Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/7e47d7-6137-4300-936b-46925c5249e6/1/Cwg4CHY8JiVBAg0ugdo0qqOCg7c.mft
File:                     Cwg4CHY8JiVBAg0ugdo0qqOCg7c.mft (raw, json)
Hash identifier:          83ixAVDa0we/1jqOFvmNQMc3VdAMc+bJvx20NPXMKMk=
Subject key identifier:   B8:97:98:C6:02:09:44:AA:97:71:E4:0A:A3:5E:26:C4:8F:D1:9E:AE
Authority key identifier: 0B:08:38:08:76:3C:26:25:41:02:0D:2E:81:DA:34:AA:A3:82:83:B7
Certificate issuer:       /CN=0b083808763c262541020d2e81da34aaa38283b7
Certificate serial:       0197469DF8E5DDC921781DED643B61DEB31E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Cwg4CHY8JiVBAg0ugdo0qqOCg7c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/7e47d7-6137-4300-936b-46925c5249e6/1/Cwg4CHY8JiVBAg0ugdo0qqOCg7c.mft
Manifest number:          157B
Signing time:             Fri 06 Jun 2025 19:00:47 +0000
Manifest this update:     Fri 06 Jun 2025 19:00:47 +0000
Manifest next update:     Sat 07 Jun 2025 19:00:47 +0000
Files and hashes:         1: Cwg4CHY8JiVBAg0ugdo0qqOCg7c.crl (hash: SoTWTofD6zcG1XJeEySf011pw2Cow/FpXv7NH/H7MN8=)
                          2: yT0QV5Ngi5HD60A3c2kQ4p38KRg.roa (hash: 8raf59fZpsQk29I2msKlUU3U4aiSgd5bXc/q3fhuFvI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/7e47d7-6137-4300-936b-46925c5249e6/1/Cwg4CHY8JiVBAg0ugdo0qqOCg7c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/7e47d7-6137-4300-936b-46925c5249e6/1/Cwg4CHY8JiVBAg0ugdo0qqOCg7c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Cwg4CHY8JiVBAg0ugdo0qqOCg7c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:9d:f8:e5:dd:c9:21:78:1d:ed:64:3b:61:de:b3:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b083808763c262541020d2e81da34aaa38283b7
        Validity
            Not Before: Jun  6 19:00:47 2025 GMT
            Not After : Jun  7 19:00:47 2025 GMT
        Subject: CN=b89798c6020944aa9771e40aa35e26c48fd19eae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:07:12:d6:d0:64:4e:61:cf:ce:10:d7:f7:e1:
                    f8:f4:94:c9:76:b4:ea:6f:db:d3:9c:79:9f:d8:ce:
                    26:d8:62:06:78:6f:0c:b7:fe:6f:57:11:15:5a:48:
                    4c:7e:aa:3a:1f:ea:fe:73:07:7d:3c:79:21:97:e3:
                    1c:ca:65:34:33:c2:b0:e0:aa:eb:07:e4:c5:50:d3:
                    45:60:8f:f3:2b:ee:97:06:25:ed:65:f8:4f:2d:67:
                    c6:8e:38:53:de:fd:16:9c:6f:68:1e:f8:21:f6:02:
                    d5:d0:bf:fb:ea:f1:72:69:3d:2a:46:22:e9:17:c1:
                    fc:05:33:dc:f7:11:91:d1:d1:5a:1a:6c:ef:b2:27:
                    54:5b:84:3f:f5:4d:93:46:da:52:18:5f:32:23:48:
                    35:dc:ae:99:d4:d6:49:f4:fb:32:ae:d7:56:a9:e4:
                    92:9d:cc:15:0d:bf:a9:58:23:93:92:94:af:43:5f:
                    fe:27:5d:5d:15:76:27:2d:0e:b6:cd:88:ed:ce:d7:
                    c2:e7:f0:6b:f1:b1:33:90:bd:e4:a6:fc:49:cd:45:
                    13:63:01:dc:97:6d:53:17:7c:36:14:7f:53:21:db:
                    e5:93:5e:ad:ef:53:b8:35:82:db:6b:2e:42:73:5e:
                    47:93:5f:bd:30:d3:ae:1c:d2:65:8f:33:36:d2:f4:
                    37:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:97:98:C6:02:09:44:AA:97:71:E4:0A:A3:5E:26:C4:8F:D1:9E:AE
            X509v3 Authority Key Identifier:
                keyid:0B:08:38:08:76:3C:26:25:41:02:0D:2E:81:DA:34:AA:A3:82:83:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cwg4CHY8JiVBAg0ugdo0qqOCg7c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/7e47d7-6137-4300-936b-46925c5249e6/1/Cwg4CHY8JiVBAg0ugdo0qqOCg7c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/7e47d7-6137-4300-936b-46925c5249e6/1/Cwg4CHY8JiVBAg0ugdo0qqOCg7c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:50:ff:b1:95:2d:72:d7:be:a0:15:ca:be:23:9e:93:37:68:
         12:2a:e1:21:1e:a0:c8:d9:4b:63:b3:0a:31:90:0b:a0:53:2f:
         b9:3a:2a:46:48:31:c2:38:0f:d1:af:d8:eb:4b:19:4a:4a:e5:
         fa:70:4c:4b:96:97:6c:55:a4:6b:8b:56:ff:b3:bc:b8:46:00:
         49:69:75:cf:f4:e9:89:b9:e3:6c:bb:6a:47:70:26:a5:d7:f9:
         78:ec:ab:88:69:d2:6a:f4:1d:92:59:5f:9a:8a:e4:06:d3:01:
         cf:b7:0a:2b:35:ed:f1:08:69:b8:04:87:96:06:cd:1c:41:8d:
         e5:ef:ef:a6:9b:45:84:62:33:21:d4:26:14:17:44:59:29:44:
         dd:84:9b:60:63:e5:fc:a9:c0:68:3a:74:48:0f:2d:27:44:f3:
         2d:44:34:7c:de:64:8d:e3:fd:ee:6e:65:19:ba:94:96:48:3a:
         01:3c:3b:14:87:0d:cb:67:af:46:a3:e9:de:cf:2f:b6:53:6f:
         cf:e9:8a:e4:88:a4:56:b0:90:65:17:4d:1a:97:83:6c:96:54:
         f0:5b:ea:a9:5a:2b:ca:16:f1:4f:69:35:12:88:bc:b7:dc:48:
         fa:34:95:ac:64:cb:65:47:79:ff:a1:b4:31:31:09:dd:83:50:
         04:45:50:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:03:55 2025 by rpki-client