Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/3b4869-8e02-47e0-a6ed-813e096b3395/1/WR6VnKuSEDQ4rA9fG66HB6ycxtM.mft
File:                     WR6VnKuSEDQ4rA9fG66HB6ycxtM.mft (raw, json)
Hash identifier:          tA5cKjymVebSlzCQmyKB+0KTUKzOOdZvGbGwKV+yDKE=
Subject key identifier:   3E:FD:C6:C8:8B:E2:8B:A1:55:8C:93:6D:88:8A:A1:4D:63:A2:0C:0C
Authority key identifier: 59:1E:95:9C:AB:92:10:34:38:AC:0F:5F:1B:AE:87:07:AC:9C:C6:D3
Certificate issuer:       /CN=591e959cab92103438ac0f5f1bae8707ac9cc6d3
Certificate serial:       01976960E1DA962A299714237472B5B0480C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WR6VnKuSEDQ4rA9fG66HB6ycxtM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/3b4869-8e02-47e0-a6ed-813e096b3395/1/WR6VnKuSEDQ4rA9fG66HB6ycxtM.mft
Manifest number:          13DD
Signing time:             Fri 13 Jun 2025 13:00:46 +0000
Manifest this update:     Fri 13 Jun 2025 13:00:46 +0000
Manifest next update:     Sat 14 Jun 2025 13:00:46 +0000
Files and hashes:         1: WR6VnKuSEDQ4rA9fG66HB6ycxtM.crl (hash: j8Z2vlk2Pk/ouypgsEBSWY6Ep5tcDNYxvYg8uDRQLOQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/3b4869-8e02-47e0-a6ed-813e096b3395/1/WR6VnKuSEDQ4rA9fG66HB6ycxtM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/3b4869-8e02-47e0-a6ed-813e096b3395/1/WR6VnKuSEDQ4rA9fG66HB6ycxtM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WR6VnKuSEDQ4rA9fG66HB6ycxtM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:60:e1:da:96:2a:29:97:14:23:74:72:b5:b0:48:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=591e959cab92103438ac0f5f1bae8707ac9cc6d3
        Validity
            Not Before: Jun 13 13:00:46 2025 GMT
            Not After : Jun 14 13:00:46 2025 GMT
        Subject: CN=3efdc6c88be28ba1558c936d888aa14d63a20c0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b9:e8:e7:cf:d7:a5:5b:c1:48:bf:69:52:55:
                    79:cc:4a:52:0c:f4:50:be:f4:0f:4e:2e:6e:e3:47:
                    4c:e5:0f:4f:a5:bf:54:3d:90:b6:d4:8c:a0:c9:7c:
                    b9:c3:78:e8:36:55:02:59:b0:68:ed:e6:84:d6:0c:
                    57:dd:c9:c3:02:94:3e:74:85:3a:e5:e0:1d:02:20:
                    72:cc:09:0f:da:22:d8:33:4b:ab:81:49:ae:17:13:
                    9e:22:5b:4e:9e:f3:0a:af:94:bf:f1:82:81:89:59:
                    24:21:3a:fa:a8:5f:61:34:88:f8:5f:37:bc:9f:75:
                    58:52:84:3a:c6:13:ab:33:01:bd:c2:05:78:30:68:
                    b6:00:1f:3a:11:79:38:52:bb:43:5d:de:56:ca:74:
                    e8:93:18:89:f6:b0:77:8e:3e:c9:30:9f:1d:c8:14:
                    a0:02:6a:1f:ea:02:cb:db:25:05:11:b6:41:78:f9:
                    b7:da:15:ab:06:78:29:f6:d3:2c:93:82:dd:6f:64:
                    bb:6f:bb:26:69:52:1f:2f:bf:0d:29:23:8d:69:1e:
                    96:90:6e:e1:0d:c2:9c:67:32:62:ca:31:4f:c8:3a:
                    2d:7c:16:cb:90:36:4e:f8:b5:c2:e7:1f:3d:22:84:
                    4e:79:bb:fe:20:53:0f:35:07:63:50:bd:9e:7a:53:
                    9c:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:FD:C6:C8:8B:E2:8B:A1:55:8C:93:6D:88:8A:A1:4D:63:A2:0C:0C
