Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/894bdc-28a6-4c36-ba42-1653188d8126/1/wpGTNK0q1TYWw0_s6WzikjD4Y0k.mft
File:                     wpGTNK0q1TYWw0_s6WzikjD4Y0k.mft (raw, json)
Hash identifier:          noXCdzl/frL1+bNuZrllewbsk+jwGxbqxeSHyaL3NJY=
Subject key identifier:   39:69:19:0A:21:5F:0E:9B:64:D6:35:1A:13:AC:C2:06:A5:74:1A:7F
Authority key identifier: C2:91:93:34:AD:2A:D5:36:16:C3:4F:EC:E9:6C:E2:92:30:F8:63:49
Certificate issuer:       /CN=c2919334ad2ad53616c34fece96ce29230f86349
Certificate serial:       0196C0B892F3594965FCAF5335CFDC5DF9E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wpGTNK0q1TYWw0_s6WzikjD4Y0k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/894bdc-28a6-4c36-ba42-1653188d8126/1/wpGTNK0q1TYWw0_s6WzikjD4Y0k.mft
Manifest number:          0504
Signing time:             Sun 11 May 2025 19:00:43 +0000
Manifest this update:     Sun 11 May 2025 19:00:43 +0000
Manifest next update:     Mon 12 May 2025 19:00:43 +0000
Files and hashes:         1: b800M8UQE_ndSkfHQhV3cPUcjPM.roa (hash: MbkUQn3Ix8UmF2oKyZjDZOrZVxkNdqgLjfIY0GRvAPU=)
                          2: wpGTNK0q1TYWw0_s6WzikjD4Y0k.crl (hash: AE0ZoZ2sVBx0nOXv7p8ltRx46OmQxBAHYMAQu8M11x0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/894bdc-28a6-4c36-ba42-1653188d8126/1/wpGTNK0q1TYWw0_s6WzikjD4Y0k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/894bdc-28a6-4c36-ba42-1653188d8126/1/wpGTNK0q1TYWw0_s6WzikjD4Y0k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wpGTNK0q1TYWw0_s6WzikjD4Y0k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 19:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c0:b8:92:f3:59:49:65:fc:af:53:35:cf:dc:5d:f9:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2919334ad2ad53616c34fece96ce29230f86349
        Validity
            Not Before: May 11 19:00:43 2025 GMT
            Not After : May 12 19:00:43 2025 GMT
        Subject: CN=3969190a215f0e9b64d6351a13acc206a5741a7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:2c:59:ea:1a:04:50:08:59:7f:aa:f8:2a:20:
                    ff:27:0b:49:ce:15:e4:6d:8c:10:4d:f9:e7:1c:60:
                    50:90:4e:78:6f:87:52:4e:74:ea:fe:96:25:e4:c3:
                    2d:b3:52:d0:32:b0:9f:f0:b5:e7:d2:bf:94:d8:9a:
                    bc:61:1c:10:4b:2e:e5:98:4e:db:c6:d1:fa:90:c3:
                    40:81:a0:6e:fa:4f:ef:fc:e8:c4:8a:56:ce:a4:f3:
                    b0:38:23:20:e3:1f:5a:db:eb:1d:f9:71:b0:b0:80:
                    ef:0b:c1:0e:5f:05:2b:1e:93:1f:ce:09:0f:ca:51:
                    d1:8e:8e:34:41:7d:57:75:0c:f1:2c:68:56:2e:59:
                    69:73:4a:61:a8:dd:06:f2:31:85:52:54:80:bd:96:
                    94:a0:5c:09:0b:93:9b:8e:ab:3f:93:67:bc:33:fc:
                    bc:9c:c6:52:01:49:e2:13:36:c2:c9:48:7b:ff:3f:
                    89:c4:22:5b:a4:f6:99:ce:b5:af:08:52:77:a8:cc:
                    bb:0e:13:fe:36:aa:92:7c:27:be:68:b3:07:2c:d9:
                    a5:37:84:e6:94:25:cd:12:95:ae:6c:8e:0b:d9:73:
                    a4:a3:12:f3:8e:a0:06:6e:84:1d:bb:3a:86:1d:d7:
                    1f:b2:56:24:ca:67:05:b1:b0:48:0c:e9:43:b4:6a:
                    0b:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:69:19:0A:21:5F:0E:9B:64:D6:35:1A:13:AC:C2:06:A5:74:1A:7F
            X509v3 Authority Key Identifier:
                keyid:C2:91:93:34:AD:2A:D5:36:16:C3:4F:EC:E9:6C:E2:92:30:F8:63:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wpGTNK0q1TYWw0_s6WzikjD4Y0k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/894bdc-28a6-4c36-ba42-1653188d8126/1/wpGTNK0q1TYWw0_s6WzikjD4Y0k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/894bdc-28a6-4c36-ba42-1653188d8126/1/wpGTNK0q1TYWw0_s6WzikjD4Y0k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:63:2e:08:11:64:e3:9f:d1:f8:fb:46:56:f7:10:23:74:e1:
         a4:85:46:a8:e9:10:63:1d:d0:f9:15:91:fe:e0:37:49:96:2a:
         c3:7b:cb:ba:0b:08:17:a4:1e:48:43:2e:66:10:11:b4:8e:62:
         cb:1a:51:b1:5c:d6:4a:cc:04:64:3d:72:0c:c9:0f:3e:8e:e0:
         95:28:a8:13:fb:6e:40:5f:56:a5:20:f7:67:c0:dc:07:9d:31:
         45:7f:2a:c3:37:06:2d:71:59:a6:7a:9c:32:04:07:5e:2a:51:
         89:f0:36:de:69:de:fa:9c:08:e5:48:b2:56:e4:de:01:41:06:
         43:3f:c0:bc:77:3b:a2:13:d1:8f:f8:7f:a9:c2:5c:b1:4e:e5:
         a3:d3:18:30:39:57:30:75:f9:70:14:ba:8f:66:23:1d:62:7f:
         ac:eb:ba:28:b1:2a:37:10:63:96:d2:1f:36:98:80:9b:71:ce:
         cb:a8:a4:ec:7b:fe:9c:01:90:63:72:13:88:f4:1a:0a:5b:19:
         18:f6:f7:34:cf:d1:8b:fd:55:f5:e3:bd:b8:88:dc:72:9f:7e:
         2d:fc:5c:61:f6:3d:9d:ef:21:29:38:fe:d3:28:76:3c:12:71:
         59:59:4d:17:33:ee:b5:8b:78:2b:b8:f2:25:d9:df:11:9a:27:
         83:3a:73:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:30:47 2025 by rpki-client