Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/834aa0-a8f4-454c-b315-435af14aa07a/1/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.mft
File:                     _cVoZX5Q5vjlxr_vqJzvNQ2U-C4.mft (raw, json)
Hash identifier:          Dv+Nr0X4dcfHTgusFPtbFJ99cKZPpoLRu0EIkcXG8bU=
Subject key identifier:   FB:F7:5E:38:3F:12:22:41:B7:C9:93:54:CA:79:F3:3D:14:8B:5E:03
Authority key identifier: FD:C5:68:65:7E:50:E6:F8:E5:C6:BF:EF:A8:9C:EF:35:0D:94:F8:2E
Certificate issuer:       /CN=fdc568657e50e6f8e5c6bfefa89cef350d94f82e
Certificate serial:       01958FCF48A2830C1695D6A412D90CCE8B37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/834aa0-a8f4-454c-b315-435af14aa07a/1/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.mft
Manifest number:          01B6
Signing time:             Thu 13 Mar 2025 14:01:21 +0000
Manifest this update:     Thu 13 Mar 2025 14:01:21 +0000
Manifest next update:     Fri 14 Mar 2025 14:01:21 +0000
Files and hashes:         1: _cVoZX5Q5vjlxr_vqJzvNQ2U-C4.crl (hash: 9ODpmBJ1OUqeOFIf2ljza588e1S1ySpeU+QVlipDirg=)
                          2: pa5HePIwYLGZT4FlyIIuIImBBQ4.roa (hash: bgmy9hrxpCSfMFbbUzRFuhNbtBsDHQmEsmp/I6aYk+s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/834aa0-a8f4-454c-b315-435af14aa07a/1/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/834aa0-a8f4-454c-b315-435af14aa07a/1/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Mar 2025 09:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:8f:cf:48:a2:83:0c:16:95:d6:a4:12:d9:0c:ce:8b:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdc568657e50e6f8e5c6bfefa89cef350d94f82e
        Validity
            Not Before: Mar 13 14:01:21 2025 GMT
            Not After : Mar 14 14:01:21 2025 GMT
        Subject: CN=fbf75e383f122241b7c99354ca79f33d148b5e03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:bd:53:36:8a:73:2d:7a:e8:7d:ee:f0:ae:30:
                    7d:cd:db:91:e7:96:6d:5d:63:50:67:00:de:20:76:
                    f0:43:67:38:37:6d:0c:81:3a:13:f4:98:60:71:d8:
                    a2:39:90:e3:b6:78:1e:3a:e1:77:6b:1c:45:c1:b3:
                    79:56:9c:e6:fa:2f:a3:84:c8:88:c5:c2:45:4c:93:
                    70:11:4b:77:f8:57:0b:6a:b1:bf:eb:a1:bd:ac:d7:
                    48:30:48:bd:e8:51:00:4d:21:ff:1d:5d:f3:d6:aa:
                    be:aa:74:56:d6:62:53:2c:e5:82:a4:0f:04:8c:70:
                    37:8e:9a:15:53:17:98:eb:3d:d2:81:c9:e9:00:42:
                    7b:ea:8c:0a:ec:95:0d:fb:99:31:a4:ea:a2:17:ae:
                    54:1b:3d:40:b8:74:7b:df:b2:cf:df:ce:7d:d4:7f:
                    b6:55:7b:c0:1b:4c:c4:59:b7:b3:d9:62:e4:aa:ed:
                    ae:ce:49:b2:48:da:87:8b:f2:6d:8b:2a:e8:13:8a:
                    c1:67:12:69:0b:66:3e:5e:8b:a4:7b:78:ef:e8:b5:
                    1a:e6:c6:4a:76:a8:a5:24:e4:df:c0:70:76:b0:35:
                    ca:7f:e2:d4:a8:dd:59:d2:04:2b:7e:6f:be:ed:88:
                    37:ae:c4:c7:f9:46:81:d3:10:21:cc:35:b8:9f:70:
                    00:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:F7:5E:38:3F:12:22:41:B7:C9:93:54:CA:79:F3:3D:14:8B:5E:03
            X509v3 Authority Key Identifier:
                keyid:FD:C5:68:65:7E:50:E6:F8:E5:C6:BF:EF:A8:9C:EF:35:0D:94:F8:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/834aa0-a8f4-454c-b315-435af14aa07a/1/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/834aa0-a8f4-454c-b315-435af14aa07a/1/_cVoZX5Q5vjlxr_vqJzvNQ2U-C4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:98:58:cd:90:58:af:ba:49:f2:17:c5:ac:37:01:11:1d:ca:
         38:08:05:f9:2d:94:d7:7f:6e:e8:f2:97:45:8d:65:d5:20:d8:
         b7:82:ce:d0:c9:ed:ba:b4:94:12:d6:2b:e8:dc:0d:25:80:99:
         2f:a5:9c:10:89:c2:99:df:ad:a1:97:3a:70:c8:ff:8b:36:5a:
         4e:8f:33:49:6a:70:5c:c9:fc:23:67:55:c5:58:64:c5:b3:1e:
         52:d0:e4:92:ba:3f:c6:25:28:d9:0d:32:6a:5c:fb:2c:f8:27:
         5a:ca:42:d1:cc:ef:41:f2:e1:56:ba:a3:b0:56:31:85:b7:c8:
         89:7a:af:96:73:c5:58:06:44:33:4e:52:6f:a1:69:03:78:75:
         f9:ec:8c:ff:6b:b1:00:16:ee:af:7d:25:c7:7c:62:89:b8:42:
         65:41:61:46:5e:21:92:40:0a:da:72:64:09:94:c6:ed:74:b8:
         30:95:19:c8:a1:eb:64:db:30:53:0b:ad:d3:2c:9c:32:71:bf:
         66:4e:28:7f:95:ca:a9:d4:de:ca:f9:22:dc:6a:09:05:2b:c2:
         a0:07:a0:99:b1:18:7a:6a:21:f5:e3:8e:17:8b:24:f7:55:9e:
         41:8a:ce:3a:23:d0:30:9f:88:c4:a2:84:1c:f8:6c:6d:44:bd:
         c5:a9:0c:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:40:49 2025 by rpki-client