Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/5d5d42-e843-4411-90f9-015f7664b9d7/1/FTJBXDGfrWWHW9GqA1pViIzrcz4.mft
File:                     FTJBXDGfrWWHW9GqA1pViIzrcz4.mft (raw, json)
Hash identifier:          dDpy4Oro4k54fI5j3yI3iHTjvOVtDYhlt16hsyZpXng=
Subject key identifier:   D5:1A:76:CA:12:49:9B:91:14:A6:08:6D:5B:E5:75:95:2D:91:75:1A
Authority key identifier: 15:32:41:5C:31:9F:AD:65:87:5B:D1:AA:03:5A:55:88:8C:EB:73:3E
Certificate issuer:       /CN=1532415c319fad65875bd1aa035a55888ceb733e
Certificate serial:       0196BECA55763D15FC31F8858CF44B797209
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FTJBXDGfrWWHW9GqA1pViIzrcz4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/5d5d42-e843-4411-90f9-015f7664b9d7/1/FTJBXDGfrWWHW9GqA1pViIzrcz4.mft
Manifest number:          150F
Signing time:             Sun 11 May 2025 10:00:53 +0000
Manifest this update:     Sun 11 May 2025 10:00:53 +0000
Manifest next update:     Mon 12 May 2025 10:00:53 +0000
Files and hashes:         1: FTJBXDGfrWWHW9GqA1pViIzrcz4.crl (hash: 33JJTd4ibof5n4v/nQcJ63WDO4OFqoPHVATyrSvPMWw=)
                          2: _QEsBnvbshc1c-Oa6SonU64QEfk.roa (hash: yLyPG52nHMG7xe0cgh96djTLDEljXisJslyJOhCNEoc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/5d5d42-e843-4411-90f9-015f7664b9d7/1/FTJBXDGfrWWHW9GqA1pViIzrcz4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/5d5d42-e843-4411-90f9-015f7664b9d7/1/FTJBXDGfrWWHW9GqA1pViIzrcz4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FTJBXDGfrWWHW9GqA1pViIzrcz4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 May 2025 07:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:be:ca:55:76:3d:15:fc:31:f8:85:8c:f4:4b:79:72:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1532415c319fad65875bd1aa035a55888ceb733e
        Validity
            Not Before: May 11 10:00:53 2025 GMT
            Not After : May 12 10:00:53 2025 GMT
        Subject: CN=d51a76ca12499b9114a6086d5be575952d91751a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:6e:1f:97:98:e2:f0:a4:0e:d2:35:f4:14:14:
                    de:ba:9f:aa:a1:ad:db:88:46:bc:e8:c3:06:a4:e5:
                    a3:94:f6:73:dd:b0:6b:6c:f9:be:10:b3:63:bd:a1:
                    fe:40:99:80:ad:c9:7d:68:f6:e5:e5:32:a1:b1:81:
                    e5:24:a5:57:f0:93:a2:22:e3:34:47:84:ec:e9:62:
                    12:6c:0b:b2:95:e4:0b:19:e1:fb:31:bc:2d:f1:45:
                    0e:f1:fc:db:06:cf:11:3c:26:0e:ec:7d:e4:7f:02:
                    32:ba:3a:00:46:17:d1:06:a2:45:24:c5:ee:e0:b2:
                    78:a8:bb:7a:7a:a1:a4:8a:b5:44:e3:69:09:e1:38:
                    0f:af:c1:db:02:cd:2f:56:ce:1a:89:a7:d7:ab:86:
                    e1:4b:ea:0c:85:5e:b1:6b:3b:9a:8b:2d:90:b0:1f:
                    41:9a:76:bd:49:ba:53:6c:72:64:62:94:2b:e2:86:
                    88:5d:c2:56:0f:61:c2:af:8b:b2:ca:04:d0:50:67:
                    0f:4a:8e:d9:94:76:ba:0a:f8:26:3f:61:9d:73:2c:
                    f9:cf:83:21:49:0c:15:68:91:2f:6a:e3:0d:13:3a:
                    e7:06:c5:87:3a:66:c1:87:36:18:1e:53:af:9e:ef:
                    d9:99:95:d4:14:29:84:f7:9d:40:ec:bf:2e:a8:2a:
                    5f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:1A:76:CA:12:49:9B:91:14:A6:08:6D:5B:E5:75:95:2D:91:75:1A
            X509v3 Authority Key Identifier:
                keyid:15:32:41:5C:31:9F:AD:65:87:5B:D1:AA:03:5A:55:88:8C:EB:73:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FTJBXDGfrWWHW9GqA1pViIzrcz4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/5d5d42-e843-4411-90f9-015f7664b9d7/1/FTJBXDGfrWWHW9GqA1pViIzrcz4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/5d5d42-e843-4411-90f9-015f7664b9d7/1/FTJBXDGfrWWHW9GqA1pViIzrcz4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:55:5c:d5:ed:a7:5e:0c:43:81:27:49:f8:b6:02:91:c8:91:
         df:b6:c4:14:9c:5d:5f:9e:59:97:84:48:25:72:86:cc:90:bf:
         9c:e3:62:97:2f:db:19:22:e8:b9:4f:7c:b9:19:57:ec:ce:c6:
         46:35:80:d3:5e:be:7a:af:21:6b:7c:c0:18:6d:d0:fa:a7:b5:
         b7:63:be:c0:3b:d3:a9:c8:b6:82:57:87:8f:c9:86:12:05:0e:
         a3:3c:fe:0c:be:0f:75:c1:56:09:f5:62:33:b2:77:df:35:ce:
         3c:b2:1d:a7:de:59:5b:43:02:29:62:20:76:dc:7c:88:de:fc:
         f1:ec:b2:19:e2:2a:fd:c3:fd:5c:ea:eb:46:54:47:3e:2f:d7:
         1e:20:29:91:9f:40:0d:6b:82:c9:b5:37:87:63:d2:d0:76:a9:
         37:76:77:f0:a3:96:45:7e:68:b7:aa:b7:fe:9c:e4:ef:47:7d:
         5a:af:a1:90:65:60:26:fc:45:c0:fb:5d:48:63:39:32:de:69:
         67:71:4c:50:e2:aa:ae:1f:66:f9:93:7c:a4:ab:41:e0:c7:60:
         e5:67:14:fd:67:7b:e3:5d:22:2c:13:17:16:70:84:d6:44:b5:
         ca:0c:79:fd:82:b0:e9:bf:3c:e7:56:26:08:a3:8d:27:31:76:
         1a:64:c4:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 13:35:26 2025 by rpki-client