Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/040564-5952-4223-bcca-f876c055a315/1/flZv_0B_McauhWw3Q-8-XyL401s.mft
File:                     flZv_0B_McauhWw3Q-8-XyL401s.mft (raw, json)
Hash identifier:          oqYBeDgD2iMMxeQwoVnFCKQf26D7Gu7NeA2hUmrLjvQ=
Subject key identifier:   BD:EF:EE:B4:11:93:8C:38:8E:9B:83:5E:33:60:D6:0C:9A:CB:CF:CA
Authority key identifier: 7E:56:6F:FF:40:7F:31:C6:AE:85:6C:37:43:EF:3E:5F:22:F8:D3:5B
Certificate issuer:       /CN=7e566fff407f31c6ae856c3743ef3e5f22f8d35b
Certificate serial:       0197B6D7B5D9423409D08D070EA4511ABFD0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/flZv_0B_McauhWw3Q-8-XyL401s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/040564-5952-4223-bcca-f876c055a315/1/flZv_0B_McauhWw3Q-8-XyL401s.mft
Manifest number:          14CC
Signing time:             Sat 28 Jun 2025 14:01:19 +0000
Manifest this update:     Sat 28 Jun 2025 14:01:19 +0000
Manifest next update:     Sun 29 Jun 2025 14:01:19 +0000
Files and hashes:         1: CF8GaEatgxJbaKh474IjZo5fECA.roa (hash: jNeYnMymis49T6EQU4PdS7BLisDarhceBgl5yuJAqIM=)
                          2: flZv_0B_McauhWw3Q-8-XyL401s.crl (hash: SSkhWTqE5MUg1Jcm/g2KuaJ/BVV+FTgv+ayBgKnGywg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/040564-5952-4223-bcca-f876c055a315/1/flZv_0B_McauhWw3Q-8-XyL401s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/040564-5952-4223-bcca-f876c055a315/1/flZv_0B_McauhWw3Q-8-XyL401s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/flZv_0B_McauhWw3Q-8-XyL401s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 14:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:d7:b5:d9:42:34:09:d0:8d:07:0e:a4:51:1a:bf:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e566fff407f31c6ae856c3743ef3e5f22f8d35b
        Validity
            Not Before: Jun 28 14:01:19 2025 GMT
            Not After : Jun 29 14:01:19 2025 GMT
        Subject: CN=bdefeeb411938c388e9b835e3360d60c9acbcfca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c5:b0:01:4a:c6:f0:03:bc:24:22:a7:bb:74:
                    bf:5b:3b:65:c9:f6:d7:65:1f:8b:75:8f:87:8d:e6:
                    13:7f:b9:ee:01:1f:25:31:c1:32:51:09:d4:4b:02:
                    57:8e:ea:17:8b:61:79:a2:2b:23:c9:56:4a:a8:a5:
                    04:c2:03:38:09:ab:2d:11:67:6a:54:14:38:34:39:
                    13:61:b8:cf:a2:a3:08:5c:0e:28:20:29:ce:de:da:
                    a4:fd:09:b7:5f:5e:85:19:4d:be:4d:7c:74:3d:eb:
                    93:40:be:1a:0b:ef:90:50:ce:14:9a:35:dd:3d:0c:
                    a3:63:f6:6d:85:40:eb:73:78:68:72:de:8d:58:63:
                    f2:c9:e8:f6:92:3b:66:a4:3e:6d:e3:6a:8a:cc:35:
                    23:6f:17:af:99:51:98:7e:73:4d:5b:e6:64:d6:e7:
                    8d:d6:fc:fc:d5:c5:1d:f1:a9:fc:49:b1:61:f2:cc:
                    c7:8f:93:c3:71:91:49:dc:d2:3c:21:f1:68:d2:c1:
                    a2:8b:81:1d:d8:95:bc:54:c5:df:93:14:0d:c3:0a:
                    fe:28:94:95:75:eb:c8:69:ed:07:03:23:0e:b1:44:
                    ab:b3:28:9c:16:a2:a4:72:ac:8a:be:79:d8:f6:fd:
                    90:d6:90:65:db:13:9e:3d:32:9e:25:97:c0:4c:1f:
