Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/1be093-c108-43b3-bb52-0b9bfb19f2ee/1/wLi5L51itcMXfVLrNqUyVn70sPI.mft
File:                     wLi5L51itcMXfVLrNqUyVn70sPI.mft (raw, json)
Hash identifier:          iJMrFRvEsdYFrSaCBiL71CpOE3X+F0QUKqsn25FHRfA=
Subject key identifier:   9B:D5:12:87:68:0B:CE:22:4C:4F:83:2F:1B:8A:5D:3A:9F:67:09:44
Authority key identifier: C0:B8:B9:2F:9D:62:B5:C3:17:7D:52:EB:36:A5:32:56:7E:F4:B0:F2
Certificate issuer:       /CN=c0b8b92f9d62b5c3177d52eb36a532567ef4b0f2
Certificate serial:       0197711A5FA77A32518BD5453E4D97530E98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wLi5L51itcMXfVLrNqUyVn70sPI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/1be093-c108-43b3-bb52-0b9bfb19f2ee/1/wLi5L51itcMXfVLrNqUyVn70sPI.mft
Manifest number:          09E2
Signing time:             Sun 15 Jun 2025 01:00:43 +0000
Manifest this update:     Sun 15 Jun 2025 01:00:43 +0000
Manifest next update:     Mon 16 Jun 2025 01:00:43 +0000
Files and hashes:         1: wLi5L51itcMXfVLrNqUyVn70sPI.crl (hash: kuikJn377YjlcrRfneTZFxhGEAsFInSQmDhm7AYI9rQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/1be093-c108-43b3-bb52-0b9bfb19f2ee/1/wLi5L51itcMXfVLrNqUyVn70sPI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/1be093-c108-43b3-bb52-0b9bfb19f2ee/1/wLi5L51itcMXfVLrNqUyVn70sPI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wLi5L51itcMXfVLrNqUyVn70sPI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 22:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:71:1a:5f:a7:7a:32:51:8b:d5:45:3e:4d:97:53:0e:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0b8b92f9d62b5c3177d52eb36a532567ef4b0f2
        Validity
            Not Before: Jun 15 01:00:43 2025 GMT
            Not After : Jun 16 01:00:43 2025 GMT
        Subject: CN=9bd51287680bce224c4f832f1b8a5d3a9f670944
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:69:b4:8e:15:b0:cd:a5:8a:be:0f:98:a6:10:
                    6b:d2:19:ba:f5:cb:12:a3:d0:3a:bd:d9:c7:d5:bd:
                    ba:de:41:94:72:a4:b0:bd:81:f3:17:b8:ce:09:77:
                    f5:b8:72:a7:e3:5d:59:14:7a:e2:bc:39:e5:3f:e7:
                    e5:ae:fe:40:d2:9a:6a:18:c6:ea:80:84:cf:fa:de:
                    4a:3a:77:60:e8:70:0c:8e:d6:11:c7:76:c8:9a:5c:
                    cc:41:8d:e3:c2:44:92:82:be:ff:b8:94:1b:e1:02:
                    ae:20:92:d6:ed:9a:2b:64:c4:2c:71:6a:42:05:11:
                    2c:3f:59:a8:a0:54:ea:f1:7f:b5:9d:d1:93:13:dc:
                    90:4f:c6:f9:77:e3:1e:8b:f9:32:fe:ad:0a:ad:7e:
                    9a:53:70:43:e7:a5:5d:bc:9f:52:bf:93:6e:54:39:
                    cc:8e:bd:b5:dc:0f:2a:bc:b1:64:77:a2:c2:b8:9c:
                    f1:53:d3:d6:71:f0:e1:09:75:7f:95:d5:53:7c:ab:
                    18:38:d4:b1:c1:84:f2:aa:fe:12:6b:42:e7:46:3e:
                    89:0c:3e:b0:b6:d1:10:e8:0e:84:82:4b:6c:49:40:
                    cc:37:88:5d:6a:7c:00:ec:4e:a9:4c:9e:e5:49:89:
                    13:67:55:da:ba:8a:c1:08:60:45:69:35:6d:dd:06:
                    0f:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:D5:12:87:68:0B:CE:22:4C:4F:83:2F:1B:8A:5D:3A:9F:67:09:44
            X509v3 Authority Key Identifier:
                keyid:C0:B8:B9:2F:9D:62:B5:C3:17:7D:52:EB:36:A5:32:56:7E:F4:B0:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wLi5L51itcMXfVLrNqUyVn70sPI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/1be093-c108-43b3-bb52-0b9bfb19f2ee/1/wLi5L51itcMXfVLrNqUyVn70sPI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/1be093-c108-43b3-bb52-0b9bfb19f2ee/1/wLi5L51itcMXfVLrNqUyVn70sPI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:8e:10:7e:85:5b:61:e5:cb:65:0e:b3:3a:de:5b:d7:4a:16:
         b2:17:a0:e9:fe:2e:b6:59:17:d5:32:a4:c9:2b:83:f9:ec:c9:
         4d:3b:c3:b8:3d:a8:7a:d8:42:e3:f1:1e:fb:79:a6:00:72:94:
         69:a2:0a:2a:bd:eb:17:ee:6b:8e:f3:ad:4e:f6:8e:cc:b3:34:
         91:b7:3b:df:85:65:d0:bf:a0:e0:4d:0f:19:ad:60:62:b1:74:
         74:4b:c4:1a:f0:63:97:40:89:78:4b:65:2a:3f:00:21:19:d5:
         fa:c5:81:e3:58:27:20:ed:84:2f:d1:5a:df:c4:6e:04:fb:1f:
         59:94:9a:76:27:52:f8:14:91:c0:06:99:00:78:19:18:f5:f1:
         07:a9:cb:74:e8:0c:64:18:9a:e4:c9:2a:6a:07:26:94:fa:09:
         a7:44:d4:c7:40:48:80:1a:4e:68:6a:a5:01:9e:6b:e9:5c:99:
         1a:99:73:a1:cb:d1:21:63:8f:eb:7e:6b:65:60:5b:7f:c4:03:
         51:20:8f:66:8b:c1:ef:da:8d:a9:ce:45:52:4e:97:df:5b:62:
         43:c5:4f:dd:96:7d:7d:dd:88:38:69:84:9d:2e:ce:a3:89:07:
         fe:f0:2f:7c:ab:a9:bc:4b:a2:7e:fa:43:a2:f9:07:1c:61:1b:
         6c:16:6e:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----