Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/685f2d-bde4-49fd-a143-994bb628bba5/1/Wof8yFy0mUGaGx7C8yCcKkNfuS0.mft
File:                     Wof8yFy0mUGaGx7C8yCcKkNfuS0.mft (raw, json)
Hash identifier:          KdT9cRMZ1FBnfddW1wtkATaBh+UhD/AVtoKh63y72vY=
Subject key identifier:   D3:57:B6:F4:35:22:CA:10:18:AB:8B:B8:38:8F:42:B4:6E:EE:F9:3D
Authority key identifier: 5A:87:FC:C8:5C:B4:99:41:9A:1B:1E:C2:F3:20:9C:2A:43:5F:B9:2D
Certificate issuer:       /CN=5a87fcc85cb499419a1b1ec2f3209c2a435fb92d
Certificate serial:       01976961866AE2C76AE741A056DD6810BC19
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wof8yFy0mUGaGx7C8yCcKkNfuS0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/685f2d-bde4-49fd-a143-994bb628bba5/1/Wof8yFy0mUGaGx7C8yCcKkNfuS0.mft
Manifest number:          0302
Signing time:             Fri 13 Jun 2025 13:01:28 +0000
Manifest this update:     Fri 13 Jun 2025 13:01:28 +0000
Manifest next update:     Sat 14 Jun 2025 13:01:28 +0000
Files and hashes:         1: OcSSArCWQB8P_3TQhOP1Kjmg4F4.roa (hash: +2C6c4zXqA1Vi974tbwpI0Ciww2lyqoubywKBoSNij8=)
                          2: Wof8yFy0mUGaGx7C8yCcKkNfuS0.crl (hash: FNJyqnSxTJVrH063J12Bv0Le3UiAqYSt7zuoJax7lD8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/685f2d-bde4-49fd-a143-994bb628bba5/1/Wof8yFy0mUGaGx7C8yCcKkNfuS0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/685f2d-bde4-49fd-a143-994bb628bba5/1/Wof8yFy0mUGaGx7C8yCcKkNfuS0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Wof8yFy0mUGaGx7C8yCcKkNfuS0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 13:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:69:61:86:6a:e2:c7:6a:e7:41:a0:56:dd:68:10:bc:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a87fcc85cb499419a1b1ec2f3209c2a435fb92d
        Validity
            Not Before: Jun 13 13:01:28 2025 GMT
            Not After : Jun 14 13:01:28 2025 GMT
        Subject: CN=d357b6f43522ca1018ab8bb8388f42b46eeef93d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:6f:c9:a5:4e:1a:1e:30:b5:7a:5d:53:8b:35:
                    b7:89:d5:fd:bf:f1:68:26:c3:fa:25:bd:c9:73:a6:
                    67:70:c3:00:de:87:d0:d1:5d:5c:37:ba:9c:98:f7:
                    54:73:2a:fc:50:05:2d:29:a8:20:42:10:95:dd:d0:
                    a0:8e:33:bb:de:ea:be:b5:5a:f8:10:08:3a:57:bc:
                    9a:ab:eb:3a:10:e8:79:0d:ac:ba:e0:af:5b:38:f8:
                    58:ce:f1:30:44:55:87:1b:de:05:1a:b5:80:85:3e:
                    c3:d3:ab:e6:da:4d:7f:9c:68:c5:72:1d:c8:ea:ad:
                    db:58:52:10:f3:23:b1:68:1c:f6:5a:a9:c3:3d:a4:
                    ba:3a:78:42:a4:bf:81:87:aa:5c:0f:55:94:b0:e2:
                    78:0e:3c:bd:71:0a:31:ba:79:40:cf:b9:b8:96:86:
                    c8:8b:b1:49:29:6c:9a:60:2b:b4:b9:53:3e:ec:03:
                    42:96:c0:b5:e1:26:6b:21:e9:df:8d:3f:3b:f8:5e:
                    eb:08:45:70:c2:55:e9:6d:f9:07:4f:81:1a:48:4b:
                    b4:fb:73:82:b1:c5:4f:c3:9c:23:0a:e2:6c:cb:cf:
                    7d:5d:10:51:41:c9:f5:70:b2:7c:76:e8:fe:06:0f:
                    98:eb:9b:3b:2d:b8:c6:72:26:02:72:25:9f:32:26:
                    0f:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:57:B6:F4:35:22:CA:10:18:AB:8B:B8:38:8F:42:B4:6E:EE:F9:3D
            X509v3 Authority Key Identifier:
                keyid:5A:87:FC:C8:5C:B4:99:41:9A:1B:1E:C2:F3:20:9C:2A:43:5F:B9:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wof8yFy0mUGaGx7C8yCcKkNfuS0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/685f2d-bde4-49fd-a143-994bb628bba5/1/Wof8yFy0mUGaGx7C8yCcKkNfuS0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/685f2d-bde4-49fd-a143-994bb628bba5/1/Wof8yFy0mUGaGx7C8yCcKkNfuS0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:d8:e4:25:a9:c9:85:a8:80:f8:81:be:4d:2e:0f:0c:d6:c5:
         69:5a:2d:06:90:2a:2c:e9:f6:26:32:7a:ae:c2:85:df:c7:1e:
         64:74:b4:eb:f3:01:e8:65:cf:5e:f0:8d:b0:6a:77:10:fe:24:
         a6:32:9e:13:c6:3a:7a:12:32:3b:bf:9f:b5:2a:48:24:f3:01:
         18:9f:f9:e0:9d:c9:81:87:5d:2c:42:0f:f8:53:cd:4d:14:65:
         52:5f:95:5f:f6:e0:3f:00:7d:1b:fa:7d:c8:7c:37:ff:a7:ca:
         1d:68:b5:72:3b:0e:ae:e2:5e:4c:7d:a8:5e:f6:74:07:54:31:
         4b:90:77:95:aa:7c:e4:0c:59:74:f3:64:e6:43:f7:19:fe:e0:
         eb:51:b8:8b:a0:6f:c2:b6:af:09:8b:63:de:40:b4:00:b0:f9:
         40:24:a9:28:65:3a:e6:fe:c4:1b:ad:5c:bf:b4:b8:d5:c0:5a:
         f0:a6:ed:46:b1:71:d2:4b:95:18:30:97:f3:d8:f7:a9:ca:c5:
         00:16:86:75:81:50:0e:1b:65:a4:8f:bd:a4:05:d8:dc:1c:ef:
         01:da:84:d1:ae:d2:1d:7e:d0:b8:29:c9:3c:aa:00:f4:86:ca:
         ce:d3:1f:c5:62:78:ba:51:89:60:1c:53:b1:5f:88:69:52:1f:
         68:60:74:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:33:35 2025 by rpki-client