Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/3c9878-fc2f-40c6-b482-4d7f4cba7867/1/DWE_6YRKY0OerooaoMPKjGC0XUU.mft
File:                     DWE_6YRKY0OerooaoMPKjGC0XUU.mft (raw, json)
Hash identifier:          dZ1xv8sjJCMaIFYUJcCY4G2vVG1TqUly/Yv+QB95eD0=
Subject key identifier:   15:88:F8:FE:4A:8D:19:6A:26:E1:8C:F6:8D:48:DA:CB:32:BB:EA:9E
Authority key identifier: 0D:61:3F:E9:84:4A:63:43:9E:AE:8A:1A:A0:C3:CA:8C:60:B4:5D:45
Certificate issuer:       /CN=0d613fe9844a63439eae8a1aa0c3ca8c60b45d45
Certificate serial:       01974666B66799665733958D27FE6FBCBBE0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DWE_6YRKY0OerooaoMPKjGC0XUU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/3c9878-fc2f-40c6-b482-4d7f4cba7867/1/DWE_6YRKY0OerooaoMPKjGC0XUU.mft
Manifest number:          157B
Signing time:             Fri 06 Jun 2025 18:00:25 +0000
Manifest this update:     Fri 06 Jun 2025 18:00:25 +0000
Manifest next update:     Sat 07 Jun 2025 18:00:25 +0000
Files and hashes:         1: DWE_6YRKY0OerooaoMPKjGC0XUU.crl (hash: +1HvgktqTxDz2ommwQjINv+Kbj/82eoBGieZXxLABs0=)
                          2: cAJwzXdTlj0l08klToV51g3reQE.roa (hash: MNtWLrHXizLnpt8hRaJw3axv6PAJCrUS/ztw7WczF4E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/3c9878-fc2f-40c6-b482-4d7f4cba7867/1/DWE_6YRKY0OerooaoMPKjGC0XUU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/3c9878-fc2f-40c6-b482-4d7f4cba7867/1/DWE_6YRKY0OerooaoMPKjGC0XUU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DWE_6YRKY0OerooaoMPKjGC0XUU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 15:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:66:b6:67:99:66:57:33:95:8d:27:fe:6f:bc:bb:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d613fe9844a63439eae8a1aa0c3ca8c60b45d45
        Validity
            Not Before: Jun  6 18:00:25 2025 GMT
            Not After : Jun  7 18:00:25 2025 GMT
        Subject: CN=1588f8fe4a8d196a26e18cf68d48dacb32bbea9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:4c:b2:8d:48:02:52:62:52:dd:4f:eb:00:fa:
                    d3:52:7a:c3:8b:e7:7e:f8:b7:ec:7b:fd:1f:18:5e:
                    fc:4f:ac:2c:0e:38:a0:f8:39:e4:15:c3:01:55:85:
                    76:fb:ff:53:a2:6e:1f:be:13:42:7d:d1:76:c1:5c:
                    3a:1a:05:d9:9b:ae:88:bf:65:6e:66:6d:0a:af:ad:
                    23:17:5b:47:f6:f7:f4:19:c4:7a:17:31:94:fc:93:
                    be:f6:28:6b:76:de:09:b6:3a:d4:f2:96:42:d8:e8:
                    2e:53:8f:3e:c7:ad:97:08:5d:8a:42:d3:06:c3:73:
                    60:55:08:f6:53:e8:40:37:05:6f:d3:67:3a:29:b6:
                    0d:24:f5:ba:70:c8:ef:9a:66:73:15:56:ee:d9:a3:
                    0c:f3:44:8a:0e:6f:08:58:48:86:db:cd:aa:3b:f0:
                    56:b9:b4:39:3e:7c:89:44:2a:2a:11:99:53:21:b3:
                    50:8e:55:b6:9f:cb:54:1b:c7:25:39:d7:ce:74:49:
                    67:53:11:f0:05:20:2b:28:33:1f:66:88:e1:0a:23:
                    f8:f9:5e:4b:ca:a0:6a:be:ab:3d:27:88:34:72:69:
                    f2:a7:5e:d3:72:92:cd:e7:e8:a8:9c:c5:a1:fb:07:
                    b0:f8:d6:33:57:fe:53:a9:d6:57:f3:e9:0f:86:3c:
