Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.mft
File:                     FmVeVZX1o8BxwSsXnbknncfbCRM.mft (raw, json)
Hash identifier:          jQZurjGNweuQbuWOWxB9h304EvA/3B5v2aLvha3fhBc=
Subject key identifier:   85:D0:6B:53:52:8B:A7:AD:6E:B4:AE:4F:88:63:62:E9:53:3A:A3:43
Authority key identifier: 16:65:5E:55:95:F5:A3:C0:71:C1:2B:17:9D:B9:27:9D:C7:DB:09:13
Certificate issuer:       /CN=16655e5595f5a3c071c12b179db9279dc7db0913
Certificate serial:       0197CE3B5947926229EAB0A9EE96DC64DF3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FmVeVZX1o8BxwSsXnbknncfbCRM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.mft
Manifest number:          0ED7
Signing time:             Thu 03 Jul 2025 03:01:25 +0000
Manifest this update:     Thu 03 Jul 2025 03:01:25 +0000
Manifest next update:     Fri 04 Jul 2025 03:01:25 +0000
Files and hashes:         1: ECVhbk7HslDK7Yab6tRyfcUTM-w.roa (hash: Zu9vU6DdogZHy9494u0UUYh7x1SUMPG2Ju9mrOac5EY=)
                          2: FmVeVZX1o8BxwSsXnbknncfbCRM.crl (hash: 7UXW/WsRZe9dC8C3/Y5n/wHv6aTJWISeFIZi2y4dzYE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FmVeVZX1o8BxwSsXnbknncfbCRM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 04 Jul 2025 03:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:ce:3b:59:47:92:62:29:ea:b0:a9:ee:96:dc:64:df:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16655e5595f5a3c071c12b179db9279dc7db0913
        Validity
            Not Before: Jul  3 03:01:25 2025 GMT
            Not After : Jul  4 03:01:25 2025 GMT
        Subject: CN=85d06b53528ba7ad6eb4ae4f886362e9533aa343
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c0:ea:f1:71:fc:e6:ed:2b:b5:96:62:c0:b2:
                    51:88:1f:6b:1e:68:05:5f:47:19:8b:99:11:17:10:
                    00:fe:9b:30:ee:d7:a7:82:2b:2b:70:d6:13:0a:9d:
                    17:23:aa:d6:19:2b:87:e9:6e:f3:30:b2:0f:3c:48:
                    97:44:c9:c1:47:ac:2d:64:f8:c4:44:ac:34:d9:27:
                    0d:85:60:bb:37:7a:45:db:55:b5:47:44:cf:9f:47:
                    79:d2:1a:a9:0b:f6:b7:90:b4:8e:46:e7:4c:ea:94:
                    37:8a:66:02:b7:f2:0e:76:fe:72:8c:4b:a0:d4:99:
                    e8:48:d2:67:4f:46:e9:cd:94:38:08:59:1f:66:1a:
                    30:1c:1c:57:12:ef:10:19:ef:3e:8b:c4:ea:2c:fe:
                    07:0c:16:27:00:c6:db:b2:eb:7a:45:0d:72:aa:10:
                    d8:05:e0:ae:92:a6:88:cd:37:24:f2:1a:0c:dd:19:
                    93:4f:cb:56:26:d3:93:06:c4:09:d1:ff:fb:a3:98:
                    e8:9f:f0:6a:a5:bf:26:d7:4b:4a:29:df:8d:21:f0:
                    d3:47:64:ba:87:15:88:95:ff:05:d4:e4:a7:b8:bd:
                    3a:06:24:f9:76:5a:53:f0:d3:20:cb:71:67:74:45:
                    27:70:b6:27:5e:65:2e:75:36:aa:de:0c:f6:94:6e:
                    db:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:D0:6B:53:52:8B:A7:AD:6E:B4:AE:4F:88:63:62:E9:53:3A:A3:43
            X509v3 Authority Key Identifier:
                keyid:16:65:5E:55:95:F5:A3:C0:71:C1:2B:17:9D:B9:27:9D:C7:DB:09:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FmVeVZX1o8BxwSsXnbknncfbCRM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:93:5d:34:d3:c5:86:1f:20:7a:fa:b4:84:65:6d:4d:95:b9:
         0e:c0:20:04:18:c0:eb:fc:d2:7a:14:31:5e:42:f9:31:c6:3e:
         b3:19:3c:08:94:77:dc:97:14:72:67:a5:f2:3c:97:be:c2:33:
         53:48:0b:b1:27:d8:2d:9e:6f:29:d4:46:27:e3:6a:64:14:a8:
         e5:04:be:69:e5:14:6b:e6:a1:eb:19:7e:0c:5f:12:31:19:2f:
         e3:2d:db:ea:40:90:01:96:c6:83:08:46:37:6d:aa:b6:68:e5:
         8f:20:3b:63:3d:4e:e7:b3:3d:0e:78:f9:b5:09:d6:32:d1:0c:
         89:4e:a4:5c:b8:8a:45:1d:1d:da:09:9e:c8:68:6d:b6:02:3e:
         a9:0a:b4:46:2a:9b:d7:7b:9b:cc:6e:07:90:b8:17:14:97:bb:
         5c:29:f0:a1:36:86:b4:6d:82:c7:2e:72:62:a3:28:f3:9d:0e:
         1e:9a:16:1e:e8:6a:b3:75:7e:1a:b0:32:44:32:e2:9f:0f:08:
         10:21:ea:16:8b:d7:0c:b2:35:71:d9:ca:44:91:0d:39:d0:f3:
         c4:5d:29:02:46:0a:54:85:95:4e:b7:b0:42:ea:bc:7b:c3:1e:
         4e:15:97:fc:1f:a8:39:a6:4a:e4:74:39:c9:ff:8b:01:87:84:
         7e:61:bb:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 10:36:12 2025 by rpki-client