Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/c50251-a4e1-424d-9e92-ac6781e23e87/1/dwP9A6XzTY1W6ZTCt_EMpJoOAVQ.mft
File:                     dwP9A6XzTY1W6ZTCt_EMpJoOAVQ.mft (raw, json)
Hash identifier:          usvtDyvLApEeTRNJ0gndbf4Ty6nYn4Yx638l5w7sIWQ=
Subject key identifier:   97:29:4E:CF:67:84:E3:88:1C:FF:C1:78:AF:0B:A2:A7:05:1C:4F:D7
Authority key identifier: 77:03:FD:03:A5:F3:4D:8D:56:E9:94:C2:B7:F1:0C:A4:9A:0E:01:54
Certificate issuer:       /CN=7703fd03a5f34d8d56e994c2b7f10ca49a0e0154
Certificate serial:       01974931740F5E0C5B21DDE1ED83D27DDDF0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dwP9A6XzTY1W6ZTCt_EMpJoOAVQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/c50251-a4e1-424d-9e92-ac6781e23e87/1/dwP9A6XzTY1W6ZTCt_EMpJoOAVQ.mft
Manifest number:          157C
Signing time:             Sat 07 Jun 2025 07:01:06 +0000
Manifest this update:     Sat 07 Jun 2025 07:01:06 +0000
Manifest next update:     Sun 08 Jun 2025 07:01:06 +0000
Files and hashes:         1: WpMT8suijybaT-axFHyfyzyaTBs.roa (hash: I0+iXOVNpy84NiUe0arMh2Z225OGAdH9+ziecARxFHA=)
                          2: dwP9A6XzTY1W6ZTCt_EMpJoOAVQ.crl (hash: zHdA6G6qXYSrAnl222qeNpqQevbgzXs0qAIS0ezsts8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/c50251-a4e1-424d-9e92-ac6781e23e87/1/dwP9A6XzTY1W6ZTCt_EMpJoOAVQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/c50251-a4e1-424d-9e92-ac6781e23e87/1/dwP9A6XzTY1W6ZTCt_EMpJoOAVQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dwP9A6XzTY1W6ZTCt_EMpJoOAVQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 00:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:49:31:74:0f:5e:0c:5b:21:dd:e1:ed:83:d2:7d:dd:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7703fd03a5f34d8d56e994c2b7f10ca49a0e0154
        Validity
            Not Before: Jun  7 07:01:06 2025 GMT
            Not After : Jun  8 07:01:06 2025 GMT
        Subject: CN=97294ecf6784e3881cffc178af0ba2a7051c4fd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:bc:5e:88:b1:f2:49:07:f5:1d:c3:2c:1b:c3:
                    97:6f:b8:f8:b0:e3:75:bc:65:60:9a:11:db:65:aa:
                    fa:81:93:0f:90:5d:37:06:2e:18:5c:55:8e:9f:52:
                    98:2f:fd:d0:17:a8:4b:46:18:a7:29:dd:43:41:dc:
                    d6:64:e8:22:f0:fe:a1:18:10:71:1a:f7:97:f5:25:
                    46:b5:cc:e7:cb:4f:33:81:7c:8d:94:9f:32:60:dd:
                    c2:e6:d3:b5:3b:0c:b0:99:af:e6:d1:ea:eb:60:93:
                    f6:79:cd:60:f7:d8:f4:37:66:7e:f9:e5:7b:99:c8:
                    59:30:8e:27:bc:de:01:a8:40:d1:b5:31:2f:7d:a5:
                    22:88:00:ad:af:a6:4c:10:88:1c:71:1a:9a:a8:26:
                    29:53:be:99:2c:b9:47:ac:a6:20:0b:4e:aa:74:55:
                    e2:d5:fe:d8:01:2c:ea:d9:48:7c:62:20:09:00:b0:
                    1a:3b:83:8f:08:91:6d:31:d7:a2:34:73:8e:43:41:
                    23:3a:04:e6:55:27:3c:bd:d2:59:d6:d8:1a:37:fe:
                    cc:b8:f9:a7:be:fb:72:ed:2f:22:c5:6f:2f:68:f3:
                    16:93:37:5f:5a:54:2e:34:b5:2c:ff:eb:b2:6e:9e:
                    e2:0f:fd:03:4a:9b:70:16:bf:a5:be:61:d8:25:56:
