Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/0e93d3-e72d-45f9-8ef5-94be8d33b9d3/1/wtwaJyuq59B3NPatRjevotLRsxI.mft
File:                     wtwaJyuq59B3NPatRjevotLRsxI.mft (raw, json)
Hash identifier:          cca7jmrSp3q6l1gFqMD5WjDJXFT4IeKP+m3KA7TMdsU=
Subject key identifier:   B0:79:3B:B3:43:0E:3B:62:8F:58:55:1E:CA:15:31:CE:7C:4E:C3:E1
Authority key identifier: C2:DC:1A:27:2B:AA:E7:D0:77:34:F6:AD:46:37:AF:A2:D2:D1:B3:12
Certificate issuer:       /CN=c2dc1a272baae7d07734f6ad4637afa2d2d1b312
Certificate serial:       01967E33717F56F41CF5C7C321C04D767AD1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wtwaJyuq59B3NPatRjevotLRsxI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/0e93d3-e72d-45f9-8ef5-94be8d33b9d3/1/wtwaJyuq59B3NPatRjevotLRsxI.mft
Manifest number:          08FF
Signing time:             Mon 28 Apr 2025 21:00:22 +0000
Manifest this update:     Mon 28 Apr 2025 21:00:22 +0000
Manifest next update:     Tue 29 Apr 2025 21:00:22 +0000
Files and hashes:         1: RZAsu3ZzPjbXj9YVfQwdh_v0Wwo.roa (hash: WabOb6iYWPViHfgLBS9pTtVU1Jn9wGfO4xF3paFZqEI=)
                          2: wtwaJyuq59B3NPatRjevotLRsxI.crl (hash: OBvwMpQJ0NBwZCEG0w++XeHUxP491QH8v+LxE0K6o0g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/0e93d3-e72d-45f9-8ef5-94be8d33b9d3/1/wtwaJyuq59B3NPatRjevotLRsxI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/0e93d3-e72d-45f9-8ef5-94be8d33b9d3/1/wtwaJyuq59B3NPatRjevotLRsxI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wtwaJyuq59B3NPatRjevotLRsxI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Apr 2025 21:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:7e:33:71:7f:56:f4:1c:f5:c7:c3:21:c0:4d:76:7a:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2dc1a272baae7d07734f6ad4637afa2d2d1b312
        Validity
            Not Before: Apr 28 21:00:22 2025 GMT
            Not After : Apr 29 21:00:22 2025 GMT
        Subject: CN=b0793bb3430e3b628f58551eca1531ce7c4ec3e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:3d:b2:19:02:d1:34:51:d9:d2:29:5a:b4:e3:
                    3a:b2:23:04:3c:be:7b:2d:7a:c1:9a:d3:86:cc:57:
                    49:b9:23:ed:46:be:29:d8:52:77:ef:40:bd:8b:a5:
                    22:d1:86:ff:8e:a9:2d:f4:28:49:38:e7:08:4f:6e:
                    94:d7:ea:04:75:7b:4a:92:91:ee:63:88:c7:8d:e3:
                    7d:cb:c0:9b:c2:52:3e:16:ae:cc:db:a7:59:b4:94:
                    60:2e:0e:90:00:c8:fc:9a:26:4b:97:fd:d8:d6:f4:
                    26:06:b9:f1:dc:5e:59:6a:76:0e:f5:c1:94:db:d3:
                    29:6f:7f:c6:ab:f8:bb:e8:9c:c9:5a:e3:4e:71:d7:
                    8a:34:c3:3d:a0:82:5f:6e:25:b9:e3:f5:95:71:2d:
                    f7:ae:a1:7b:de:ef:e9:32:5d:b1:3b:e5:60:a8:c5:
                    22:86:1c:3e:1a:eb:e2:9a:9f:f6:d4:7d:8a:ae:7d:
                    7d:84:1a:e7:8d:65:a6:f9:d4:1c:23:eb:9d:4d:2c:
                    f5:42:ec:df:a9:7f:c0:31:e1:49:a0:5b:73:43:71:
                    1c:13:5c:6a:71:84:e8:6a:0d:74:cd:88:fa:a8:3a:
                    e2:48:c3:bc:54:c3:71:e0:a3:00:26:a6:f5:e5:de:
                    a4:ca:52:46:07:df:d8:0f:bc:47:a5:2b:9a:69:8d:
                    c6:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:79:3B:B3:43:0E:3B:62:8F:58:55:1E:CA:15:31:CE:7C:4E:C3:E1
            X509v3 Authority Key Identifier:
                keyid:C2:DC:1A:27:2B:AA:E7:D0:77:34:F6:AD:46:37:AF:A2:D2:D1:B3:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtwaJyuq59B3NPatRjevotLRsxI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/0e93d3-e72d-45f9-8ef5-94be8d33b9d3/1/wtwaJyuq59B3NPatRjevotLRsxI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/0e93d3-e72d-45f9-8ef5-94be8d33b9d3/1/wtwaJyuq59B3NPatRjevotLRsxI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:50:f5:0e:29:6b:f0:ff:56:e5:cc:ae:bb:4a:e6:ec:05:a6:
         eb:19:36:78:16:37:60:ed:fb:8b:18:d0:f5:74:b0:3d:7d:fd:
         c8:92:2b:3b:fd:8d:b3:c5:57:75:76:e9:e3:8f:18:a6:35:8a:
         60:c6:99:19:d4:f4:33:23:c3:d1:f4:37:de:53:db:6c:c5:fb:
         87:a0:17:bb:db:34:26:a5:fe:86:21:bb:05:6a:8b:96:d0:5f:
         dc:b7:50:a9:6d:fa:10:08:48:b5:cc:6f:cb:43:96:cb:9e:45:
         53:66:12:e7:ad:a2:ef:6d:a4:4d:a1:c3:e7:c8:a0:0e:e6:e4:
         17:a8:82:a7:2e:34:56:72:42:28:2f:5d:9d:98:fc:91:ee:34:
         6f:05:d3:8a:47:7b:b4:6d:f0:f4:f5:6d:4b:38:4b:f3:db:38:
         af:69:54:0d:a9:de:6b:cf:45:56:7b:80:65:f4:7f:ad:86:82:
         0a:b5:ec:2d:1e:3c:54:48:40:c8:a8:c5:7b:87:aa:90:ae:cf:
         f1:17:8e:dd:be:47:55:fa:25:2d:93:b2:70:46:2c:e1:2d:58:
         f4:36:ca:4c:47:87:ea:de:6a:a7:a3:36:4a:ad:22:49:57:39:
         0e:09:ae:7e:38:17:fc:e4:2a:76:3d:41:aa:e5:db:ef:41:33:
         06:a3:62:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:12:20 2025 by rpki-client