                    24:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:EF:EE:B4:11:93:8C:38:8E:9B:83:5E:33:60:D6:0C:9A:CB:CF:CA
            X509v3 Authority Key Identifier:
                keyid:7E:56:6F:FF:40:7F:31:C6:AE:85:6C:37:43:EF:3E:5F:22:F8:D3:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flZv_0B_McauhWw3Q-8-XyL401s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/040564-5952-4223-bcca-f876c055a315/1/flZv_0B_McauhWw3Q-8-XyL401s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/040564-5952-4223-bcca-f876c055a315/1/flZv_0B_McauhWw3Q-8-XyL401s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:4b:13:8d:f0:04:9a:6c:ad:3f:5e:ba:d3:1b:7c:15:8c:60:
         d5:77:db:d8:c3:bc:d6:04:8e:2d:0d:af:6e:f7:7c:a9:16:ff:
         8d:0b:85:67:b7:5e:23:dd:9d:a0:16:11:06:20:6b:6b:8e:92:
         1a:9a:1c:28:ec:ca:98:54:7d:9c:9c:7e:3b:ca:c7:c5:f0:4e:
         19:a2:63:8d:04:03:d7:44:8d:e4:f0:19:f4:7b:94:ff:60:f9:
         54:f1:11:89:cf:b2:ad:43:31:2b:78:fd:3d:d3:f6:09:72:e8:
         70:6d:41:85:2b:b9:1e:f9:ea:b1:b7:c0:22:5d:e5:9e:66:48:
         5b:42:d2:cb:6c:b9:42:fb:a7:fc:98:da:b8:e7:07:aa:75:38:
         55:d8:9f:e1:f4:14:df:b7:13:2f:90:4c:11:11:22:69:4e:10:
         93:95:0c:0e:c5:08:d7:b7:de:95:8d:1f:3e:43:e0:81:16:19:
         ea:8a:c8:45:d0:54:8b:cf:39:f5:bc:34:ed:91:58:77:3a:1a:
         e9:40:02:03:a3:e9:b8:f9:1e:8a:79:5f:a3:56:c3:20:0b:1a:
         cb:43:c3:ed:b6:18:d6:b2:96:24:95:80:5f:a1:d9:e4:7d:7e:
         c6:c3:30:56:19:37:ff:02:3a:bf:bb:1b:86:47:ee:4c:c2:e6:
         10:8d:90:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe217XZQjQJ0I0HDqRRGr/QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlNTY2ZmZmNDA3ZjMxYzZhZTg1NmMzNzQzZWYzZTVmMjJm
OGQzNWIwHhcNMjUwNjI4MTQwMTE5WhcNMjUwNjI5MTQwMTE5WjAzMTEwLwYDVQQD
EyhiZGVmZWViNDExOTM4YzM4OGU5YjgzNWUzMzYwZDYwYzlhY2JjZmNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcWwAUrG8AO8JCKnu3S/WztlyfbX
ZR+LdY+HjeYTf7nuAR8lMcEyUQnUSwJXjuoXi2F5oisjyVZKqKUEwgM4CastEWdq
VBQ4NDkTYbjPoqMIXA4oICnO3tqk/Qm3X16FGU2+TXx0PeuTQL4aC++QUM4UmjXd
PQyjY/ZthUDrc3hoct6NWGPyyej2kjtmpD5t42qKzDUjbxevmVGYfnNNW+Zk1ueN
1vz81cUd8an8SbFh8szHj5PDcZFJ3NI8IfFo0sGii4Ed2JW8VMXfkxQNwwr+KJSV
devIae0HAyMOsUSrsyicFqKkcqyKvnnY9v2Q1pBl2xOePTKeJZfATB8kQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL3v7rQRk4w4jpuDXjNg1gyay8/KMB8GA1UdIwQY
MBaAFH5Wb/9AfzHGroVsN0PvPl8i+NNbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmxadl8wQl9NY2F1aFd3M1EtOC1YeUw0MDFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi8wNDA1NjQtNTk1Mi00MjIzLWJjY2Et
Zjg3NmMwNTVhMzE1LzEvZmxadl8wQl9NY2F1aFd3M1EtOC1YeUw0MDFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi8wNDA1NjQtNTk1Mi00MjIzLWJjY2EtZjg3NmMwNTVhMzE1
LzEvZmxadl8wQl9NY2F1aFd3M1EtOC1YeUw0MDFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATEsTjfAE
mmytP1660xt8FYxg1Xfb2MO81gSOLQ2vbvd8qRb/jQuFZ7deI92doBYRBiBra46S
GpocKOzKmFR9nJx+O8rHxfBOGaJjjQQD10SN5PAZ9HuU/2D5VPERic+yrUMxK3j9
PdP2CXLocG1BhSu5HvnqsbfAIl3lnmZIW0LSy2y5Qvun/JjauOcHqnU4Vdif4fQU
37cTL5BMEREiaU4Qk5UMDsUI17felY0fPkPggRYZ6orIRdBUi8859bw07ZFYdzoa
6UACA6PpuPkeinlfo1bDIAsay0PD7bYY1rKWJJWAX6HZ5H1+xsMwVhk3/wI6v7sb
hkfuTMLmEI2QLA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:20:18 2025 by rpki-client