Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/a16c4e-b5ad-47d7-8b5b-39e76db2f808/1/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.mft
File:                     FMZqeG5u8xZ0vsaDPHiuvsFjOXI.mft (raw, json)
Hash identifier:          xkp3TXnr25PeL0PGfYOS2zWcfAihyfskKUAiqV5suNM=
Subject key identifier:   67:89:45:77:9C:8D:8B:17:D8:4B:BB:B2:6B:8E:AA:E6:0F:34:6E:A5
Authority key identifier: 14:C6:6A:78:6E:6E:F3:16:74:BE:C6:83:3C:78:AE:BE:C1:63:39:72
Certificate issuer:       /CN=14c66a786e6ef31674bec6833c78aebec1633972
Certificate serial:       0196A79D5DA6888006362F6A0FF76F031503
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/a16c4e-b5ad-47d7-8b5b-39e76db2f808/1/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.mft
Manifest number:          1527
Signing time:             Tue 06 May 2025 22:00:30 +0000
Manifest this update:     Tue 06 May 2025 22:00:30 +0000
Manifest next update:     Wed 07 May 2025 22:00:30 +0000
Files and hashes:         1: FMZqeG5u8xZ0vsaDPHiuvsFjOXI.crl (hash: ddnplENoUBRbJDldY/bUJzMXlzB7Jkg9PdOtGbUDxS4=)
                          2: TSGJBwmUH6zzcSk5BJxtW8RE4eo.roa (hash: GDRdYgmwqR/8cmIcSo9mtVpLWe+BPUg+Ymiy8VwGofg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/a16c4e-b5ad-47d7-8b5b-39e76db2f808/1/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/a16c4e-b5ad-47d7-8b5b-39e76db2f808/1/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 14:16:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:a7:9d:5d:a6:88:80:06:36:2f:6a:0f:f7:6f:03:15:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14c66a786e6ef31674bec6833c78aebec1633972
        Validity
            Not Before: May  6 22:00:30 2025 GMT
            Not After : May  7 22:00:30 2025 GMT
        Subject: CN=678945779c8d8b17d84bbbb26b8eaae60f346ea5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:b0:d5:ad:a1:1d:01:67:ee:36:0f:45:9a:aa:
                    5f:a8:19:3a:00:85:19:6f:84:65:91:f8:67:59:a1:
                    5f:e8:db:c2:72:35:8e:79:b6:f3:5b:1b:fd:e4:a0:
                    0e:56:fc:6e:2e:92:15:38:b7:53:10:59:4a:8a:5b:
                    76:87:ae:22:72:ce:55:20:87:3f:62:a9:c5:9b:eb:
                    2a:64:d7:c2:1d:e5:ed:b6:a1:a3:5e:99:cb:5b:13:
                    5c:83:b1:db:39:72:23:ce:92:54:4a:d7:5b:fa:bd:
                    6e:0e:d9:d7:e1:6c:6d:fd:a1:18:de:cf:31:db:f8:
                    62:14:2a:8a:51:95:59:96:25:37:04:1e:2d:c7:a4:
                    b6:04:75:09:fb:69:67:b7:ed:3e:cb:fc:b0:b7:64:
                    71:58:cd:02:d2:54:5a:50:d1:e5:72:7a:86:08:b6:
                    5e:7d:27:47:a2:d6:af:6c:5d:b1:fc:b7:64:23:b0:
                    cb:ce:f0:c5:e6:57:a6:06:96:56:8b:0b:f5:f9:1e:
                    bf:6a:18:2d:17:2a:35:75:57:4d:99:2e:eb:1d:30:
                    06:00:65:62:cf:46:ac:08:bb:5b:46:17:7f:59:f5:
                    75:fd:c5:63:db:46:25:a3:1d:67:e9:59:60:7c:2b:
                    f1:86:60:1c:10:20:63:8e:d2:3a:d3:db:0c:48:16:
                    77:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:89:45:77:9C:8D:8B:17:D8:4B:BB:B2:6B:8E:AA:E6:0F:34:6E:A5
            X509v3 Authority Key Identifier:
                keyid:14:C6:6A:78:6E:6E:F3:16:74:BE:C6:83:3C:78:AE:BE:C1:63:39:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a16c4e-b5ad-47d7-8b5b-39e76db2f808/1/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a16c4e-b5ad-47d7-8b5b-39e76db2f808/1/FMZqeG5u8xZ0vsaDPHiuvsFjOXI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:30:62:9b:3f:e3:b5:e5:b3:e3:a0:75:c2:63:d6:38:02:7f:
         24:78:16:2e:8c:8d:9d:73:ba:11:69:17:26:e8:60:ee:9e:3e:
         5f:65:a6:99:68:af:26:41:d1:74:a0:54:85:9c:69:0a:0f:04:
         84:6c:f2:4e:c2:4c:92:c4:87:1c:ba:4d:74:93:ba:9f:52:26:
         3c:5f:af:05:8b:96:d8:cd:cc:02:8b:ff:e0:44:90:b7:56:e7:
         e6:3f:e7:6f:33:f0:c6:42:4b:fd:4a:cc:77:04:5b:8b:63:65:
         70:d7:09:4e:91:c4:4d:bd:85:c3:8f:ab:41:df:4c:b9:14:77:
         c9:e3:52:6c:a6:b2:ea:23:cb:2e:e9:00:1f:70:23:31:1a:2a:
         9a:65:b6:fa:62:f3:ee:2f:84:8b:8b:c1:19:5d:cb:1f:fe:1e:
         fb:dd:0e:4c:c8:d1:b2:ef:13:bd:50:af:01:8a:8b:85:13:3b:
         1d:3a:bd:a4:f0:b7:37:5b:b3:22:a9:f8:53:5f:e6:06:ae:c5:
         e5:ee:7c:16:d9:1e:79:06:42:d9:e8:36:0f:5a:16:93:43:f6:
         33:53:50:df:6d:7c:2f:19:76:a7:fc:f3:12:2c:68:d6:d3:7a:
         26:56:55:ea:e8:b2:96:94:0b:65:e6:0e:6a:68:36:a8:32:86:
         91:77:41:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 00:39:29 2025 by rpki-client