Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/61e16a-db79-4e07-a19b-ae762ca2abd0/1/W5sFqT1fP8xaCwEEwbD20kws0fY.mft
File:                     W5sFqT1fP8xaCwEEwbD20kws0fY.mft (raw, json)
Hash identifier:          JSAeMkC78Qj4nIrwySaGj3d5NXgF7SXAnD2TZ6MhZT8=
Subject key identifier:   86:2B:3A:69:73:4E:22:95:95:76:EA:49:36:D1:93:45:07:64:20:CA
Authority key identifier: 5B:9B:05:A9:3D:5F:3F:CC:5A:0B:01:04:C1:B0:F6:D2:4C:2C:D1:F6
Certificate issuer:       /CN=5b9b05a93d5f3fcc5a0b0104c1b0f6d24c2cd1f6
Certificate serial:       01974B564E2771616D99E65338F2F4A30E86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W5sFqT1fP8xaCwEEwbD20kws0fY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/61e16a-db79-4e07-a19b-ae762ca2abd0/1/W5sFqT1fP8xaCwEEwbD20kws0fY.mft
Manifest number:          157F
Signing time:             Sat 07 Jun 2025 17:00:36 +0000
Manifest this update:     Sat 07 Jun 2025 17:00:36 +0000
Manifest next update:     Sun 08 Jun 2025 17:00:36 +0000
Files and hashes:         1: EEI2dNSjcVw2iZs7Gn74yhtAoxA.roa (hash: t2UDAq4DzGmTsnjWgogyVQ3r8Ls90WheZWHhRn0w6Ws=)
                          2: W5sFqT1fP8xaCwEEwbD20kws0fY.crl (hash: VzcoX0rRUeqpT2JufOrLKXFhTMegI1jltY/NFmvK0jA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/61e16a-db79-4e07-a19b-ae762ca2abd0/1/W5sFqT1fP8xaCwEEwbD20kws0fY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/61e16a-db79-4e07-a19b-ae762ca2abd0/1/W5sFqT1fP8xaCwEEwbD20kws0fY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W5sFqT1fP8xaCwEEwbD20kws0fY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 17:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4b:56:4e:27:71:61:6d:99:e6:53:38:f2:f4:a3:0e:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b9b05a93d5f3fcc5a0b0104c1b0f6d24c2cd1f6
        Validity
            Not Before: Jun  7 17:00:36 2025 GMT
            Not After : Jun  8 17:00:36 2025 GMT
        Subject: CN=862b3a69734e22959576ea4936d19345076420ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:0c:8f:56:51:26:1c:e6:86:f0:23:c6:14:0e:
                    41:51:02:9b:88:60:57:3c:cc:75:23:7e:48:8a:8c:
                    dc:8a:99:75:b0:25:54:d8:cb:be:c9:e2:c5:1c:5b:
                    97:59:42:96:53:04:9b:bc:76:9d:b1:75:5d:c4:30:
                    82:5f:a9:3e:9b:ed:1c:68:26:ed:44:50:66:71:16:
                    8e:d3:6a:3e:b4:c6:05:94:5c:86:3a:6d:90:d8:ed:
                    b5:db:0a:1f:c2:7d:34:a7:9c:db:78:a2:23:05:96:
                    05:cb:9c:e5:b0:1c:b1:9e:8c:92:60:a4:eb:e7:56:
                    23:c8:9c:1b:d2:03:a2:66:10:86:a1:45:78:94:31:
                    9a:b8:64:ac:43:77:68:c8:6c:a4:22:6a:14:5d:e2:
                    cb:41:22:2c:67:49:00:30:a1:e7:12:f8:d8:05:d0:
                    c9:d4:b6:a3:d4:e5:30:1f:10:41:e5:d1:20:38:ee:
                    8c:ce:c9:6d:aa:b6:1a:28:8e:2d:8d:2e:ac:09:b9:
                    47:1c:d8:3b:b7:6c:f7:c4:f6:e7:61:3f:77:71:62:
                    77:14:11:55:99:c7:65:a4:19:13:0d:1f:ba:5f:ca:
                    06:38:fd:3c:42:d0:96:77:92:31:61:aa:4b:fb:e7:
                    ab:74:73:b3:0e:3d:1c:b0:27:10:b5:fe:f4:cb:a1:
                    45:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:2B:3A:69:73:4E:22:95:95:76:EA:49:36:D1:93:45:07:64:20:CA
            X509v3 Authority Key Identifier:
                keyid:5B:9B:05:A9:3D:5F:3F:CC:5A:0B:01:04:C1:B0:F6:D2:4C:2C:D1:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W5sFqT1fP8xaCwEEwbD20kws0fY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/61e16a-db79-4e07-a19b-ae762ca2abd0/1/W5sFqT1fP8xaCwEEwbD20kws0fY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/61e16a-db79-4e07-a19b-ae762ca2abd0/1/W5sFqT1fP8xaCwEEwbD20kws0fY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:38:95:42:af:5c:c0:e8:85:52:b9:95:1f:f0:5d:d0:7a:b3:
         ff:64:92:98:1c:70:2c:01:ae:2c:f2:8a:e6:90:fa:e5:77:dd:
         f3:d2:2b:c8:f2:25:b4:fe:2e:e9:18:57:2f:14:c9:7d:d1:f9:
         cf:62:ac:51:64:9f:b9:ec:26:98:a4:2d:9a:d1:95:8c:12:ce:
         89:7a:da:f9:46:3e:45:79:1f:af:d2:55:e0:3c:b1:53:a1:51:
         ae:e1:6f:02:ca:3f:f3:dc:58:50:7b:f9:d9:fa:5e:17:fb:1d:
         14:e3:5c:cd:ef:74:ef:11:ce:db:56:d0:06:3c:45:15:53:be:
         ff:5a:23:ea:98:e1:84:fe:be:92:0c:2d:cc:96:30:92:72:b7:
         70:ed:0c:24:8b:f1:38:8d:49:50:4b:2a:e3:a2:a1:c7:65:1f:
         a1:ab:0e:b5:e2:f5:a7:84:02:43:c6:6b:a0:93:ee:59:a3:6c:
         40:c4:35:b4:cc:9e:0e:cd:fa:a6:5d:2a:8d:05:33:c1:6f:c7:
         1c:d8:e1:9b:46:92:76:26:89:db:4b:2e:6e:54:a0:c8:7f:1e:
         6d:0c:f4:2a:a0:f4:55:82:c6:69:da:d0:78:81:37:50:ca:ca:
         09:b6:0f:b1:e4:02:56:7f:0a:84:db:aa:90:c8:d3:12:a7:09:
         ed:1e:36:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 01:52:55 2025 by rpki-client