Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/61e16a-db79-4e07-a19b-ae762ca2abd0/1/W5sFqT1fP8xaCwEEwbD20kws0fY.mft
File:                     W5sFqT1fP8xaCwEEwbD20kws0fY.mft (raw, json)
Hash identifier:          ZRhst3cQVo+yPq2jG6o3nzdX4dij4ukUGWeMi/iGNeM=
Subject key identifier:   60:F5:08:AD:C0:37:D8:CC:2B:7F:2E:86:00:BE:FE:A5:4C:EA:28:3A
Authority key identifier: 5B:9B:05:A9:3D:5F:3F:CC:5A:0B:01:04:C1:B0:F6:D2:4C:2C:D1:F6
Certificate issuer:       /CN=5b9b05a93d5f3fcc5a0b0104c1b0f6d24c2cd1f6
Certificate serial:       0197684DC9B79D955E6F9DB008F94BFD6115
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W5sFqT1fP8xaCwEEwbD20kws0fY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/61e16a-db79-4e07-a19b-ae762ca2abd0/1/W5sFqT1fP8xaCwEEwbD20kws0fY.mft
Manifest number:          158E
Signing time:             Fri 13 Jun 2025 08:00:17 +0000
Manifest this update:     Fri 13 Jun 2025 08:00:17 +0000
Manifest next update:     Sat 14 Jun 2025 08:00:17 +0000
Files and hashes:         1: EEI2dNSjcVw2iZs7Gn74yhtAoxA.roa (hash: t2UDAq4DzGmTsnjWgogyVQ3r8Ls90WheZWHhRn0w6Ws=)
                          2: W5sFqT1fP8xaCwEEwbD20kws0fY.crl (hash: ebSOA8MlIPOaePzLWIKU138I1ErHkupI0kWgWtV09Q4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/61e16a-db79-4e07-a19b-ae762ca2abd0/1/W5sFqT1fP8xaCwEEwbD20kws0fY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/61e16a-db79-4e07-a19b-ae762ca2abd0/1/W5sFqT1fP8xaCwEEwbD20kws0fY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W5sFqT1fP8xaCwEEwbD20kws0fY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 14 Jun 2025 08:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:68:4d:c9:b7:9d:95:5e:6f:9d:b0:08:f9:4b:fd:61:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b9b05a93d5f3fcc5a0b0104c1b0f6d24c2cd1f6
        Validity
            Not Before: Jun 13 08:00:17 2025 GMT
            Not After : Jun 14 08:00:17 2025 GMT
        Subject: CN=60f508adc037d8cc2b7f2e8600befea54cea283a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d3:54:c0:06:86:b7:27:b6:61:0c:3f:63:f8:
                    50:9b:a1:0f:b6:30:a4:33:19:89:ac:ae:b4:86:7f:
                    4d:2c:00:fc:64:25:9d:71:0f:e2:cb:7e:40:6f:dd:
                    01:dc:6c:3d:55:9b:ad:38:19:47:7d:5e:ee:c2:58:
                    c3:b2:61:a3:b6:34:bf:61:fb:56:57:da:0b:1f:f9:
                    b8:03:88:da:e4:03:1f:61:76:7f:3a:72:30:c3:a6:
                    d6:74:c9:62:56:ea:25:d1:df:3e:4e:71:b5:20:f3:
                    ed:57:a9:56:5d:37:7b:f9:1f:79:7b:6e:c3:2f:3c:
                    84:fb:0d:cb:60:95:7e:36:13:da:24:aa:65:d6:9f:
                    a6:f6:4f:72:9a:42:93:ba:04:44:8d:2e:8d:e8:be:
                    c6:c6:b8:87:df:07:c4:86:33:d2:10:54:c0:72:a8:
                    01:32:dd:df:72:d4:2e:91:b3:ed:7a:5c:25:8f:da:
                    08:1b:82:05:8b:86:af:fa:ff:ff:28:60:6f:a3:56:
                    c9:c3:8c:a7:21:34:c5:5c:38:46:6e:b5:d6:de:77:
                    08:ef:61:28:61:91:ea:9d:db:29:67:f8:30:61:44:
                    39:27:d1:c3:bf:72:f3:60:6c:4b:d3:49:0c:2b:14:
                    26:3d:2f:de:7a:bc:1d:99:64:e5:98:e8:80:e0:03:
                    9f:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:F5:08:AD:C0:37:D8:CC:2B:7F:2E:86:00:BE:FE:A5:4C:EA:28:3A
            X509v3 Authority Key Identifier:
                keyid:5B:9B:05:A9:3D:5F:3F:CC:5A:0B:01:04:C1:B0:F6:D2:4C:2C:D1:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W5sFqT1fP8xaCwEEwbD20kws0fY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/61e16a-db79-4e07-a19b-ae762ca2abd0/1/W5sFqT1fP8xaCwEEwbD20kws0fY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/61e16a-db79-4e07-a19b-ae762ca2abd0/1/W5sFqT1fP8xaCwEEwbD20kws0fY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:c2:b9:4f:b9:21:f0:d6:23:d8:fc:6c:3a:eb:1a:12:a1:aa:
         26:df:a5:70:7d:6b:5e:da:da:ca:66:be:7e:1f:7f:ca:65:fd:
         67:2d:5d:fd:83:8c:e4:b2:e0:84:d5:2f:ed:32:2d:9a:fa:66:
         03:00:4b:b7:66:8f:2c:e7:11:b4:92:1f:6c:30:85:a8:42:73:
         c7:fc:44:5c:3e:f0:77:b1:95:c1:7b:01:ec:c2:03:f2:4c:f3:
         ae:60:0f:1f:19:7d:90:95:c7:d9:52:df:d8:0c:15:f0:27:e3:
         35:65:71:2f:80:9c:fc:72:2b:d8:37:b3:b2:a2:8b:84:3b:3b:
         b5:3d:d3:c7:45:82:17:99:8b:40:3b:a4:89:84:87:87:42:18:
         cb:ec:78:e4:43:d2:43:c4:50:55:6e:5c:64:b9:0f:43:3c:a2:
         ca:18:a7:bd:dc:e3:84:a1:88:1d:3b:c0:f3:8a:ef:bc:e8:fa:
         58:a0:18:a5:22:4b:b8:44:8d:1f:55:7c:0d:53:6d:47:c7:5e:
         f3:90:d7:e3:08:cb:66:18:92:fe:2f:31:25:80:2a:45:83:74:
         dd:92:aa:4c:92:6e:a0:4b:6d:b9:74:53:a4:bd:36:21:11:f7:
         c7:ec:0a:f0:ad:35:d3:0b:8c:47:c8:10:c0:bf:65:3d:7a:19:
         de:6b:12:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:07:09 2025 by rpki-client