Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/859f30-1e4b-45fe-b7ec-6d0781532a48/1/jw23m-h704ZVurcDpg53TE1sI1c.mft
File:                     jw23m-h704ZVurcDpg53TE1sI1c.mft (raw, json)
Hash identifier:          /YSQqB7Gzxtan+nAestxo+tgGzilqeHtCtejwZQ7ejE=
Subject key identifier:   A5:C8:A1:6C:5E:CD:9C:BA:6F:50:55:D9:E4:3A:41:8F:EA:1A:AE:6D
Authority key identifier: 8F:0D:B7:9B:E8:7B:D3:86:55:BA:B7:03:A6:0E:77:4C:4D:6C:23:57
Certificate issuer:       /CN=8f0db79be87bd38655bab703a60e774c4d6c2357
Certificate serial:       019748F9EB0644B51F59D9AAED234554A2BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jw23m-h704ZVurcDpg53TE1sI1c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/859f30-1e4b-45fe-b7ec-6d0781532a48/1/jw23m-h704ZVurcDpg53TE1sI1c.mft
Manifest number:          157D
Signing time:             Sat 07 Jun 2025 06:00:27 +0000
Manifest this update:     Sat 07 Jun 2025 06:00:27 +0000
Manifest next update:     Sun 08 Jun 2025 06:00:27 +0000
Files and hashes:         1: OF_w8skU7WRjWk0mpW9Xvj5C2nw.roa (hash: tQcSraFvFoIta1SmxEd+9qBZqJ+cQ+xPaOZSIV3iL4Q=)
                          2: jw23m-h704ZVurcDpg53TE1sI1c.crl (hash: Qbh1+nN1+dCNCdQ1ZkXGYx8gh8/3o9oFNutgy7mrUFs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/859f30-1e4b-45fe-b7ec-6d0781532a48/1/jw23m-h704ZVurcDpg53TE1sI1c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/859f30-1e4b-45fe-b7ec-6d0781532a48/1/jw23m-h704ZVurcDpg53TE1sI1c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jw23m-h704ZVurcDpg53TE1sI1c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 06:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:f9:eb:06:44:b5:1f:59:d9:aa:ed:23:45:54:a2:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f0db79be87bd38655bab703a60e774c4d6c2357
        Validity
            Not Before: Jun  7 06:00:27 2025 GMT
            Not After : Jun  8 06:00:27 2025 GMT
        Subject: CN=a5c8a16c5ecd9cba6f5055d9e43a418fea1aae6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:80:2b:47:62:f0:04:a6:b5:ea:40:22:ed:69:
                    4d:ba:28:aa:00:ff:9d:df:c7:17:2e:5f:6d:2e:b2:
                    91:28:b4:78:83:ee:9f:9c:92:a7:e9:2d:90:a3:68:
                    dc:ee:25:b5:3a:d0:2c:d3:c7:18:fd:b2:3e:49:cf:
                    e4:24:5d:9b:67:50:7c:82:d7:91:9d:ff:06:02:60:
                    ba:1f:b1:52:8c:22:94:5b:de:1f:d2:b4:5e:ec:20:
                    da:93:8d:9e:ed:e0:71:25:3d:7a:fe:ba:43:80:3e:
                    b1:41:7e:61:c3:f6:9f:ab:44:38:ce:3e:0c:f9:62:
                    4a:ab:d5:a9:87:7f:09:8e:d5:4b:d2:76:46:54:c0:
                    52:f8:74:9c:6f:aa:4b:9e:82:99:6a:9f:38:81:dc:
                    3f:93:42:68:a7:80:fb:df:ff:71:0a:15:3d:52:b2:
                    ec:57:47:16:e2:07:88:42:86:ab:9d:53:c3:ad:04:
                    f6:39:a3:71:78:f9:b2:ad:52:a8:dc:d4:54:d4:88:
                    33:dd:29:ed:c8:6e:16:9f:31:9c:c3:0b:09:ec:10:
                    a5:4d:e7:6d:cf:78:ee:70:09:25:6d:74:a3:30:b3:
                    3d:ac:fd:61:80:67:19:4e:26:d3:a5:72:61:f6:22:
                    2e:bf:f9:35:56:50:a3:43:15:14:c3:af:53:e5:0c:
                    06:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:C8:A1:6C:5E:CD:9C:BA:6F:50:55:D9:E4:3A:41:8F:EA:1A:AE:6D
            X509v3 Authority Key Identifier:
                keyid:8F:0D:B7:9B:E8:7B:D3:86:55:BA:B7:03:A6:0E:77:4C:4D:6C:23:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jw23m-h704ZVurcDpg53TE1sI1c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/859f30-1e4b-45fe-b7ec-6d0781532a48/1/jw23m-h704ZVurcDpg53TE1sI1c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/859f30-1e4b-45fe-b7ec-6d0781532a48/1/jw23m-h704ZVurcDpg53TE1sI1c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:ae:3d:a9:1c:58:29:ea:7d:d3:a5:e1:21:0b:f4:27:9b:c0:
         b3:4a:85:e9:d3:93:11:8f:58:4a:a9:35:f8:39:b8:2b:0e:12:
         52:56:1f:b8:50:74:a1:ee:5a:5d:a0:c5:bd:4a:c3:8c:6e:02:
         41:4b:b1:a7:4a:bc:f0:a7:f2:59:bb:98:f2:5e:95:77:49:25:
         83:cb:95:3a:47:86:60:da:a9:60:08:40:c1:e4:dd:04:56:82:
         6e:ff:84:fd:e9:1b:fe:1a:5c:0d:87:4b:bd:b3:6e:e8:b4:04:
         d0:e9:4b:03:f3:03:fe:58:1b:eb:3a:0f:6d:9c:99:5c:c8:4a:
         30:ec:e7:b2:66:84:e7:c1:96:09:13:90:80:8d:52:99:f5:5d:
         0a:e6:8a:89:b3:e2:44:7b:47:06:64:e8:2a:d3:cb:bf:76:04:
         25:71:63:95:c8:ed:4d:30:83:21:3e:e9:e4:e6:98:6e:6d:5e:
         da:8c:e0:f2:15:25:9f:16:53:81:05:c1:c5:1a:ee:80:bc:b8:
         87:d3:8c:17:e4:cb:c8:22:26:64:81:86:41:f7:7d:15:f6:cc:
         61:01:d6:4f:bd:3e:55:f0:46:b7:69:b3:ba:1e:40:13:c3:ae:
         72:c4:43:85:28:d4:bc:e2:96:3b:a7:50:9d:b4:93:23:33:19:
         4c:d4:aa:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:01:14 2025 by rpki-client