Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/787386-b33f-46db-9c3e-90eb2b8867b8/1/fQFMmhWCGO7WhK4vwG1Y5c9nFHg.mft
File:                     fQFMmhWCGO7WhK4vwG1Y5c9nFHg.mft (raw, json)
Hash identifier:          xEwAV5UmzFqzkblnKul9oyRbHfXtJrRcaqMQm1U22JE=
Subject key identifier:   67:DC:DF:DA:5D:6C:18:D6:FD:AD:DF:D2:CE:71:93:B2:27:59:3C:1B
Authority key identifier: 7D:01:4C:9A:15:82:18:EE:D6:84:AE:2F:C0:6D:58:E5:CF:67:14:78
Certificate issuer:       /CN=7d014c9a158218eed684ae2fc06d58e5cf671478
Certificate serial:       0196C53A74138A377292C3AAE2D5A23AE529
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fQFMmhWCGO7WhK4vwG1Y5c9nFHg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/787386-b33f-46db-9c3e-90eb2b8867b8/1/fQFMmhWCGO7WhK4vwG1Y5c9nFHg.mft
Manifest number:          0DC7
Signing time:             Mon 12 May 2025 16:01:04 +0000
Manifest this update:     Mon 12 May 2025 16:01:04 +0000
Manifest next update:     Tue 13 May 2025 16:01:04 +0000
Files and hashes:         1: 3DrlLWhGcsMv-s4viwJB1FYsGOU.roa (hash: s3b1rQsesdFt4DpbajXuJViVF04qZ0u1qGw5GYZzzXk=)
                          2: fQFMmhWCGO7WhK4vwG1Y5c9nFHg.crl (hash: HMatPc1YJ+vplIbYNnqKNVnT+vGXOAvQZZKDzygUzHY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/787386-b33f-46db-9c3e-90eb2b8867b8/1/fQFMmhWCGO7WhK4vwG1Y5c9nFHg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/787386-b33f-46db-9c3e-90eb2b8867b8/1/fQFMmhWCGO7WhK4vwG1Y5c9nFHg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fQFMmhWCGO7WhK4vwG1Y5c9nFHg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 14:31:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c5:3a:74:13:8a:37:72:92:c3:aa:e2:d5:a2:3a:e5:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d014c9a158218eed684ae2fc06d58e5cf671478
        Validity
            Not Before: May 12 16:01:04 2025 GMT
            Not After : May 13 16:01:04 2025 GMT
        Subject: CN=67dcdfda5d6c18d6fdaddfd2ce7193b227593c1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:b8:83:85:38:45:65:21:b6:bb:4c:d6:28:8d:
                    cc:b9:3e:4a:ec:52:5a:cf:fa:8f:26:a2:a0:ec:1c:
                    b8:df:42:bb:af:5f:de:4a:1c:e4:f2:b4:5a:a0:4a:
                    27:f1:c3:7b:fb:cc:39:2d:d8:08:7d:be:b0:e5:2c:
                    2c:1a:cb:d7:90:93:e9:30:a9:d7:48:11:68:4a:91:
                    83:a2:5e:e1:db:1c:9f:25:3f:23:c7:c2:fb:8a:df:
                    8a:68:77:5e:16:91:47:c3:e8:03:5e:35:6b:fe:b4:
                    a2:14:18:7d:a1:ad:b7:9f:d7:fa:cb:18:e5:13:9f:
                    3e:48:76:6a:ef:dc:01:79:bd:36:59:66:db:41:53:
                    d3:98:ed:00:f0:95:90:e2:3f:f9:95:e6:93:dd:68:
                    27:83:2d:ef:9b:f4:35:20:a3:a5:dc:19:e7:9b:28:
                    8a:9e:27:e1:06:bc:15:19:5b:62:13:69:ab:1c:c3:
                    11:8e:32:9f:07:a0:3d:43:31:81:53:8c:f8:3b:72:
                    18:43:dd:2f:40:59:50:1e:b0:11:b9:00:00:64:5e:
                    ac:28:53:78:f2:cb:c4:6c:47:b2:48:92:33:21:3e:
                    04:5e:f9:f1:20:29:9f:f1:88:42:bb:b2:da:20:58:
                    dc:15:20:22:a8:12:07:e0:e7:13:b8:32:e4:52:66:
                    58:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:DC:DF:DA:5D:6C:18:D6:FD:AD:DF:D2:CE:71:93:B2:27:59:3C:1B
            X509v3 Authority Key Identifier:
                keyid:7D:01:4C:9A:15:82:18:EE:D6:84:AE:2F:C0:6D:58:E5:CF:67:14:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQFMmhWCGO7WhK4vwG1Y5c9nFHg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/787386-b33f-46db-9c3e-90eb2b8867b8/1/fQFMmhWCGO7WhK4vwG1Y5c9nFHg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/787386-b33f-46db-9c3e-90eb2b8867b8/1/fQFMmhWCGO7WhK4vwG1Y5c9nFHg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:df:90:9f:67:84:d1:d4:2d:4c:c2:ff:7e:e5:3d:f6:f0:0e:
         dd:f8:c1:bd:52:1f:41:52:93:c2:39:fb:96:0d:bc:6a:39:e1:
         e6:05:aa:96:bb:f1:49:f1:b2:b1:bc:a3:2b:85:a1:c3:23:be:
         0c:6b:fe:44:31:ad:16:fc:6d:9f:dc:ce:0c:7f:b3:dc:3e:bb:
         2e:88:47:48:79:f7:25:82:57:a7:40:3c:ae:aa:28:9f:ca:21:
         16:78:e3:bf:e5:04:59:d2:ae:d8:7c:d4:83:27:5c:ad:f9:65:
         ce:3e:c9:28:bb:8c:c1:5c:79:bb:ef:ba:56:df:e6:31:31:59:
         7b:2b:7b:24:da:71:e5:1a:57:e7:24:4b:5a:55:53:c1:8c:b2:
         c2:a9:c8:3b:78:e4:4d:77:68:3d:fe:5f:b6:87:82:42:c2:4b:
         fd:80:5a:01:1f:75:9e:ab:69:48:e3:6f:71:6f:38:a5:ae:8a:
         5f:6d:6a:8e:68:40:69:4b:be:f6:c6:81:72:85:49:96:48:0d:
         bd:d4:91:ec:fd:a4:3d:dc:66:a7:9b:f2:cd:81:2a:e9:cb:72:
         80:f4:07:b9:72:6f:aa:e0:48:8e:76:19:48:60:ca:4d:f0:ea:
         f6:7d:fc:b1:35:6d:7a:f6:87:b7:87:d5:56:d0:27:4c:33:dd:
         00:39:1e:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 20:28:36 2025 by rpki-client