Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/59fcf0-1d5c-4ecb-bf87-3bcb8bf8bbfe/1/FRRT9ILNp468mWJdgLD_w2YPlfI.mft
File:                     FRRT9ILNp468mWJdgLD_w2YPlfI.mft (raw, json)
Hash identifier:          kyLsts5Y5ZW90LkR78g4CVGOdSpG1RbKZRogvo4JLGA=
Subject key identifier:   3F:39:6D:BD:79:09:A3:98:3E:E0:0A:17:4D:26:65:2E:56:2C:7E:87
Authority key identifier: 15:14:53:F4:82:CD:A7:8E:BC:99:62:5D:80:B0:FF:C3:66:0F:95:F2
Certificate issuer:       /CN=151453f482cda78ebc99625d80b0ffc3660f95f2
Certificate serial:       0196439EFC72B4489B388C152C207D3A27C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FRRT9ILNp468mWJdgLD_w2YPlfI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/59fcf0-1d5c-4ecb-bf87-3bcb8bf8bbfe/1/FRRT9ILNp468mWJdgLD_w2YPlfI.mft
Manifest number:          1504
Signing time:             Thu 17 Apr 2025 12:00:14 +0000
Manifest this update:     Thu 17 Apr 2025 12:00:14 +0000
Manifest next update:     Fri 18 Apr 2025 12:00:14 +0000
Files and hashes:         1: 1-lv-eyLkZwpQLTuJorHeKbcVMK8.roa (hash: tvNysXrHBHPZC5fymq/kQjA0jN47rS/9OLBH7USYU6E=)
                          2: FRRT9ILNp468mWJdgLD_w2YPlfI.crl (hash: 73RV8Dl4TsRV0X4aeeaTcSDziW82JSv/RGRSPEjj3sU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/59fcf0-1d5c-4ecb-bf87-3bcb8bf8bbfe/1/FRRT9ILNp468mWJdgLD_w2YPlfI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/59fcf0-1d5c-4ecb-bf87-3bcb8bf8bbfe/1/FRRT9ILNp468mWJdgLD_w2YPlfI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FRRT9ILNp468mWJdgLD_w2YPlfI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Apr 2025 12:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:43:9e:fc:72:b4:48:9b:38:8c:15:2c:20:7d:3a:27:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=151453f482cda78ebc99625d80b0ffc3660f95f2
        Validity
            Not Before: Apr 17 12:00:14 2025 GMT
            Not After : Apr 18 12:00:14 2025 GMT
        Subject: CN=3f396dbd7909a3983ee00a174d26652e562c7e87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:0b:67:3b:3b:a7:fe:63:9d:5a:e3:36:51:fb:
                    02:d1:2d:2b:27:a0:07:59:1e:76:8c:44:f4:c8:a0:
                    58:f7:2e:1b:87:7e:32:e9:8c:80:96:9e:2d:0f:31:
                    22:eb:2d:11:44:59:d9:1b:4f:3e:b2:57:af:84:e0:
                    e9:5f:2b:3e:18:65:24:23:6e:98:bf:f1:d6:ce:e9:
                    ef:ba:93:77:92:50:8f:17:1e:35:71:da:ae:cb:4c:
                    0b:46:e3:ea:da:26:0d:d7:f5:78:8e:63:24:9c:95:
                    22:3e:ab:7d:25:c2:0c:68:26:c5:5e:57:3f:a5:db:
                    54:46:e6:17:8b:b1:0b:18:ad:51:5a:1a:ce:8e:94:
                    8e:8f:71:0f:16:96:fb:44:53:03:1d:29:55:09:d0:
                    32:f3:5b:c4:18:1c:4e:f6:ef:74:fe:5e:57:00:00:
                    df:74:7a:ed:25:64:50:b8:1f:e2:d3:75:ef:28:47:
                    34:e9:77:f4:eb:ae:0f:0f:72:0e:49:5e:6f:68:8f:
                    52:a4:75:62:e6:e2:eb:cc:89:18:b6:aa:db:ab:67:
                    50:da:a4:e9:dd:db:9e:f9:44:5a:41:49:1e:ce:30:
                    f6:6a:b4:d7:ad:46:75:68:fd:ce:ae:62:91:45:ca:
                    c3:dd:89:25:ab:92:ce:2d:41:4d:a2:c9:a6:6c:ca:
                    e9:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:39:6D:BD:79:09:A3:98:3E:E0:0A:17:4D:26:65:2E:56:2C:7E:87
            X509v3 Authority Key Identifier:
                keyid:15:14:53:F4:82:CD:A7:8E:BC:99:62:5D:80:B0:FF:C3:66:0F:95:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FRRT9ILNp468mWJdgLD_w2YPlfI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/59fcf0-1d5c-4ecb-bf87-3bcb8bf8bbfe/1/FRRT9ILNp468mWJdgLD_w2YPlfI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/59fcf0-1d5c-4ecb-bf87-3bcb8bf8bbfe/1/FRRT9ILNp468mWJdgLD_w2YPlfI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:ed:e7:30:7e:35:f2:d2:c5:3f:50:f3:b1:1a:c5:d8:d0:fc:
         d5:d8:75:8e:e5:20:89:0f:88:93:ed:b1:a8:0d:50:8c:6e:db:
         89:78:ac:9c:75:1b:ad:2e:d3:fb:a8:c1:5e:6f:9c:85:79:f5:
         0f:30:a3:ad:97:2f:e0:94:a8:0e:ab:20:89:62:15:42:3c:71:
         18:ab:a6:9f:c4:48:ab:72:f8:51:d3:23:60:bb:f7:a5:e7:7f:
         1b:fd:78:ad:cf:7c:80:d6:70:af:38:0d:a0:78:3d:1f:5b:8b:
         07:9d:b2:5f:29:8a:28:eb:0d:d8:29:b5:55:ce:40:2b:3e:81:
         30:50:20:38:1f:b8:79:cc:a7:b7:14:49:64:60:2e:a8:fa:72:
         5d:f9:93:0c:71:14:62:98:6b:45:d3:01:7b:b1:a1:05:4d:cc:
         16:d2:de:fe:06:fc:a4:dd:ca:80:c8:53:d5:6e:c7:d5:63:71:
         78:1c:72:b8:4c:98:cd:23:a6:75:2f:bd:fa:8c:a8:38:ae:80:
         ac:07:a1:b4:d9:d5:c4:ef:e8:c9:3b:ba:36:f0:11:32:4b:11:
         2d:8c:25:9d:eb:84:27:a7:b2:88:78:7e:c2:96:e7:90:8c:4b:
         64:c7:c5:61:e7:ef:70:ab:88:7d:ee:2c:92:b6:c7:c4:fd:cd:
         86:0c:fc:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:30:39 2025 by rpki-client