Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/91cdfd-2c72-4236-a4c2-2b8f7346f350/1/L-W3zLQD0wpEhX1HxYzxNGVG0oM.mft
File:                     L-W3zLQD0wpEhX1HxYzxNGVG0oM.mft (raw, json)
Hash identifier:          bpytCTh3owmoQmdD36mnuB7WOu/OKwi4WwJDrNoY7kE=
Subject key identifier:   B0:46:37:6A:9E:A1:99:91:4E:A6:39:49:13:54:1A:3A:DA:EB:FF:35
Authority key identifier: 2F:E5:B7:CC:B4:03:D3:0A:44:85:7D:47:C5:8C:F1:34:65:46:D2:83
Certificate issuer:       /CN=2fe5b7ccb403d30a44857d47c58cf1346546d283
Certificate serial:       019748FA9B6D8D645E1CF9D50E3D014967E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L-W3zLQD0wpEhX1HxYzxNGVG0oM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/91cdfd-2c72-4236-a4c2-2b8f7346f350/1/L-W3zLQD0wpEhX1HxYzxNGVG0oM.mft
Manifest number:          157C
Signing time:             Sat 07 Jun 2025 06:01:12 +0000
Manifest this update:     Sat 07 Jun 2025 06:01:12 +0000
Manifest next update:     Sun 08 Jun 2025 06:01:12 +0000
Files and hashes:         1: 2r0RVWDYwrAky_EBFNocrP1Orso.roa (hash: 03OdcPmwCc2pn6Q2ETr7PGvOwjdWATEEpq/X3ap3Qjs=)
                          2: L-W3zLQD0wpEhX1HxYzxNGVG0oM.crl (hash: ozswiO0pKG/idDsdjNyM2SPi5x7rWrEYZ58DRE0hpG8=)
                          3: Swa9pMFTSLy0n_Wa3rYsyOZYvSA.roa (hash: 3zJVdSWxQTVh9llFwDq7cagzz/TNovINbw9ExqnV0Ns=)
                          4: yJroNTaVvlT2NMbeqc_SwP9EFa8.roa (hash: uK6E/53K4TtzRidnGsebqPQ704WPwr/ML/5bFXdXLZo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/91cdfd-2c72-4236-a4c2-2b8f7346f350/1/L-W3zLQD0wpEhX1HxYzxNGVG0oM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/91cdfd-2c72-4236-a4c2-2b8f7346f350/1/L-W3zLQD0wpEhX1HxYzxNGVG0oM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L-W3zLQD0wpEhX1HxYzxNGVG0oM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 06:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:48:fa:9b:6d:8d:64:5e:1c:f9:d5:0e:3d:01:49:67:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fe5b7ccb403d30a44857d47c58cf1346546d283
        Validity
            Not Before: Jun  7 06:01:12 2025 GMT
            Not After : Jun  8 06:01:12 2025 GMT
        Subject: CN=b046376a9ea199914ea6394913541a3adaebff35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:bb:e9:3c:db:0c:3d:28:bc:85:f4:ac:fd:0e:
                    22:7b:b3:4d:4f:b3:7a:89:87:1a:5c:b5:ed:64:b8:
                    bc:7f:c8:db:c6:c6:04:ad:54:86:55:18:2f:33:83:
                    ce:7f:35:30:e0:8a:49:f8:ec:38:4e:c9:c5:ba:be:
                    1e:8b:68:22:fe:21:d5:2c:c5:41:86:bc:90:d3:41:
                    6b:2a:51:f8:21:91:3b:b7:94:31:6c:ca:34:b5:7a:
                    74:3a:a1:81:ed:40:9d:c1:3c:80:37:5a:cb:34:92:
                    df:65:f8:42:cc:04:f8:1b:5a:02:26:10:f7:ff:aa:
                    21:d5:3f:a5:63:aa:7d:20:a7:20:fe:74:35:d6:61:
                    ca:67:52:ea:1f:91:cc:98:b7:a0:3f:d4:85:f4:4b:
                    10:44:cc:6f:37:a2:81:b9:ef:08:7c:a6:01:4f:ef:
                    c1:cf:55:8e:fe:0a:5b:d2:50:bc:7a:aa:14:d3:c2:
                    0b:27:d2:0c:bc:12:bc:0f:83:83:5d:7e:0e:2a:4d:
                    10:f5:dd:bb:ce:35:5a:fc:4c:53:97:90:d7:3f:f1:
                    a4:62:2b:25:4b:89:35:62:78:68:61:88:d4:bf:51:
                    f7:70:d0:7a:64:09:2a:9a:9d:ae:18:63:c1:3f:9b:
                    70:f1:ea:fc:49:1a:cc:1b:fe:ec:44:27:c9:44:31:
                    5a:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:46:37:6A:9E:A1:99:91:4E:A6:39:49:13:54:1A:3A:DA:EB:FF:35
            X509v3 Authority Key Identifier:
                keyid:2F:E5:B7:CC:B4:03:D3:0A:44:85:7D:47:C5:8C:F1:34:65:46:D2:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L-W3zLQD0wpEhX1HxYzxNGVG0oM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/91cdfd-2c72-4236-a4c2-2b8f7346f350/1/L-W3zLQD0wpEhX1HxYzxNGVG0oM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/91cdfd-2c72-4236-a4c2-2b8f7346f350/1/L-W3zLQD0wpEhX1HxYzxNGVG0oM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:b4:43:b8:3e:f3:81:f7:0e:ca:32:e9:27:1e:31:64:bb:9b:
         3e:27:96:5c:7d:06:66:bc:ba:9c:32:6e:53:07:69:9c:96:b5:
         83:17:1a:ce:56:90:2a:76:72:db:e5:53:82:99:62:1c:66:ed:
         f2:db:75:98:72:18:d3:6e:b3:9d:e5:82:ee:a9:59:cd:32:62:
         78:8a:3c:79:08:5f:21:c7:79:8a:f8:20:ff:b8:df:95:f3:b0:
         17:09:33:3c:a1:b6:f5:d3:d9:f5:8b:b5:49:4d:e0:bb:02:2f:
         0a:88:90:93:33:e0:96:b4:de:be:4e:ee:0b:42:bd:50:80:ae:
         2e:47:e3:7d:22:de:99:70:c1:8a:8c:49:ca:89:ff:e1:f6:a9:
         a9:f5:7b:96:07:c7:f5:df:e9:5c:66:5a:25:7f:ab:69:ef:fb:
         e0:63:a0:9c:1e:aa:88:68:c2:e9:d2:48:76:dd:3b:77:24:f1:
         c9:79:96:2e:c2:3e:bd:7b:6a:fb:1e:04:fb:bc:17:42:05:7c:
         49:66:81:e9:b3:24:14:aa:5c:2d:c7:c0:45:79:c4:89:38:25:
         eb:51:e8:c0:3f:8f:58:3d:c7:b1:5a:21:4b:ad:6a:35:f7:94:
         73:fe:52:d8:1d:49:a9:c8:1c:4b:4b:45:9f:4c:e3:d2:72:11:
         1f:a9:14:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:37:28 2025 by rpki-client