Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/e54bf9-6b55-4c3c-aa50-153eefe70cf6/1/w7wtL2gXuUwmrv3Yn_lDqI8_HIQ.mft
File:                     w7wtL2gXuUwmrv3Yn_lDqI8_HIQ.mft (raw, json)
Hash identifier:          sOECvPPy1IsMhoviYuafl6/D8Pzea8MY8BuB6HzL3nw=
Subject key identifier:   96:AB:17:61:0A:5B:2A:FC:E4:14:4A:7E:1D:43:BE:E1:01:FE:23:0B
Authority key identifier: C3:BC:2D:2F:68:17:B9:4C:26:AE:FD:D8:9F:F9:43:A8:8F:3F:1C:84
Certificate issuer:       /CN=c3bc2d2f6817b94c26aefdd89ff943a88f3f1c84
Certificate serial:       01976C622E71CFF34957BA5CE96B14278363
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w7wtL2gXuUwmrv3Yn_lDqI8_HIQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/e54bf9-6b55-4c3c-aa50-153eefe70cf6/1/w7wtL2gXuUwmrv3Yn_lDqI8_HIQ.mft
Manifest number:          054D
Signing time:             Sat 14 Jun 2025 03:01:02 +0000
Manifest this update:     Sat 14 Jun 2025 03:01:02 +0000
Manifest next update:     Sun 15 Jun 2025 03:01:02 +0000
Files and hashes:         1: w7wtL2gXuUwmrv3Yn_lDqI8_HIQ.crl (hash: XSbtWuY8J4MHOY0gv9JnOvrSSvXwK/2ZiO4H65UtZwU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/e54bf9-6b55-4c3c-aa50-153eefe70cf6/1/w7wtL2gXuUwmrv3Yn_lDqI8_HIQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/e54bf9-6b55-4c3c-aa50-153eefe70cf6/1/w7wtL2gXuUwmrv3Yn_lDqI8_HIQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w7wtL2gXuUwmrv3Yn_lDqI8_HIQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 01:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6c:62:2e:71:cf:f3:49:57:ba:5c:e9:6b:14:27:83:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3bc2d2f6817b94c26aefdd89ff943a88f3f1c84
        Validity
            Not Before: Jun 14 03:01:02 2025 GMT
            Not After : Jun 15 03:01:02 2025 GMT
        Subject: CN=96ab17610a5b2afce4144a7e1d43bee101fe230b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:a7:fa:fe:74:0e:66:24:59:73:c5:5e:c3:50:
                    86:5a:1f:c0:1e:82:37:cf:8d:0b:f2:01:cc:b3:6b:
                    1d:26:08:aa:af:6b:a0:89:73:ca:49:b8:c2:0f:d0:
                    f1:df:3b:3c:0a:15:68:ff:85:91:8e:2a:7c:e0:08:
                    b1:d6:9f:19:04:69:1b:b5:12:9a:db:11:48:ab:2e:
                    c3:55:68:b7:bd:10:02:dc:b4:4c:9a:e9:f8:fc:7f:
                    e8:48:40:cb:3f:5a:22:39:cb:4f:b6:0a:43:fd:37:
                    41:72:a9:c6:33:4e:2f:18:d6:3c:f9:8f:3c:96:c4:
                    32:fc:a4:3a:f3:0d:0b:23:0b:09:16:90:b8:f1:5a:
                    93:96:65:85:b1:fc:75:e7:4c:7b:71:1f:98:e5:84:
                    92:42:8f:ec:1c:85:87:98:06:60:c2:95:45:89:6d:
                    5c:89:16:28:ba:29:5b:14:df:3f:5f:7b:77:37:8f:
                    e9:b7:b7:9a:5a:43:01:d3:13:ba:10:6e:6a:39:31:
                    82:dc:0a:bf:cf:4f:18:56:ea:d9:fd:30:a3:a1:e7:
                    ef:54:58:25:ac:ab:08:0f:97:2c:d0:cd:9c:42:cd:
                    64:75:00:75:77:0f:db:e8:23:df:57:17:2e:87:ed:
                    85:ec:b3:dc:69:1e:ec:3d:3f:85:e8:ef:5b:cd:04:
                    56:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:AB:17:61:0A:5B:2A:FC:E4:14:4A:7E:1D:43:BE:E1:01:FE:23:0B
            X509v3 Authority Key Identifier:
                keyid:C3:BC:2D:2F:68:17:B9:4C:26:AE:FD:D8:9F:F9:43:A8:8F:3F:1C:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w7wtL2gXuUwmrv3Yn_lDqI8_HIQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e54bf9-6b55-4c3c-aa50-153eefe70cf6/1/w7wtL2gXuUwmrv3Yn_lDqI8_HIQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e54bf9-6b55-4c3c-aa50-153eefe70cf6/1/w7wtL2gXuUwmrv3Yn_lDqI8_HIQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:27:2c:84:35:39:c7:01:94:46:3c:06:b3:ab:d0:4f:72:48:
         cb:e6:26:68:89:34:b4:25:be:b1:52:db:1e:43:c6:0a:e6:5f:
         13:f0:61:3a:fb:82:c2:dc:8d:ea:9d:cd:87:51:9e:b6:78:28:
         25:e5:db:20:7a:3f:aa:64:74:d8:d6:74:d3:5d:73:6c:3a:fd:
         54:45:e3:cc:49:71:bb:1a:ad:d5:1f:02:81:b3:1e:49:4b:73:
         3b:5e:56:5a:33:53:b6:b4:35:f4:e9:b2:3a:24:7d:5c:e4:c8:
         00:ae:81:33:cb:a4:0d:92:7c:61:40:49:68:63:ab:90:c5:90:
         b6:5e:ab:83:41:d2:ac:19:a8:9a:45:e7:43:f3:a7:5e:90:78:
         bf:3d:1e:ef:48:2a:93:41:69:cf:26:82:09:29:b2:90:09:cf:
         83:e5:28:0b:63:2e:df:d1:a2:75:3d:1e:79:51:c9:57:a6:56:
         e7:6a:0d:26:b4:b9:8c:cb:76:dc:52:29:4d:1f:a3:16:82:b6:
         69:1f:b8:d8:f4:06:64:99:81:8c:e8:5e:c6:85:ac:50:40:c2:
         80:bf:da:78:3d:75:6e:48:29:0d:17:7f:8e:bd:a9:20:29:ff:
         40:ef:96:5a:93:61:20:ab:24:24:99:d1:f7:a9:14:e9:63:97:
         ec:b8:9e:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:28:42 2025 by rpki-client