Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/685f2d-bde4-49fd-a143-994bb628bba5/1/Wof8yFy0mUGaGx7C8yCcKkNfuS0.mft
File:                     Wof8yFy0mUGaGx7C8yCcKkNfuS0.mft (raw, json)
Hash identifier:          ZiFcMTa9cBQz8Z5yPNRDELZ+UMDZnfKjk27TBfR2b0c=
Subject key identifier:   C2:D9:EF:AA:AE:B1:EE:37:1C:18:09:28:80:76:0D:04:C6:EB:73:55
Authority key identifier: 5A:87:FC:C8:5C:B4:99:41:9A:1B:1E:C2:F3:20:9C:2A:43:5F:B9:2D
Certificate issuer:       /CN=5a87fcc85cb499419a1b1ec2f3209c2a435fb92d
Certificate serial:       01974C6A151334611363EB41CDBD28D97E8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wof8yFy0mUGaGx7C8yCcKkNfuS0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/685f2d-bde4-49fd-a143-994bb628bba5/1/Wof8yFy0mUGaGx7C8yCcKkNfuS0.mft
Manifest number:          02F3
Signing time:             Sat 07 Jun 2025 22:01:49 +0000
Manifest this update:     Sat 07 Jun 2025 22:01:49 +0000
Manifest next update:     Sun 08 Jun 2025 22:01:49 +0000
Files and hashes:         1: OcSSArCWQB8P_3TQhOP1Kjmg4F4.roa (hash: +2C6c4zXqA1Vi974tbwpI0Ciww2lyqoubywKBoSNij8=)
                          2: Wof8yFy0mUGaGx7C8yCcKkNfuS0.crl (hash: eGrNI1sqJK7qlbZTCJHbD1ohj+NcS2rHzLM2N8ksVxU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/685f2d-bde4-49fd-a143-994bb628bba5/1/Wof8yFy0mUGaGx7C8yCcKkNfuS0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/685f2d-bde4-49fd-a143-994bb628bba5/1/Wof8yFy0mUGaGx7C8yCcKkNfuS0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Wof8yFy0mUGaGx7C8yCcKkNfuS0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4c:6a:15:13:34:61:13:63:eb:41:cd:bd:28:d9:7e:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a87fcc85cb499419a1b1ec2f3209c2a435fb92d
        Validity
            Not Before: Jun  7 22:01:49 2025 GMT
            Not After : Jun  8 22:01:49 2025 GMT
        Subject: CN=c2d9efaaaeb1ee371c18092880760d04c6eb7355
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:5d:ee:13:e3:e4:23:0b:cc:51:f0:c2:16:08:
                    f1:e7:95:a4:f2:ac:70:ef:78:d0:40:c1:be:e7:f2:
                    7e:93:77:60:d1:a3:13:a4:e0:d3:5a:01:8c:85:e1:
                    59:00:8a:06:be:3a:9f:c1:36:41:f4:d5:b9:e5:47:
                    50:94:45:82:b0:79:fc:ad:66:2c:23:88:15:56:f5:
                    c0:2e:d8:2b:b8:e6:1e:39:7e:c5:3b:06:2e:8b:00:
                    2b:89:4b:42:7b:f0:73:3e:06:2f:33:f0:b1:35:18:
                    e4:24:53:0c:5c:fe:14:e6:3a:28:86:3b:3d:4a:92:
                    dd:90:45:bc:fa:52:5e:11:2d:85:ef:35:ea:31:33:
                    43:03:82:a3:89:ab:dc:8f:9a:e7:4f:7d:b9:14:bf:
                    22:1f:89:3f:d5:2d:c7:0a:fa:5e:ae:95:b5:4b:ee:
                    87:8b:14:de:08:65:b1:51:6e:1d:1c:87:b0:f0:74:
                    43:10:b1:43:68:4e:41:4b:cc:46:c2:5b:31:41:0a:
                    cf:25:24:53:b8:f1:5a:23:1a:b9:3a:fc:a1:33:fe:
                    5d:3f:9e:5c:c5:78:c6:ae:7a:e5:8d:4f:fe:24:fb:
                    7e:78:97:40:61:42:86:23:35:e7:65:62:7c:a4:f8:
                    f2:f6:74:e1:ff:43:7d:c9:06:57:c4:7a:54:70:09:
                    22:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:D9:EF:AA:AE:B1:EE:37:1C:18:09:28:80:76:0D:04:C6:EB:73:55
            X509v3 Authority Key Identifier:
                keyid:5A:87:FC:C8:5C:B4:99:41:9A:1B:1E:C2:F3:20:9C:2A:43:5F:B9:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wof8yFy0mUGaGx7C8yCcKkNfuS0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/685f2d-bde4-49fd-a143-994bb628bba5/1/Wof8yFy0mUGaGx7C8yCcKkNfuS0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/685f2d-bde4-49fd-a143-994bb628bba5/1/Wof8yFy0mUGaGx7C8yCcKkNfuS0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:7f:13:d3:71:72:f3:e8:6c:2a:4d:0a:49:c7:6d:3a:ad:f0:
         e7:54:42:64:f2:31:0d:48:69:b3:a8:84:91:fd:0c:46:cd:93:
         35:07:0c:a3:61:63:28:5d:1c:81:a0:2a:70:72:b0:3a:85:66:
         82:aa:fe:84:85:0a:3e:12:4e:5c:5d:6a:f9:b8:8c:17:f0:7f:
         99:19:77:45:19:d2:29:cb:cf:b1:bc:25:c4:48:2b:ca:e3:7d:
         2d:3c:f7:d4:3c:fc:05:21:fe:b0:29:7c:04:c8:5d:70:16:b8:
         46:84:8e:d8:6f:e4:70:cd:83:3a:21:fe:b5:cf:88:2e:21:92:
         f2:ed:8b:09:e8:ab:3a:0f:cb:95:a5:74:e7:78:7f:87:1a:d5:
         77:21:27:bf:05:ef:f8:38:28:7a:1e:ec:12:56:2a:70:3f:c7:
         14:61:13:1b:c9:66:b8:33:49:06:ff:64:ff:08:34:b3:3d:4c:
         98:91:38:f3:0d:21:f3:ba:04:5f:0e:30:f2:2f:5d:56:4a:c1:
         d9:5e:9c:7a:0e:73:f2:36:05:d1:7b:c5:49:ae:d6:35:a0:5d:
         b0:21:3b:19:21:72:3a:d0:51:4f:ab:ac:3b:9c:4c:9c:60:f6:
         00:91:38:36:56:af:0f:44:dd:d5:ba:fa:c9:78:33:f7:db:1c:
         5f:86:c8:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:53:29 2025 by rpki-client