Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/6b7485-a265-4e29-b27d-1bc0c7baf5e3/1/w_W0TiSnGM-yONFLvHVe8VLylcE.mft
File:                     w_W0TiSnGM-yONFLvHVe8VLylcE.mft (raw, json)
Hash identifier:          lnxzY13K9jjqhFpot/qoUR25wCCudrk9pysgWWVnhQI=
Subject key identifier:   D0:69:C3:1E:49:C1:68:95:7A:3B:97:B4:34:CC:ED:0D:D3:02:2A:EC
Authority key identifier: C3:F5:B4:4E:24:A7:18:CF:B2:38:D1:4B:BC:75:5E:F1:52:F2:95:C1
Certificate issuer:       /CN=c3f5b44e24a718cfb238d14bbc755ef152f295c1
Certificate serial:       01989712E1C30B01E56A586B45078D160453
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w_W0TiSnGM-yONFLvHVe8VLylcE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/6b7485-a265-4e29-b27d-1bc0c7baf5e3/1/w_W0TiSnGM-yONFLvHVe8VLylcE.mft
Manifest number:          0C03
Signing time:             Mon 11 Aug 2025 03:00:53 +0000
Manifest this update:     Mon 11 Aug 2025 03:00:53 +0000
Manifest next update:     Tue 12 Aug 2025 03:00:53 +0000
Files and hashes:         1: w_W0TiSnGM-yONFLvHVe8VLylcE.crl (hash: YR53Y5oAIKlkn8lTn6CsdB86RMuBv6PJEWR2bi64kvE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/6b7485-a265-4e29-b27d-1bc0c7baf5e3/1/w_W0TiSnGM-yONFLvHVe8VLylcE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/6b7485-a265-4e29-b27d-1bc0c7baf5e3/1/w_W0TiSnGM-yONFLvHVe8VLylcE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w_W0TiSnGM-yONFLvHVe8VLylcE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 12 Aug 2025 02:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:97:12:e1:c3:0b:01:e5:6a:58:6b:45:07:8d:16:04:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3f5b44e24a718cfb238d14bbc755ef152f295c1
        Validity
            Not Before: Aug 11 03:00:53 2025 GMT
            Not After : Aug 12 03:00:53 2025 GMT
        Subject: CN=d069c31e49c168957a3b97b434cced0dd3022aec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:13:9d:32:36:fb:26:b5:6c:4d:2f:7e:1c:94:
                    21:1c:b7:e8:d3:75:e7:e4:da:f3:0a:29:08:7b:2b:
                    d7:15:39:8e:22:13:47:59:b3:77:8a:ff:72:71:e7:
                    24:4b:dd:6c:a8:7e:8e:c0:48:1f:2f:d5:13:ec:ef:
                    40:08:d9:91:e4:2f:ef:9d:f3:8c:56:9b:cf:a8:cd:
                    c1:b3:85:63:a8:da:a9:05:10:de:27:14:56:4f:a2:
                    d7:79:94:d3:10:8f:e8:f7:f8:9e:29:a8:97:82:b4:
                    7e:23:1f:5b:a5:a5:f6:3d:19:3f:26:3f:e9:1c:b5:
                    7c:89:5e:aa:e7:9b:e0:07:0b:05:56:58:e0:7a:f3:
                    cc:7e:b2:9a:a3:af:e1:2e:09:04:f2:0b:f0:fb:77:
                    4c:28:27:be:69:0b:dd:2b:90:6c:eb:45:44:c6:14:
                    97:29:ad:eb:98:22:5a:0e:85:f6:1c:d3:16:b0:20:
                    69:1b:7e:1f:0f:43:fd:80:70:0e:c1:0a:4f:13:03:
                    b0:98:fa:35:1f:26:2d:f3:41:bb:27:6f:62:98:64:
                    48:37:1a:06:ac:86:1d:d0:61:04:d4:6c:a6:45:7e:
                    49:58:74:7a:20:9f:74:c7:1e:59:b1:f5:6c:34:aa:
                    49:7b:9e:c1:d5:5e:6c:4c:d2:b5:4a:05:8c:b4:f0:
                    90:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:69:C3:1E:49:C1:68:95:7A:3B:97:B4:34:CC:ED:0D:D3:02:2A:EC
            X509v3 Authority Key Identifier:
                keyid:C3:F5:B4:4E:24:A7:18:CF:B2:38:D1:4B:BC:75:5E:F1:52:F2:95:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w_W0TiSnGM-yONFLvHVe8VLylcE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6b7485-a265-4e29-b27d-1bc0c7baf5e3/1/w_W0TiSnGM-yONFLvHVe8VLylcE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6b7485-a265-4e29-b27d-1bc0c7baf5e3/1/w_W0TiSnGM-yONFLvHVe8VLylcE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:19:6c:65:35:2d:ef:fd:a4:d9:80:9e:22:c0:71:4c:1b:d6:
         c3:f9:72:11:3e:1f:52:82:dc:cb:fe:71:43:29:ab:d6:3f:65:
         9a:5a:de:1f:68:52:09:9b:90:6b:81:ea:b2:ac:43:5e:d3:a8:
         a8:1a:6f:6f:28:9b:a7:93:a1:a6:47:ad:b1:0a:2c:cf:4a:b9:
         f5:4c:ac:1b:78:7a:85:1a:77:c3:b0:0e:6f:ef:37:55:a5:df:
         43:20:f6:f2:48:5a:e9:85:e3:4c:18:a8:94:45:22:53:81:de:
         21:b1:fb:7f:c8:14:cd:f0:aa:54:2b:83:79:cf:b8:6c:c2:73:
         70:7c:bd:cf:05:1f:3c:b5:cf:66:f6:f9:bf:cc:f5:0b:ae:64:
         3b:e8:79:eb:24:c1:05:07:92:79:41:b7:b6:cb:75:a1:20:3f:
         9f:ae:34:2d:5c:b0:a2:d6:cc:b7:b0:71:53:13:48:1d:d6:76:
         59:10:4d:65:b6:cc:8c:49:18:3a:6c:4c:31:ec:bf:56:50:74:
         b6:31:88:0c:d3:dd:f5:1d:de:0d:3a:1d:0a:ca:1f:c3:05:6e:
         34:fd:8a:19:cb:ad:97:94:ef:03:3a:7b:a7:bb:37:2a:cb:a5:
         09:a8:7b:73:26:4e:e5:3e:ed:03:83:2a:22:a1:52:8e:f2:72:
         fa:30:d7:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 05:50:42 2025 by rpki-client