Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/e5a814-16a5-403b-93f3-cf32a0d92825/1/wlbSXx_dANyA3W0iWyERm_ISHok.mft
File:                     wlbSXx_dANyA3W0iWyERm_ISHok.mft (raw, json)
Hash identifier:          sDbwiVZ6t6lCIu8BcxZ0ephQ9JSfypPihPFf6GKTu5M=
Subject key identifier:   53:21:E8:AF:DD:4A:25:32:B4:87:CA:1D:E5:04:26:86:4B:4A:5B:92
Authority key identifier: C2:56:D2:5F:1F:DD:00:DC:80:DD:6D:22:5B:21:11:9B:F2:12:1E:89
Certificate issuer:       /CN=c256d25f1fdd00dc80dd6d225b21119bf2121e89
Certificate serial:       019748F9CCD7171622CC777B55B434141530
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wlbSXx_dANyA3W0iWyERm_ISHok.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/e5a814-16a5-403b-93f3-cf32a0d92825/1/wlbSXx_dANyA3W0iWyERm_ISHok.mft
Manifest number:          157D
Signing time:             Sat 07 Jun 2025 06:00:19 +0000
Manifest this update:     Sat 07 Jun 2025 06:00:19 +0000
Manifest next update:     Sun 08 Jun 2025 06:00:19 +0000
Files and hashes:         1: mOHhCAnpxR-dp3-6rcl-KfmxQF4.roa (hash: 3p2JZm+3j1SVt0MOxqOY+5HYmBdbi1aC8iIMBMpg4u0=)
                          2: wlbSXx_dANyA3W0iWyERm_ISHok.crl (hash: IibTY35xvzMvAjjBlSGcqlAWfYIda0AZnF/wKhKO46E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/e5a814-16a5-403b-93f3-cf32a0d92825/1/wlbSXx_dANyA3W0iWyERm_ISHok.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/e5a814-16a5-403b-93f3-cf32a0d92825/1/wlbSXx_dANyA3W0iWyERm_ISHok.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wlbSXx_dANyA3W0iWyERm_ISHok.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 06:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:f9:cc:d7:17:16:22:cc:77:7b:55:b4:34:14:15:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c256d25f1fdd00dc80dd6d225b21119bf2121e89
        Validity
            Not Before: Jun  7 06:00:19 2025 GMT
            Not After : Jun  8 06:00:19 2025 GMT
        Subject: CN=5321e8afdd4a2532b487ca1de50426864b4a5b92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:c4:4e:dd:21:8d:9d:3e:12:d5:36:93:66:d5:
                    6b:3c:91:42:4f:b6:28:fb:63:b4:87:1e:8e:da:74:
                    f9:1f:30:b0:61:58:9e:34:fc:94:88:06:4f:ac:2a:
                    43:34:bf:b3:ac:95:40:80:d0:c1:50:2d:95:7c:20:
                    56:57:d2:8c:fa:38:a4:57:73:ad:a8:98:94:a3:09:
                    84:1a:9c:51:73:1b:3e:c3:11:b5:ad:f7:d5:94:58:
                    2c:ee:13:e1:59:5c:1b:71:26:bf:d8:b2:4b:49:25:
                    82:fb:16:8d:a4:67:e9:2c:ff:4b:20:15:35:cf:67:
                    07:af:14:0c:5a:d6:e6:8e:db:ea:cd:d3:5d:26:3b:
                    b2:cd:d5:2b:fb:a1:c7:db:fd:24:1e:31:68:94:a8:
                    63:12:fa:2f:e8:5a:6c:d4:e9:98:b7:bf:95:af:97:
                    72:56:f6:f4:7c:d7:a4:b6:44:89:37:fb:c3:34:90:
                    cb:be:1a:f0:2d:d3:ef:b7:97:80:6a:6e:c2:c4:31:
                    20:d6:d1:1f:2d:bf:e7:c2:58:51:3c:a6:3a:2b:00:
                    8d:54:5c:93:41:20:bd:c5:be:00:e5:fe:5e:28:18:
                    57:05:27:87:62:fc:dd:1a:75:ab:b6:e9:1d:32:f9:
                    b2:f2:76:6e:1b:6e:3c:6b:fd:a7:7e:b7:e7:b7:c6:
                    e4:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:21:E8:AF:DD:4A:25:32:B4:87:CA:1D:E5:04:26:86:4B:4A:5B:92
            X509v3 Authority Key Identifier:
                keyid:C2:56:D2:5F:1F:DD:00:DC:80:DD:6D:22:5B:21:11:9B:F2:12:1E:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wlbSXx_dANyA3W0iWyERm_ISHok.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/e5a814-16a5-403b-93f3-cf32a0d92825/1/wlbSXx_dANyA3W0iWyERm_ISHok.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/e5a814-16a5-403b-93f3-cf32a0d92825/1/wlbSXx_dANyA3W0iWyERm_ISHok.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:2d:db:4c:4e:c1:e2:25:c2:03:18:35:c7:d9:02:c2:a6:19:
         c5:8d:51:f7:c4:4f:09:4a:00:1c:c1:b7:69:83:f7:b8:d0:44:
         15:ad:b7:f8:f9:cb:98:e2:46:c5:fe:9d:52:2a:5c:de:57:26:
         8d:a5:3a:4f:e5:74:0e:70:f4:f6:0f:ad:36:4c:bd:23:03:9a:
         cb:76:e7:60:c4:c3:e3:ec:7b:e0:a1:e5:1f:b6:bc:1e:ff:b2:
         55:ad:74:d6:70:98:cb:93:77:63:81:9c:ea:6b:f6:c8:8f:b7:
         2e:e0:94:59:ab:7c:d3:7d:ae:0b:6a:6e:92:4a:80:be:7f:47:
         ba:a8:24:69:98:c3:82:26:62:0d:8a:65:0e:39:6e:e9:48:44:
         d2:32:3d:11:29:61:43:de:4e:90:7e:e0:d2:2b:41:10:3b:ec:
         10:ee:6d:23:78:67:7f:86:20:75:d2:5e:f7:19:3c:d5:85:2c:
         7a:04:8e:fa:e0:42:89:df:fe:e2:25:09:82:1b:8a:90:0f:2b:
         77:f8:5c:60:90:48:d7:a7:9a:ef:72:0d:97:67:98:02:50:8e:
         24:e9:91:ba:8d:6a:b5:77:6d:f6:f6:34:5f:05:48:d4:c7:8f:
         07:44:45:64:53:b4:ed:43:d3:2c:9e:7a:fe:a7:14:6f:08:3f:
         76:80:c2:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:22:32 2025 by rpki-client