Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/98adc1-6ff8-4959-a344-db6ca6e4d4a3/1/W7XwXxK1IHaGju_NFK_OwZL-LPI.mft
File:                     W7XwXxK1IHaGju_NFK_OwZL-LPI.mft (raw, json)
Hash identifier:          lFQw5Eo+U8kG51NGBNt1qYUP8bKgWldZw7tWQ/eF0Eg=
Subject key identifier:   6B:22:60:EE:43:9D:8F:3E:29:2F:B8:3D:85:6D:27:A9:AD:48:29:13
Authority key identifier: 5B:B5:F0:5F:12:B5:20:76:86:8E:EF:CD:14:AF:CE:C1:92:FE:2C:F2
Certificate issuer:       /CN=5bb5f05f12b52076868eefcd14afcec192fe2cf2
Certificate serial:       0197477985A8074692BFF6727B0A86C055B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W7XwXxK1IHaGju_NFK_OwZL-LPI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/98adc1-6ff8-4959-a344-db6ca6e4d4a3/1/W7XwXxK1IHaGju_NFK_OwZL-LPI.mft
Manifest number:          157B
Signing time:             Fri 06 Jun 2025 23:00:35 +0000
Manifest this update:     Fri 06 Jun 2025 23:00:35 +0000
Manifest next update:     Sat 07 Jun 2025 23:00:35 +0000
Files and hashes:         1: QZDKvK6iw_tPh27glx9LTGGHSYU.roa (hash: XgdxnkBVQi+6Pi+BDAfBhOhlkd5fb/2ukIHoQx2+z08=)
                          2: W7XwXxK1IHaGju_NFK_OwZL-LPI.crl (hash: 1WqnjgJ9vH3GCi6QzDEZPpSthh3lbzN2ntMv5CXJJPI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/98adc1-6ff8-4959-a344-db6ca6e4d4a3/1/W7XwXxK1IHaGju_NFK_OwZL-LPI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/98adc1-6ff8-4959-a344-db6ca6e4d4a3/1/W7XwXxK1IHaGju_NFK_OwZL-LPI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W7XwXxK1IHaGju_NFK_OwZL-LPI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 22:50:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:47:79:85:a8:07:46:92:bf:f6:72:7b:0a:86:c0:55:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5bb5f05f12b52076868eefcd14afcec192fe2cf2
        Validity
            Not Before: Jun  6 23:00:35 2025 GMT
            Not After : Jun  7 23:00:35 2025 GMT
        Subject: CN=6b2260ee439d8f3e292fb83d856d27a9ad482913
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:9f:26:91:a4:ab:4c:36:73:d3:59:72:1d:30:
                    85:96:b6:e2:6f:73:56:5f:03:40:80:c8:68:4d:04:
                    60:e1:b8:a5:dc:77:62:c9:09:2c:89:b1:d6:1d:7f:
                    29:71:b6:a6:4d:b2:65:82:1f:cf:e0:c3:f4:f1:0a:
                    60:9e:14:a9:29:32:52:44:e8:08:2a:95:0b:d9:8b:
                    3a:0f:69:19:8d:b9:bf:d2:47:cc:89:ae:93:9c:3a:
                    33:f9:62:78:67:b1:24:5f:4b:22:a9:e2:8a:1f:10:
                    44:e0:6f:8d:e0:35:89:a1:dc:3d:c3:85:04:e2:a0:
                    61:67:a6:cf:55:28:09:2e:56:2b:42:bb:c8:1b:f6:
                    fd:f7:1e:dc:1f:1b:ca:0a:8d:48:d7:6c:b0:56:f9:
                    80:8b:77:3a:66:64:f7:21:46:8b:4f:81:5b:0d:5c:
                    8c:84:af:14:3e:e8:ff:50:ae:94:a5:3d:1a:cc:43:
                    62:7e:d5:a4:d7:08:4a:ed:60:bf:57:f3:06:5c:ad:
                    13:14:ca:6e:8b:b9:62:f4:0c:7e:18:5b:d3:9b:a0:
                    e4:0e:2d:c8:bd:66:3c:1e:7b:71:d9:4e:b5:86:8f:
                    4a:e3:e4:dc:4c:66:69:91:c7:f8:ab:02:a6:1d:35:
                    72:84:37:f4:78:b8:e8:c5:3d:3f:c5:a0:44:7c:df:
                    6a:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:22:60:EE:43:9D:8F:3E:29:2F:B8:3D:85:6D:27:A9:AD:48:29:13
            X509v3 Authority Key Identifier:
                keyid:5B:B5:F0:5F:12:B5:20:76:86:8E:EF:CD:14:AF:CE:C1:92:FE:2C:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W7XwXxK1IHaGju_NFK_OwZL-LPI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/98adc1-6ff8-4959-a344-db6ca6e4d4a3/1/W7XwXxK1IHaGju_NFK_OwZL-LPI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/98adc1-6ff8-4959-a344-db6ca6e4d4a3/1/W7XwXxK1IHaGju_NFK_OwZL-LPI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:0c:c8:d9:f1:47:54:27:20:7f:4d:80:7b:1d:80:4a:1c:d8:
         4d:a6:a7:ca:cd:56:f8:89:31:4b:91:d5:a9:b7:44:a9:04:1f:
         29:da:40:36:99:ce:03:cd:21:de:9e:d9:fb:32:56:80:59:fa:
         51:b4:69:50:0c:2f:26:75:51:2e:5c:84:01:62:e1:17:ca:d8:
         6c:63:d4:40:aa:d3:6e:fb:a6:d4:0f:55:3c:f9:aa:4d:a1:13:
         70:7a:00:c7:0d:22:82:1a:00:e3:5f:53:a2:d8:c3:e6:38:05:
         b7:9c:81:f7:40:5a:5a:fb:54:cf:d5:d8:8e:da:7d:e0:61:5b:
         b9:b3:62:a7:d2:6d:22:14:fa:0d:f7:6e:05:f0:da:8f:b8:68:
         4e:54:aa:5f:6c:00:cd:c9:1d:e7:79:e9:09:b3:87:d1:70:47:
         fb:49:ce:0d:84:77:49:64:58:cc:98:0a:7a:87:dd:27:b7:68:
         cd:f0:5c:9f:fc:ef:61:40:13:04:45:fd:a8:d4:b5:d8:e9:70:
         87:7f:38:a4:ac:90:5a:e0:96:0b:e2:bf:2b:54:14:8f:d5:cc:
         4d:29:e5:c2:75:42:5c:97:23:0f:3e:c5:7f:8a:d2:57:db:63:
         35:e3:00:fd:b9:b8:b2:bc:ad:a4:58:d1:a7:f0:ed:45:bf:ec:
         a7:29:2b:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 02:26:56 2025 by rpki-client