Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e2df0e-7bfe-44a9-bf86-f9ef97420764/1/FumqrOUCeVhbXFpdjuhWEGhsJsA.mft
File:                     FumqrOUCeVhbXFpdjuhWEGhsJsA.mft (raw, json)
Hash identifier:          i4jUNijyHO6IcWNiE4/9nvzQDIKa0NqS4zytXg+o0NY=
Subject key identifier:   D1:5B:4D:B3:DC:5C:26:AB:51:11:38:34:EB:02:F8:AD:59:BF:D0:81
Authority key identifier: 16:E9:AA:AC:E5:02:79:58:5B:5C:5A:5D:8E:E8:56:10:68:6C:26:C0
Certificate issuer:       /CN=16e9aaace50279585b5c5a5d8ee85610686c26c0
Certificate serial:       0197B74553C004B9A54FAFD347B685AC647A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FumqrOUCeVhbXFpdjuhWEGhsJsA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/e2df0e-7bfe-44a9-bf86-f9ef97420764/1/FumqrOUCeVhbXFpdjuhWEGhsJsA.mft
Manifest number:          15B4
Signing time:             Sat 28 Jun 2025 16:01:03 +0000
Manifest this update:     Sat 28 Jun 2025 16:01:03 +0000
Manifest next update:     Sun 29 Jun 2025 16:01:03 +0000
Files and hashes:         1: FumqrOUCeVhbXFpdjuhWEGhsJsA.crl (hash: kvWDnj46eZJ8hbYLOOchm8d/KMw7Ae6oe9qPXl7tv3Q=)
                          2: XHC_hDAqYlIYXrUHwPjCSmuap-w.roa (hash: QCdmiPzQ+fM9D3JEIMjhnM6hVdihEFRjXxcysEmoq04=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/e2df0e-7bfe-44a9-bf86-f9ef97420764/1/FumqrOUCeVhbXFpdjuhWEGhsJsA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/e2df0e-7bfe-44a9-bf86-f9ef97420764/1/FumqrOUCeVhbXFpdjuhWEGhsJsA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FumqrOUCeVhbXFpdjuhWEGhsJsA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 15:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b7:45:53:c0:04:b9:a5:4f:af:d3:47:b6:85:ac:64:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16e9aaace50279585b5c5a5d8ee85610686c26c0
        Validity
            Not Before: Jun 28 16:01:03 2025 GMT
            Not After : Jun 29 16:01:03 2025 GMT
        Subject: CN=d15b4db3dc5c26ab51113834eb02f8ad59bfd081
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:3f:6c:f6:c8:d2:2b:a0:e8:36:12:75:7c:ee:
                    3a:e4:47:a5:f8:66:ec:c9:5b:ab:d8:ae:03:00:7e:
                    fe:76:a7:cf:6a:1f:4c:77:2f:fb:f9:12:bb:e5:99:
                    44:02:9a:5d:b9:52:83:26:cc:29:53:3c:83:fb:52:
                    4a:d5:e4:6e:8f:3a:38:b5:e6:f6:0a:1f:5e:26:ab:
                    94:43:65:b6:3b:07:a5:e5:69:b9:5e:14:25:37:6a:
                    f5:93:f6:86:9f:88:64:10:d3:b4:b5:ec:5d:86:15:
                    25:b8:fc:30:11:1e:bc:38:f2:8b:31:78:3e:3b:96:
                    6a:5e:fe:61:cf:29:da:dc:21:94:fd:0c:55:66:c2:
                    5f:e7:7a:a8:40:86:c0:15:96:f7:51:e8:35:98:96:
                    01:c6:67:22:0b:76:fc:8d:98:e7:0c:18:af:2a:ad:
                    e9:8b:cf:91:8b:83:83:ef:0b:3f:07:9b:2e:9e:d9:
                    87:66:b8:77:8a:66:ba:b0:d6:a9:c4:b0:5a:37:22:
                    85:f7:e2:8e:dc:f2:6e:98:90:4d:ab:02:d2:79:d7:
                    4d:cf:2e:e6:6f:90:cc:da:27:2e:eb:67:03:ba:e4:
                    d8:1f:93:b8:7a:2e:1e:ab:7a:9c:5a:10:91:f3:74:
                    06:56:79:16:30:40:05:6d:5e:51:92:26:26:0a:d5:
                    82:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:5B:4D:B3:DC:5C:26:AB:51:11:38:34:EB:02:F8:AD:59:BF:D0:81
            X509v3 Authority Key Identifier:
                keyid:16:E9:AA:AC:E5:02:79:58:5B:5C:5A:5D:8E:E8:56:10:68:6C:26:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FumqrOUCeVhbXFpdjuhWEGhsJsA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e2df0e-7bfe-44a9-bf86-f9ef97420764/1/FumqrOUCeVhbXFpdjuhWEGhsJsA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e2df0e-7bfe-44a9-bf86-f9ef97420764/1/FumqrOUCeVhbXFpdjuhWEGhsJsA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:34:fd:bf:2e:33:2f:29:27:3a:0d:c5:28:51:a2:a0:65:97:
         83:25:2a:34:5d:83:be:63:e9:99:96:72:7d:2c:66:a1:20:bd:
         b1:86:00:88:d7:47:18:28:d9:64:17:d2:59:19:9b:e0:87:b4:
         2e:36:ce:d2:d7:d4:79:4e:9a:a6:56:02:7c:1d:bb:a1:78:3b:
         18:9c:1a:89:d9:61:44:2a:db:e1:4a:fa:e2:1e:68:98:90:0d:
         3b:f5:4d:60:81:cd:67:b8:de:10:f7:73:96:d4:ad:8d:c8:93:
         47:3d:f2:a3:ca:fd:a7:63:4f:73:93:53:7a:0d:b7:d0:26:f7:
         d4:8f:0e:29:7a:0f:ee:79:31:7b:db:44:05:db:de:e5:d3:a1:
         1c:5a:c9:4b:a9:b6:b9:bd:d8:fc:f9:f8:ca:11:40:b5:10:82:
         9f:90:67:fc:37:af:f7:f4:0c:5e:15:43:39:09:ba:21:c2:ff:
         9c:c6:19:34:d2:b0:6d:66:7c:db:66:80:21:4d:06:19:33:2c:
         4d:ad:f8:af:75:a2:e0:9b:c8:7d:f6:2b:bd:30:c2:88:09:8a:
         c2:e4:28:91:03:d2:81:10:57:37:8e:3d:9f:44:9c:b0:f8:84:
         78:48:0e:97:a9:99:fb:d7:d8:42:47:e3:db:17:c4:ce:1e:fd:
         db:ad:7e:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:52:24 2025 by rpki-client