Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/0985e7-df08-42a5-9a86-bd91e92aca90/1/fsgd4tovClqrQYJhS7zF5BPVUhs.mft
File:                     fsgd4tovClqrQYJhS7zF5BPVUhs.mft (raw, json)
Hash identifier:          cjWd0MzauWjAyWb0PkCHilo4w3CX0+y8GzPVvSJlHqU=
Subject key identifier:   BB:C0:CB:9C:BB:AE:F8:DA:70:69:4F:20:B9:19:08:73:85:78:A2:0D
Authority key identifier: 7E:C8:1D:E2:DA:2F:0A:5A:AB:41:82:61:4B:BC:C5:E4:13:D5:52:1B
Certificate issuer:       /CN=7ec81de2da2f0a5aab4182614bbcc5e413d5521b
Certificate serial:       0197C1C9189E88356F65B2D3E1269964D4FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fsgd4tovClqrQYJhS7zF5BPVUhs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/0985e7-df08-42a5-9a86-bd91e92aca90/1/fsgd4tovClqrQYJhS7zF5BPVUhs.mft
Manifest number:          15BF
Signing time:             Mon 30 Jun 2025 17:01:11 +0000
Manifest this update:     Mon 30 Jun 2025 17:01:11 +0000
Manifest next update:     Tue 01 Jul 2025 17:01:11 +0000
Files and hashes:         1: Bm4fWDiAgtSgEEDsoqVp0hZs-1U.roa (hash: 4AYDFkMaa0ydrctcy3Ily/9B1nza0T1CPUGQdlaU1vk=)
                          2: fsgd4tovClqrQYJhS7zF5BPVUhs.crl (hash: YElrN8VOAoYKTDFy5SK7osN4ppz7vZoK1/DyFxS0WXk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/0985e7-df08-42a5-9a86-bd91e92aca90/1/fsgd4tovClqrQYJhS7zF5BPVUhs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/0985e7-df08-42a5-9a86-bd91e92aca90/1/fsgd4tovClqrQYJhS7zF5BPVUhs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fsgd4tovClqrQYJhS7zF5BPVUhs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 01 Jul 2025 15:11:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:c1:c9:18:9e:88:35:6f:65:b2:d3:e1:26:99:64:d4:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ec81de2da2f0a5aab4182614bbcc5e413d5521b
        Validity
            Not Before: Jun 30 17:01:11 2025 GMT
            Not After : Jul  1 17:01:11 2025 GMT
        Subject: CN=bbc0cb9cbbaef8da70694f20b91908738578a20d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b8:35:5b:8b:22:ae:6c:b4:01:d0:e0:b2:2a:
                    d9:fb:76:be:73:95:d1:60:92:19:69:fb:fd:1f:46:
                    c0:bf:46:83:19:07:bc:67:76:a6:63:eb:f6:77:6e:
                    66:0f:90:b8:d5:c3:ae:16:72:11:8b:1c:40:a2:54:
                    8d:22:2d:b8:2c:60:e9:f3:b4:b1:6b:db:ef:4a:4e:
                    ae:cd:44:b4:dd:5c:8b:d8:e2:e4:cf:b1:60:08:2c:
                    71:eb:b1:02:4d:a5:43:11:c6:30:80:36:f1:32:b6:
                    12:71:8f:b6:fa:15:71:25:89:3f:fd:56:64:4a:b0:
                    20:71:66:41:04:ee:f4:10:52:18:9f:8e:f4:9d:d6:
                    7e:9b:2c:ad:c5:39:89:24:bd:c9:d4:8f:45:00:ea:
                    53:19:f5:a9:f1:e0:14:57:89:20:21:2a:0b:60:f1:
                    b6:dd:a3:63:db:18:cc:04:b4:39:c3:cc:52:81:c4:
                    8f:55:54:c2:e9:b3:a4:b1:4b:95:ee:68:5c:19:13:
                    34:1e:66:24:cf:e5:15:44:21:79:f1:81:7d:7f:1d:
                    76:f0:64:5c:ca:9b:47:90:03:c4:ea:f6:8e:61:e2:
                    99:81:c5:a5:dc:78:6f:51:dd:7f:56:19:eb:46:25:
                    73:bd:1a:c0:55:dc:c3:89:0c:83:6f:6d:6b:d6:92:
                    48:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:C0:CB:9C:BB:AE:F8:DA:70:69:4F:20:B9:19:08:73:85:78:A2:0D
            X509v3 Authority Key Identifier:
                keyid:7E:C8:1D:E2:DA:2F:0A:5A:AB:41:82:61:4B:BC:C5:E4:13:D5:52:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsgd4tovClqrQYJhS7zF5BPVUhs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0985e7-df08-42a5-9a86-bd91e92aca90/1/fsgd4tovClqrQYJhS7zF5BPVUhs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0985e7-df08-42a5-9a86-bd91e92aca90/1/fsgd4tovClqrQYJhS7zF5BPVUhs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:04:c3:48:c4:6b:6d:25:c0:38:89:36:b9:f6:33:95:80:fe:
         59:cb:64:28:41:28:dd:70:00:d7:cd:47:cc:2a:a0:b9:5b:e7:
         08:ea:fd:56:a4:8e:a0:e1:44:cf:57:b0:73:8b:05:96:5a:43:
         dd:d1:30:b8:85:7a:5b:1b:1d:3d:97:28:91:2d:ad:ef:93:8f:
         c3:b1:d6:35:b0:0d:78:6d:0f:29:a9:ec:20:fe:b3:b6:ea:54:
         99:f3:7c:d4:de:b1:7a:0b:11:79:ad:2a:c1:63:0f:d0:08:07:
         7d:b1:a3:87:5d:f4:a3:e4:ca:07:0a:3b:5a:2c:fe:6c:59:be:
         a2:d3:29:34:06:e6:ec:49:aa:55:32:76:3e:b0:b0:5c:98:b3:
         d4:1a:1b:6c:5e:bb:45:f0:0c:20:f7:40:56:72:c4:d5:71:8f:
         9a:1c:03:41:c4:29:e6:e1:e0:8a:10:e3:6c:5b:60:bb:7c:bb:
         0c:9e:e2:a8:17:58:50:8b:20:c0:c8:4f:ee:52:01:b5:85:47:
         f4:8a:f4:c3:cc:5b:05:c1:ef:17:ed:39:25:95:f6:01:d3:40:
         b5:b0:d7:ac:a4:a8:cc:ee:e0:13:32:4c:4c:a9:f1:4e:76:b6:
         79:5a:07:c1:43:8f:b1:35:3e:27:a8:3d:cf:36:3c:6f:9a:7c:
         3d:04:26:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 00:53:08 2025 by rpki-client