Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/cf3641-5c30-4dea-b004-c8e7fd809f90/1/WtnEUCAHKzNpwrgQ_vRSckTFt0E.mft
File:                     WtnEUCAHKzNpwrgQ_vRSckTFt0E.mft (raw, json)
Hash identifier:          0GydOAosqA+OlJr2EgsccG9wFttr+oTYe6i6Z5EVAh8=
Subject key identifier:   D9:F7:4C:BD:6B:99:B1:EA:36:FC:84:F0:DD:B1:D1:2E:57:F9:5D:A1
Authority key identifier: 5A:D9:C4:50:20:07:2B:33:69:C2:B8:10:FE:F4:52:72:44:C5:B7:41
Certificate issuer:       /CN=5ad9c45020072b3369c2b810fef4527244c5b741
Certificate serial:       0196C5DEF9CFEE8D4F41A2A71D593372C3B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WtnEUCAHKzNpwrgQ_vRSckTFt0E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/cf3641-5c30-4dea-b004-c8e7fd809f90/1/WtnEUCAHKzNpwrgQ_vRSckTFt0E.mft
Manifest number:          1539
Signing time:             Mon 12 May 2025 19:00:46 +0000
Manifest this update:     Mon 12 May 2025 19:00:46 +0000
Manifest next update:     Tue 13 May 2025 19:00:46 +0000
Files and hashes:         1: 7wPReiiZCkAbhtBTvjj1V5aksnE.roa (hash: rquPP/JOGLNyEJui2m/8V+t5G02of5Esav2aIUndmQc=)
                          2: WtnEUCAHKzNpwrgQ_vRSckTFt0E.crl (hash: RYKu03njTJKAyy0LtPWNzZls2zje6DuaZAfMm3bsadY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/cf3641-5c30-4dea-b004-c8e7fd809f90/1/WtnEUCAHKzNpwrgQ_vRSckTFt0E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/cf3641-5c30-4dea-b004-c8e7fd809f90/1/WtnEUCAHKzNpwrgQ_vRSckTFt0E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WtnEUCAHKzNpwrgQ_vRSckTFt0E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 14:31:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c5:de:f9:cf:ee:8d:4f:41:a2:a7:1d:59:33:72:c3:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ad9c45020072b3369c2b810fef4527244c5b741
        Validity
            Not Before: May 12 19:00:46 2025 GMT
            Not After : May 13 19:00:46 2025 GMT
        Subject: CN=d9f74cbd6b99b1ea36fc84f0ddb1d12e57f95da1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ae:18:22:ef:8a:5d:8e:40:64:d4:62:82:bd:
                    f2:b5:71:3f:bc:d1:93:13:e8:a9:87:2b:65:5d:72:
                    00:af:1b:8c:3a:02:c9:18:1f:ce:c9:40:32:d1:21:
                    60:45:90:88:f8:f4:83:5b:be:9c:bd:bd:e6:74:8c:
                    28:f3:5b:4d:b9:e3:2d:90:83:8a:57:55:3e:83:66:
                    b6:c1:68:02:cb:03:fa:11:b0:fe:9a:dc:1a:6e:a9:
                    ff:c2:cf:3a:ba:09:a7:73:79:db:4c:28:d2:fb:e5:
                    f2:2f:f8:42:8a:cf:18:8b:0e:ac:dd:e5:d6:ab:9d:
                    83:c6:14:33:88:8c:81:13:c2:ea:0b:0d:aa:09:8d:
                    8d:eb:27:71:16:bf:37:e9:4f:e6:c7:86:52:a5:11:
                    90:33:81:29:d1:3e:5f:29:b1:9e:5d:a8:e5:44:64:
                    17:97:3f:8f:fd:a7:1b:6a:30:f9:52:94:c3:0f:c3:
                    98:c8:99:13:f2:b3:68:d0:f0:f2:6b:a0:df:99:68:
                    dd:85:0e:13:57:2b:a8:35:1a:48:a4:7f:73:20:88:
                    a1:9a:2c:3b:a0:e6:ca:fa:27:ad:51:7f:c3:21:56:
                    84:5e:49:a2:fe:ed:59:8f:99:37:22:93:83:bc:f2:
                    a2:67:7e:e7:6e:5d:20:0e:83:fe:cd:cc:68:59:8b:
                    d4:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:F7:4C:BD:6B:99:B1:EA:36:FC:84:F0:DD:B1:D1:2E:57:F9:5D:A1
            X509v3 Authority Key Identifier:
                keyid:5A:D9:C4:50:20:07:2B:33:69:C2:B8:10:FE:F4:52:72:44:C5:B7:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WtnEUCAHKzNpwrgQ_vRSckTFt0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/cf3641-5c30-4dea-b004-c8e7fd809f90/1/WtnEUCAHKzNpwrgQ_vRSckTFt0E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/cf3641-5c30-4dea-b004-c8e7fd809f90/1/WtnEUCAHKzNpwrgQ_vRSckTFt0E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d7:5c:41:03:43:69:97:17:2e:3b:d1:e8:62:c2:5c:7d:77:08:
         6b:f8:97:5b:6a:cd:1b:5d:65:a0:11:80:01:02:64:76:af:99:
         72:9e:75:ec:0e:7a:83:83:41:a5:69:c6:b5:c0:8f:d0:ce:62:
         92:4a:4a:69:54:a8:97:2c:99:ca:13:1c:d9:89:23:9e:78:c4:
         1c:80:22:94:14:6f:9a:3b:00:d2:5b:9e:c4:40:5c:ac:97:0f:
         bf:ad:25:3c:52:6f:b4:6e:21:7f:13:85:5d:d7:16:18:37:9e:
         cb:3f:55:3d:80:3e:88:f5:5f:42:7a:2b:7b:76:61:29:15:b1:
         39:cc:0e:07:a2:bd:fe:9a:7a:c4:96:7b:10:6e:6f:19:56:ba:
         ee:45:0f:40:3e:49:5d:5e:b8:2c:50:f3:6e:30:8b:42:db:d1:
         0b:78:88:1c:87:e0:49:3d:29:d9:df:f5:0c:af:08:8c:54:8b:
         2c:d2:0f:f3:14:05:81:6f:a5:2b:36:8a:46:94:5c:58:73:98:
         33:c9:ac:a6:5d:20:c8:f4:88:5e:1d:4f:39:ee:67:a0:2c:44:
         90:7e:96:d1:51:7b:2a:65:4f:94:93:f5:75:18:cf:7d:a3:ed:
         f9:7e:e3:20:6b:36:ba:f0:ad:fa:f2:fc:01:7f:ce:b3:4d:0f:
         a8:a6:5c:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 00:09:35 2025 by rpki-client