Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.mft
File:                     FmVeVZX1o8BxwSsXnbknncfbCRM.mft (raw, json)
Hash identifier:          7XJEiuYub+wXCHvuTJWHOm7S11ugVwiOMjLXaTc9eP4=
Subject key identifier:   7C:42:E5:00:D1:8B:F4:1E:30:74:D9:17:40:CB:2F:48:81:91:68:CD
Authority key identifier: 16:65:5E:55:95:F5:A3:C0:71:C1:2B:17:9D:B9:27:9D:C7:DB:09:13
Certificate issuer:       /CN=16655e5595f5a3c071c12b179db9279dc7db0913
Certificate serial:       0196CB72CD3531E70A923D18B5E647FE9264
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FmVeVZX1o8BxwSsXnbknncfbCRM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.mft
Manifest number:          0E51
Signing time:             Tue 13 May 2025 21:00:20 +0000
Manifest this update:     Tue 13 May 2025 21:00:20 +0000
Manifest next update:     Wed 14 May 2025 21:00:20 +0000
Files and hashes:         1: ECVhbk7HslDK7Yab6tRyfcUTM-w.roa (hash: Zu9vU6DdogZHy9494u0UUYh7x1SUMPG2Ju9mrOac5EY=)
                          2: FmVeVZX1o8BxwSsXnbknncfbCRM.crl (hash: t1ZOf0bLgL8OA7zvRBbwXFGP3VHG2rCLwAEpze7mCuU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FmVeVZX1o8BxwSsXnbknncfbCRM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 May 2025 21:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:cb:72:cd:35:31:e7:0a:92:3d:18:b5:e6:47:fe:92:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16655e5595f5a3c071c12b179db9279dc7db0913
        Validity
            Not Before: May 13 21:00:20 2025 GMT
            Not After : May 14 21:00:20 2025 GMT
        Subject: CN=7c42e500d18bf41e3074d91740cb2f48819168cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:1c:1f:1c:62:32:97:8a:3d:2a:fb:42:26:eb:
                    0c:d5:53:4f:d2:d2:c7:2e:6f:72:4e:4c:c7:fd:a1:
                    33:2d:b7:bd:14:40:45:9f:ad:42:a0:42:98:ca:58:
                    93:cc:9f:47:34:2b:8d:12:55:04:08:bb:15:de:4a:
                    55:70:2a:fe:5e:b6:2e:6e:47:c5:b0:be:8e:89:39:
                    71:05:aa:4e:34:9f:93:07:2d:5a:be:6a:ad:31:e8:
                    5a:0f:c6:81:78:e3:a8:57:40:06:6f:4c:20:0d:77:
                    fe:4d:ef:f3:ad:25:c4:6e:1c:71:8a:98:87:54:dd:
                    45:9d:8e:99:05:6a:8b:84:9e:25:96:dc:f6:5a:a1:
                    c1:65:d6:8b:ea:c4:97:ab:52:f3:2a:d5:5d:92:51:
                    ac:1d:10:91:f5:71:b6:42:bc:bc:43:c4:04:0a:ca:
                    34:02:0f:7c:a3:69:d9:f2:5d:fb:d9:8b:e8:95:3e:
                    e1:d5:e8:32:7e:7c:d9:48:a1:fa:ef:3e:9a:fd:61:
                    f8:6d:69:bb:fc:8c:79:ee:3a:ba:a6:5a:d9:ad:e6:
                    3c:f0:12:b6:16:7c:61:4c:2b:bf:b3:4b:9a:b6:ac:
                    78:3d:1f:12:32:37:42:80:be:5e:6b:ae:49:09:aa:
                    15:14:2b:23:89:c3:1c:64:94:7c:e7:26:ac:c4:dd:
                    dc:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:42:E5:00:D1:8B:F4:1E:30:74:D9:17:40:CB:2F:48:81:91:68:CD
            X509v3 Authority Key Identifier:
