Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/34e076-5989-402d-96de-e88695fdd6e5/1/fFV1K31vznKGsaGi5DvIbUWE6D8.mft
File:                     fFV1K31vznKGsaGi5DvIbUWE6D8.mft (raw, json)
Hash identifier:          PhrkITQaJ9FP5faTbRzpTwuN5o/D8+Z+GARXPTDfUWQ=
Subject key identifier:   FC:0F:76:95:EB:70:F7:69:F5:1C:23:6C:A8:A8:22:03:64:92:47:46
Authority key identifier: 7C:55:75:2B:7D:6F:CE:72:86:B1:A1:A2:E4:3B:C8:6D:45:84:E8:3F
Certificate issuer:       /CN=7c55752b7d6fce7286b1a1a2e43bc86d4584e83f
Certificate serial:       0196CC4EC888E3B65B792CBF3FA620BBA6D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fFV1K31vznKGsaGi5DvIbUWE6D8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/34e076-5989-402d-96de-e88695fdd6e5/1/fFV1K31vznKGsaGi5DvIbUWE6D8.mft
Manifest number:          0AEF
Signing time:             Wed 14 May 2025 01:00:37 +0000
Manifest this update:     Wed 14 May 2025 01:00:37 +0000
Manifest next update:     Thu 15 May 2025 01:00:37 +0000
Files and hashes:         1: 8IVwcCAer2YFK0PD_eW_7QPltRk.roa (hash: DtzwrJfpj+KzExIWMGXO37ECdwLmhMCQMNWrFN/oGf4=)
                          2: fFV1K31vznKGsaGi5DvIbUWE6D8.crl (hash: qnpDhOUe5aGxcXkKrYILX14NpghDPRYHLqTavHgWB+w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/34e076-5989-402d-96de-e88695fdd6e5/1/fFV1K31vznKGsaGi5DvIbUWE6D8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/34e076-5989-402d-96de-e88695fdd6e5/1/fFV1K31vznKGsaGi5DvIbUWE6D8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fFV1K31vznKGsaGi5DvIbUWE6D8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 May 2025 22:19:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:cc:4e:c8:88:e3:b6:5b:79:2c:bf:3f:a6:20:bb:a6:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c55752b7d6fce7286b1a1a2e43bc86d4584e83f
        Validity
            Not Before: May 14 01:00:37 2025 GMT
            Not After : May 15 01:00:37 2025 GMT
        Subject: CN=fc0f7695eb70f769f51c236ca8a8220364924746
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:4d:f4:61:2e:5e:0a:79:e3:35:9b:d2:57:7b:
                    f7:28:f3:fd:2e:19:e7:4f:7c:2f:18:2c:5e:91:a0:
                    05:04:ee:a8:d9:b2:c0:dd:7e:f0:e2:22:6b:e2:91:
                    32:70:b0:7d:50:f0:e9:05:5c:db:04:a1:f3:ea:4b:
                    cc:f2:c6:34:ff:a0:4d:82:8c:33:ee:a8:66:0a:d8:
                    cf:23:49:39:05:f6:f6:d2:9d:9c:40:94:6d:62:64:
                    81:ba:88:de:94:7e:e8:9d:73:80:64:0c:ba:e7:bd:
                    f0:ee:57:6b:b1:2f:80:50:35:e8:1f:47:1a:58:86:
                    8b:4f:fd:c7:9e:00:4d:d5:0e:26:9e:ba:1a:7c:91:
                    c6:47:e1:eb:b5:ed:45:ed:21:4a:4a:5f:e2:bd:fe:
                    5c:4d:cd:fb:3d:a9:31:bb:f4:ff:0e:76:df:91:10:
                    8b:f1:6b:33:57:55:bc:11:7d:7c:89:01:dd:9e:e7:
                    db:88:d7:42:af:97:64:d1:fb:95:f4:f3:50:3c:98:
                    d8:ce:33:20:52:76:fb:ff:92:0a:58:eb:c1:3c:f5:
                    df:94:96:c0:31:0b:40:cb:6e:c1:b5:33:d3:b8:8e:
                    01:19:a6:2e:63:8f:e1:88:00:52:43:c1:6f:32:df:
                    b3:8d:54:a5:79:2d:69:a5:08:6d:85:cb:31:5e:83:
                    d1:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:0F:76:95:EB:70:F7:69:F5:1C:23:6C:A8:A8:22:03:64:92:47:46
            X509v3 Authority Key Identifier:
                keyid:7C:55:75:2B:7D:6F:CE:72:86:B1:A1:A2:E4:3B:C8:6D:45:84:E8:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fFV1K31vznKGsaGi5DvIbUWE6D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/34e076-5989-402d-96de-e88695fdd6e5/1/fFV1K31vznKGsaGi5DvIbUWE6D8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/34e076-5989-402d-96de-e88695fdd6e5/1/fFV1K31vznKGsaGi5DvIbUWE6D8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:8d:c5:fd:3d:b3:54:bf:f1:42:24:0a:eb:e8:8e:41:9e:84:
         b1:3c:16:34:27:49:92:a3:a0:c9:1f:27:be:c6:55:84:3b:c0:
         a0:ee:8a:c5:a5:88:46:27:ba:2c:93:f4:6d:11:3c:b8:d4:84:
         08:ec:d1:ec:8f:6f:1e:43:9e:8c:31:2c:b3:57:7d:52:a2:7d:
         44:35:70:81:0d:38:e1:01:29:e7:8d:15:7a:b0:f4:e8:73:a9:
         0c:04:65:07:d9:0f:db:5d:00:14:3a:0d:22:e8:d5:3d:b0:f0:
         e1:a3:c5:6b:48:0c:b4:fd:ac:81:f5:c2:b8:af:a2:9b:ae:84:
         d4:8b:82:d2:b8:e5:2f:53:e3:1d:3a:9c:39:bb:ea:12:07:c9:
         75:82:3f:36:66:d3:58:7b:e8:8a:52:5a:a3:d8:aa:2b:ce:e0:
         04:64:d7:51:ee:cf:21:f8:f2:aa:89:14:51:33:93:65:e8:bc:
         78:b5:a6:b7:67:ae:d7:47:97:82:39:d0:57:63:12:84:3d:f1:
         fe:24:5a:99:85:59:95:ae:c9:13:49:91:e8:14:14:8f:ed:04:
         5d:32:85:50:bf:d3:e6:83:95:89:46:55:7b:e4:f5:74:7e:41:
         11:75:96:c0:17:38:f6:c5:e2:41:b4:49:f0:49:0b:8b:79:d2:
         7c:48:7c:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 03:23:40 2025 by rpki-client