Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/7a7871-08f3-4757-a9f0-bf1c5cc36b66/1/fffP1siCamf2QqNz0TGVUwjZwco.mft
File:                     fffP1siCamf2QqNz0TGVUwjZwco.mft (raw, json)
Hash identifier:          1O1dxqu1nqFBO0bOWgUBr4F2I5nTMqzypZohReyb2Uw=
Subject key identifier:   F2:36:8E:06:C6:DA:EE:DE:41:84:3C:1D:11:38:90:66:9C:79:B5:6D
Authority key identifier: 7D:F7:CF:D6:C8:82:6A:67:F6:42:A3:73:D1:31:95:53:08:D9:C1:CA
Certificate issuer:       /CN=7df7cfd6c8826a67f642a373d131955308d9c1ca
Certificate serial:       0196C9F2C203BDC0246BC4CC9F52043A1138
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fffP1siCamf2QqNz0TGVUwjZwco.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/7a7871-08f3-4757-a9f0-bf1c5cc36b66/1/fffP1siCamf2QqNz0TGVUwjZwco.mft
Manifest number:          13FE
Signing time:             Tue 13 May 2025 14:00:51 +0000
Manifest this update:     Tue 13 May 2025 14:00:51 +0000
Manifest next update:     Wed 14 May 2025 14:00:51 +0000
Files and hashes:         1: 1-QIjmT5ytjlZ7ZqLyFbtzizpu4U.roa (hash: XgYeIgk7TzTLjMF5WHOcmWJnxBjJamzS18zkuyda8BY=)
                          2: fffP1siCamf2QqNz0TGVUwjZwco.crl (hash: e5IB8NjyR6KIW4ZqC80lx1w4YeFgf5IM6CizzuEx4uU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/7a7871-08f3-4757-a9f0-bf1c5cc36b66/1/fffP1siCamf2QqNz0TGVUwjZwco.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/7a7871-08f3-4757-a9f0-bf1c5cc36b66/1/fffP1siCamf2QqNz0TGVUwjZwco.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fffP1siCamf2QqNz0TGVUwjZwco.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 May 2025 14:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c9:f2:c2:03:bd:c0:24:6b:c4:cc:9f:52:04:3a:11:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7df7cfd6c8826a67f642a373d131955308d9c1ca
        Validity
            Not Before: May 13 14:00:51 2025 GMT
            Not After : May 14 14:00:51 2025 GMT
        Subject: CN=f2368e06c6daeede41843c1d113890669c79b56d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d3:0a:93:9d:6d:43:43:be:ed:11:b1:80:72:
                    ca:97:11:7f:e4:61:4b:45:20:78:3e:21:68:cd:41:
                    7a:5a:ed:7d:c6:2b:4d:22:02:d8:82:ab:81:33:c7:
                    13:8d:9b:b8:ff:45:c9:17:df:26:ee:b1:a7:2b:ea:
                    7e:94:ca:85:e3:63:3c:f5:73:23:70:30:23:a1:cd:
                    d0:dd:73:70:8d:fc:2a:8a:75:73:5c:24:be:a5:a9:
                    cb:7d:80:ab:20:01:50:7a:c4:a7:db:98:38:40:84:
                    9b:38:a3:c4:4a:c8:61:4c:45:eb:54:44:b2:78:49:
                    fb:5a:88:fc:4b:9b:97:dd:15:bf:e8:18:a0:ae:4d:
                    f8:47:6d:66:51:35:af:9a:cf:38:df:56:e2:a5:9f:
                    20:f1:a2:2b:e9:8b:bd:8e:99:e7:08:86:14:c4:a7:
                    ba:21:bb:e2:4f:05:b7:03:42:a1:a3:76:de:85:e2:
                    c4:c5:85:b8:af:4d:7f:80:0d:82:c4:0f:c4:99:87:
                    49:a9:47:19:36:2c:1d:b7:b9:2f:e2:a2:bf:88:2a:
                    2f:70:0d:52:45:94:f7:52:77:c5:18:c8:66:b9:0c:
                    51:cd:79:52:ec:f4:85:5d:2d:4c:85:ac:8f:ad:97:
                    47:94:12:a0:9f:ab:4d:8d:1b:27:33:7d:bb:35:dd:
                    73:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:36:8E:06:C6:DA:EE:DE:41:84:3C:1D:11:38:90:66:9C:79:B5:6D
            X509v3 Authority Key Identifier:
                keyid:7D:F7:CF:D6:C8:82:6A:67:F6:42:A3:73:D1:31:95:53:08:D9:C1:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fffP1siCamf2QqNz0TGVUwjZwco.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/7a7871-08f3-4757-a9f0-bf1c5cc36b66/1/fffP1siCamf2QqNz0TGVUwjZwco.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/7a7871-08f3-4757-a9f0-bf1c5cc36b66/1/fffP1siCamf2QqNz0TGVUwjZwco.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:b7:d5:02:d3:34:33:63:d2:d1:d0:fa:b0:97:12:c6:80:cc:
         2f:b4:f1:2b:14:85:ff:67:78:3a:4c:b7:ba:46:0e:e6:cf:5b:
         92:28:67:dd:26:ce:d9:40:2c:99:a4:5a:ca:8f:1e:30:b0:5f:
         f0:b2:51:a5:4c:5f:70:9e:0a:9f:1e:d1:97:ae:54:33:8d:e8:
         99:f9:13:67:26:20:bf:ce:3f:63:6b:7f:dc:97:a7:71:9b:5a:
         42:5b:7a:0a:da:88:3d:92:00:f2:1e:91:f9:54:b2:a8:c5:21:
         c7:85:9e:86:95:c6:a1:65:53:ec:0b:e3:69:88:be:63:89:a0:
         73:eb:3f:bc:e6:58:4e:df:f4:da:cf:11:03:05:4f:a6:50:03:
         0e:bd:de:4f:fc:8e:87:57:d8:94:53:8d:ae:24:72:43:a6:c8:
         aa:9d:b2:d8:6c:11:6b:f6:49:34:91:9c:ca:32:be:5f:c4:f5:
         8e:2a:cd:75:7a:b5:86:db:56:fa:1e:65:d6:51:4a:26:53:34:
         e9:2d:46:84:91:51:90:2b:4e:99:53:12:b3:0f:1a:82:b4:9c:
         02:db:bf:26:dc:e9:3a:a5:a4:2f:22:9d:97:a3:0d:da:ad:68:
         4f:14:7d:27:f2:ca:c9:d2:6e:41:49:dd:20:ef:67:a8:53:b6:
         30:b6:e3:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 00:15:58 2025 by rpki-client