Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/e5312b-8439-4bb4-86d2-69b432799372/1/wv6ZPR8xDoFzwXzpJ48en44i48I.mft
File:                     wv6ZPR8xDoFzwXzpJ48en44i48I.mft (raw, json)
Hash identifier:          dp0J7+C2QEJc4o95Z1EURP5fdWng0LSXI/8OcwAE6zY=
Subject key identifier:   47:04:41:8E:6D:C9:C3:06:13:9F:24:E3:A1:57:72:7C:D1:5E:92:5D
Authority key identifier: C2:FE:99:3D:1F:31:0E:81:73:C1:7C:E9:27:8F:1E:9F:8E:22:E3:C2
Certificate issuer:       /CN=c2fe993d1f310e8173c17ce9278f1e9f8e22e3c2
Certificate serial:       0197469E654EE1052E29D4315E9FBF722602
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wv6ZPR8xDoFzwXzpJ48en44i48I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/e5312b-8439-4bb4-86d2-69b432799372/1/wv6ZPR8xDoFzwXzpJ48en44i48I.mft
Manifest number:          157A
Signing time:             Fri 06 Jun 2025 19:01:14 +0000
Manifest this update:     Fri 06 Jun 2025 19:01:14 +0000
Manifest next update:     Sat 07 Jun 2025 19:01:14 +0000
Files and hashes:         1: Mp1fGdgDn3PJKQzmX0OXaKwztw8.roa (hash: r365CtsIuSw4zwNKBRELvDJ1xes0I/H0wB5Xk0xJ+cE=)
                          2: wv6ZPR8xDoFzwXzpJ48en44i48I.crl (hash: tjGyeqzDLwoBMJKCcjt1psHieFtLCTtvWjVyd7ebxxY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/e5312b-8439-4bb4-86d2-69b432799372/1/wv6ZPR8xDoFzwXzpJ48en44i48I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/e5312b-8439-4bb4-86d2-69b432799372/1/wv6ZPR8xDoFzwXzpJ48en44i48I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wv6ZPR8xDoFzwXzpJ48en44i48I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 19:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:9e:65:4e:e1:05:2e:29:d4:31:5e:9f:bf:72:26:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2fe993d1f310e8173c17ce9278f1e9f8e22e3c2
        Validity
            Not Before: Jun  6 19:01:14 2025 GMT
            Not After : Jun  7 19:01:14 2025 GMT
        Subject: CN=4704418e6dc9c306139f24e3a157727cd15e925d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:33:ca:91:cb:7a:2b:cd:93:48:b1:7a:82:72:
                    39:50:9f:a2:be:1b:d2:9d:7f:9f:68:f1:11:38:d0:
                    f8:10:56:67:b7:a9:93:fe:25:e9:7b:68:25:da:55:
                    41:c5:2c:e5:ed:ec:52:64:25:a8:53:82:54:e4:cb:
                    54:c2:2f:15:c0:8e:0e:eb:cc:bb:ad:55:8a:50:ba:
                    54:9c:77:b7:d8:d0:77:86:d0:97:49:ae:c1:20:86:
                    43:9f:c5:70:b9:f4:08:da:9e:81:6a:8d:52:0b:75:
                    3a:a0:28:63:f8:d6:17:68:85:e9:7c:d6:23:8e:9f:
                    d4:66:2a:17:88:67:1a:42:01:1d:24:89:3f:ba:6d:
                    0c:f7:aa:3f:6f:9a:ec:b4:6b:62:3d:7f:3e:e5:0d:
                    d1:4b:ea:df:00:e8:07:f9:3c:cf:f7:37:ea:4f:9e:
                    e9:89:11:6b:e4:52:ab:ea:cc:53:0a:4c:91:9c:ad:
                    ad:25:42:34:01:6c:8c:27:43:c6:dd:ab:60:fe:ab:
                    c6:e3:78:3a:be:91:1d:cf:72:d3:64:3e:ec:c9:0e:
                    c6:5a:21:47:48:1c:23:18:51:79:3b:9f:cf:fc:f8:
                    83:ce:ae:0f:6d:d5:48:94:bd:52:30:3f:78:8c:98:
                    ed:67:a6:91:4b:b0:3d:ac:9d:29:9b:47:00:ee:01:
                    84:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:04:41:8E:6D:C9:C3:06:13:9F:24:E3:A1:57:72:7C:D1:5E:92:5D
            X509v3 Authority Key Identifier:
                keyid:C2:FE:99:3D:1F:31:0E:81:73:C1:7C:E9:27:8F:1E:9F:8E:22:E3:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wv6ZPR8xDoFzwXzpJ48en44i48I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e5312b-8439-4bb4-86d2-69b432799372/1/wv6ZPR8xDoFzwXzpJ48en44i48I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e5312b-8439-4bb4-86d2-69b432799372/1/wv6ZPR8xDoFzwXzpJ48en44i48I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:1c:ed:5e:75:72:49:8b:f8:69:70:66:a6:00:7d:d8:69:a8:
         1e:c6:6c:4d:69:7d:27:fd:86:15:8b:dd:37:81:d2:a2:bb:77:
         4f:d5:f1:b1:4e:78:47:95:86:10:21:43:af:50:70:0d:18:a3:
         c6:0d:7d:1a:ea:4b:66:89:1b:d9:cf:70:3b:3b:e0:ce:14:e9:
         4d:97:1f:aa:aa:cc:26:1f:76:28:05:e6:6a:3d:19:12:7c:8d:
         ab:18:67:a3:b3:fc:54:1a:d9:28:f1:c5:3d:0a:24:04:35:4d:
         88:db:f5:f9:bc:32:58:a7:2a:75:20:4c:c2:f0:ea:cd:f0:67:
         6d:f1:d4:6f:90:29:b3:8b:dc:f8:e3:55:5f:9e:bf:75:aa:4d:
         a2:63:b6:43:39:93:44:eb:a4:0e:f0:fc:9a:c8:e7:84:b6:9f:
         3a:d1:22:f3:29:1e:ec:07:38:c7:b4:60:09:23:d2:22:eb:6d:
         47:e8:59:76:16:9d:d7:65:49:b4:1e:0d:53:34:70:99:a9:79:
         e6:56:f0:32:0d:05:51:7a:25:42:d9:60:1d:a1:9e:1b:b9:c2:
         6e:fd:0a:c4:20:21:37:a7:18:5c:77:f3:52:36:d6:0e:b2:cd:
         1a:cb:f0:a1:38:97:f4:ac:19:53:81:d3:c0:4a:48:59:56:5f:
         65:87:49:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:43:33 2025 by rpki-client