                keyid:16:65:5E:55:95:F5:A3:C0:71:C1:2B:17:9D:B9:27:9D:C7:DB:09:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FmVeVZX1o8BxwSsXnbknncfbCRM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/6719cd-864a-42f0-818f-dd4804840dd6/1/FmVeVZX1o8BxwSsXnbknncfbCRM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:da:ee:84:47:ac:d0:a1:68:fd:5e:14:0c:13:96:20:78:12:
         bf:02:b3:e2:e0:07:88:ac:64:5f:c1:81:f2:a8:03:e7:20:6e:
         15:2d:da:63:c2:8d:7d:7b:ac:63:c3:24:d3:8e:8c:d3:42:69:
         ee:45:9a:78:f9:9e:05:ca:66:80:0b:ac:a4:de:9a:78:15:00:
         94:b2:b9:9d:20:5f:71:fb:e6:45:f1:70:d9:a6:b6:4d:a6:cb:
         49:1a:48:c7:06:e3:29:b6:e2:84:ca:c3:24:f4:9a:71:bb:d4:
         9f:2d:af:ab:d6:1c:7a:5c:64:5d:68:04:58:3f:ed:22:7c:2d:
         b1:c4:e4:9b:bd:31:6f:55:c1:b9:0d:cd:52:96:1e:f0:52:e7:
         c1:d6:26:e1:f8:17:1e:1f:cb:97:c7:de:11:31:e3:8e:c1:ac:
         dd:4d:4c:96:bd:d6:f7:f9:d0:e9:09:27:75:42:ba:2a:9e:ec:
         60:0b:9b:01:93:d0:d1:88:16:c9:9d:59:1e:65:2b:6e:f2:2d:
         2a:0f:46:07:f0:df:91:5e:04:9e:7c:05:69:59:c8:7d:d4:1c:
         49:fb:bb:5e:d6:94:a4:be:e6:4d:05:8d:92:3e:a4:02:92:16:
         fe:50:a5:a3:68:41:25:fd:fc:94:b0:f4:7b:20:3c:9e:5f:cc:
         c0:f8:ee:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbLcs01MecKkj0YteZH/pJkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2NjU1ZTU1OTVmNWEzYzA3MWMxMmIxNzlkYjkyNzlkYzdk
YjA5MTMwHhcNMjUwNTEzMjEwMDIwWhcNMjUwNTE0MjEwMDIwWjAzMTEwLwYDVQQD
Eyg3YzQyZTUwMGQxOGJmNDFlMzA3NGQ5MTc0MGNiMmY0ODgxOTE2OGNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhwfHGIyl4o9KvtCJusM1VNP0tLH
Lm9yTkzH/aEzLbe9FEBFn61CoEKYyliTzJ9HNCuNElUECLsV3kpVcCr+XrYubkfF
sL6OiTlxBapONJ+TBy1avmqtMehaD8aBeOOoV0AGb0wgDXf+Te/zrSXEbhxxipiH
VN1FnY6ZBWqLhJ4lltz2WqHBZdaL6sSXq1LzKtVdklGsHRCR9XG2Qry8Q8QECso0
Ag98o2nZ8l372YvolT7h1egyfnzZSKH67z6a/WH4bWm7/Ix57jq6plrZreY88BK2
FnxhTCu/s0uatqx4PR8SMjdCgL5ea65JCaoVFCsjicMcZJR85yasxN3cBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHxC5QDRi/QeMHTZF0DLL0iBkWjNMB8GA1UdIwQY
MBaAFBZlXlWV9aPAccErF525J53H2wkTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRm1WZVZaWDFvOEJ4d1NzWG5ia25uY2ZiQ1JNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC82NzE5Y2QtODY0YS00MmYwLTgxOGYt
ZGQ0ODA0ODQwZGQ2LzEvRm1WZVZaWDFvOEJ4d1NzWG5ia25uY2ZiQ1JNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC82NzE5Y2QtODY0YS00MmYwLTgxOGYtZGQ0ODA0ODQwZGQ2
LzEvRm1WZVZaWDFvOEJ4d1NzWG5ia25uY2ZiQ1JNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVdruhEes
0KFo/V4UDBOWIHgSvwKz4uAHiKxkX8GB8qgD5yBuFS3aY8KNfXusY8Mk046M00Jp
7kWaePmeBcpmgAuspN6aeBUAlLK5nSBfcfvmRfFw2aa2TabLSRpIxwbjKbbihMrD
JPSacbvUny2vq9YcelxkXWgEWD/tInwtscTkm70xb1XBuQ3NUpYe8FLnwdYm4fgX
Hh/Ll8feETHjjsGs3U1Mlr3W9/nQ6QkndUK6Kp7sYAubAZPQ0YgWyZ1ZHmUrbvIt
Kg9GB/DfkV4EnnwFaVnIfdQcSfu7XtaUpL7mTQWNkj6kApIW/lClo2hBJf38lLD0
eyA8nl/MwPjuUw==
-----END CERTIFICATE-----
Generated at Wed May 14 05:19:31 2025 by rpki-client