Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/b88139-1a93-4bd0-9825-bafb7911ee17/1/FgWNKEMMTknmGlivT9em9lbt_Z4.mft
File:                     FgWNKEMMTknmGlivT9em9lbt_Z4.mft (raw, json)
Hash identifier:          z1cJdSrEE2DF8IZZz/Iyq3AOM5SMYJb/xRlgOo1TOMU=
Subject key identifier:   FF:B6:D0:87:60:FF:28:EB:DC:0F:20:CD:A4:C6:61:A9:6A:CF:DF:17
Authority key identifier: 16:05:8D:28:43:0C:4E:49:E6:1A:58:AF:4F:D7:A6:F6:56:ED:FD:9E
Certificate issuer:       /CN=16058d28430c4e49e61a58af4fd7a6f656edfd9e
Certificate serial:       0196C125F8B2840EECB82064B993790580FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FgWNKEMMTknmGlivT9em9lbt_Z4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/b88139-1a93-4bd0-9825-bafb7911ee17/1/FgWNKEMMTknmGlivT9em9lbt_Z4.mft
Manifest number:          103E
Signing time:             Sun 11 May 2025 21:00:13 +0000
Manifest this update:     Sun 11 May 2025 21:00:13 +0000
Manifest next update:     Mon 12 May 2025 21:00:13 +0000
Files and hashes:         1: FgWNKEMMTknmGlivT9em9lbt_Z4.crl (hash: NYxgangEPYjakct+mxUMMENY1GyoSObrh58W1dagJ1k=)
                          2: sHwtxq6vNU_20TTJKVKHNMboy68.roa (hash: e+pIPXszPmA0jYLK/3ZYIDt9j7uU5CIIUFy94OjzT34=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/b88139-1a93-4bd0-9825-bafb7911ee17/1/FgWNKEMMTknmGlivT9em9lbt_Z4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/b88139-1a93-4bd0-9825-bafb7911ee17/1/FgWNKEMMTknmGlivT9em9lbt_Z4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FgWNKEMMTknmGlivT9em9lbt_Z4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 17:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c1:25:f8:b2:84:0e:ec:b8:20:64:b9:93:79:05:80:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16058d28430c4e49e61a58af4fd7a6f656edfd9e
        Validity
            Not Before: May 11 21:00:13 2025 GMT
            Not After : May 12 21:00:13 2025 GMT
        Subject: CN=ffb6d08760ff28ebdc0f20cda4c661a96acfdf17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:88:e3:d7:05:52:08:93:1a:c9:74:f1:b2:11:
                    3f:f8:5f:a6:c3:4a:d5:3d:93:5d:50:ca:44:ba:ec:
                    8a:af:4c:08:7a:88:35:b6:45:e4:0a:18:c5:6d:b0:
                    dd:1b:51:5d:f9:9c:a5:fd:7c:aa:4f:62:2c:68:7b:
                    6b:c3:a8:c5:69:b6:e6:1f:bd:f6:53:02:cd:ab:8d:
                    24:a1:a1:38:75:67:f5:b8:ed:d7:41:8e:b6:74:9b:
                    57:30:58:32:a5:b3:71:37:dd:35:87:41:15:38:7d:
                    df:75:2a:e8:84:59:dc:d2:b8:43:c7:53:c1:f7:71:
                    7e:bd:4c:14:08:3e:8e:67:2b:82:c2:e2:20:51:db:
                    13:7e:06:5b:64:c6:d5:09:c6:74:6f:aa:6c:88:63:
                    fd:c5:4b:40:5d:e1:60:9f:8f:7d:b6:fc:40:a4:3a:
                    5d:2d:88:5a:67:4b:e5:77:31:9f:dd:d3:2f:fd:ce:
                    02:75:ab:7f:44:21:b7:09:63:8a:01:b5:17:6a:92:
                    62:5f:60:80:90:6a:9b:8f:8c:30:54:21:ee:e5:a7:
                    70:d1:dc:35:9a:47:db:98:ef:f7:89:36:8c:5e:6d:
                    da:f4:ee:fc:02:89:a3:bc:58:be:41:0f:dc:80:f9:
                    0b:a3:12:8a:95:d6:0f:68:9f:9e:ce:06:2f:5a:e2:
                    1d:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:B6:D0:87:60:FF:28:EB:DC:0F:20:CD:A4:C6:61:A9:6A:CF:DF:17
            X509v3 Authority Key Identifier:
                keyid:16:05:8D:28:43:0C:4E:49:E6:1A:58:AF:4F:D7:A6:F6:56:ED:FD:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgWNKEMMTknmGlivT9em9lbt_Z4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/b88139-1a93-4bd0-9825-bafb7911ee17/1/FgWNKEMMTknmGlivT9em9lbt_Z4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/b88139-1a93-4bd0-9825-bafb7911ee17/1/FgWNKEMMTknmGlivT9em9lbt_Z4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:2a:f8:d4:1d:8e:6c:90:dc:2b:01:ba:31:88:8b:5d:84:88:
         18:65:2e:5e:06:fb:ad:d9:15:b7:e9:38:04:8d:2a:f5:18:24:
         d1:52:67:bb:98:19:d7:80:24:e4:a6:4d:09:26:0e:5e:10:3b:
         f4:28:84:27:60:a2:f8:82:99:8b:da:79:c5:f3:bd:bf:bc:c8:
         c2:c6:55:a2:a2:33:ba:52:89:e2:54:88:27:b2:fc:33:51:d0:
         28:ed:ab:06:40:5e:4a:bb:d3:88:bb:32:29:28:db:aa:76:77:
         3a:e3:70:cf:2c:99:fe:6e:7a:a9:e2:7c:4c:71:9c:46:26:f2:
         f9:aa:8d:d5:95:81:81:34:82:f1:60:7c:72:a1:0e:f8:a1:77:
         2f:46:45:c3:fd:50:4f:cf:46:42:bf:3f:36:27:4f:42:09:35:
         40:88:7d:23:ef:4d:95:9d:7b:c7:bb:57:8d:3e:b8:95:2e:57:
         d8:ac:8d:4f:cf:ce:c1:c2:14:6b:c0:00:2e:38:ff:4e:2b:9d:
         2f:29:61:1b:60:d1:ed:14:20:bd:f0:84:df:f3:6b:d2:02:94:
         59:41:95:18:db:7d:cf:fc:59:1c:fe:e5:41:78:2b:55:ea:2a:
         92:ff:fa:e6:ff:bc:71:f5:42:ac:4e:43:e6:29:63:28:02:47:
         e3:7e:5a:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 03:21:03 2025 by rpki-client