b823b7e/1/w27RUSe_ywvNemOGi0mck8szURM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/da7fe1-4627-483d-8832-269a6b823b7e/1/w27RUSe_ywvNemOGi0mck8szURM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w27RUSe_ywvNemOGi0mck8szURM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 11 Aug 2025 07:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:92:c8:12:20:2f:53:61:11:f2:a3:44:17:e8:3b:02:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c36ed15127bfcb0bcd7a63868b499c93cb335113
        Validity
            Not Before: Aug 10 07:00:41 2025 GMT
            Not After : Aug 11 07:00:41 2025 GMT
        Subject: CN=36f4306cb98f4cd251ed8839777ec1c7723fa296
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:0b:8e:e9:84:c7:66:ee:5c:27:ec:79:97:92:
                    79:9f:39:cf:af:c8:0c:37:00:6d:d5:18:18:5c:e0:
                    a6:b5:68:1a:bf:52:d9:bc:8c:d9:f5:b6:bd:74:5a:
                    21:8d:27:76:74:2e:0d:43:99:f0:a6:77:88:26:b6:
                    1d:10:6f:aa:b2:cc:87:07:88:a9:5d:b2:74:0b:f6:
                    f5:08:17:ce:4b:5b:c1:96:c2:78:3f:bd:17:79:f1:
                    9f:34:ad:ce:cb:5e:82:3e:07:1b:e0:9c:e2:dd:ff:
                    0b:d9:d4:47:f9:87:56:1a:98:3d:d1:8e:8d:27:23:
                    5a:8b:00:f1:95:46:99:fa:13:61:e0:a5:d2:dc:52:
                    dd:6b:5a:87:22:50:d2:79:9f:0a:59:42:76:db:ce:
                    bd:54:23:fe:62:5e:e7:0e:0e:1a:3f:58:f4:0a:e5:
                    a8:5f:06:95:ff:46:80:09:ce:f0:ba:52:86:aa:dc:
                    23:fc:f6:5b:95:97:8c:95:a2:d6:05:c8:85:10:71:
                    10:4c:2e:54:b6:cf:fc:44:2d:3d:56:24:c5:88:ef:
                    cd:0c:b5:b0:7f:94:3a:e9:55:de:1f:a3:d1:9a:eb:
                    44:4e:40:f6:cb:b9:2d:c0:5d:71:cd:a7:9e:09:83:
                    dd:bf:d2:0d:f9:1a:9c:a1:d2:28:0f:6d:55:65:47:
                    3d:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:F4:30:6C:B9:8F:4C:D2:51:ED:88:39:77:7E:C1:C7:72:3F:A2:96
            X509v3 Authority Key Identifier:
                keyid:C3:6E:D1:51:27:BF:CB:0B:CD:7A:63:86:8B:49:9C:93:CB:33:51:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w27RUSe_ywvNemOGi0mck8szURM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/da7fe1-4627-483d-8832-269a6b823b7e/1/w27RUSe_ywvNemOGi0mck8szURM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/da7fe1-4627-483d-8832-269a6b823b7e/1/w27RUSe_ywvNemOGi0mck8szURM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:92:93:b0:ea:c7:7b:1d:64:37:04:fc:ae:31:e0:84:e9:55:
         35:2d:f3:b2:aa:8c:c5:0e:a6:c2:fd:90:cc:0d:3b:fd:51:1e:
         92:94:19:9b:48:b3:18:45:83:12:e3:e8:1a:34:cf:04:db:53:
         5e:86:aa:8b:35:85:2b:97:13:41:a7:b2:7a:7b:c2:53:28:d0:
         ae:dc:29:76:b7:1a:3e:f7:c6:97:0c:01:5d:5e:d3:48:ad:f1:
         e8:d3:df:c5:99:a4:45:31:a5:d8:39:9d:5a:e1:69:5e:c5:d1:
         0b:3c:ae:96:c6:fa:ff:a7:e6:41:6e:40:ce:10:8f:c5:8f:90:
         12:8f:41:c1:26:80:e7:9a:7e:bf:05:27:c7:08:65:d8:3b:23:
         ad:50:bf:f7:1f:7e:0c:de:ee:7a:f3:88:ea:c9:0d:e5:7f:e5:
         92:4d:9b:b8:4c:99:0f:b0:83:39:97:d3:07:cc:b6:80:37:9f:
         56:05:6f:9a:c2:18:12:00:aa:67:30:38:3f:c4:21:d8:1c:17:
         e5:1f:89:6c:08:ef:ec:07:93:30:91:ed:d7:7b:56:65:20:2b:
         f8:82:4c:cd:8f:f8:ce:57:9d:82:b6:01:2e:ed:bc:a0:3f:e8:
         ab:4f:e3:07:2c:f9:f9:a4:9e:44:6c:f3:da:4f:63:72:bd:9b:
         d6:72:b0:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 10:45:30 2025 by rpki-client