Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/32f3bb-2594-4b37-94aa-941244f5dded/1/wnz1VgIH7OhILDL8tplfd9f3MMs.mft
File:                     wnz1VgIH7OhILDL8tplfd9f3MMs.mft (raw, json)
Hash identifier:          Xq+F+b6bPmtwy6jG3i4BzzNRGfW3ldxOwmUmE6SDRMM=
Subject key identifier:   5A:A1:5C:D0:A1:2B:FB:E2:B2:FF:52:E3:AA:85:EF:DD:66:A8:66:67
Authority key identifier: C2:7C:F5:56:02:07:EC:E8:48:2C:32:FC:B6:99:5F:77:D7:F7:30:CB
Certificate issuer:       /CN=c27cf5560207ece8482c32fcb6995f77d7f730cb
Certificate serial:       019788474A4A7D0DDA558761B00A05B7BB38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wnz1VgIH7OhILDL8tplfd9f3MMs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/32f3bb-2594-4b37-94aa-941244f5dded/1/wnz1VgIH7OhILDL8tplfd9f3MMs.mft
Manifest number:          0283
Signing time:             Thu 19 Jun 2025 13:01:02 +0000
Manifest this update:     Thu 19 Jun 2025 13:01:02 +0000
Manifest next update:     Fri 20 Jun 2025 13:01:02 +0000
Files and hashes:         1: f45K-_tztLGikN2V1uWSCFuY_68.roa (hash: xJe3gW2GTPkOmGgSxCeDd1gAbtFU96D/eKs9HOKj+Eo=)
                          2: wnz1VgIH7OhILDL8tplfd9f3MMs.crl (hash: 8/30PdWWJRFdsvkPRYme9BDj8s7k5sxxUrop7CM3DM4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/32f3bb-2594-4b37-94aa-941244f5dded/1/wnz1VgIH7OhILDL8tplfd9f3MMs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/32f3bb-2594-4b37-94aa-941244f5dded/1/wnz1VgIH7OhILDL8tplfd9f3MMs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wnz1VgIH7OhILDL8tplfd9f3MMs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 20 Jun 2025 13:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:88:47:4a:4a:7d:0d:da:55:87:61:b0:0a:05:b7:bb:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c27cf5560207ece8482c32fcb6995f77d7f730cb
        Validity
            Not Before: Jun 19 13:01:02 2025 GMT
            Not After : Jun 20 13:01:02 2025 GMT
        Subject: CN=5aa15cd0a12bfbe2b2ff52e3aa85efdd66a86667
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ca:8a:50:67:49:ae:3b:be:4f:1d:ed:e6:db:
                    2a:c0:f8:84:f7:fe:32:50:69:1d:34:03:cb:9a:44:
                    82:14:88:a3:3b:e9:d7:72:de:ee:16:b0:59:82:d7:
                    77:37:89:6f:6a:85:df:61:ad:2c:62:4c:75:cf:7b:
                    6e:35:b8:98:45:d4:2d:44:e9:4a:32:9b:9b:b6:3c:
                    f3:87:a7:2f:6d:20:53:58:82:ac:00:2d:55:6c:ca:
                    d1:4d:3e:59:53:be:94:a2:93:ee:3a:fe:92:f8:39:
                    8a:cb:ee:ff:6d:bb:ea:f9:28:94:a9:0e:5f:4f:74:
                    34:0a:3d:a5:e3:c0:ca:f7:8e:9b:c6:d7:80:72:0c:
                    76:c7:e3:34:20:e6:6c:36:c2:81:8d:b0:c6:97:d2:
                    6d:5f:ba:5f:c0:d5:9a:5e:d8:c9:24:ab:fe:3e:fd:
                    7b:75:99:25:88:82:80:40:7b:79:fb:35:fd:fe:9f:
                    6d:80:c9:76:1f:ba:c0:f0:81:07:50:ac:80:f9:74:
                    44:0f:0f:74:40:c3:a0:7a:3c:ae:c6:5f:c0:03:12:
                    81:76:97:1e:7b:b3:98:39:4e:f4:0d:29:d4:7a:08:
                    f4:bc:d1:05:2e:dc:4d:58:3a:b2:2a:dc:22:15:3f:
                    fe:46:1b:e4:2a:ff:d2:d3:9e:ae:9d:31:7e:05:d0:
                    d1:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:A1:5C:D0:A1:2B:FB:E2:B2:FF:52:E3:AA:85:EF:DD:66:A8:66:67
            X509v3 Authority Key Identifier:
                keyid:C2:7C:F5:56:02:07:EC:E8:48:2C:32:FC:B6:99:5F:77:D7:F7:30:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wnz1VgIH7OhILDL8tplfd9f3MMs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/32f3bb-2594-4b37-94aa-941244f5dded/1/wnz1VgIH7OhILDL8tplfd9f3MMs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/32f3bb-2594-4b37-94aa-941244f5dded/1/wnz1VgIH7OhILDL8tplfd9f3MMs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:58:4d:ce:c9:64:31:78:22:8f:40:07:a0:ec:0d:fc:f9:c2:
         c1:d8:1b:59:25:64:dd:4a:08:ba:75:64:ae:1b:91:27:62:96:
         bd:a9:1f:26:7c:90:a9:5a:97:a0:40:79:01:cc:a7:75:4e:bd:
         1c:67:f7:52:e2:58:c7:24:a1:a1:a7:b3:0d:d9:8f:ee:d6:45:
         c7:a4:d2:a1:90:d7:d3:09:05:ea:77:92:43:6d:22:99:89:cf:
         ec:c9:52:1b:de:5f:89:be:c7:3f:42:fb:0c:ca:1a:05:23:e2:
         e5:c6:de:6d:b9:e8:f3:cd:ec:28:c2:47:37:7a:2c:90:5b:fd:
         7d:1f:74:60:ce:9c:53:0f:52:d7:40:0f:de:f4:af:c4:cd:b3:
         5f:f9:3f:b5:7a:9e:9f:ca:2d:7e:2c:b1:81:c1:12:01:01:24:
         03:dc:49:09:38:46:77:39:77:d5:dc:51:24:d8:ba:53:91:74:
         dd:db:2a:dd:80:00:3c:d4:bd:26:18:50:a5:5d:a4:ae:6f:7b:
         4a:a5:3d:66:7b:26:64:27:3c:e3:5a:9c:ec:e4:25:55:84:52:
         ad:e3:ab:86:87:76:49:83:73:77:b6:49:6f:25:ce:d4:c4:9f:
         5b:5a:4b:71:5f:9b:69:5b:90:39:bb:de:39:a8:20:31:ab:27:
         77:8c:b0:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 22:52:37 2025 by rpki-client