Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/2f10ee-7531-4f22-b1a8-d323fbdbb687/1/FTCm61I5adqSyIRMDftA7YIL1sQ.mft
File:                     FTCm61I5adqSyIRMDftA7YIL1sQ.mft (raw, json)
Hash identifier:          1ThN1biuOcfZxCjl5kevaR3tY+25SkqJit8/zEwDAVU=
Subject key identifier:   0E:65:68:B8:69:50:1C:38:AD:AB:55:19:AF:33:90:7C:A5:2A:3E:1D
Authority key identifier: 15:30:A6:EB:52:39:69:DA:92:C8:84:4C:0D:FB:40:ED:82:0B:D6:C4
Certificate issuer:       /CN=1530a6eb523969da92c8844c0dfb40ed820bd6c4
Certificate serial:       0196B9A3FE7B761670BE2F0CD0D92C810F38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FTCm61I5adqSyIRMDftA7YIL1sQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/2f10ee-7531-4f22-b1a8-d323fbdbb687/1/FTCm61I5adqSyIRMDftA7YIL1sQ.mft
Manifest number:          0B2E
Signing time:             Sat 10 May 2025 10:00:54 +0000
Manifest this update:     Sat 10 May 2025 10:00:54 +0000
Manifest next update:     Sun 11 May 2025 10:00:54 +0000
Files and hashes:         1: FTCm61I5adqSyIRMDftA7YIL1sQ.crl (hash: Vxxv9SooXOjPqRCIg4AunpUsysAu7TECLMdBR4T0rEE=)
                          2: b6c5zm72T5u0EfOAbDE3JGGhXtw.roa (hash: OJH5Z8arKXzNL0yoYBrj6T/yS9sFayIfKvyurf8IbEI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/2f10ee-7531-4f22-b1a8-d323fbdbb687/1/FTCm61I5adqSyIRMDftA7YIL1sQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/2f10ee-7531-4f22-b1a8-d323fbdbb687/1/FTCm61I5adqSyIRMDftA7YIL1sQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FTCm61I5adqSyIRMDftA7YIL1sQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 04:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b9:a3:fe:7b:76:16:70:be:2f:0c:d0:d9:2c:81:0f:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1530a6eb523969da92c8844c0dfb40ed820bd6c4
        Validity
            Not Before: May 10 10:00:54 2025 GMT
            Not After : May 11 10:00:54 2025 GMT
        Subject: CN=0e6568b869501c38adab5519af33907ca52a3e1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:c9:55:aa:ce:f0:ad:ae:ba:e7:17:fc:8c:f2:
                    d5:a9:73:a3:1d:43:a5:a8:c4:02:c1:2f:e6:72:40:
                    75:c8:23:30:29:26:37:e9:2e:60:74:20:a8:a2:8b:
                    6e:c3:fa:9b:0a:66:43:6a:08:6c:52:22:62:f4:4c:
                    d8:3b:62:6f:1c:b1:a4:b1:74:f0:0d:99:1d:0c:0b:
                    fe:99:9c:ec:c2:a6:6f:21:7d:e9:44:3f:cb:ed:08:
                    6d:c2:42:d5:37:44:ff:73:b0:f9:fd:6c:84:77:c9:
                    e3:bc:e2:c2:da:78:0e:18:d8:ad:fa:92:0b:96:72:
                    3c:24:e0:70:5a:88:0a:cb:39:b1:6d:2a:1b:05:a4:
                    f9:2e:bc:80:05:85:45:7d:d8:25:61:15:14:92:52:
                    ad:a9:6b:34:c2:7f:6b:dd:25:58:6d:77:fd:5f:c6:
                    77:b6:0b:1b:73:e8:55:66:87:69:33:a5:bd:43:d0:
                    90:56:c8:69:71:20:0b:c6:d8:05:bc:6b:47:2b:ca:
                    35:ff:87:f9:23:94:53:27:74:07:4b:43:ee:81:e3:
                    77:5f:9a:05:78:46:64:e8:d4:a5:d5:a8:3d:f8:26:
                    d3:25:0c:48:bf:a5:e7:80:7b:b0:c8:8f:26:f6:b2:
                    cc:1c:fd:1a:03:cc:7a:64:96:e3:cc:61:06:45:06:
                    11:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:65:68:B8:69:50:1C:38:AD:AB:55:19:AF:33:90:7C:A5:2A:3E:1D
            X509v3 Authority Key Identifier:
                keyid:15:30:A6:EB:52:39:69:DA:92:C8:84:4C:0D:FB:40:ED:82:0B:D6:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FTCm61I5adqSyIRMDftA7YIL1sQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/2f10ee-7531-4f22-b1a8-d323fbdbb687/1/FTCm61I5adqSyIRMDftA7YIL1sQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/2f10ee-7531-4f22-b1a8-d323fbdbb687/1/FTCm61I5adqSyIRMDftA7YIL1sQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:2e:34:39:90:19:ef:50:a5:56:9e:9a:88:76:f5:60:4f:79:
         f8:f9:8a:30:8c:1b:6b:64:5f:79:2a:5d:df:b2:d9:fc:91:bb:
         e4:3e:df:dd:e4:db:aa:73:78:07:fb:e8:89:80:a7:13:83:aa:
         2a:db:9d:f9:6b:4e:2b:1f:de:0b:03:ca:ce:22:28:82:55:3b:
         ba:b9:2d:6e:86:f5:0c:a9:c8:61:37:76:cd:8e:1f:25:0e:44:
         e7:36:c0:6a:f1:07:ac:59:e3:69:9f:e3:49:81:53:98:a8:e5:
         0e:7d:dd:d2:0e:23:d4:ba:80:bc:17:49:9c:c8:6a:8a:57:2b:
         81:1e:e1:af:87:8c:f5:c6:f7:bd:94:5c:0b:9e:f6:43:e2:4e:
         f9:8e:11:a0:1b:d1:5f:fb:99:57:84:26:38:9a:5f:70:01:c7:
         85:73:34:a1:dc:ed:19:07:6d:96:fa:38:91:87:48:72:1e:a0:
         ed:2a:42:0c:30:b7:b8:df:e0:e0:a5:2b:56:d8:2b:09:95:f2:
         22:90:0d:d8:f6:70:c1:93:c2:8e:ab:0d:12:db:ff:c3:e4:d2:
         5a:2d:aa:88:ef:f3:51:93:87:52:4d:e2:e7:f4:07:61:34:67:
         bb:35:43:7b:1c:bd:3e:39:0e:6e:9a:3b:af:00:80:b6:f6:24:
         21:af:7b:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:48:47 2025 by rpki-client