Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/29440b-c59a-4608-bc63-a4ca3363d701/1/Wv2_mIPBjEzhZdi4UDxiAXRdaIc.mft
File:                     Wv2_mIPBjEzhZdi4UDxiAXRdaIc.mft (raw, json)
Hash identifier:          ZWzCjTSU8tswRhp6jQvIrxsfyRXEJk0j3dnWY2LoKG4=
Subject key identifier:   D2:D0:8C:16:58:F1:AA:0C:20:D6:8F:A8:9B:D4:1E:5F:55:E6:60:EC
Authority key identifier: 5A:FD:BF:98:83:C1:8C:4C:E1:65:D8:B8:50:3C:62:01:74:5D:68:87
Certificate issuer:       /CN=5afdbf9883c18c4ce165d8b8503c6201745d6887
Certificate serial:       019769CEB8AA8F7BFE07E2CA89F8395DE4B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wv2_mIPBjEzhZdi4UDxiAXRdaIc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/29440b-c59a-4608-bc63-a4ca3363d701/1/Wv2_mIPBjEzhZdi4UDxiAXRdaIc.mft
Manifest number:          0FFA
Signing time:             Fri 13 Jun 2025 15:00:44 +0000
Manifest this update:     Fri 13 Jun 2025 15:00:44 +0000
Manifest next update:     Sat 14 Jun 2025 15:00:44 +0000
Files and hashes:         1: ORzdYgpKmwSJL1fVNUo6LmyhjSk.roa (hash: LmFlM+n+lX0yoflgNqGYgZ3G5C5DbphEooeee/wY1iM=)
                          2: Wv2_mIPBjEzhZdi4UDxiAXRdaIc.crl (hash: 89h6RJfmKSZbm8u94Xb6pGilLaRFuhOnNaSGlRsTUQ0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/29440b-c59a-4608-bc63-a4ca3363d701/1/Wv2_mIPBjEzhZdi4UDxiAXRdaIc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/29440b-c59a-4608-bc63-a4ca3363d701/1/Wv2_mIPBjEzhZdi4UDxiAXRdaIc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Wv2_mIPBjEzhZdi4UDxiAXRdaIc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:55:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:ce:b8:aa:8f:7b:fe:07:e2:ca:89:f8:39:5d:e4:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5afdbf9883c18c4ce165d8b8503c6201745d6887
        Validity
            Not Before: Jun 13 15:00:44 2025 GMT
            Not After : Jun 14 15:00:44 2025 GMT
        Subject: CN=d2d08c1658f1aa0c20d68fa89bd41e5f55e660ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:2c:29:3b:e1:7d:8f:66:73:88:44:66:88:ae:
                    c1:ad:59:1d:5e:e4:91:15:29:3e:c6:f3:ef:a1:89:
                    52:ad:e2:39:73:62:76:79:75:88:97:3d:0d:e2:11:
                    52:18:11:2b:98:ee:54:50:f6:0f:b2:5e:ac:8c:76:
                    7d:3c:3b:80:d7:74:9a:ab:0f:ad:98:97:dc:4a:b7:
                    8c:4a:ed:44:db:fb:42:37:08:2a:70:c9:c6:76:76:
                    80:4e:81:9f:4b:ff:03:2a:16:65:18:31:b1:8c:73:
                    1f:5a:0f:e8:b0:6f:22:7e:0f:78:f6:d8:08:b8:d0:
                    04:ca:65:15:d7:fa:4f:2e:e5:0e:79:d6:8e:f0:78:
                    06:49:df:37:6a:a1:24:3f:d1:ce:22:3a:76:5d:76:
                    8f:32:f7:16:2e:cc:f6:d3:04:aa:96:02:7c:08:45:
                    ab:ee:30:3a:ea:14:56:93:35:57:85:2b:3c:df:c2:
                    a5:37:b6:b7:a8:cb:7f:a2:39:8b:bf:47:8f:66:7e:
                    77:f8:7d:5c:46:7b:4d:35:01:ac:fe:52:02:5d:f5:
                    bf:a3:a3:44:6b:ce:07:c7:6f:66:10:db:bf:5c:cd:
                    73:39:fa:92:24:af:eb:ae:31:74:74:9e:b3:ed:a5:
                    13:64:03:4b:f5:b0:05:da:b6:87:2d:a8:61:b2:59:
                    1b:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:D0:8C:16:58:F1:AA:0C:20:D6:8F:A8:9B:D4:1E:5F:55:E6:60:EC
            X509v3 Authority Key Identifier:
                keyid:5A:FD:BF:98:83:C1:8C:4C:E1:65:D8:B8:50:3C:62:01:74:5D:68:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wv2_mIPBjEzhZdi4UDxiAXRdaIc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/29440b-c59a-4608-bc63-a4ca3363d701/1/Wv2_mIPBjEzhZdi4UDxiAXRdaIc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/29440b-c59a-4608-bc63-a4ca3363d701/1/Wv2_mIPBjEzhZdi4UDxiAXRdaIc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:6b:e3:a0:fb:1a:21:45:b4:66:d5:08:e2:1c:81:43:a4:9e:
         40:f4:4a:9a:4d:6e:83:6b:4d:96:19:5b:b1:c0:4f:18:5b:ff:
         1a:29:5f:b8:0b:62:50:37:02:c3:01:34:bf:05:5a:8c:00:e3:
         f0:fc:d2:74:9b:eb:f8:9b:59:83:c8:e4:13:2d:fc:1d:f7:91:
         ab:91:b2:60:50:2d:38:b7:7e:12:09:ce:a2:c5:8e:18:32:35:
         f9:39:70:f4:d2:72:68:68:82:be:8f:f5:56:5c:d8:ea:d5:9c:
         68:65:cb:56:3d:b3:2f:56:12:76:4c:3e:0e:c2:13:49:96:73:
         16:f0:7b:b8:87:ab:c6:cc:f0:36:85:38:80:e5:94:d1:2f:1d:
         7a:0d:5b:36:f2:44:dd:bb:e7:ed:0f:b8:ca:e6:eb:cd:64:78:
         81:5b:55:74:c1:c0:b6:ce:ce:ce:09:75:ff:9c:58:54:5a:5e:
         16:68:d1:38:b7:26:dd:90:d3:f1:2c:25:25:f8:a4:01:23:1e:
         12:64:c0:eb:24:2e:84:2a:fd:61:21:df:f5:5a:6b:6e:35:c8:
         f9:20:ab:9d:61:85:c6:c7:91:dd:18:7a:93:c0:e8:3c:96:71:
         d0:e4:07:d9:3b:df:a0:ae:b7:48:29:cd:a6:65:ab:9a:d2:2b:
         c3:45:4b:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:05:12 2025 by rpki-client