                    83:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:29:4E:CF:67:84:E3:88:1C:FF:C1:78:AF:0B:A2:A7:05:1C:4F:D7
            X509v3 Authority Key Identifier:
                keyid:77:03:FD:03:A5:F3:4D:8D:56:E9:94:C2:B7:F1:0C:A4:9A:0E:01:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dwP9A6XzTY1W6ZTCt_EMpJoOAVQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/c50251-a4e1-424d-9e92-ac6781e23e87/1/dwP9A6XzTY1W6ZTCt_EMpJoOAVQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/c50251-a4e1-424d-9e92-ac6781e23e87/1/dwP9A6XzTY1W6ZTCt_EMpJoOAVQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:47:20:57:25:82:a8:f6:ce:47:09:8d:06:de:5e:2c:57:76:
         1f:22:67:cf:f7:e8:90:f5:06:6f:1c:87:38:4c:16:9d:37:01:
         5f:c2:6c:24:73:a2:f3:99:9d:b2:b1:75:44:fa:ce:a6:e1:f2:
         c6:82:fc:b5:20:13:a4:22:aa:4a:08:61:03:04:ba:7a:70:ed:
         d7:4c:ed:d0:0a:6e:4a:c4:f0:49:6e:ee:5e:7c:bd:fa:a8:09:
         f6:18:da:ba:cf:1b:7d:ba:3a:a9:07:56:f6:02:62:3e:e1:1b:
         3d:8c:78:d2:c4:d7:b5:5f:88:32:ea:ea:22:9d:27:f7:d4:47:
         45:ef:7e:f6:df:b1:be:00:02:8c:91:91:14:cf:62:94:a9:50:
         24:0e:fe:51:c4:96:9b:1e:00:9f:68:65:ab:fc:49:5b:3a:d2:
         c7:94:27:81:d4:31:47:ac:b5:ea:7a:2d:38:56:8d:8e:7e:f5:
         bf:35:a2:d1:a6:7f:c8:6f:c5:68:8f:54:85:65:bd:d3:e8:6e:
         44:60:c7:d2:69:79:39:44:4c:3c:60:1c:dc:5a:33:c1:83:01:
         7b:88:7d:6a:91:24:af:53:1d:12:d1:cf:9e:a4:d4:54:ee:93:
         de:5b:e6:70:a5:b5:c8:8c:ce:c3:15:da:fd:35:07:b3:d0:c0:
         c6:b0:2a:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJMXQPXgxbId3h7YPSfd3wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3MDNmZDAzYTVmMzRkOGQ1NmU5OTRjMmI3ZjEwY2E0OWEw
ZTAxNTQwHhcNMjUwNjA3MDcwMTA2WhcNMjUwNjA4MDcwMTA2WjAzMTEwLwYDVQQD
Eyg5NzI5NGVjZjY3ODRlMzg4MWNmZmMxNzhhZjBiYTJhNzA1MWM0ZmQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLxeiLHySQf1HcMsG8OXb7j4sON1
vGVgmhHbZar6gZMPkF03Bi4YXFWOn1KYL/3QF6hLRhinKd1DQdzWZOgi8P6hGBBx
GveX9SVGtczny08zgXyNlJ8yYN3C5tO1Owywma/m0errYJP2ec1g99j0N2Z++eV7
mchZMI4nvN4BqEDRtTEvfaUiiACtr6ZMEIgccRqaqCYpU76ZLLlHrKYgC06qdFXi
1f7YASzq2Uh8YiAJALAaO4OPCJFtMdeiNHOOQ0EjOgTmVSc8vdJZ1tgaN/7MuPmn
vvty7S8ixW8vaPMWkzdfWlQuNLUs/+uybp7iD/0DSptwFr+lvmHYJVaDYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJcpTs9nhOOIHP/BeK8LoqcFHE/XMB8GA1UdIwQY
MBaAFHcD/QOl802NVumUwrfxDKSaDgFUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHdQOUE2WHpUWTFXNlpUQ3RfRU1wSm9PQVZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9jNTAyNTEtYTRlMS00MjRkLTllOTIt
YWM2NzgxZTIzZTg3LzEvZHdQOUE2WHpUWTFXNlpUQ3RfRU1wSm9PQVZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9jNTAyNTEtYTRlMS00MjRkLTllOTItYWM2NzgxZTIzZTg3
LzEvZHdQOUE2WHpUWTFXNlpUQ3RfRU1wSm9PQVZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgUcgVyWC
qPbORwmNBt5eLFd2HyJnz/fokPUGbxyHOEwWnTcBX8JsJHOi85mdsrF1RPrOpuHy
xoL8tSATpCKqSghhAwS6enDt10zt0ApuSsTwSW7uXny9+qgJ9hjaus8bfbo6qQdW
9gJiPuEbPYx40sTXtV+IMurqIp0n99RHRe9+9t+xvgACjJGRFM9ilKlQJA7+UcSW
mx4An2hlq/xJWzrSx5QngdQxR6y16notOFaNjn71vzWi0aZ/yG/FaI9UhWW90+hu
RGDH0ml5OURMPGAc3FozwYMBe4h9apEkr1MdEtHPnqTUVO6T3lvmcKW1yIzOwxXa
/TUHs9DAxrAqPA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 09:20:54 2025 by rpki-client