Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/0b556b-ed22-4453-925d-5dbb36f7a033/1/FKPeS35myHz5wz4AigLRpG4_x2Y.mft
File:                     FKPeS35myHz5wz4AigLRpG4_x2Y.mft (raw, json)
Hash identifier:          pDwcHse9v5CYIZrtZjMb0OtcLc7Y5oRS5Z598J2ckW4=
Subject key identifier:   0D:6E:0B:F5:E0:34:CD:D6:A0:32:31:E0:33:7C:72:9F:90:87:C3:2B
Authority key identifier: 14:A3:DE:4B:7E:66:C8:7C:F9:C3:3E:00:8A:02:D1:A4:6E:3F:C7:66
Certificate issuer:       /CN=14a3de4b7e66c87cf9c33e008a02d1a46e3fc766
Certificate serial:       0197B6A120CCC8C1E5C78B429B2C5C575A43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FKPeS35myHz5wz4AigLRpG4_x2Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/0b556b-ed22-4453-925d-5dbb36f7a033/1/FKPeS35myHz5wz4AigLRpG4_x2Y.mft
Manifest number:          15B5
Signing time:             Sat 28 Jun 2025 13:01:42 +0000
Manifest this update:     Sat 28 Jun 2025 13:01:42 +0000
Manifest next update:     Sun 29 Jun 2025 13:01:42 +0000
Files and hashes:         1: FKPeS35myHz5wz4AigLRpG4_x2Y.crl (hash: 83SYPrBC3jlEUvsp/vunXuH8297/2o3OmPkZ3x12glg=)
                          2: GeEhJpkO5WEp0V80xW7FkFa1oZU.roa (hash: JmYppaSBdSTenAfyN0elIx7FE9TqEQ3u8bLv/x+0br4=)
                          3: nGeZMPiJHuxTp5r7-LPyVgsD0PU.roa (hash: l7oDkA0XjfZYSaNEYHxPZ+fCmO92nea2c0B83OBtIh0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/0b556b-ed22-4453-925d-5dbb36f7a033/1/FKPeS35myHz5wz4AigLRpG4_x2Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/0b556b-ed22-4453-925d-5dbb36f7a033/1/FKPeS35myHz5wz4AigLRpG4_x2Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FKPeS35myHz5wz4AigLRpG4_x2Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 13:01:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:b6:a1:20:cc:c8:c1:e5:c7:8b:42:9b:2c:5c:57:5a:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14a3de4b7e66c87cf9c33e008a02d1a46e3fc766
        Validity
            Not Before: Jun 28 13:01:42 2025 GMT
            Not After : Jun 29 13:01:42 2025 GMT
        Subject: CN=0d6e0bf5e034cdd6a03231e0337c729f9087c32b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:69:6b:1d:e2:86:43:3e:bd:7f:93:4b:66:b6:
                    5e:b7:ce:4b:ab:0b:65:10:b3:47:8f:4f:d2:8e:a7:
                    66:b2:fc:bb:6c:53:01:fb:5a:36:29:87:1e:0a:97:
                    3b:16:13:54:b7:b3:14:e8:13:16:a2:8e:e3:c6:2b:
                    83:26:e8:1d:9b:0b:2b:fa:e6:7f:88:8c:82:ab:a1:
                    f6:9e:e8:8e:88:29:8e:d3:61:21:0b:b1:91:19:76:
                    00:0a:5a:be:36:23:17:b4:54:b1:ac:85:07:e8:97:
                    34:f4:ee:d8:ca:a4:64:c5:3b:3e:ed:e5:ec:0d:55:
                    ea:25:ff:0f:0a:c5:b0:65:43:23:4c:c3:22:f2:6c:
                    6a:1f:6a:08:dc:32:67:cf:7c:a0:66:3e:6a:58:49:
                    d7:e7:ce:90:fd:d0:68:6a:c5:a1:64:d2:36:bd:c2:
                    2e:37:5b:03:4c:55:43:63:3f:f1:e2:9b:5d:7a:aa:
                    87:6e:de:0b:74:1e:85:d9:1e:18:90:c7:54:62:26:
                    94:99:e7:68:97:af:5b:07:e6:a2:49:9f:25:c7:e2:
                    1a:3d:ce:2d:bb:48:f2:1a:ee:5d:75:37:12:2a:84:
                    66:b6:be:ff:17:f7:37:40:c9:c0:13:e0:7b:8a:40:
                    4d:f9:35:42:c5:ac:29:15:d6:8e:2c:ee:ed:14:a7:
                    16:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:6E:0B:F5:E0:34:CD:D6:A0:32:31:E0:33:7C:72:9F:90:87:C3:2B
            X509v3 Authority Key Identifier:
                keyid:14:A3:DE:4B:7E:66:C8:7C:F9:C3:3E:00:8A:02:D1:A4:6E:3F:C7:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FKPeS35myHz5wz4AigLRpG4_x2Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/0b556b-ed22-4453-925d-5dbb36f7a033/1/FKPeS35myHz5wz4AigLRpG4_x2Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/0b556b-ed22-4453-925d-5dbb36f7a033/1/FKPeS35myHz5wz4AigLRpG4_x2Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:ee:86:82:70:4e:99:6a:56:e0:f1:20:03:84:b6:7d:6d:b3:
         05:7e:b6:e0:ec:10:e6:62:d4:a6:48:67:c7:c5:8f:69:9f:9f:
         47:94:45:51:a2:53:b3:ba:c3:05:ba:a1:24:2c:97:af:99:c9:
         1c:08:03:92:2f:ac:e2:4c:62:e9:ce:2f:26:d8:38:78:d6:43:
         02:b8:6b:ed:cf:07:60:cb:ac:08:dd:43:b7:69:67:0b:6b:37:
         08:c5:d9:21:6f:02:7a:7c:1c:41:90:15:30:a1:b4:7b:58:59:
         18:67:4e:74:78:34:4b:1f:91:cb:4d:3e:6e:c9:d4:0b:62:1e:
         a6:7b:65:33:c2:be:d0:bf:40:e7:86:77:43:08:ff:ee:77:c9:
         aa:4e:fa:ee:e9:f5:a9:4c:15:85:b4:00:18:ec:01:ed:7a:2e:
         2c:0e:52:98:80:cc:ca:4c:65:ac:14:64:8a:82:43:08:bd:40:
         18:39:2f:eb:9b:5f:3e:1b:e3:d6:ee:61:c5:5e:35:bd:88:33:
         05:bd:5e:b2:4a:59:7f:5e:76:6b:74:d2:d5:c4:60:e0:4e:4f:
         18:cc:d7:64:fd:05:a7:ed:a4:90:6f:1b:0f:cd:5d:ec:d2:ff:
         0f:d3:06:41:b2:0b:51:17:18:f0:0a:1f:bb:c2:06:ce:34:82:
         2a:3b:09:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:57:26 2025 by rpki-client