Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/6f857d-c398-4d14-9074-3749d95dcd1f/1/FW1wMw7FHp_x93J7F4HEenqapW0.mft
File:                     FW1wMw7FHp_x93J7F4HEenqapW0.mft (raw, json)
Hash identifier:          E1ZD+8sI0f5uTtghvKPfWZ5Nn1vvZbcrPRiCpzBBApM=
Subject key identifier:   63:12:65:BC:D3:90:6D:9F:E8:52:C2:44:1E:12:01:E0:63:D2:28:F8
Authority key identifier: 15:6D:70:33:0E:C5:1E:9F:F1:F7:72:7B:17:81:C4:7A:7A:9A:A5:6D
Certificate issuer:       /CN=156d70330ec51e9ff1f7727b1781c47a7a9aa56d
Certificate serial:       019748C31FE33226B95A7E17BB20FC0C7E08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FW1wMw7FHp_x93J7F4HEenqapW0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/6f857d-c398-4d14-9074-3749d95dcd1f/1/FW1wMw7FHp_x93J7F4HEenqapW0.mft
Manifest number:          157B
Signing time:             Sat 07 Jun 2025 05:00:36 +0000
Manifest this update:     Sat 07 Jun 2025 05:00:36 +0000
Manifest next update:     Sun 08 Jun 2025 05:00:36 +0000
Files and hashes:         1: FW1wMw7FHp_x93J7F4HEenqapW0.crl (hash: GnyhxCxy1cT88jCNBB/gNHogbUZ94f36jt8g+nFVK+0=)
                          2: s3eE-P6KHaZhEFtp-p4OcOMIO5k.roa (hash: M2Uo4Gpb+a0DQhYTKJ2pCUBjR72TE2YaQI7XFu5tfN4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/6f857d-c398-4d14-9074-3749d95dcd1f/1/FW1wMw7FHp_x93J7F4HEenqapW0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/6f857d-c398-4d14-9074-3749d95dcd1f/1/FW1wMw7FHp_x93J7F4HEenqapW0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FW1wMw7FHp_x93J7F4HEenqapW0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 05:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:c3:1f:e3:32:26:b9:5a:7e:17:bb:20:fc:0c:7e:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=156d70330ec51e9ff1f7727b1781c47a7a9aa56d
        Validity
            Not Before: Jun  7 05:00:36 2025 GMT
            Not After : Jun  8 05:00:36 2025 GMT
        Subject: CN=631265bcd3906d9fe852c2441e1201e063d228f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:65:c7:9d:c3:d1:29:9e:78:a2:14:00:e1:2b:
                    71:29:a1:ae:6e:a4:46:43:dc:44:99:b4:b5:00:ae:
                    1a:49:69:5a:25:05:77:d1:ad:bf:c5:c1:84:9d:51:
                    e1:74:c6:59:ee:de:af:8f:71:35:a3:85:5e:d0:c8:
                    bb:64:51:52:21:2d:1c:a8:6a:9d:e8:fb:d8:85:60:
                    fb:1e:c0:99:67:ed:1a:a5:68:3a:84:44:bd:9d:6b:
                    c0:f4:08:c5:fd:10:d8:9b:f4:c4:83:02:0a:cb:7d:
                    9c:e4:f3:b8:2b:ff:54:20:ed:99:33:c4:16:7c:b3:
                    a0:55:be:ca:30:f1:0f:a1:c1:8d:ed:2a:17:f4:5f:
                    68:d9:16:b2:9a:0b:d8:84:52:8b:43:02:b2:5c:4d:
                    aa:aa:ea:be:68:08:e6:fe:61:6b:73:c5:66:f7:36:
                    87:39:5a:ad:fa:4f:1f:2b:37:c8:7a:f4:f5:ae:6c:
                    a1:c3:dc:9a:15:52:e5:bf:d7:6c:6f:27:74:d1:4e:
                    04:48:26:00:19:35:76:13:a8:45:19:f3:07:34:d7:
                    b3:fe:1f:17:77:a2:40:d7:3b:8d:dd:41:10:94:a3:
                    a7:b3:e4:55:1d:e0:b6:6b:6f:87:32:b1:0e:c5:13:
                    00:17:69:81:29:18:bf:28:b4:b5:cc:c1:15:b1:e1:
                    20:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:12:65:BC:D3:90:6D:9F:E8:52:C2:44:1E:12:01:E0:63:D2:28:F8
            X509v3 Authority Key Identifier:
                keyid:15:6D:70:33:0E:C5:1E:9F:F1:F7:72:7B:17:81:C4:7A:7A:9A:A5:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FW1wMw7FHp_x93J7F4HEenqapW0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6f857d-c398-4d14-9074-3749d95dcd1f/1/FW1wMw7FHp_x93J7F4HEenqapW0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6f857d-c398-4d14-9074-3749d95dcd1f/1/FW1wMw7FHp_x93J7F4HEenqapW0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:f0:6c:d7:2f:f9:1d:fc:6c:16:a7:b5:c1:a0:8a:50:65:6a:
         de:27:1b:07:30:13:a9:f5:44:d5:f4:4d:88:45:af:5f:5a:22:
         e1:bf:7f:29:1c:6e:f2:79:d5:d3:9a:7d:71:74:51:ad:e8:a2:
         46:ce:81:10:5f:7f:e7:57:05:26:ef:c2:fd:3f:60:a4:04:d6:
         4a:a6:fe:b3:95:35:23:f3:c7:ad:0b:8c:4d:92:21:9e:20:5d:
         49:d3:8e:60:72:00:57:2d:8c:7b:02:7c:ed:4f:a4:68:3d:11:
         d1:31:1e:6a:bd:76:c5:d6:5c:8d:f4:72:d9:02:da:a0:c6:08:
         20:ed:2e:f6:68:94:d6:5e:d8:ab:82:1b:04:ae:78:cd:40:bd:
         c1:a1:00:53:5a:60:45:65:12:f1:3b:a8:7b:3a:31:99:bd:1e:
         34:49:27:3f:71:ba:fa:aa:ac:84:51:14:95:e3:ba:98:36:62:
         6b:21:11:9c:aa:db:3e:91:50:74:10:e7:db:89:f8:73:f5:89:
         72:75:57:cf:9f:0d:bf:ad:c4:8f:89:6f:48:f6:be:3d:98:55:
         04:63:f6:01:50:fd:b0:a7:c2:8d:61:50:27:7d:79:26:4d:15:
         c2:a5:c3:74:8d:96:60:b7:db:50:96:a5:20:df:3d:f2:31:26:
         04:46:2f:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 12:46:23 2025 by rpki-client