Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/542603-5462-4b8d-8bc4-535cc0c102f0/1/wv0sdK1vri3dD26cOf3oMYk65vk.mft
File:                     wv0sdK1vri3dD26cOf3oMYk65vk.mft (raw, json)
Hash identifier:          8GusRrROuZPMJFKKtCQe/eY97Lz6L/anDVCjGVcCGoA=
Subject key identifier:   31:E3:D2:FB:2A:D6:8A:71:7A:DB:D8:3F:76:B5:07:7C:30:5B:55:6A
Authority key identifier: C2:FD:2C:74:AD:6F:AE:2D:DD:0F:6E:9C:39:FD:E8:31:89:3A:E6:F9
Certificate issuer:       /CN=c2fd2c74ad6fae2ddd0f6e9c39fde831893ae6f9
Certificate serial:       0196CB3BC22B7562339C37EEB42232DB3C4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wv0sdK1vri3dD26cOf3oMYk65vk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/542603-5462-4b8d-8bc4-535cc0c102f0/1/wv0sdK1vri3dD26cOf3oMYk65vk.mft
Manifest number:          0B3F
Signing time:             Tue 13 May 2025 20:00:13 +0000
Manifest this update:     Tue 13 May 2025 20:00:13 +0000
Manifest next update:     Wed 14 May 2025 20:00:13 +0000
Files and hashes:         1: g0tJ6HAhOEXfRw9hpwjv9qGtrPM.roa (hash: zh4s24WsuFFY5gPWDTRufukEWHpAkIbH1s15tmhjBvk=)
                          2: vJU7TYTNdrKazsGkyXHeqona0Pg.roa (hash: iL9E8+h90/3EbQ79KJw98Dj0cUBdo61gLVaVCxN/WHk=)
                          3: wv0sdK1vri3dD26cOf3oMYk65vk.crl (hash: 4B7g8BsodlTzCIERiPOKgwSoZu5jLYgimb02BAPuq88=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/542603-5462-4b8d-8bc4-535cc0c102f0/1/wv0sdK1vri3dD26cOf3oMYk65vk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/542603-5462-4b8d-8bc4-535cc0c102f0/1/wv0sdK1vri3dD26cOf3oMYk65vk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wv0sdK1vri3dD26cOf3oMYk65vk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 May 2025 20:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:cb:3b:c2:2b:75:62:33:9c:37:ee:b4:22:32:db:3c:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2fd2c74ad6fae2ddd0f6e9c39fde831893ae6f9
        Validity
            Not Before: May 13 20:00:13 2025 GMT
            Not After : May 14 20:00:13 2025 GMT
        Subject: CN=31e3d2fb2ad68a717adbd83f76b5077c305b556a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:19:6a:a9:ca:02:04:de:9e:28:24:5b:cb:40:
                    01:0b:0b:d9:c8:5c:60:bb:65:c1:ec:11:15:68:9d:
                    bb:99:79:90:b4:ef:b4:52:a1:bd:75:44:b0:5d:af:
                    b5:ef:6c:d1:e9:1d:ba:c0:05:71:f5:50:c7:be:06:
                    08:4b:84:9f:f6:f0:ea:60:a5:47:80:74:f6:87:33:
                    21:a6:5b:09:0b:9b:5b:5d:40:cf:75:d8:47:ed:5d:
                    71:0f:44:dc:2b:46:3c:9a:cc:6b:bb:0c:9e:53:d8:
                    e6:07:4d:75:97:47:7b:e2:56:80:83:4f:9e:af:15:
                    94:d7:f3:33:fc:a8:a5:5d:58:69:b9:15:a0:1d:5b:
                    03:e3:3f:d7:5f:30:87:b9:2e:5b:1d:83:a7:52:d4:
                    b5:19:0d:20:f9:db:61:e2:8a:32:da:81:92:b9:56:
                    48:dc:ce:ba:90:ca:2c:71:17:07:b1:b1:4f:67:00:
                    3b:e4:64:17:9c:99:65:91:38:2c:f0:52:73:a5:cf:
                    69:d1:a4:be:2b:b4:2b:4e:6e:4e:04:fe:c3:ff:0e:
                    38:4a:af:3e:d7:13:a5:98:49:4d:86:cb:88:0d:7f:
                    79:c1:8d:e9:05:fd:c8:16:72:4c:70:14:ac:be:67:
                    ff:73:e7:29:df:e2:26:fe:21:eb:f0:8f:4a:c0:e1:
                    7b:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:E3:D2:FB:2A:D6:8A:71:7A:DB:D8:3F:76:B5:07:7C:30:5B:55:6A
            X509v3 Authority Key Identifier:
                keyid:C2:FD:2C:74:AD:6F:AE:2D:DD:0F:6E:9C:39:FD:E8:31:89:3A:E6:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wv0sdK1vri3dD26cOf3oMYk65vk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/542603-5462-4b8d-8bc4-535cc0c102f0/1/wv0sdK1vri3dD26cOf3oMYk65vk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/542603-5462-4b8d-8bc4-535cc0c102f0/1/wv0sdK1vri3dD26cOf3oMYk65vk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:4d:5c:7c:ed:5a:b1:a8:7a:41:61:5b:50:12:fd:b3:d7:e3:
         50:d5:29:4a:6b:b7:ad:d7:0d:fc:db:53:5e:0b:b9:f4:0d:63:
         01:83:31:9a:df:4c:92:1b:c2:d6:bd:ba:ce:db:2f:dc:6a:5c:
         15:a6:5a:63:2a:22:51:3d:90:cd:fc:3d:8c:fd:dd:de:1a:4f:
         40:85:14:02:ae:da:4c:66:12:95:69:10:fb:f8:2f:47:68:5d:
         66:39:96:31:49:68:53:8c:27:dd:15:6c:70:7b:a0:1a:ef:8e:
         cc:83:ed:5a:cd:01:fe:aa:b4:87:81:d0:71:52:86:0d:99:fc:
         ce:5e:03:37:05:88:f7:59:91:fb:72:c3:7b:be:8a:5b:f5:50:
         3a:63:90:35:31:bd:ae:6b:3f:15:5a:83:e8:0d:73:23:6d:6d:
         70:cb:0f:fa:ab:15:da:e7:0a:ae:85:f2:ca:15:2f:3d:6e:47:
         ae:da:9b:9d:eb:ad:4d:48:31:1a:ce:5f:bf:66:ab:23:c6:53:
         81:28:22:7a:2e:fb:08:3a:41:b0:e3:52:e0:84:71:aa:4a:dc:
         af:01:54:b9:1c:42:0a:26:65:c8:d1:f8:11:96:2c:15:e4:62:
         b6:a9:2a:b1:7a:ba:56:65:a6:0b:eb:1f:ae:3b:fe:ef:31:0d:
         b5:41:24:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 05:45:34 2025 by rpki-client