Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/64b1e6-0a1f-40ec-9437-04a4c2c41c34/1/FT0HLM7wC_Rk1mDb0F2todoz0sg.mft
File:                     FT0HLM7wC_Rk1mDb0F2todoz0sg.mft (raw, json)
Hash identifier:          6dLR32JV22is2IiICvCvTsFi666+U04WeJERghfA/oY=
Subject key identifier:   81:E6:7B:BC:B7:27:0D:BF:03:5D:8D:1D:FE:0C:5F:F8:12:8B:29:31
Authority key identifier: 15:3D:07:2C:CE:F0:0B:F4:64:D6:60:DB:D0:5D:AD:A1:DA:33:D2:C8
Certificate issuer:       /CN=153d072ccef00bf464d660dbd05dada1da33d2c8
Certificate serial:       0196C796BBAEB8445070169A961E04905BDD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FT0HLM7wC_Rk1mDb0F2todoz0sg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/64b1e6-0a1f-40ec-9437-04a4c2c41c34/1/FT0HLM7wC_Rk1mDb0F2todoz0sg.mft
Manifest number:          0760
Signing time:             Tue 13 May 2025 03:01:06 +0000
Manifest this update:     Tue 13 May 2025 03:01:06 +0000
Manifest next update:     Wed 14 May 2025 03:01:06 +0000
Files and hashes:         1: F0iKq1ijjGBYajSFmQyhreXVAQY.roa (hash: m8/L5cr+uaNLauEK1OLTPn18oa9yVQaLyP+GQwyUFcE=)
                          2: FT0HLM7wC_Rk1mDb0F2todoz0sg.crl (hash: TAnE89zb+pJVY4geI90rNPVhK6ZqNq0cHTGvTnhSbOM=)
                          3: _2lRv88Gb4s0UGVaP2Mgmxw3ML8.roa (hash: kqmxs4EHa2TZhRmR5+4BZAkd9MXd2Id3FkNPJK6jmmM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/64b1e6-0a1f-40ec-9437-04a4c2c41c34/1/FT0HLM7wC_Rk1mDb0F2todoz0sg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/64b1e6-0a1f-40ec-9437-04a4c2c41c34/1/FT0HLM7wC_Rk1mDb0F2todoz0sg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FT0HLM7wC_Rk1mDb0F2todoz0sg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 May 2025 23:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:c7:96:bb:ae:b8:44:50:70:16:9a:96:1e:04:90:5b:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=153d072ccef00bf464d660dbd05dada1da33d2c8
        Validity
            Not Before: May 13 03:01:06 2025 GMT
            Not After : May 14 03:01:06 2025 GMT
        Subject: CN=81e67bbcb7270dbf035d8d1dfe0c5ff8128b2931
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:47:87:8d:c4:53:6a:fc:42:bb:a2:28:be:26:
                    63:76:c5:f0:a8:d0:fe:8e:a7:9d:6d:36:ef:b5:b0:
                    05:84:3d:f6:c7:0b:bf:7a:b3:d9:d0:9d:32:01:96:
                    be:0e:3f:09:44:8e:9b:3b:7a:0f:b9:1f:4f:3d:41:
                    e7:d3:46:b1:82:cf:27:f5:10:aa:02:7f:74:21:1a:
                    ed:1a:ee:cc:6a:f2:83:ee:ac:56:29:04:cf:71:38:
                    5d:01:8a:08:af:a8:cf:f4:11:60:24:d5:df:7b:13:
                    af:95:24:3e:4c:5b:22:4d:97:60:59:6b:c4:b2:72:
                    60:06:f1:a7:74:8c:3e:b6:62:cb:f6:18:15:09:7f:
                    bc:1d:67:ac:23:e8:ec:81:0f:c3:91:01:01:a3:44:
                    38:db:75:23:5b:d5:c1:21:ef:9b:de:68:35:38:a5:
                    87:b1:46:05:4e:1b:4d:c1:21:d2:7a:b8:46:ee:2f:
                    08:3c:84:1c:f6:ee:1c:7d:55:a1:59:08:70:a9:06:
                    64:8c:e4:75:16:0e:fa:e9:0d:c0:9c:50:c5:91:08:
                    c3:69:c0:62:38:63:da:36:dc:a0:55:b0:0c:0e:e9:
                    35:a8:76:92:0a:a1:ab:50:ca:e0:32:95:68:1d:61:
                    20:cb:ad:ec:24:e1:bd:f5:86:6c:85:8e:21:49:3a:
                    75:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:E6:7B:BC:B7:27:0D:BF:03:5D:8D:1D:FE:0C:5F:F8:12:8B:29:31
            X509v3 Authority Key Identifier:
                keyid:15:3D:07:2C:CE:F0:0B:F4:64:D6:60:DB:D0:5D:AD:A1:DA:33:D2:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FT0HLM7wC_Rk1mDb0F2todoz0sg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/64b1e6-0a1f-40ec-9437-04a4c2c41c34/1/FT0HLM7wC_Rk1mDb0F2todoz0sg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/64b1e6-0a1f-40ec-9437-04a4c2c41c34/1/FT0HLM7wC_Rk1mDb0F2todoz0sg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:13:db:22:d1:c0:8d:f9:05:b8:3f:35:a7:b7:a0:4a:67:e9:
         d7:87:ea:51:7e:06:35:86:04:16:bd:0b:b5:25:a1:45:a8:2c:
         36:41:1a:0c:f3:21:81:2a:e7:ae:c1:9b:9d:de:81:0f:85:2c:
         bd:eb:81:cc:89:74:fd:a4:98:ce:0f:a6:b9:bc:2a:81:40:9e:
         70:bd:52:ef:87:05:01:19:b5:98:4a:93:0d:52:d2:58:5a:55:
         a4:58:1a:f3:64:61:34:44:cf:98:40:f5:c3:25:51:4f:b5:1d:
         44:5b:63:1d:d6:b0:19:a8:ae:8b:7b:a3:ca:8a:9b:a0:ad:fc:
         eb:0f:24:19:1e:33:d7:71:64:b0:31:53:42:37:9a:f8:b1:f4:
         4e:d6:ec:79:dd:67:4c:e9:96:c4:c0:bd:95:39:be:bf:e5:40:
         d8:d2:a0:ab:d1:ac:db:40:4d:d0:1d:6f:72:2c:d2:87:a9:31:
         73:26:b3:6d:89:ab:dd:78:f1:7e:d2:0f:2a:ca:46:44:ed:a2:
         74:e2:50:c9:19:f2:df:78:ed:99:6d:fb:24:45:19:4d:ec:39:
         9e:f6:ba:82:69:7b:80:31:7d:43:6c:6f:ff:8b:5a:c0:8e:36:
         d7:56:82:d0:f1:1f:e0:2b:7e:0a:3a:9d:65:d9:4c:eb:c5:9b:
         20:e8:46:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 06:33:43 2025 by rpki-client