            X509v3 Authority Key Identifier:
                keyid:59:1E:95:9C:AB:92:10:34:38:AC:0F:5F:1B:AE:87:07:AC:9C:C6:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WR6VnKuSEDQ4rA9fG66HB6ycxtM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/3b4869-8e02-47e0-a6ed-813e096b3395/1/WR6VnKuSEDQ4rA9fG66HB6ycxtM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/3b4869-8e02-47e0-a6ed-813e096b3395/1/WR6VnKuSEDQ4rA9fG66HB6ycxtM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:e8:7a:28:b5:cd:dc:0b:0f:32:06:ae:8d:62:dd:21:d0:1f:
         67:98:81:83:06:6f:02:52:f9:8d:d3:b3:5a:e3:03:d9:de:3f:
         bf:a0:57:ff:1d:db:32:25:90:1a:9f:50:20:2b:5a:75:4a:63:
         b8:47:14:1c:00:e0:83:80:cd:09:8c:37:df:d8:98:51:f0:4b:
         3d:bd:fd:41:cc:57:b7:d0:f2:0c:90:83:9a:d4:14:c4:bd:75:
         ea:fd:a1:50:d4:0d:ae:5e:dd:38:e8:48:98:79:4a:7b:85:43:
         5f:6d:c2:10:24:71:5c:66:4f:0a:9a:59:c7:4f:91:3f:bc:48:
         73:fc:54:07:d3:d6:53:42:d9:a0:57:8c:db:a4:77:e2:ce:99:
         0f:2c:94:b4:5e:63:77:45:9d:17:64:43:cb:db:e4:71:ae:1d:
         b6:bf:bb:d9:d1:e3:9a:23:15:11:ab:c8:0e:6a:f0:5a:d4:5f:
         44:f3:86:49:36:a3:73:e9:49:b7:23:be:62:92:b5:2b:eb:81:
         fa:c5:d1:68:d3:5e:80:54:08:10:e8:b8:4e:be:03:c1:7f:bd:
         ee:eb:51:e2:31:34:3d:38:c8:89:60:57:53:3d:58:fb:ac:f8:
         1f:a8:37:fc:a0:86:e4:2d:4f:5b:af:58:a4:2a:ab:20:89:82:
         ea:1c:1d:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdpYOHalioplxQjdHK1sEgMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5MWU5NTljYWI5MjEwMzQzOGFjMGY1ZjFiYWU4NzA3YWM5
Y2M2ZDMwHhcNMjUwNjEzMTMwMDQ2WhcNMjUwNjE0MTMwMDQ2WjAzMTEwLwYDVQQD
EygzZWZkYzZjODhiZTI4YmExNTU4YzkzNmQ4ODhhYTE0ZDYzYTIwYzBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzbno58/XpVvBSL9pUlV5zEpSDPRQ
vvQPTi5u40dM5Q9Ppb9UPZC21IygyXy5w3joNlUCWbBo7eaE1gxX3cnDApQ+dIU6
5eAdAiByzAkP2iLYM0urgUmuFxOeIltOnvMKr5S/8YKBiVkkITr6qF9hNIj4Xze8
n3VYUoQ6xhOrMwG9wgV4MGi2AB86EXk4UrtDXd5WynTokxiJ9rB3jj7JMJ8dyBSg
Amof6gLL2yUFEbZBePm32hWrBngp9tMsk4Ldb2S7b7smaVIfL78NKSONaR6WkG7h
DcKcZzJiyjFPyDotfBbLkDZO+LXC5x89IoROebv+IFMPNQdjUL2eelOc1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD79xsiL4ouhVYyTbYiKoU1jogwMMB8GA1UdIwQY
MBaAFFkelZyrkhA0OKwPXxuuhwesnMbTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1I2Vm5LdVNFRFE0ckE5Zkc2NkhCNnljeHRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi8zYjQ4NjktOGUwMi00N2UwLWE2ZWQt
ODEzZTA5NmIzMzk1LzEvV1I2Vm5LdVNFRFE0ckE5Zkc2NkhCNnljeHRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi8zYjQ4NjktOGUwMi00N2UwLWE2ZWQtODEzZTA5NmIzMzk1
LzEvV1I2Vm5LdVNFRFE0ckE5Zkc2NkhCNnljeHRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfeh6KLXN
3AsPMgaujWLdIdAfZ5iBgwZvAlL5jdOzWuMD2d4/v6BX/x3bMiWQGp9QICtadUpj
uEcUHADgg4DNCYw339iYUfBLPb39QcxXt9DyDJCDmtQUxL116v2hUNQNrl7dOOhI
mHlKe4VDX23CECRxXGZPCppZx0+RP7xIc/xUB9PWU0LZoFeM26R34s6ZDyyUtF5j
d0WdF2RDy9vkca4dtr+72dHjmiMVEavIDmrwWtRfRPOGSTajc+lJtyO+YpK1K+uB
+sXRaNNegFQIEOi4Tr4DwX+97utR4jE0PTjIiWBXUz1Y+6z4H6g3/KCG5C1PW69Y
pCqrIImC6hwdHA==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:27:30 2025 by rpki-client