Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/582b7f-60c3-411a-9625-32da1db4b203/1/xw2_VVhwtVas-rQox06s7lb3siI.mft
File:                     xw2_VVhwtVas-rQox06s7lb3siI.mft (raw, json)
Hash identifier:          so6wq7A4xnUpb4XW+rravVAc5EvXNuRqEyRoLAzs65k=
Subject key identifier:   03:C1:1B:74:C2:5D:C7:5C:A8:97:FE:BD:64:A7:84:3E:CE:29:19:B6
Authority key identifier: C7:0D:BF:55:58:70:B5:56:AC:FA:B4:28:C7:4E:AC:EE:56:F7:B2:22
Certificate issuer:       /CN=c70dbf555870b556acfab428c74eacee56f7b222
Certificate serial:       01976584E6979F73A14A7CA92F841056B0F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xw2_VVhwtVas-rQox06s7lb3siI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/582b7f-60c3-411a-9625-32da1db4b203/1/xw2_VVhwtVas-rQox06s7lb3siI.mft
Manifest number:          158C
Signing time:             Thu 12 Jun 2025 19:01:37 +0000
Manifest this update:     Thu 12 Jun 2025 19:01:37 +0000
Manifest next update:     Fri 13 Jun 2025 19:01:37 +0000
Files and hashes:         1: BIAxUnW_hCjMRjCzGvcDZv9IbZI.roa (hash: lpTkJGPX7x3xgf0arKc8U2BOXhSzOpi1sRj7xRP++p4=)
                          2: xw2_VVhwtVas-rQox06s7lb3siI.crl (hash: nq1861i3oD2MiW8epfiCpSxU0CF8fuyW7o+7it66jpg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/582b7f-60c3-411a-9625-32da1db4b203/1/xw2_VVhwtVas-rQox06s7lb3siI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/582b7f-60c3-411a-9625-32da1db4b203/1/xw2_VVhwtVas-rQox06s7lb3siI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xw2_VVhwtVas-rQox06s7lb3siI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Jun 2025 19:01:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:65:84:e6:97:9f:73:a1:4a:7c:a9:2f:84:10:56:b0:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c70dbf555870b556acfab428c74eacee56f7b222
        Validity
            Not Before: Jun 12 19:01:37 2025 GMT
            Not After : Jun 13 19:01:37 2025 GMT
        Subject: CN=03c11b74c25dc75ca897febd64a7843ece2919b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:73:c6:d6:cb:f6:96:b2:fd:89:77:da:22:be:
                    1f:05:98:bd:86:b1:7c:34:5c:1e:24:49:8d:9a:40:
                    7c:7f:7f:f7:c5:c4:be:e5:5f:9f:e8:a9:8f:cc:64:
                    f1:d4:06:16:20:6b:20:ed:ba:ce:09:bb:eb:0d:67:
                    23:bc:9c:ec:a1:d1:d5:7a:b1:38:1a:12:3e:68:c0:
                    18:0d:ca:b7:c3:0c:78:92:87:6c:0e:fe:fb:78:c8:
                    d8:6d:3a:93:3a:07:26:91:4e:6c:de:e3:55:ea:43:
                    8a:65:ec:26:89:19:a1:44:05:98:a3:63:ca:05:21:
                    34:0b:f9:08:36:f8:71:92:a0:e2:b6:c3:aa:8f:b4:
                    0c:3d:2f:0e:c0:3d:26:19:32:4b:10:14:ba:0d:7d:
                    87:b4:37:1d:7d:e8:78:aa:15:65:01:59:52:08:b0:
                    d1:a1:65:f6:cc:4e:cd:b1:ed:d0:ee:11:63:28:17:
                    64:16:a7:ee:b9:9d:f6:82:20:c8:97:9e:bb:bd:de:
                    62:35:ee:71:95:e3:25:af:f7:19:e3:42:ed:6b:6b:
                    92:08:67:1f:93:86:b2:13:b2:e7:e7:1d:d2:8c:04:
                    99:53:db:89:15:1f:3b:40:5b:ab:22:fc:50:96:8e:
                    ac:0b:48:62:93:c3:9e:0f:a6:5d:57:40:91:2a:73:
                    86:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:C1:1B:74:C2:5D:C7:5C:A8:97:FE:BD:64:A7:84:3E:CE:29:19:B6
            X509v3 Authority Key Identifier:
                keyid:C7:0D:BF:55:58:70:B5:56:AC:FA:B4:28:C7:4E:AC:EE:56:F7:B2:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xw2_VVhwtVas-rQox06s7lb3siI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/582b7f-60c3-411a-9625-32da1db4b203/1/xw2_VVhwtVas-rQox06s7lb3siI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/582b7f-60c3-411a-9625-32da1db4b203/1/xw2_VVhwtVas-rQox06s7lb3siI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:c5:2f:79:03:2c:f3:29:97:05:cd:df:5a:7e:2e:72:2d:74:
         6b:51:17:54:7c:92:aa:b4:99:ac:3c:7c:07:91:68:ce:00:b5:
         a8:f6:89:08:b4:8a:1b:c8:d4:9e:b0:cf:47:2d:24:97:7a:86:
         0f:bb:33:dc:b5:11:f5:64:7b:f2:4d:cd:6e:ec:72:87:36:16:
         fd:42:40:dc:b0:8a:d9:d9:30:a2:26:49:e9:19:e5:cd:59:ad:
         c3:b2:f9:44:78:17:05:c2:09:33:a7:15:17:03:cb:45:83:f1:
         af:8d:09:53:37:a7:f4:fd:fa:a4:1c:df:f7:7f:75:08:6c:76:
         4c:ee:9e:57:61:5d:62:eb:27:16:08:0c:8a:bd:1a:36:3b:10:
         dc:b5:38:2b:e2:1d:bd:ac:6c:ef:e6:ff:5f:84:dd:7f:64:10:
         00:1a:00:fa:b3:f2:50:4a:8e:33:c6:26:73:5f:05:d6:6e:eb:
         c9:d9:72:cc:12:5d:31:25:d9:10:7e:fb:67:eb:c3:d6:17:9f:
         08:40:e2:18:20:9d:78:aa:3c:1f:50:42:a2:e0:1e:67:64:06:
         25:24:8a:ed:87:15:eb:29:a6:be:e2:56:a1:59:48:2d:47:f6:
         a2:06:f3:6b:07:a2:94:72:77:4f:20:ca:6b:10:34:31:fe:4f:
         60:be:c8:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 03:01:15 2025 by rpki-client