Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/956c37-993a-41de-abe0-65d722837121/1/FZ0wtwuag8uO1VAfVUp_7KOC-Vk.mft
File:                     FZ0wtwuag8uO1VAfVUp_7KOC-Vk.mft (raw, json)
Hash identifier:          I7qJwnri8+JBN60xr0RcOS6zvz8tXYw/Z/MjVt11noE=
Subject key identifier:   2E:2D:FC:41:8D:0B:A5:56:12:3F:D0:2C:07:3F:AC:36:BA:ED:FF:9A
Authority key identifier: 15:9D:30:B7:0B:9A:83:CB:8E:D5:50:1F:55:4A:7F:EC:A3:82:F9:59
Certificate issuer:       /CN=159d30b70b9a83cb8ed5501f554a7feca382f959
Certificate serial:       0196C49573547E725977FAF2EFCA3B1225DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FZ0wtwuag8uO1VAfVUp_7KOC-Vk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/956c37-993a-41de-abe0-65d722837121/1/FZ0wtwuag8uO1VAfVUp_7KOC-Vk.mft
Manifest number:          06FD
Signing time:             Mon 12 May 2025 13:00:50 +0000
Manifest this update:     Mon 12 May 2025 13:00:50 +0000
Manifest next update:     Tue 13 May 2025 13:00:50 +0000
Files and hashes:         1: Dio0fKwjaz8mgVWvDfl4tq6lDf4.roa (hash: pj+y9YgulsDhHROR3sIL55OAwSn4ndZYjqojLyj44RM=)
                          2: FZ0wtwuag8uO1VAfVUp_7KOC-Vk.crl (hash: GiGssP/lfl3hGd5CeWYInyGlDY+5lLsMaPFVIPgdqSQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/956c37-993a-41de-abe0-65d722837121/1/FZ0wtwuag8uO1VAfVUp_7KOC-Vk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/956c37-993a-41de-abe0-65d722837121/1/FZ0wtwuag8uO1VAfVUp_7KOC-Vk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FZ0wtwuag8uO1VAfVUp_7KOC-Vk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 13:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c4:95:73:54:7e:72:59:77:fa:f2:ef:ca:3b:12:25:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=159d30b70b9a83cb8ed5501f554a7feca382f959
        Validity
            Not Before: May 12 13:00:50 2025 GMT
            Not After : May 13 13:00:50 2025 GMT
        Subject: CN=2e2dfc418d0ba556123fd02c073fac36baedff9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ce:66:a8:a6:cf:a7:44:67:1b:d8:9f:ff:d0:
                    78:4f:b2:3b:ec:5f:8b:6a:c9:ea:80:88:a0:9f:73:
                    f7:90:81:e6:10:b3:39:e5:39:4b:6f:4e:7a:12:1d:
                    4c:25:d1:2a:f7:c8:85:1d:4a:ab:b3:dc:ad:c1:78:
                    d8:ee:e5:b8:b4:e5:4c:fa:fe:b7:13:a1:bc:0b:16:
                    08:cd:2d:83:9a:4a:74:e6:d6:88:37:2f:a9:71:ee:
                    f3:e0:da:00:b4:14:8a:bd:39:f9:32:63:aa:04:02:
                    9f:81:62:27:68:be:bc:12:f8:c9:dd:11:79:48:06:
                    a1:ea:7d:cc:86:19:59:da:49:13:c7:2c:a2:08:ff:
                    f8:83:f6:3f:32:19:45:78:c6:16:a0:50:5a:ce:be:
                    99:f4:97:8e:20:f8:2e:fe:9a:3f:bc:f1:3c:e6:39:
                    65:7d:0d:9b:18:5f:6d:6a:09:1a:36:5a:96:84:38:
                    e7:71:3f:09:bc:21:4f:ae:f1:f0:68:a2:3d:33:f2:
                    14:d0:f1:ba:22:1b:c5:37:45:e3:1d:b4:ec:5a:2a:
                    3b:45:1f:8b:d6:69:bf:42:90:6f:48:2e:a1:74:2a:
                    d8:7f:fd:d3:a6:7c:be:fe:84:c4:0f:bf:81:b1:9a:
                    dd:98:1f:2d:18:5d:ed:d5:46:ca:8a:03:3e:e3:32:
                    43:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:2D:FC:41:8D:0B:A5:56:12:3F:D0:2C:07:3F:AC:36:BA:ED:FF:9A
            X509v3 Authority Key Identifier:
                keyid:15:9D:30:B7:0B:9A:83:CB:8E:D5:50:1F:55:4A:7F:EC:A3:82:F9:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZ0wtwuag8uO1VAfVUp_7KOC-Vk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/956c37-993a-41de-abe0-65d722837121/1/FZ0wtwuag8uO1VAfVUp_7KOC-Vk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/956c37-993a-41de-abe0-65d722837121/1/FZ0wtwuag8uO1VAfVUp_7KOC-Vk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:fd:e0:47:6b:e2:90:f6:70:eb:42:db:76:30:55:8d:6d:8d:
         11:7b:59:93:fb:b4:c4:9b:ef:3a:39:85:32:8e:fd:1c:19:94:
         e0:00:15:0e:18:13:b4:18:2e:ee:ca:c3:1c:c0:83:c4:d0:6d:
         c7:13:80:b2:cd:be:7f:2e:d5:51:18:1d:47:b4:8d:9b:7f:38:
         fa:6a:cc:79:ce:3f:0e:0c:c5:a8:3a:77:5d:c8:b7:46:d2:63:
         d1:43:b2:9c:70:d0:fc:0e:76:8c:9f:d4:68:3e:cb:c8:26:4f:
         8d:63:8a:4e:d0:e0:99:02:ff:77:9b:36:eb:a2:25:61:0b:81:
         55:dc:83:cc:e5:b8:7d:b1:85:a9:bf:9a:84:71:e5:2b:9d:4b:
         92:9b:f4:9a:24:ed:db:3a:96:f4:0f:96:93:20:ab:13:01:64:
         60:45:10:76:26:ae:e8:18:43:56:b3:df:0e:99:8d:3b:0c:30:
         71:10:c9:45:b4:96:2c:36:a6:34:66:cb:15:d2:20:49:8f:5e:
         d2:c7:41:12:d5:27:c8:02:dc:da:1c:91:07:86:f4:81:54:1d:
         20:2a:4b:64:5d:ec:2d:98:c0:42:51:09:fb:f9:16:af:39:77:
         94:53:3f:31:dd:4d:b3:0b:f2:08:5c:d3:fd:9d:b9:2d:92:a0:
         79:6d:23:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 19:47:50 2025 by rpki-client