Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/2f1264-23e8-42e0-8364-4f382cbb59f2/1/fpBL1x1v50pnFo_ZE-gocidVtJQ.mft
File:                     fpBL1x1v50pnFo_ZE-gocidVtJQ.mft (raw, json)
Hash identifier:          BeVcAvea9ipTsbCxrAkoyYQcm/ESRMo2mc0H8Suoues=
Subject key identifier:   BE:24:7E:60:13:99:68:DE:EE:22:E1:11:CE:B6:A1:A9:CA:2B:6C:3D
Authority key identifier: 7E:90:4B:D7:1D:6F:E7:4A:67:16:8F:D9:13:E8:28:72:27:55:B4:94
Certificate issuer:       /CN=7e904bd71d6fe74a67168fd913e828722755b494
Certificate serial:       01969FE46DDFC6C2814B4B6CF10666161A33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fpBL1x1v50pnFo_ZE-gocidVtJQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/2f1264-23e8-42e0-8364-4f382cbb59f2/1/fpBL1x1v50pnFo_ZE-gocidVtJQ.mft
Manifest number:          05EC
Signing time:             Mon 05 May 2025 10:01:09 +0000
Manifest this update:     Mon 05 May 2025 10:01:09 +0000
Manifest next update:     Tue 06 May 2025 10:01:09 +0000
Files and hashes:         1: _hcAKZ9Rlwo19weMs6Swq188ePE.roa (hash: Y66JbaTRqDcxPjnoFMPZ0bWBf5qCwdTDkeUZq42NBUE=)
                          2: fpBL1x1v50pnFo_ZE-gocidVtJQ.crl (hash: GKGKEkVns6v1OiGWe2qtS4kvPVJEcKX3NA0sFUuI9J0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/2f1264-23e8-42e0-8364-4f382cbb59f2/1/fpBL1x1v50pnFo_ZE-gocidVtJQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/2f1264-23e8-42e0-8364-4f382cbb59f2/1/fpBL1x1v50pnFo_ZE-gocidVtJQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fpBL1x1v50pnFo_ZE-gocidVtJQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 10:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:9f:e4:6d:df:c6:c2:81:4b:4b:6c:f1:06:66:16:1a:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e904bd71d6fe74a67168fd913e828722755b494
        Validity
            Not Before: May  5 10:01:09 2025 GMT
            Not After : May  6 10:01:09 2025 GMT
        Subject: CN=be247e60139968deee22e111ceb6a1a9ca2b6c3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:09:5c:76:47:99:b0:45:25:7e:e6:2d:ad:44:
                    c1:3f:21:ae:65:e6:c7:64:42:22:d4:73:4a:f4:5a:
                    2b:21:ce:da:d3:5b:62:32:39:df:d9:d6:bb:1d:61:
                    8e:1d:54:90:6c:36:f9:b8:0a:14:9d:0b:c2:13:39:
                    2b:08:76:23:a7:50:fa:27:06:26:59:1b:d2:1a:10:
                    2c:4b:aa:3b:95:c9:74:2c:eb:ab:c8:7b:27:1a:11:
                    0f:a5:f9:0a:f9:94:50:fe:2d:a2:53:1f:a7:ad:8a:
                    da:be:32:8f:d5:68:b0:4a:ac:c3:c2:4c:33:05:72:
                    e8:04:53:5a:76:11:ec:29:e9:a9:46:20:d8:2e:63:
                    34:2d:16:56:73:8f:19:4a:22:40:cd:bd:c6:23:c9:
                    f0:09:25:66:0a:a6:0e:31:d3:85:9d:48:ae:4f:42:
                    d8:a3:41:60:77:9c:dd:69:ff:d3:8a:e2:c5:e7:d7:
                    83:96:82:ed:30:b1:1f:46:cf:d4:42:bc:0b:1d:1f:
                    23:72:86:b1:95:24:55:33:d2:7a:a2:44:69:79:2e:
                    4e:26:05:b0:f1:80:c5:75:93:2f:e4:2a:0a:5d:f0:
                    6a:03:62:29:b2:9a:ac:14:a9:b0:86:45:06:72:4a:
                    cf:74:88:83:66:8f:c1:53:39:ef:c7:3f:29:02:ac:
                    b9:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:24:7E:60:13:99:68:DE:EE:22:E1:11:CE:B6:A1:A9:CA:2B:6C:3D
            X509v3 Authority Key Identifier:
                keyid:7E:90:4B:D7:1D:6F:E7:4A:67:16:8F:D9:13:E8:28:72:27:55:B4:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fpBL1x1v50pnFo_ZE-gocidVtJQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2f1264-23e8-42e0-8364-4f382cbb59f2/1/fpBL1x1v50pnFo_ZE-gocidVtJQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2f1264-23e8-42e0-8364-4f382cbb59f2/1/fpBL1x1v50pnFo_ZE-gocidVtJQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:5c:86:07:1f:b8:9a:bc:23:36:8e:1f:39:96:09:1a:3c:7d:
         6a:4a:45:55:8e:f6:d5:ca:ed:32:c9:85:cf:11:b5:6d:14:dd:
         57:02:2f:fc:4e:bf:4a:d1:74:9f:e5:c5:ad:5d:ec:23:1c:6f:
         0a:e1:55:3c:48:c1:4c:4e:0d:2a:78:f8:82:f0:0d:cc:5d:ae:
         a8:43:6a:68:41:70:be:d7:8c:76:5d:fb:bd:7e:8c:aa:a0:77:
         10:4e:70:5e:99:d8:3c:20:1a:56:bb:53:95:1b:23:17:de:03:
         37:47:c7:b8:7e:82:f5:84:72:a1:13:d7:93:38:b6:66:91:31:
         5a:b9:44:34:3d:bd:08:da:12:84:d5:d4:6b:b1:9d:73:15:3b:
         9e:33:30:0b:a2:e6:82:b8:74:b4:45:92:a3:f9:10:58:06:9f:
         6e:02:4c:96:6f:18:39:55:45:7b:09:45:a3:76:27:e6:16:9c:
         65:d1:d4:49:73:d3:43:b8:87:56:c1:c1:ee:f0:3c:89:80:c5:
         68:4c:12:dd:e3:45:c0:20:f1:61:d6:fb:8e:de:09:8d:5d:7b:
         26:16:09:3b:c2:e1:ed:59:f7:3e:53:67:99:3a:bc:cb:00:ae:
         fe:34:7f:5a:d1:eb:2b:bf:1e:8b:14:91:57:1b:d5:6d:c2:7c:
         d3:af:fe:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 15:36:15 2025 by rpki-client