Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/44e4bb-9bf5-478b-85a1-649311139883/1/wl1D3N4QuSMXnVsb106kOswiEJM.mft
File:                     wl1D3N4QuSMXnVsb106kOswiEJM.mft (raw, json)
Hash identifier:          HA/a60LUHeXfLHkyko4rhtG1xn/yPqPP/l3sO9tY+7Q=
Subject key identifier:   3D:C3:66:E0:A7:74:8C:77:76:6A:55:D7:6E:D8:87:FD:48:18:5C:CA
Authority key identifier: C2:5D:43:DC:DE:10:B9:23:17:9D:5B:1B:D7:4E:A4:3A:CC:22:10:93
Certificate issuer:       /CN=c25d43dcde10b923179d5b1bd74ea43acc221093
Certificate serial:       0196D3637255DB67CD3999B3927831726193
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wl1D3N4QuSMXnVsb106kOswiEJM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/44e4bb-9bf5-478b-85a1-649311139883/1/wl1D3N4QuSMXnVsb106kOswiEJM.mft
Manifest number:          0AB4
Signing time:             Thu 15 May 2025 10:00:32 +0000
Manifest this update:     Thu 15 May 2025 10:00:32 +0000
Manifest next update:     Fri 16 May 2025 10:00:32 +0000
Files and hashes:         1: wl1D3N4QuSMXnVsb106kOswiEJM.crl (hash: OcGP0pYWkL/ODJEpmGW3dcSwXUK05dSaVP1J5jERU/o=)
                          2: yZvcP-Ps4yo6pgIgUKI5eTzNp2U.roa (hash: MDG4N8hqJwJQSXIs3A2EDMOqJcbMoF8xcYaXQrrz3Zg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/44e4bb-9bf5-478b-85a1-649311139883/1/wl1D3N4QuSMXnVsb106kOswiEJM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/44e4bb-9bf5-478b-85a1-649311139883/1/wl1D3N4QuSMXnVsb106kOswiEJM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wl1D3N4QuSMXnVsb106kOswiEJM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 May 2025 08:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:d3:63:72:55:db:67:cd:39:99:b3:92:78:31:72:61:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c25d43dcde10b923179d5b1bd74ea43acc221093
        Validity
            Not Before: May 15 10:00:32 2025 GMT
            Not After : May 16 10:00:32 2025 GMT
        Subject: CN=3dc366e0a7748c77766a55d76ed887fd48185cca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:36:5a:3c:9d:9d:79:ed:dd:6f:32:0b:c5:a3:
                    40:77:7c:a4:de:f7:77:2d:26:5d:aa:7f:27:be:e7:
                    68:7e:d8:55:7b:4f:ca:53:f1:d4:d8:63:db:f9:29:
                    ac:64:b5:05:36:55:26:75:58:77:29:8d:86:e7:27:
                    48:00:38:14:e1:21:d4:b7:e2:92:33:a7:67:b4:9f:
                    47:af:e2:da:58:7f:33:64:03:e4:68:cf:9d:c4:98:
                    b7:ca:86:a1:65:fd:36:4d:73:ba:0b:d5:9b:49:ff:
                    ba:c3:2f:bd:c9:a6:8d:af:83:07:ac:92:a4:b4:2a:
                    cf:00:98:9b:d7:6c:fb:36:2e:cc:e2:0d:60:d9:f0:
                    0b:44:e4:34:a8:34:ca:56:12:d8:df:9a:0e:2e:ae:
                    f6:f9:20:f8:e3:c5:ee:80:6e:7c:01:82:c5:33:6d:
                    d9:2d:c9:c2:c9:27:43:9a:9f:2c:36:d6:24:47:ad:
                    11:8d:51:bc:25:e3:ef:9a:ea:20:6d:42:71:3d:9c:
                    2e:11:d9:da:70:e2:a8:ee:18:38:bd:17:87:83:52:
                    99:d0:ae:53:a1:e8:a5:09:02:98:92:10:9a:c9:af:
                    da:f8:d4:dc:5a:fa:d4:34:7e:4c:36:d2:0a:29:57:
                    c0:40:70:82:8a:e7:3e:0c:44:d4:2f:06:cd:ad:69:
                    a4:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:C3:66:E0:A7:74:8C:77:76:6A:55:D7:6E:D8:87:FD:48:18:5C:CA
            X509v3 Authority Key Identifier:
                keyid:C2:5D:43:DC:DE:10:B9:23:17:9D:5B:1B:D7:4E:A4:3A:CC:22:10:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wl1D3N4QuSMXnVsb106kOswiEJM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/44e4bb-9bf5-478b-85a1-649311139883/1/wl1D3N4QuSMXnVsb106kOswiEJM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/44e4bb-9bf5-478b-85a1-649311139883/1/wl1D3N4QuSMXnVsb106kOswiEJM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:6b:48:54:0f:5c:f6:3c:79:29:02:3e:f7:6d:41:db:f7:31:
         cb:15:2a:23:f6:80:b3:ec:63:36:bd:68:92:33:fe:6c:a9:bd:
         26:d3:88:ca:ca:22:b4:7d:54:45:ff:b2:c7:19:7f:4d:a1:d4:
         cf:6e:80:9d:0f:ae:21:7e:16:4f:9a:09:66:e8:d5:e5:83:a0:
         3f:0a:e2:a3:e9:da:4a:1a:99:c5:5e:24:66:3a:bc:3b:f5:d8:
         06:bd:eb:be:3b:ef:be:a3:12:09:ab:9e:4b:ee:60:90:0c:fe:
         16:d8:80:2f:13:c2:e6:ef:fc:79:0b:ec:78:c2:ec:67:98:da:
         83:c9:32:40:a0:07:ee:5a:98:6b:63:18:76:b2:b7:5a:73:a6:
         6c:cd:98:86:b5:8f:68:7d:bc:9e:3a:33:63:f8:01:12:67:b9:
         5f:4e:db:38:ff:97:59:d4:b1:80:38:cd:e3:c2:4d:4f:75:cb:
         fe:2f:b6:f3:08:ae:19:45:66:57:fc:0b:7c:77:dc:86:5c:d7:
         18:98:b0:37:8e:3b:c9:ee:9d:b0:46:47:20:4b:e9:95:0b:a5:
         4c:83:e6:29:14:e1:32:c6:a9:ab:a7:70:08:11:4b:6b:91:bf:
         dd:9c:99:22:46:15:2f:20:17:0b:34:3b:1f:a9:f4:4a:a4:bb:
         22:f0:98:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 14:37:02 2025 by rpki-client