Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/wSM4YSB6IwVk7zbxHgFXNEcx4_k.mft
File:                     wSM4YSB6IwVk7zbxHgFXNEcx4_k.mft (raw, json)
Hash identifier:          Gw8u80wnoB6eWnnPR4Rk+yZhUMuClUSJMgr95n7fxx4=
Subject key identifier:   B0:F7:E4:7F:0A:E8:86:3F:51:EA:54:DC:CA:20:75:30:58:B1:E4:07
Authority key identifier: C1:23:38:61:20:7A:23:05:64:EF:36:F1:1E:01:57:34:47:31:E3:F9
Certificate issuer:       /CN=c1233861207a230564ef36f11e0157344731e3f9
Certificate serial:       0196C2028486A314AAC0198741AAF31B3367
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wSM4YSB6IwVk7zbxHgFXNEcx4_k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/wSM4YSB6IwVk7zbxHgFXNEcx4_k.mft
Manifest number:          153E
Signing time:             Mon 12 May 2025 01:01:06 +0000
Manifest this update:     Mon 12 May 2025 01:01:06 +0000
Manifest next update:     Tue 13 May 2025 01:01:06 +0000
Files and hashes:         1: G0mfJKH5XthYEp56dZd7amNIFIg.roa (hash: ZdlmpS8KB0XJ2RMI8I0V6gnsbS1MxMfFNBLIs6WQ0tQ=)
                          2: H4XS9Jd4RgVQziQYba5Gfsonrvs.roa (hash: 55mfL9Yq4sSJVb8E/9Ead0lw9ritGLLPE3h22CvMkqI=)
                          3: J3tQAc-R4PT9iUkojothol4LOyU.roa (hash: 3yeSEY7/c0NLf9TAv7WKIHKi3Ggm4vF4/G3CEy8wx+U=)
                          4: wSM4YSB6IwVk7zbxHgFXNEcx4_k.crl (hash: Zh4+qqTO48HIhWjZuW2N9rsSkgpbPebr/wXWFS3s+Mk=)
                          5: xPmNgI2MBJIstiWMiSOAWkej_zc.roa (hash: vJKk+eO7ZLM5QA+TiNBJgqIVJMIub9fywVY+U729ifg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/wSM4YSB6IwVk7zbxHgFXNEcx4_k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/wSM4YSB6IwVk7zbxHgFXNEcx4_k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/wSM4YSB6IwVk7zbxHgFXNEcx4_k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c2:02:84:86:a3:14:aa:c0:19:87:41:aa:f3:1b:33:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1233861207a230564ef36f11e0157344731e3f9
        Validity
            Not Before: May 12 01:01:06 2025 GMT
            Not After : May 13 01:01:06 2025 GMT
        Subject: CN=b0f7e47f0ae8863f51ea54dcca20753058b1e407
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:09:af:90:fd:22:ae:49:9c:99:2f:b5:aa:69:
                    4d:cf:7d:5f:8a:de:fa:d1:05:8a:c5:b0:4a:e4:79:
                    1c:5e:eb:37:34:c0:4c:24:d1:13:1a:76:87:f4:27:
                    13:71:34:bb:d3:4a:12:2b:b1:ad:2f:7b:5b:cf:06:
                    5b:58:77:2b:62:26:72:9e:aa:4f:71:39:74:4d:b5:
                    c6:3e:01:f0:36:6b:9c:cc:15:7d:2e:10:88:5e:a3:
                    ad:1d:c3:b9:a4:3d:fc:a3:89:2d:9a:3f:5b:fc:12:
                    b5:4e:9d:3d:e2:47:c3:8a:34:25:87:c7:1e:67:24:
                    b6:d5:91:09:63:81:a1:95:da:19:31:f8:8f:b9:32:
                    6e:43:b1:37:42:1c:b9:0a:fd:93:f9:a8:33:39:49:
                    94:b7:17:a0:84:ec:2c:ea:c9:3f:b2:24:de:c2:d6:
                    80:a2:90:9b:76:e2:21:db:2a:1b:4f:5c:1b:11:ff:
                    4e:31:e0:9c:39:24:78:6c:0f:3d:ce:8f:f8:f1:89:
                    8b:0e:08:c0:32:a6:09:db:bb:68:05:c6:5f:d8:68:
                    0e:9b:c3:45:cd:77:ca:e6:60:b2:6b:33:d4:4c:d6:
                    a3:a2:57:f6:54:36:c9:d7:29:40:d7:5a:56:8e:cd:
                    48:7b:34:db:73:25:e4:eb:dd:1f:93:9f:f5:20:19:
                    bd:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:F7:E4:7F:0A:E8:86:3F:51:EA:54:DC:CA:20:75:30:58:B1:E4:07
            X509v3 Authority Key Identifier:
                keyid:C1:23:38:61:20:7A:23:05:64:EF:36:F1:1E:01:57:34:47:31:E3:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSM4YSB6IwVk7zbxHgFXNEcx4_k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/wSM4YSB6IwVk7zbxHgFXNEcx4_k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/wSM4YSB6IwVk7zbxHgFXNEcx4_k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:a5:13:82:29:96:85:7b:01:78:24:c0:83:4a:de:0d:5c:67:
         94:57:f2:ac:03:ea:90:2b:47:83:74:d3:0b:81:af:b5:fa:76:
         f4:3e:03:cb:c6:9e:b1:03:dd:40:08:e0:77:fe:2a:08:a4:e0:
         8a:34:60:cc:9e:44:78:20:10:2a:e4:0c:f9:4a:14:29:f3:0d:
         bf:d2:c8:8c:2d:18:9a:56:ef:1a:bf:64:22:b8:ad:a9:04:de:
         62:c7:d2:bd:ca:e2:b8:5a:ed:67:f0:ed:24:5c:ce:9c:64:80:
         fb:8e:4a:9c:37:ca:c3:50:6b:6d:33:92:48:d4:02:32:95:43:
         13:45:04:f4:49:88:5e:ae:bc:70:5f:2b:30:f5:95:98:ed:88:
         46:14:ea:21:c8:30:25:4d:e6:76:21:27:ef:6d:7b:b0:35:44:
         a8:ee:c9:e8:41:97:b6:51:c4:ee:1c:94:36:c3:a2:ec:b0:b8:
         c9:48:88:f3:9c:f2:f3:05:82:bd:26:79:f0:00:bc:11:2f:8c:
         dc:87:41:2d:57:ec:eb:6c:e8:7b:63:4b:dd:fe:94:36:be:ff:
         fc:86:ad:5f:44:ec:7e:6f:67:2e:81:4f:a1:c3:54:f8:ad:82:
         72:94:b5:85:9a:64:95:8f:10:6d:aa:e2:e4:91:39:6f:86:36:
         f2:94:d5:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:08:59 2025 by rpki-client