Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/9e388d-3990-4fd8-82b3-d775117af12f/1/w91X4yvXbbd77fxSETY8SAgPBgU.mft
File:                     w91X4yvXbbd77fxSETY8SAgPBgU.mft (raw, json)
Hash identifier:          TJQIG4r8KUBGmmYMeD638xyvjoLLlv+lcYIUSI4qdek=
Subject key identifier:   7C:28:E7:FC:2D:C1:38:E0:D8:B3:B5:E9:71:53:84:BC:6B:DF:F7:23
Authority key identifier: C3:DD:57:E3:2B:D7:6D:B7:7B:ED:FC:52:11:36:3C:48:08:0F:06:05
Certificate issuer:       /CN=c3dd57e32bd76db77bedfc5211363c48080f0605
Certificate serial:       019881D53FF76AF37AFDAFD7E633FA544B15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w91X4yvXbbd77fxSETY8SAgPBgU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/9e388d-3990-4fd8-82b3-d775117af12f/1/w91X4yvXbbd77fxSETY8SAgPBgU.mft
Manifest number:          0C89
Signing time:             Thu 07 Aug 2025 00:01:33 +0000
Manifest this update:     Thu 07 Aug 2025 00:01:33 +0000
Manifest next update:     Fri 08 Aug 2025 00:01:33 +0000
Files and hashes:         1: w91X4yvXbbd77fxSETY8SAgPBgU.crl (hash: joPB4EzTe5rmhczGrTtIj3xmfsp6D2ljF7MGphqy3ZM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/9e388d-3990-4fd8-82b3-d775117af12f/1/w91X4yvXbbd77fxSETY8SAgPBgU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/9e388d-3990-4fd8-82b3-d775117af12f/1/w91X4yvXbbd77fxSETY8SAgPBgU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w91X4yvXbbd77fxSETY8SAgPBgU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:46:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:81:d5:3f:f7:6a:f3:7a:fd:af:d7:e6:33:fa:54:4b:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3dd57e32bd76db77bedfc5211363c48080f0605
        Validity
            Not Before: Aug  7 00:01:33 2025 GMT
            Not After : Aug  8 00:01:33 2025 GMT
        Subject: CN=7c28e7fc2dc138e0d8b3b5e9715384bc6bdff723
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:0a:c1:c4:2e:e2:67:c8:bf:05:03:d7:a0:bd:
                    44:7b:31:6d:d1:43:ba:a2:12:5e:47:fe:43:71:f4:
                    44:08:f4:2c:2e:31:97:09:09:7d:fd:9c:c3:37:7a:
                    ae:cd:9c:ed:42:d5:56:4b:87:75:56:f4:be:ee:52:
                    90:8b:34:7b:03:4b:a6:04:4a:38:e3:b6:3c:5a:94:
                    1c:fd:cb:c0:7e:d8:22:a2:e2:13:8f:8d:86:17:3c:
                    0b:43:80:24:f6:a1:3d:96:8d:31:7c:3f:c4:f6:54:
                    7b:26:22:e7:e1:05:56:58:c0:c1:2e:cd:f5:90:65:
                    e4:94:d2:4f:10:bb:26:a9:5b:c6:ae:c8:81:80:c8:
                    dd:cb:0c:3d:5d:56:78:96:62:8b:0a:b8:6e:f2:34:
                    b0:d5:b3:51:46:63:eb:bd:cb:d3:d7:b4:a1:6c:9c:
                    7b:60:84:d3:db:91:a3:8b:43:c9:5f:e9:35:40:cd:
                    30:bb:27:a0:65:26:3e:e5:80:80:02:f1:f7:63:e9:
                    1b:30:22:6d:03:96:18:07:57:27:ac:31:c4:b7:4a:
                    8b:d6:a1:a6:dc:f9:e1:af:6c:d1:eb:22:53:e5:66:
                    2a:d5:16:ee:e1:b9:9b:a8:2b:9e:41:bc:37:79:b1:
                    a4:67:96:2c:d5:a6:59:ec:98:c9:06:28:68:3a:13:
                    70:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:28:E7:FC:2D:C1:38:E0:D8:B3:B5:E9:71:53:84:BC:6B:DF:F7:23
            X509v3 Authority Key Identifier:
                keyid:C3:DD:57:E3:2B:D7:6D:B7:7B:ED:FC:52:11:36:3C:48:08:0F:06:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w91X4yvXbbd77fxSETY8SAgPBgU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9e388d-3990-4fd8-82b3-d775117af12f/1/w91X4yvXbbd77fxSETY8SAgPBgU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9e388d-3990-4fd8-82b3-d775117af12f/1/w91X4yvXbbd77fxSETY8SAgPBgU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:6d:3b:e3:7f:d3:94:89:aa:57:a5:71:f7:46:ac:54:0e:0c:
         af:63:89:44:e0:a6:24:db:0f:8d:c0:be:50:91:70:0e:77:9d:
         50:64:8a:7d:75:de:ac:b8:ea:76:de:af:ff:6e:92:19:d6:47:
         b7:12:51:9d:a4:85:d8:0b:a6:b6:e8:ca:f5:a9:80:88:3c:aa:
         ff:d8:02:07:b6:39:b3:b7:f4:89:b1:ce:07:9a:c3:fb:61:5b:
         01:0b:a2:79:96:9d:e7:aa:7c:ef:e8:4a:d5:cd:87:9f:73:01:
         57:0e:d1:4d:a1:a1:c9:2c:8e:54:c0:b1:8b:15:4d:90:b5:14:
         a4:ea:36:40:2c:fa:19:2b:94:62:86:5a:33:5b:26:c2:88:d1:
         a1:1f:77:54:61:25:94:6a:46:8d:5a:38:81:0d:5a:fb:ec:df:
         81:e6:53:af:fd:d1:42:3a:85:c3:e0:c1:8d:6c:8b:db:fd:90:
         a6:c0:5c:c2:34:af:a2:a6:fa:1f:76:ab:5a:df:dc:5d:5d:75:
         b9:28:d9:19:08:bd:a6:14:b6:37:3e:22:44:26:c7:0d:9f:09:
         8f:f6:59:6f:78:ec:88:72:b4:c9:2d:e8:be:da:c8:b6:c9:20:
         14:88:d1:d6:93:3f:fd:81:58:b6:49:a9:35:9e:89:57:e2:c4:
         a0:3c:0e:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:25:01 2025 by rpki-client