Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/1be093-c108-43b3-bb52-0b9bfb19f2ee/1/wLi5L51itcMXfVLrNqUyVn70sPI.mft
File:                     wLi5L51itcMXfVLrNqUyVn70sPI.mft (raw, json)
Hash identifier:          73RV+ksqw3M/W7Hqlr+at05R92mxw/SJQRpTweqPdGs=
Subject key identifier:   F6:C8:88:42:35:68:C8:44:67:9A:BE:55:7F:BC:8A:1E:26:8E:A0:BC
Authority key identifier: C0:B8:B9:2F:9D:62:B5:C3:17:7D:52:EB:36:A5:32:56:7E:F4:B0:F2
Certificate issuer:       /CN=c0b8b92f9d62b5c3177d52eb36a532567ef4b0f2
Certificate serial:       01987D8A18879FFE620DB69F996C6E402477
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wLi5L51itcMXfVLrNqUyVn70sPI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/1be093-c108-43b3-bb52-0b9bfb19f2ee/1/wLi5L51itcMXfVLrNqUyVn70sPI.mft
Manifest number:          0A6D
Signing time:             Wed 06 Aug 2025 04:00:58 +0000
Manifest this update:     Wed 06 Aug 2025 04:00:58 +0000
Manifest next update:     Thu 07 Aug 2025 04:00:58 +0000
Files and hashes:         1: wLi5L51itcMXfVLrNqUyVn70sPI.crl (hash: vgdUdosHOWDR/54aPlEVdRCRLebD+jlD01tUQzls0K0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/1be093-c108-43b3-bb52-0b9bfb19f2ee/1/wLi5L51itcMXfVLrNqUyVn70sPI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/1be093-c108-43b3-bb52-0b9bfb19f2ee/1/wLi5L51itcMXfVLrNqUyVn70sPI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wLi5L51itcMXfVLrNqUyVn70sPI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 07 Aug 2025 04:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7d:8a:18:87:9f:fe:62:0d:b6:9f:99:6c:6e:40:24:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0b8b92f9d62b5c3177d52eb36a532567ef4b0f2
        Validity
            Not Before: Aug  6 04:00:58 2025 GMT
            Not After : Aug  7 04:00:58 2025 GMT
        Subject: CN=f6c888423568c844679abe557fbc8a1e268ea0bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:4d:64:68:69:9e:ed:b4:17:7c:ab:29:0c:b6:
                    9c:9b:84:3e:ae:85:9f:4f:a0:68:aa:73:c0:1e:7e:
                    0c:8f:7a:65:59:bc:c6:66:ee:79:f9:ec:6b:c7:62:
                    36:0d:45:89:fd:4a:ba:ea:4d:ca:76:55:27:e5:48:
                    c4:6f:69:33:9e:0d:05:61:7f:2f:74:9c:85:48:62:
                    ab:50:d2:ed:77:58:cf:c0:62:b9:b0:a9:4d:c8:85:
                    d4:df:f7:08:4a:69:f0:3c:d8:5b:d6:c1:e9:bd:70:
                    ea:78:0c:68:71:ee:f1:50:dd:f3:52:73:6d:63:45:
                    fb:e5:56:9d:55:70:9e:0a:b6:3d:9c:6c:5c:8d:b9:
                    4d:1f:e3:f4:0d:68:ac:d7:2e:2f:d3:ae:da:fb:c8:
                    d6:96:bc:52:a2:aa:24:95:a7:e9:b4:14:56:14:67:
                    78:2c:c4:16:4d:bc:3a:9f:a7:b4:3f:1e:68:e6:9b:
                    c4:ea:0d:79:fe:25:95:d9:12:63:34:3f:77:12:24:
                    cd:9e:15:d7:79:40:41:d6:8d:50:e3:12:3a:1b:58:
                    82:9d:4f:3d:87:74:aa:d7:be:a4:07:c5:13:55:f1:
                    d1:6a:94:af:a7:25:1c:95:a1:4c:37:3f:e9:48:49:
                    50:34:15:76:c6:14:2e:03:92:76:19:21:5f:ec:32:
                    b7:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:C8:88:42:35:68:C8:44:67:9A:BE:55:7F:BC:8A:1E:26:8E:A0:BC
            X509v3 Authority Key Identifier:
                keyid:C0:B8:B9:2F:9D:62:B5:C3:17:7D:52:EB:36:A5:32:56:7E:F4:B0:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wLi5L51itcMXfVLrNqUyVn70sPI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/1be093-c108-43b3-bb52-0b9bfb19f2ee/1/wLi5L51itcMXfVLrNqUyVn70sPI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/1be093-c108-43b3-bb52-0b9bfb19f2ee/1/wLi5L51itcMXfVLrNqUyVn70sPI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:60:23:62:cc:d1:3b:7c:9e:d6:2f:36:14:81:ae:1a:d8:93:
         c8:3a:d5:69:bc:61:35:14:e1:11:d1:fa:31:10:7f:f0:f2:87:
         af:9c:46:84:08:ec:e6:1a:e6:3a:98:15:4d:5f:9b:6f:15:86:
         b6:fa:81:7d:3d:a0:54:5c:35:f2:4e:04:e2:1e:b5:a2:b7:39:
         a8:84:83:27:09:44:18:e9:01:4c:82:a7:78:ca:6d:5b:a2:89:
         cf:f9:87:e1:57:b8:b1:c6:63:a0:92:40:18:d0:cd:93:74:8d:
         be:7b:9b:29:72:73:f1:26:9a:25:f9:df:80:65:50:46:17:99:
         06:b0:ef:56:95:4c:53:01:5c:49:13:a2:bb:2a:06:04:99:98:
         27:40:70:a9:0b:a8:5f:ea:3f:55:4e:d6:8c:2a:8c:44:f5:86:
         79:cd:3d:9b:d8:4b:7e:3b:e5:cd:d0:50:24:94:b1:88:e3:a4:
         94:b0:97:38:ff:1e:eb:92:21:9d:3f:28:35:74:92:d4:91:ba:
         46:f9:1a:f9:bb:6c:c0:55:56:8f:8c:39:89:5a:b9:43:53:65:
         98:40:e1:1b:77:f6:bf:39:80:1b:e8:93:0e:ad:53:02:86:11:
         ac:d3:09:d5:c7:ad:69:d3:fa:2d:8e:01:47:b5:c2:d8:36:54:
         7e:58:61:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:06:59 2025 by rpki-client