Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/ff6052-fa80-44b8-afca-6e2dea03d596/1/felj7OLwup93SayjhUIPnXAuqos.mft
File:                     felj7OLwup93SayjhUIPnXAuqos.mft (raw, json)
Hash identifier:          cFJooKXBx34zg8tEBfYsF/DZzPpXV2mkJErwUVDG/0k=
Subject key identifier:   9C:7B:F6:23:AF:CB:B8:6C:FD:A0:A6:29:B5:3C:16:A6:B5:51:9D:9B
Authority key identifier: 7D:E9:63:EC:E2:F0:BA:9F:77:49:AC:A3:85:42:0F:9D:70:2E:AA:8B
Certificate issuer:       /CN=7de963ece2f0ba9f7749aca385420f9d702eaa8b
Certificate serial:       0196AB4338670D4F4E22E215D047FA9A9D25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/felj7OLwup93SayjhUIPnXAuqos.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/ff6052-fa80-44b8-afca-6e2dea03d596/1/felj7OLwup93SayjhUIPnXAuqos.mft
Manifest number:          0DDD
Signing time:             Wed 07 May 2025 15:00:31 +0000
Manifest this update:     Wed 07 May 2025 15:00:31 +0000
Manifest next update:     Thu 08 May 2025 15:00:31 +0000
Files and hashes:         1: POu4BRKwJ9b6QnLtzzujF-OJsSQ.roa (hash: XnOw29GXgrIDV++SsvKlXzYrR59LZbUOXYaVKIhexjc=)
                          2: felj7OLwup93SayjhUIPnXAuqos.crl (hash: QLAhGFbzSue5K9FQSS0u0W1NHiDbHGIogO4rAFmo37M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/ff6052-fa80-44b8-afca-6e2dea03d596/1/felj7OLwup93SayjhUIPnXAuqos.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/ff6052-fa80-44b8-afca-6e2dea03d596/1/felj7OLwup93SayjhUIPnXAuqos.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/felj7OLwup93SayjhUIPnXAuqos.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 May 2025 13:31:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:ab:43:38:67:0d:4f:4e:22:e2:15:d0:47:fa:9a:9d:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7de963ece2f0ba9f7749aca385420f9d702eaa8b
        Validity
            Not Before: May  7 15:00:31 2025 GMT
            Not After : May  8 15:00:31 2025 GMT
        Subject: CN=9c7bf623afcbb86cfda0a629b53c16a6b5519d9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:b7:d9:48:d0:d2:f7:0d:ff:bc:be:6e:8e:ff:
                    3d:48:b1:67:d6:2a:b5:9c:4b:cb:2e:46:a3:ab:c2:
                    a9:1d:e4:a6:91:50:51:f5:0b:a2:78:e5:49:b2:75:
                    68:ff:fe:c8:41:1a:37:04:a7:f3:23:a9:80:1b:03:
                    d1:9b:bd:e9:8c:32:f0:b2:1a:e7:bb:dd:f3:63:88:
                    73:9e:7d:b2:97:1d:f3:1d:43:1e:ad:98:e6:dd:07:
                    76:bd:7e:25:6b:d2:ad:b0:f3:d8:01:b0:57:25:c2:
                    c0:b4:19:fc:41:95:10:e9:ed:81:f5:b3:dc:41:c0:
                    4b:be:2b:db:72:0b:ae:b7:bf:8c:5c:72:1c:2c:39:
                    dc:65:6e:b5:e0:d8:14:d4:22:33:57:4a:c3:94:58:
                    2b:86:6f:07:cd:dd:ff:4f:09:ed:02:43:8f:f4:5a:
                    04:f0:40:21:0a:d3:9d:74:70:59:ac:0f:1f:1a:16:
                    49:80:80:d8:b5:64:ef:89:d1:25:6d:65:6e:b3:13:
                    d1:ea:db:5a:f0:75:cc:31:ae:0a:0e:39:49:f4:a1:
                    49:3e:f3:38:98:a7:ef:b0:1f:2c:b6:f9:a2:d1:a2:
                    38:a5:23:55:8d:94:42:da:d0:db:36:f6:98:6d:1d:
                    10:a6:ab:54:6f:5d:66:3f:41:47:9b:7b:47:22:4d:
                    f9:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:7B:F6:23:AF:CB:B8:6C:FD:A0:A6:29:B5:3C:16:A6:B5:51:9D:9B
            X509v3 Authority Key Identifier:
                keyid:7D:E9:63:EC:E2:F0:BA:9F:77:49:AC:A3:85:42:0F:9D:70:2E:AA:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/felj7OLwup93SayjhUIPnXAuqos.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/ff6052-fa80-44b8-afca-6e2dea03d596/1/felj7OLwup93SayjhUIPnXAuqos.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/ff6052-fa80-44b8-afca-6e2dea03d596/1/felj7OLwup93SayjhUIPnXAuqos.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:eb:79:e2:54:4c:56:b5:c0:24:00:4e:fa:7a:17:58:fa:0e:
         89:a1:a1:64:4d:8f:7b:c6:ff:2f:98:d7:60:ed:e2:6a:a4:98:
         7a:04:a9:73:ca:11:e9:f7:17:e1:05:13:c0:45:b2:1c:26:aa:
         81:b0:f5:29:c1:75:61:6a:45:87:be:23:4f:64:af:94:b2:3a:
         b0:00:e2:e9:30:0b:92:06:60:c7:82:7b:ec:ee:cc:16:7a:52:
         10:3f:e5:77:0d:eb:b5:d5:47:94:69:7b:ea:a2:66:b3:f7:e1:
         09:92:a3:41:01:e1:b9:fe:57:19:94:1c:59:1b:d1:0e:00:15:
         f3:7d:d2:9f:cb:b8:79:c8:9b:70:99:c0:d8:c3:63:e2:75:07:
         b6:23:36:5f:9e:a0:db:16:c1:7e:f1:79:b0:6d:f0:22:a4:07:
         42:78:73:85:6c:2d:e1:8c:e0:52:84:14:ac:f2:54:15:17:57:
         c6:49:ec:96:04:3e:5e:76:c6:27:81:fc:37:c3:42:34:82:c5:
         c0:92:49:8a:85:84:24:52:25:b7:c8:3c:00:a8:33:ad:9f:c3:
         16:56:b1:82:4d:28:a8:b1:88:a0:c9:e5:b9:61:52:fc:28:e9:
         8c:93:55:6b:dc:5c:be:8d:cf:e7:1f:bf:5a:36:b1:38:b1:40:
         e5:80:4a:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 21:37:43 2025 by rpki-client