Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/dac70f-f172-44ce-9be5-5af89e6cd055/1/Wtn1vraTNIRUHOVigsmJ7W6L26M.mft
File:                     Wtn1vraTNIRUHOVigsmJ7W6L26M.mft (raw, json)
Hash identifier:          /xQ5wKjRz42Rl2QK4D5WjxWSXQeeFvUzC2kLeUoBFxQ=
Subject key identifier:   0F:91:FB:FB:45:CC:13:5B:0A:6E:76:0D:AD:33:4D:A9:0C:DA:0B:02
Authority key identifier: 5A:D9:F5:BE:B6:93:34:84:54:1C:E5:62:82:C9:89:ED:6E:8B:DB:A3
Certificate issuer:       /CN=5ad9f5beb6933484541ce56282c989ed6e8bdba3
Certificate serial:       01976B86228742B2C671A13B4C45A40C8879
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wtn1vraTNIRUHOVigsmJ7W6L26M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/dac70f-f172-44ce-9be5-5af89e6cd055/1/Wtn1vraTNIRUHOVigsmJ7W6L26M.mft
Manifest number:          0352
Signing time:             Fri 13 Jun 2025 23:00:42 +0000
Manifest this update:     Fri 13 Jun 2025 23:00:42 +0000
Manifest next update:     Sat 14 Jun 2025 23:00:42 +0000
Files and hashes:         1: HZBz5MrqBdAGlLzttgW8k7z_g5Y.roa (hash: vKALeCSvoIMsQY1cUM7A8I/fEETWOT998Li6zTAWX7w=)
                          2: Wtn1vraTNIRUHOVigsmJ7W6L26M.crl (hash: LvoDGB4YHBD4ItptRA9e/qHHEc8An1533CSkYWoMYKY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/dac70f-f172-44ce-9be5-5af89e6cd055/1/Wtn1vraTNIRUHOVigsmJ7W6L26M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/dac70f-f172-44ce-9be5-5af89e6cd055/1/Wtn1vraTNIRUHOVigsmJ7W6L26M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Wtn1vraTNIRUHOVigsmJ7W6L26M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 23:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:6b:86:22:87:42:b2:c6:71:a1:3b:4c:45:a4:0c:88:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ad9f5beb6933484541ce56282c989ed6e8bdba3
        Validity
            Not Before: Jun 13 23:00:42 2025 GMT
            Not After : Jun 14 23:00:42 2025 GMT
        Subject: CN=0f91fbfb45cc135b0a6e760dad334da90cda0b02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:3c:a0:ba:9c:13:8e:a7:7b:ce:60:ac:6a:b9:
                    9e:1c:70:0b:c3:74:69:73:43:64:92:28:83:67:a6:
                    cf:5a:ba:d2:33:22:ee:f4:f7:31:dd:7a:80:cf:ac:
                    f1:e3:d9:e6:7b:90:76:2f:96:fa:71:77:be:6c:3b:
                    1e:f1:0f:6e:44:05:ad:12:be:4d:af:a9:23:c0:ab:
                    4f:f7:11:3a:a8:29:a3:16:51:fe:ae:07:d0:ee:c9:
                    5d:68:53:2f:76:29:ef:b2:a8:3d:ff:fb:c5:b8:e6:
                    00:99:6d:32:ac:25:38:0c:07:89:c2:0a:7b:32:57:
                    16:80:e9:d2:40:e6:55:c6:84:8d:19:81:ac:83:ef:
                    10:12:49:dc:3b:ff:b3:17:56:f0:dd:11:db:50:d8:
                    24:3e:d8:de:50:5e:63:37:14:8f:4c:8b:ff:a3:37:
                    bf:a1:67:97:76:f0:e9:14:7b:a9:80:0b:5d:b8:4d:
                    32:c4:c7:4f:1b:ed:5c:40:27:c1:4b:e3:9e:8b:cd:
                    eb:cb:d0:11:d7:7f:33:a3:14:af:a0:28:3e:db:c7:
                    b1:ee:8f:8c:79:10:78:54:a9:2e:bf:a4:35:45:11:
                    bf:45:2e:26:e7:6a:99:66:8b:72:3e:77:ee:1d:dc:
                    4b:a8:4f:64:86:29:5e:7b:35:e7:a0:0a:ae:90:86:
                    04:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:91:FB:FB:45:CC:13:5B:0A:6E:76:0D:AD:33:4D:A9:0C:DA:0B:02
            X509v3 Authority Key Identifier:
                keyid:5A:D9:F5:BE:B6:93:34:84:54:1C:E5:62:82:C9:89:ED:6E:8B:DB:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wtn1vraTNIRUHOVigsmJ7W6L26M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/dac70f-f172-44ce-9be5-5af89e6cd055/1/Wtn1vraTNIRUHOVigsmJ7W6L26M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/dac70f-f172-44ce-9be5-5af89e6cd055/1/Wtn1vraTNIRUHOVigsmJ7W6L26M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:09:cf:23:ef:78:2b:ee:a1:8d:ee:b4:61:fc:8d:3c:ad:77:
         04:25:14:fe:f7:d4:66:fe:15:28:b2:fb:a4:ad:6c:e3:f5:0a:
         55:8e:8a:f7:9d:b4:ab:48:f9:ce:5b:7b:8c:2c:97:44:00:2c:
         6e:3c:da:73:56:c7:31:1c:b7:71:85:5d:ce:a0:34:34:96:1a:
         5a:c3:3f:85:a7:35:bc:63:78:d7:7a:c7:e7:6a:92:88:b0:01:
         3a:ff:bb:d3:05:99:ca:2a:72:df:24:be:4d:c2:47:98:15:5b:
         97:be:67:21:b9:5a:fd:12:8a:a7:7b:a9:49:d8:46:c1:df:20:
         ca:5c:42:eb:09:41:6a:94:dd:3e:86:57:01:81:91:62:55:01:
         aa:2b:e2:16:43:54:ce:6d:51:d6:69:9a:e7:43:5a:87:84:a5:
         2d:4a:ae:2e:51:e4:32:07:41:8f:5a:36:d9:3b:74:fb:da:a5:
         ce:18:f2:39:a2:b9:fa:81:28:6b:b2:fc:25:73:e8:3a:7c:97:
         8a:e8:70:a9:e4:b6:59:ab:14:8c:e0:bb:08:28:d6:41:5c:ed:
         80:65:87:d8:8c:c0:b5:56:76:08:fb:2c:56:9a:ff:9f:2c:42:
         27:ae:cd:3f:4a:d2:17:3c:72:63:96:eb:d2:aa:ba:7d:52:72:
         40:d2:f2:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:23:21 2025 by rpki-client