Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/3904bb-0b6c-4da5-a5af-aafaaeaed8bb/1/WVpR9FwMtjeRQg0JQ8KDUdG7vQo.mft
File:                     WVpR9FwMtjeRQg0JQ8KDUdG7vQo.mft (raw, json)
Hash identifier:          O/PvqJslkXDb51bDk0K55Td3PyhWnX2eGpMnhHNv3uw=
Subject key identifier:   F3:C6:82:29:0F:AA:94:5F:7C:12:C1:62:E4:25:BC:26:3C:A7:EB:4A
Authority key identifier: 59:5A:51:F4:5C:0C:B6:37:91:42:0D:09:43:C2:83:51:D1:BB:BD:0A
Certificate issuer:       /CN=595a51f45c0cb63791420d0943c28351d1bbbd0a
Certificate serial:       01976A0621C2584FD149B114374A96E7236E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WVpR9FwMtjeRQg0JQ8KDUdG7vQo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/3904bb-0b6c-4da5-a5af-aafaaeaed8bb/1/WVpR9FwMtjeRQg0JQ8KDUdG7vQo.mft
Manifest number:          099A
Signing time:             Fri 13 Jun 2025 16:01:16 +0000
Manifest this update:     Fri 13 Jun 2025 16:01:16 +0000
Manifest next update:     Sat 14 Jun 2025 16:01:16 +0000
Files and hashes:         1: WVpR9FwMtjeRQg0JQ8KDUdG7vQo.crl (hash: YGRsF2+Bmfbwo1JLfc4mfnKMbGX5t//HsTTSc9ybzq8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/3904bb-0b6c-4da5-a5af-aafaaeaed8bb/1/WVpR9FwMtjeRQg0JQ8KDUdG7vQo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/3904bb-0b6c-4da5-a5af-aafaaeaed8bb/1/WVpR9FwMtjeRQg0JQ8KDUdG7vQo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WVpR9FwMtjeRQg0JQ8KDUdG7vQo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6a:06:21:c2:58:4f:d1:49:b1:14:37:4a:96:e7:23:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=595a51f45c0cb63791420d0943c28351d1bbbd0a
        Validity
            Not Before: Jun 13 16:01:16 2025 GMT
            Not After : Jun 14 16:01:16 2025 GMT
        Subject: CN=f3c682290faa945f7c12c162e425bc263ca7eb4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:9c:c6:bb:ce:f0:d2:a5:1c:b1:53:c7:09:7b:
                    ed:32:c6:9a:8d:c2:00:50:4e:7d:39:f3:d2:17:f0:
                    65:13:56:1a:bd:62:38:84:94:9f:2c:b0:c3:06:e0:
                    f0:b4:6e:6f:5a:cd:46:61:61:9e:93:ca:be:ba:bd:
                    9f:2a:43:09:b1:94:bc:65:1f:6a:42:0e:ff:72:5f:
                    ab:ab:45:cc:8a:c8:fb:ef:0f:85:f1:7f:3a:8e:35:
                    22:c3:1c:95:52:15:c1:71:d4:6d:7a:3d:59:c7:e8:
                    84:f6:84:35:7d:01:d6:81:2e:05:33:84:85:d3:d0:
                    44:af:51:3f:b1:90:77:3c:6a:48:99:91:25:a8:91:
                    44:16:be:cb:15:17:12:2d:00:70:ec:a1:84:fb:a3:
                    2d:ee:d7:2f:14:cd:13:19:46:0d:c1:ee:60:06:98:
                    d8:2e:6e:32:a6:1a:06:fe:e1:0d:6b:aa:11:82:8b:
                    ac:82:e2:cf:83:7c:46:0c:9c:99:60:4c:84:6a:79:
                    f1:f4:03:ea:ce:9f:58:43:c6:55:56:e7:cb:fd:b5:
                    cd:f2:64:df:63:65:8d:fa:d2:be:31:17:50:4d:5b:
                    1b:a0:14:8f:06:7d:46:63:2c:40:e6:e9:73:4f:9d:
                    b3:c5:a4:c1:e0:c2:52:ab:a6:a4:c2:ef:17:7e:09:
                    9d:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:C6:82:29:0F:AA:94:5F:7C:12:C1:62:E4:25:BC:26:3C:A7:EB:4A
            X509v3 Authority Key Identifier:
                keyid:59:5A:51:F4:5C:0C:B6:37:91:42:0D:09:43:C2:83:51:D1:BB:BD:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WVpR9FwMtjeRQg0JQ8KDUdG7vQo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3904bb-0b6c-4da5-a5af-aafaaeaed8bb/1/WVpR9FwMtjeRQg0JQ8KDUdG7vQo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3904bb-0b6c-4da5-a5af-aafaaeaed8bb/1/WVpR9FwMtjeRQg0JQ8KDUdG7vQo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:ae:fd:3d:d4:46:85:76:f5:80:ea:39:5c:0b:c4:8b:1d:50:
         e5:97:de:d8:c2:d1:c8:41:a2:9d:5a:ea:aa:94:f2:6f:89:c0:
         f4:31:aa:41:b8:2a:4e:18:2d:0a:b6:cf:6f:54:45:0b:ec:17:
         57:52:b0:4a:3f:04:ea:b2:b0:c3:74:47:75:6d:40:2a:58:5d:
         c7:25:58:94:b9:fb:d9:22:a3:4c:0d:92:a0:47:df:db:4d:50:
         7c:f0:94:78:fc:e5:fc:1f:fb:26:80:43:52:dc:f9:29:3b:17:
         e2:d2:bf:93:93:b5:60:69:73:83:7e:08:bd:62:08:8f:c0:a4:
         6b:b3:ad:6c:a9:f5:a0:6a:f8:52:b7:49:67:c8:9e:1a:50:bc:
         31:e6:e0:f7:1d:f1:9e:cc:a5:27:f0:7c:d2:6b:23:fd:c6:4c:
         b5:5a:b0:9e:67:ba:1b:1d:ac:42:70:b4:63:27:63:97:f1:6b:
         67:91:59:56:31:23:0b:67:6c:30:a5:8d:45:d5:22:93:18:da:
         0c:54:e8:76:f8:0e:a8:77:3d:3d:58:28:44:4e:bb:dd:6b:7f:
         25:3f:9d:b5:53:84:dc:ac:c6:b0:f7:20:83:04:92:f9:2e:5c:
         61:61:91:b9:13:7e:54:f8:76:15:26:ca:e0:df:3d:02:a1:da:
         dd:c8:6f:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:17:23 2025 by rpki-client