Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.mft
File:                     FtFVOcARIQZur-lb40Ad-kRAd4U.mft (raw, json)
Hash identifier:          lLdLOs9j+NoGecWtXKgm2w7uLSu3mdFQkti+W3mauQ0=
Subject key identifier:   DD:25:EE:F5:50:ED:AC:3C:D9:7E:5F:37:F0:A3:6B:04:21:44:3D:15
Authority key identifier: 16:D1:55:39:C0:11:21:06:6E:AF:E9:5B:E3:40:1D:FA:44:40:77:85
Certificate issuer:       /CN=16d15539c01121066eafe95be3401dfa44407785
Certificate serial:       0197B820D5E190F55EEB072AF91766BB91DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FtFVOcARIQZur-lb40Ad-kRAd4U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.mft
Manifest number:          06D5
Signing time:             Sat 28 Jun 2025 20:00:48 +0000
Manifest this update:     Sat 28 Jun 2025 20:00:48 +0000
Manifest next update:     Sun 29 Jun 2025 20:00:48 +0000
Files and hashes:         1: FtFVOcARIQZur-lb40Ad-kRAd4U.crl (hash: naVCav6eYRaJy0Rm1AqVMXa2zbXURdMgKecn499/m48=)
                          2: QOsoDDzE2ufJorNRF7vrLppBjZI.roa (hash: fHVneKRvI/gKsCi1tf45/HVfXiMRdMYJLFW5hZLpBag=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FtFVOcARIQZur-lb40Ad-kRAd4U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b8:20:d5:e1:90:f5:5e:eb:07:2a:f9:17:66:bb:91:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16d15539c01121066eafe95be3401dfa44407785
        Validity
            Not Before: Jun 28 20:00:48 2025 GMT
            Not After : Jun 29 20:00:48 2025 GMT
        Subject: CN=dd25eef550edac3cd97e5f37f0a36b0421443d15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:26:4c:dc:d9:84:43:db:54:00:a7:23:c8:74:
                    c8:57:fa:43:66:a1:50:95:79:30:ea:89:74:e1:03:
                    73:ee:54:dc:d4:e6:7d:11:8d:3a:13:84:72:c8:e0:
                    dc:7e:91:f1:35:ee:c2:e0:69:de:74:46:c2:1b:8c:
                    50:b2:40:f4:5d:28:10:52:50:f6:a6:15:2a:19:e4:
                    86:1f:e6:c8:b7:74:e4:83:8a:1e:4a:70:88:a3:34:
                    1e:be:df:94:04:c5:02:fe:3d:03:ea:1e:40:a6:d8:
                    88:fd:1b:ef:70:f1:a1:c1:72:8e:c1:79:25:14:e0:
                    1f:50:31:3e:79:a5:80:ea:d6:35:32:f6:e9:0a:69:
                    b6:8d:82:1b:ee:18:a3:18:a0:52:0c:44:3b:a1:b8:
                    25:3b:8e:a6:35:5f:e5:ec:00:24:5f:fa:6a:a5:ca:
                    59:71:f4:cb:5a:d5:64:64:04:e0:50:bb:7b:bd:e9:
                    78:8e:3f:fc:db:f2:d8:6f:48:02:72:e4:ee:dd:75:
                    11:c5:52:40:a5:e8:d6:37:33:85:ee:a0:3b:c0:a7:
                    d5:ea:08:50:77:f3:44:fb:77:76:fa:6b:19:36:35:
                    72:39:0a:dc:68:7d:d5:15:cc:83:eb:5a:f2:b9:81:
                    ac:ef:3d:13:e1:0e:5a:80:71:34:a7:31:57:90:a8:
                    3a:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:25:EE:F5:50:ED:AC:3C:D9:7E:5F:37:F0:A3:6B:04:21:44:3D:15
            X509v3 Authority Key Identifier:
                keyid:16:D1:55:39:C0:11:21:06:6E:AF:E9:5B:E3:40:1D:FA:44:40:77:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FtFVOcARIQZur-lb40Ad-kRAd4U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/91b994-2186-4d2b-b065-e86fff93f45d/1/FtFVOcARIQZur-lb40Ad-kRAd4U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e1:0c:8d:ec:ca:57:ac:fa:50:cf:10:0e:62:f2:e6:88:22:ad:
         ba:44:83:ee:a8:c7:a1:c8:a4:40:6d:ac:37:3f:00:b3:da:2c:
         ad:93:2a:6b:69:30:8e:72:dd:de:4d:89:4c:f4:64:dc:f4:64:
         7f:01:88:2b:ae:f4:99:0d:1c:c7:e3:3a:ca:05:15:30:bc:2b:
         8e:1b:33:b8:a8:9e:86:f5:67:1c:f4:9c:13:76:94:a8:34:73:
         86:f9:93:c0:a5:c3:76:2a:c9:ed:36:2e:75:64:c8:16:62:18:
         ec:da:62:71:c8:0a:81:4c:83:c5:d0:98:08:10:3c:6b:13:04:
         65:30:7b:a5:2d:a1:4a:1b:30:ba:ee:ab:b8:82:e8:00:7f:f3:
         6a:55:69:6b:6e:15:20:c1:49:1e:fc:c4:84:6b:d0:1c:ce:67:
         8c:f5:0d:60:b8:17:fa:89:a7:05:6e:68:9e:9f:24:1a:e5:b0:
         27:42:d8:08:7c:11:46:02:ae:3f:c2:ae:11:c9:2e:e9:e7:2e:
         d2:11:4c:cf:ed:28:aa:50:73:a1:4a:db:7b:f5:2b:c3:0b:36:
         24:cc:f9:d1:4c:03:55:3e:27:a9:1f:8c:ea:37:92:9a:d0:48:
         85:48:27:5d:1c:52:40:bf:be:3f:b0:37:18:35:c1:d2:37:e2:
         fb:07:7d:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:17:28 2025 by rpki-client