Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/w8BZHi60nQVZ5vzn7iqoHw9Zum8.mft
File:                     w8BZHi60nQVZ5vzn7iqoHw9Zum8.mft (raw, json)
Hash identifier:          0eyTZVTNV8RLLL3qeWR9aijR4mtxMm240KsuZGvlQMA=
Subject key identifier:   70:43:B7:77:47:94:9F:83:D7:1F:3E:7E:12:4B:09:C4:E4:C4:55:2D
Authority key identifier: C3:C0:59:1E:2E:B4:9D:05:59:E6:FC:E7:EE:2A:A8:1F:0F:59:BA:6F
Certificate issuer:       /CN=c3c0591e2eb49d0559e6fce7ee2aa81f0f59ba6f
Certificate serial:       019754FE7C7A6E09AC716C14A3E6D1C1FAFC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/w8BZHi60nQVZ5vzn7iqoHw9Zum8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/w8BZHi60nQVZ5vzn7iqoHw9Zum8.mft
Manifest number:          158E
Signing time:             Mon 09 Jun 2025 14:00:53 +0000
Manifest this update:     Mon 09 Jun 2025 14:00:53 +0000
Manifest next update:     Tue 10 Jun 2025 14:00:53 +0000
Files and hashes:         1: 2BUGtHga-91WOayxMZ7EN3sAoUE.roa (hash: 40eNzoOdvf9iy0CU470Iq6VAmpCnU36Mg3hoCFP9r9Q=)
                          2: Ka5Exl1GeddcELNpCklBpS5TlPs.roa (hash: kRYcEd/x8/mlJ+CtYhq56IHy4jqYQVlovD2KG8xYqY4=)
                          3: w8BZHi60nQVZ5vzn7iqoHw9Zum8.crl (hash: B5qyyI9sPSXS2giRcQAmW6E+uW05nR8icvj/hCrszVI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/w8BZHi60nQVZ5vzn7iqoHw9Zum8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/w8BZHi60nQVZ5vzn7iqoHw9Zum8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/w8BZHi60nQVZ5vzn7iqoHw9Zum8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Jun 2025 11:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:54:fe:7c:7a:6e:09:ac:71:6c:14:a3:e6:d1:c1:fa:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3c0591e2eb49d0559e6fce7ee2aa81f0f59ba6f
        Validity
            Not Before: Jun  9 14:00:53 2025 GMT
            Not After : Jun 10 14:00:53 2025 GMT
        Subject: CN=7043b77747949f83d71f3e7e124b09c4e4c4552d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:12:93:ca:c9:9c:19:10:4d:06:2b:c1:ce:68:
                    87:03:ab:66:0d:42:04:b5:bb:0d:2e:85:7f:a3:70:
                    77:b0:0e:4d:8b:f8:25:cd:4a:17:e3:04:ad:cd:9e:
                    51:8c:db:72:a1:22:59:88:28:68:3b:cf:60:00:1d:
                    3b:a2:d8:95:f5:5d:59:e8:8a:54:68:79:b1:50:cc:
                    7d:57:48:e5:1f:70:01:69:70:46:8c:eb:57:61:e5:
                    db:8c:fb:d2:26:29:d3:f8:0a:2b:c6:ea:1c:a4:1f:
                    eb:18:2c:fa:98:2a:30:95:d9:e8:e8:9b:58:3d:5c:
                    fc:e4:83:cb:0c:8f:15:89:35:03:35:49:94:e5:86:
                    21:38:c5:a0:53:b3:0c:6d:e7:b9:17:08:31:6e:ed:
                    b8:de:e4:a2:9f:77:44:44:26:46:f3:f9:76:e0:18:
                    61:31:13:b2:59:54:10:3e:03:45:9e:e3:92:6d:c9:
                    c2:02:69:ed:43:18:b5:f7:93:df:a8:7e:5a:8a:bb:
                    d0:09:e7:5e:75:05:6a:f7:a2:36:da:d3:27:ee:e0:
                    a7:40:21:12:e9:bd:81:ef:42:c7:a8:c0:aa:0c:fe:
                    61:64:b1:52:dd:fc:f9:d0:90:2c:b8:d4:47:fb:25:
                    51:26:eb:d7:ef:aa:1e:c6:73:61:6d:31:ff:e5:c2:
                    82:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:43:B7:77:47:94:9F:83:D7:1F:3E:7E:12:4B:09:C4:E4:C4:55:2D
            X509v3 Authority Key Identifier:
                keyid:C3:C0:59:1E:2E:B4:9D:05:59:E6:FC:E7:EE:2A:A8:1F:0F:59:BA:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8BZHi60nQVZ5vzn7iqoHw9Zum8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/w8BZHi60nQVZ5vzn7iqoHw9Zum8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/4b8aab-2099-43af-b41d-e3407174663b/1/w8BZHi60nQVZ5vzn7iqoHw9Zum8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:0e:f2:61:6c:2c:e8:29:b3:ed:2b:0c:7e:06:08:29:6f:2f:
         5e:7d:a2:31:ae:c9:b3:35:eb:79:5b:74:16:c2:6f:93:d0:54:
         9c:f7:86:36:d0:de:15:ba:2d:98:69:78:2a:0f:d1:b2:77:dd:
         5d:3f:41:60:96:ac:da:17:a6:3a:b2:1d:03:ff:1b:bf:18:c8:
         bf:17:f9:50:a4:d4:90:93:d3:b7:d4:7d:0b:d6:dc:ed:59:6a:
         d7:42:96:1b:79:9b:3b:d8:f5:17:1a:92:49:48:2a:76:c1:f5:
         90:02:96:00:69:76:24:3d:f3:ab:78:36:28:26:9b:4a:c7:b4:
         7b:22:d4:7f:2a:d6:c1:56:c9:c1:f7:1a:df:2a:99:6f:44:2c:
         02:23:0f:c1:f8:e1:c3:48:0f:49:48:ee:a1:18:c4:26:98:02:
         c8:31:d3:c6:0d:f6:a5:a6:6b:95:28:12:37:1e:09:67:d0:2a:
         bd:73:4a:14:cb:3d:d7:d6:a6:01:cc:19:2f:8b:8f:94:df:15:
         ce:e2:f1:e6:9e:3f:57:7f:c3:ff:db:30:08:28:8c:3d:6a:21:
         1f:7f:a7:28:4f:78:3f:fe:39:c8:10:96:4f:ce:5c:f5:4c:51:
         37:d9:bb:55:11:8e:56:b7:b5:d2:7f:04:ea:56:57:f7:4f:b0:
         1c:52:bd:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 21:14:50 2025 by rpki-client