                    ab:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:88:F8:FE:4A:8D:19:6A:26:E1:8C:F6:8D:48:DA:CB:32:BB:EA:9E
            X509v3 Authority Key Identifier:
                keyid:0D:61:3F:E9:84:4A:63:43:9E:AE:8A:1A:A0:C3:CA:8C:60:B4:5D:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DWE_6YRKY0OerooaoMPKjGC0XUU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/3c9878-fc2f-40c6-b482-4d7f4cba7867/1/DWE_6YRKY0OerooaoMPKjGC0XUU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/3c9878-fc2f-40c6-b482-4d7f4cba7867/1/DWE_6YRKY0OerooaoMPKjGC0XUU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:49:41:94:1e:14:7a:cc:f1:a0:f9:12:b9:6f:aa:97:80:87:
         e8:c0:3e:80:77:c9:b7:40:e4:4c:4b:a5:72:9a:d4:86:df:36:
         50:b7:2f:7a:e6:26:81:a5:81:ab:c1:f8:73:42:ce:ea:1b:77:
         c8:19:a3:5e:65:cd:c5:78:39:ca:32:dc:57:f4:73:7c:6e:ac:
         ec:08:43:14:3d:13:f7:4f:8b:b2:12:d7:f5:ed:57:ad:e9:e5:
         6f:5a:14:ca:2f:38:76:5d:35:c1:da:6d:1e:d3:0f:e5:2a:f9:
         e1:d7:53:a3:c2:ea:81:dc:70:a5:3d:69:bc:0f:d4:29:19:f3:
         84:7c:9f:51:e0:57:65:da:20:c4:3d:27:37:c9:53:d7:22:51:
         07:95:f7:fe:21:fb:82:14:50:3f:5b:73:7e:dc:d1:a6:56:9a:
         7f:1b:55:f3:ce:f1:89:ee:67:9f:e3:0c:48:88:2f:be:ab:2e:
         5b:2b:85:78:e4:6e:e0:76:11:03:e5:63:0c:79:b2:a1:34:db:
         2c:e0:a2:6c:52:69:33:a4:c8:7d:60:b5:40:e3:59:59:6d:d5:
         30:7d:c9:b2:9e:c1:4d:44:97:c2:de:4f:f1:5b:25:a6:b5:96:
         40:d9:e5:d5:aa:6b:fe:52:78:9f:2a:43:59:0a:b0:57:77:d2:
         d0:83:2c:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdGZrZnmWZXM5WNJ/5vvLvgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkNjEzZmU5ODQ0YTYzNDM5ZWFlOGExYWEwYzNjYThjNjBi
NDVkNDUwHhcNMjUwNjA2MTgwMDI1WhcNMjUwNjA3MTgwMDI1WjAzMTEwLwYDVQQD
EygxNTg4ZjhmZTRhOGQxOTZhMjZlMThjZjY4ZDQ4ZGFjYjMyYmJlYTllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAykyyjUgCUmJS3U/rAPrTUnrDi+d+
+Lfse/0fGF78T6wsDjig+DnkFcMBVYV2+/9Tom4fvhNCfdF2wVw6GgXZm66Iv2Vu
Zm0Kr60jF1tH9vf0GcR6FzGU/JO+9ihrdt4JtjrU8pZC2OguU48+x62XCF2KQtMG
w3NgVQj2U+hANwVv02c6KbYNJPW6cMjvmmZzFVbu2aMM80SKDm8IWEiG282qO/BW
ubQ5PnyJRCoqEZlTIbNQjlW2n8tUG8clOdfOdElnUxHwBSArKDMfZojhCiP4+V5L
yqBqvqs9J4g0cmnyp17TcpLN5+ionMWh+wew+NYzV/5TqdZX8+kPhjyrKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBWI+P5KjRlqJuGM9o1I2ssyu+qeMB8GA1UdIwQY
MBaAFA1hP+mESmNDnq6KGqDDyoxgtF1FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFdFXzZZUktZME9lcm9vYW9NUEtqR0MwWFVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8zYzk4NzgtZmMyZi00MGM2LWI0ODIt
NGQ3ZjRjYmE3ODY3LzEvRFdFXzZZUktZME9lcm9vYW9NUEtqR0MwWFVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy8zYzk4NzgtZmMyZi00MGM2LWI0ODItNGQ3ZjRjYmE3ODY3
LzEvRFdFXzZZUktZME9lcm9vYW9NUEtqR0MwWFVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo0lBlB4U
eszxoPkSuW+ql4CH6MA+gHfJt0DkTEulcprUht82ULcveuYmgaWBq8H4c0LO6ht3
yBmjXmXNxXg5yjLcV/RzfG6s7AhDFD0T90+LshLX9e1Xrenlb1oUyi84dl01wdpt
HtMP5Sr54ddTo8LqgdxwpT1pvA/UKRnzhHyfUeBXZdogxD0nN8lT1yJRB5X3/iH7
ghRQP1tzftzRplaafxtV887xie5nn+MMSIgvvqsuWyuFeORu4HYRA+VjDHmyoTTb
LOCibFJpM6TIfWC1QONZWW3VMH3Jsp7BTUSXwt5P8VslprWWQNnl1apr/lJ4nypD
WQqwV3fS0IMsTQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 01:29:35 2025 by rpki-client