Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/38b511-7547-4a48-8baf-7764584670fd/1/wr-Bq5UKGANGMMJYMHSeZQ605jQ.mft
File:                     wr-Bq5UKGANGMMJYMHSeZQ605jQ.mft (raw, json)
Hash identifier:          zhauTTf8b0hcWZhSY8ItzhKBlLxT2fZD548sM4RDk8Y=
Subject key identifier:   FF:EA:28:E3:9E:DD:60:08:B5:37:83:8F:EE:18:9E:35:E9:D8:4C:3F
Authority key identifier: C2:BF:81:AB:95:0A:18:03:46:30:C2:58:30:74:9E:65:0E:B4:E6:34
Certificate issuer:       /CN=c2bf81ab950a18034630c25830749e650eb4e634
Certificate serial:       0197CA9508164009CFA85CFCC7820AED0394
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wr-Bq5UKGANGMMJYMHSeZQ605jQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/38b511-7547-4a48-8baf-7764584670fd/1/wr-Bq5UKGANGMMJYMHSeZQ605jQ.mft
Manifest number:          052E
Signing time:             Wed 02 Jul 2025 10:00:53 +0000
Manifest this update:     Wed 02 Jul 2025 10:00:53 +0000
Manifest next update:     Thu 03 Jul 2025 10:00:53 +0000
Files and hashes:         1: nlp-yymaqYzgw12m1QvoCWjeZIw.roa (hash: Yssi7rDTBVMdou6reFU3+Vkw3D/c6F2oI+HGCYZH4Sw=)
                          2: wr-Bq5UKGANGMMJYMHSeZQ605jQ.crl (hash: 1k/udtwXnTvGu6+PqPyPw61C3Qp03AVmUb9j2MOlOkU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/38b511-7547-4a48-8baf-7764584670fd/1/wr-Bq5UKGANGMMJYMHSeZQ605jQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/38b511-7547-4a48-8baf-7764584670fd/1/wr-Bq5UKGANGMMJYMHSeZQ605jQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wr-Bq5UKGANGMMJYMHSeZQ605jQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 03 Jul 2025 10:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:ca:95:08:16:40:09:cf:a8:5c:fc:c7:82:0a:ed:03:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2bf81ab950a18034630c25830749e650eb4e634
        Validity
            Not Before: Jul  2 10:00:53 2025 GMT
            Not After : Jul  3 10:00:53 2025 GMT
        Subject: CN=ffea28e39edd6008b537838fee189e35e9d84c3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:2d:41:b6:3e:6a:d8:c0:78:b4:6c:95:47:23:
                    d9:47:95:cf:9b:d2:45:56:0b:fe:ea:5f:93:99:9e:
                    20:cb:05:86:49:0a:aa:03:81:45:a1:33:a4:7c:bf:
                    46:21:03:d5:7e:3a:c6:b2:ad:21:8b:21:80:16:20:
                    c9:2f:d7:32:a7:b7:a7:5d:2e:e1:9d:f1:8f:ef:52:
                    7c:b7:5f:a6:92:3a:65:5d:a9:65:f1:80:4b:6e:76:
                    2f:fe:79:08:72:e9:c6:73:fc:60:56:35:35:66:b3:
                    f6:e1:fd:88:eb:02:6c:74:8f:9f:db:b0:d1:f7:77:
                    3d:78:2d:ed:7c:84:2e:93:05:2f:52:83:49:00:77:
                    41:a1:70:91:91:13:d5:a2:b5:d0:5b:20:8a:08:68:
                    25:a8:9f:81:28:7b:a4:09:7b:9d:48:fa:fa:a1:4f:
                    db:ac:4b:ee:20:2a:60:83:ce:80:6d:c6:e5:82:60:
                    2c:f8:c6:a6:89:fa:7f:85:30:b8:50:39:c2:cb:b8:
                    e8:00:13:9c:b8:be:12:f3:21:da:74:02:88:56:47:
                    20:5d:08:6c:4c:07:3f:cd:c2:1b:38:f9:e9:c1:b2:
                    48:52:d9:90:2e:d1:be:91:a3:66:4c:3b:26:52:89:
                    11:00:04:42:df:2a:5c:74:e3:11:3e:dc:07:be:dd:
                    50:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:EA:28:E3:9E:DD:60:08:B5:37:83:8F:EE:18:9E:35:E9:D8:4C:3F
            X509v3 Authority Key Identifier:
                keyid:C2:BF:81:AB:95:0A:18:03:46:30:C2:58:30:74:9E:65:0E:B4:E6:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wr-Bq5UKGANGMMJYMHSeZQ605jQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/38b511-7547-4a48-8baf-7764584670fd/1/wr-Bq5UKGANGMMJYMHSeZQ605jQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/38b511-7547-4a48-8baf-7764584670fd/1/wr-Bq5UKGANGMMJYMHSeZQ605jQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:e8:6f:47:de:41:d0:4e:0e:f2:0a:90:cd:ba:55:f9:99:57:
         72:71:6f:a1:f6:b8:5c:9b:bd:df:fa:4c:4b:52:11:17:2d:7c:
         c7:48:e4:ea:ab:18:ac:8c:41:83:01:c4:a2:35:1d:f1:cd:3a:
         b4:65:dd:ff:79:61:11:42:c0:d8:f1:8e:de:0e:cb:81:01:70:
         7d:ac:0b:d1:42:3d:a8:b3:45:12:63:e8:12:3e:fe:1f:1e:33:
         37:f5:60:26:bf:ff:7d:a2:69:15:b6:1e:1e:e4:95:15:82:d7:
         1c:d8:3a:3e:0f:6c:3c:f4:9a:a5:ec:3a:5d:9f:9e:1b:fc:f5:
         38:41:25:bb:6c:60:53:eb:7f:5b:86:48:c3:f1:05:7d:0d:db:
         9d:68:9d:6c:18:98:0c:0a:c8:c4:c5:cd:b0:4c:87:87:f5:2e:
         3f:48:98:72:13:c0:c0:1f:77:38:bf:2c:77:84:22:b2:81:95:
         c5:95:eb:be:59:7f:ba:f5:01:bc:2d:c7:66:14:84:31:36:9e:
         4d:e2:21:32:8b:35:ef:13:b2:d2:86:77:4c:b7:be:6d:1c:9e:
         9e:7e:a2:c2:c7:5f:d2:b5:60:93:91:3d:1f:68:56:13:c8:58:
         82:a8:52:70:12:76:c2:e7:10:4c:6a:87:e6:da:a4:c8:7a:70:
         4d:af:2e:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 13:25:31 2025 by rpki-client