Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/dac70f-f172-44ce-9be5-5af89e6cd055/1/Wtn1vraTNIRUHOVigsmJ7W6L26M.mft
File:                     Wtn1vraTNIRUHOVigsmJ7W6L26M.mft (raw, json)
Hash identifier:          7eSbO79onGjXTiJXW/9ipBvVof8IMXxgGbzc6lWrnFA=
Subject key identifier:   BD:3E:3C:06:D8:95:FF:06:98:13:7F:3B:24:ED:BC:12:0E:36:12:22
Authority key identifier: 5A:D9:F5:BE:B6:93:34:84:54:1C:E5:62:82:C9:89:ED:6E:8B:DB:A3
Certificate issuer:       /CN=5ad9f5beb6933484541ce56282c989ed6e8bdba3
Certificate serial:       0196B2213B9024049B58BB1D11BD8D8BBD88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wtn1vraTNIRUHOVigsmJ7W6L26M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/dac70f-f172-44ce-9be5-5af89e6cd055/1/Wtn1vraTNIRUHOVigsmJ7W6L26M.mft
Manifest number:          02F2
Signing time:             Thu 08 May 2025 23:00:44 +0000
Manifest this update:     Thu 08 May 2025 23:00:44 +0000
Manifest next update:     Fri 09 May 2025 23:00:44 +0000
Files and hashes:         1: HZBz5MrqBdAGlLzttgW8k7z_g5Y.roa (hash: vKALeCSvoIMsQY1cUM7A8I/fEETWOT998Li6zTAWX7w=)
                          2: Wtn1vraTNIRUHOVigsmJ7W6L26M.crl (hash: hvT0x+9pVgzFZcPZw+RiniHi/4qoEQUqZSs0GKiOzYQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/dac70f-f172-44ce-9be5-5af89e6cd055/1/Wtn1vraTNIRUHOVigsmJ7W6L26M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/dac70f-f172-44ce-9be5-5af89e6cd055/1/Wtn1vraTNIRUHOVigsmJ7W6L26M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Wtn1vraTNIRUHOVigsmJ7W6L26M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 May 2025 23:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b2:21:3b:90:24:04:9b:58:bb:1d:11:bd:8d:8b:bd:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ad9f5beb6933484541ce56282c989ed6e8bdba3
        Validity
            Not Before: May  8 23:00:44 2025 GMT
            Not After : May  9 23:00:44 2025 GMT
        Subject: CN=bd3e3c06d895ff0698137f3b24edbc120e361222
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:5d:ab:b5:c4:00:93:7d:16:98:95:4f:c9:73:
                    88:2d:35:99:2d:f5:0a:41:a2:37:0d:5c:b5:5a:68:
                    b0:38:f9:ef:18:30:c3:67:82:c1:99:ab:ba:b5:a6:
                    af:1c:a4:80:ae:54:ed:ff:d4:ae:1b:a8:f0:c9:cd:
                    eb:c3:f8:5d:f3:45:25:87:55:ff:90:27:2d:39:13:
                    1d:9f:a6:e8:92:67:06:1e:f3:94:39:d1:b4:c4:90:
                    60:d5:1c:cb:c7:43:45:61:b1:6d:bd:29:d4:78:15:
                    45:b4:1f:8b:ed:e1:11:30:69:9e:a8:6d:99:74:35:
                    82:e1:f3:31:b9:13:46:80:56:37:4f:05:8f:dc:88:
                    05:49:c5:59:64:d6:57:09:54:c3:a6:7f:93:d5:58:
                    57:ec:71:de:de:24:5c:c1:30:da:b7:60:5b:13:af:
                    9e:68:eb:fb:72:33:bd:50:02:bf:f4:aa:77:ea:28:
                    f1:35:74:ae:60:73:b8:7f:85:b3:b9:bd:95:56:41:
                    c8:9b:19:ae:87:0c:de:da:7e:aa:8e:90:be:05:ed:
                    3a:ea:8a:dc:75:2c:88:53:aa:35:8c:cd:41:fa:40:
                    ef:25:5f:e8:24:99:9a:b7:21:bf:97:05:b7:0a:46:
                    12:d3:ad:6a:de:47:1d:31:33:d4:d2:86:96:36:11:
                    87:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:3E:3C:06:D8:95:FF:06:98:13:7F:3B:24:ED:BC:12:0E:36:12:22
            X509v3 Authority Key Identifier:
                keyid:5A:D9:F5:BE:B6:93:34:84:54:1C:E5:62:82:C9:89:ED:6E:8B:DB:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wtn1vraTNIRUHOVigsmJ7W6L26M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/dac70f-f172-44ce-9be5-5af89e6cd055/1/Wtn1vraTNIRUHOVigsmJ7W6L26M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/dac70f-f172-44ce-9be5-5af89e6cd055/1/Wtn1vraTNIRUHOVigsmJ7W6L26M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:fa:00:80:f7:8b:86:a8:23:d2:88:28:ff:d3:6f:00:18:9d:
         82:e7:29:cf:6c:ba:66:d1:7b:59:cb:c8:01:24:2b:50:d9:c8:
         18:a7:b2:74:e6:f0:84:38:97:75:22:cf:6d:d8:32:0a:ff:aa:
         8f:24:fe:80:03:d4:94:be:16:91:2d:1a:2c:2a:01:4f:1b:fa:
         7c:61:61:f4:6c:7f:e0:fd:c2:29:74:01:f5:0a:1c:45:6b:d7:
         60:44:43:17:ae:09:04:c2:26:5e:c5:ff:48:38:da:1b:fd:04:
         ba:fd:cc:a0:80:71:d6:a0:9d:b8:2b:4e:e2:e0:cf:37:9c:7c:
         a4:d9:88:8a:b4:31:42:61:ad:f1:e7:af:4b:cd:1b:82:2c:be:
         fe:73:73:84:31:9f:ad:a1:e8:63:36:cf:89:c7:a9:45:dd:2f:
         ed:cf:22:40:d3:8c:3b:7b:9a:e2:ab:d5:7f:37:e1:3f:e0:64:
         85:4d:8e:7d:5a:33:06:4f:48:ab:4d:d1:38:04:75:7d:2d:2e:
         bf:45:cc:56:48:48:be:17:c8:1d:ce:b6:e1:d8:c2:ff:dd:c3:
         50:aa:79:b1:54:22:8d:50:2f:06:93:35:0f:81:9b:81:49:a8:
         9c:59:fa:8c:4e:b4:af:d4:13:f0:c0:e2:16:4e:39:22:2a:98:
         34:84:56:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 08:30:41 2025 by rpki-client