Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/3b4869-8e02-47e0-a6ed-813e096b3395/1/WR6VnKuSEDQ4rA9fG66HB6ycxtM.mft
File:                     WR6VnKuSEDQ4rA9fG66HB6ycxtM.mft (raw, json)
Hash identifier:          yeMqiFYTQYzTbAESfLyYefCeQcSQKSLcofZRfMVr6nQ=
Subject key identifier:   80:9D:3C:F6:20:E3:3A:B4:0D:79:F6:96:07:E6:25:30:5A:13:E5:40
Authority key identifier: 59:1E:95:9C:AB:92:10:34:38:AC:0F:5F:1B:AE:87:07:AC:9C:C6:D3
Certificate issuer:       /CN=591e959cab92103438ac0f5f1bae8707ac9cc6d3
Certificate serial:       019896A5B0B5B521BD98E1B97194DEB33B3C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WR6VnKuSEDQ4rA9fG66HB6ycxtM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/3b4869-8e02-47e0-a6ed-813e096b3395/1/WR6VnKuSEDQ4rA9fG66HB6ycxtM.mft
Manifest number:          1479
Signing time:             Mon 11 Aug 2025 01:01:37 +0000
Manifest this update:     Mon 11 Aug 2025 01:01:37 +0000
Manifest next update:     Tue 12 Aug 2025 01:01:37 +0000
Files and hashes:         1: WR6VnKuSEDQ4rA9fG66HB6ycxtM.crl (hash: ydjH/tj4wjanNn+bpJz/l69b9Yk/gF18NH4u05QOYAY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/3b4869-8e02-47e0-a6ed-813e096b3395/1/WR6VnKuSEDQ4rA9fG66HB6ycxtM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/3b4869-8e02-47e0-a6ed-813e096b3395/1/WR6VnKuSEDQ4rA9fG66HB6ycxtM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WR6VnKuSEDQ4rA9fG66HB6ycxtM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 12 Aug 2025 01:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:96:a5:b0:b5:b5:21:bd:98:e1:b9:71:94:de:b3:3b:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=591e959cab92103438ac0f5f1bae8707ac9cc6d3
        Validity
            Not Before: Aug 11 01:01:37 2025 GMT
            Not After : Aug 12 01:01:37 2025 GMT
        Subject: CN=809d3cf620e33ab40d79f69607e625305a13e540
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:cb:93:fc:da:89:42:1e:f7:13:a5:8c:9b:6b:
                    87:b4:55:85:d1:62:62:d2:ea:ca:f9:f7:31:b5:71:
                    74:6b:3c:b1:21:54:51:52:98:80:77:26:25:b1:69:
                    62:2f:66:9c:f9:75:d7:1b:23:03:98:b1:56:03:1e:
                    27:76:b9:0d:d2:73:30:34:48:f2:f8:05:67:87:6b:
                    c5:89:0b:34:f4:22:2f:1a:cf:6a:e8:98:93:c7:63:
                    5e:83:69:00:21:a1:99:c4:83:cc:51:34:52:e7:21:
                    98:98:dd:36:fe:db:67:e6:18:dc:0c:3c:86:6c:16:
                    60:ad:f0:51:42:7e:10:b6:4a:05:aa:61:60:f0:11:
                    88:68:ef:ce:b5:37:d4:9f:81:f3:06:68:5d:2a:2a:
                    7e:ff:0d:bb:f8:84:f0:28:53:29:07:ed:ee:79:76:
                    4d:70:c1:7e:a8:27:38:c9:65:fd:d6:ef:1c:ce:a3:
                    7b:df:a3:df:38:9c:55:bf:a8:9a:95:2f:34:e7:55:
                    14:77:e6:3c:b4:10:c2:37:54:e5:50:72:b4:f3:d2:
                    29:cb:52:a6:ed:51:fa:25:88:81:3a:94:27:a8:a0:
                    e1:1a:de:6b:04:4f:c7:4e:a2:8f:bb:f9:f3:e0:5e:
                    b6:ae:5c:16:48:97:a9:90:74:56:7e:09:d7:2a:65:
                    cd:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:9D:3C:F6:20:E3:3A:B4:0D:79:F6:96:07:E6:25:30:5A:13:E5:40
            X509v3 Authority Key Identifier:
                keyid:59:1E:95:9C:AB:92:10:34:38:AC:0F:5F:1B:AE:87:07:AC:9C:C6:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WR6VnKuSEDQ4rA9fG66HB6ycxtM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/3b4869-8e02-47e0-a6ed-813e096b3395/1/WR6VnKuSEDQ4rA9fG66HB6ycxtM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/3b4869-8e02-47e0-a6ed-813e096b3395/1/WR6VnKuSEDQ4rA9fG66HB6ycxtM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:19:48:e7:cd:4b:1c:96:c8:68:66:e1:50:49:12:88:76:c8:
         42:81:9f:2f:43:2a:79:c3:f3:89:a6:28:76:cc:8d:ac:48:8f:
         1b:0c:a3:ca:82:36:7e:a2:af:33:1f:79:55:02:1a:e0:23:f9:
         20:d4:dc:a5:c3:b3:e2:8c:68:2b:90:36:dc:ab:97:e8:98:5f:
         17:84:84:27:cf:04:a2:ba:47:4d:93:70:83:a4:4f:e7:9f:e0:
         82:ee:17:db:fc:b4:2f:33:36:12:82:20:88:e8:54:ed:02:61:
         42:db:d0:1a:53:d3:18:ca:2d:68:7a:76:6b:55:73:d4:51:29:
         ab:97:3a:22:60:a9:a3:1f:65:51:d1:0d:94:fb:d6:6b:a6:29:
         fc:8a:fe:ba:be:f0:53:da:04:5d:40:28:6d:28:4d:0c:1d:d1:
         40:93:e2:98:23:30:1c:89:39:fe:85:64:ee:74:2f:eb:e9:76:
         e9:3a:bb:77:a4:63:dd:bf:e7:46:cc:4f:04:e0:51:95:c7:fc:
         ae:b5:4e:95:f3:c7:09:eb:10:c4:b1:58:dd:42:14:96:3f:00:
         96:83:23:19:5f:7c:c0:00:b1:02:e0:fc:79:fb:70:f0:da:7c:
         83:64:6e:4b:b8:ac:e9:a4:dd:7f:e9:d2:91:1f:ab:ba:2e:09:
         c2:6d:6d:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:47:07 2025 by rpki-client