Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/bdc335-0acb-4f71-bdb7-54ee6c513ff9/1/FK8SvCigYLWaKzCvJ0PJ3L10jjo.mft
File:                     FK8SvCigYLWaKzCvJ0PJ3L10jjo.mft (raw, json)
Hash identifier:          /vwXeUz7Q+WvycMMkffykwtWPddgZeGzbVt0LZCnnng=
Subject key identifier:   AF:9D:22:7B:2B:1A:40:4E:C8:CD:F0:7A:BE:C0:27:32:52:3D:C7:C6
Authority key identifier: 14:AF:12:BC:28:A0:60:B5:9A:2B:30:AF:27:43:C9:DC:BD:74:8E:3A
Certificate issuer:       /CN=14af12bc28a060b59a2b30af2743c9dcbd748e3a
Certificate serial:       019746D4B134739BC68B7C63AAD23526129D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FK8SvCigYLWaKzCvJ0PJ3L10jjo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/bdc335-0acb-4f71-bdb7-54ee6c513ff9/1/FK8SvCigYLWaKzCvJ0PJ3L10jjo.mft
Manifest number:          157C
Signing time:             Fri 06 Jun 2025 20:00:33 +0000
Manifest this update:     Fri 06 Jun 2025 20:00:33 +0000
Manifest next update:     Sat 07 Jun 2025 20:00:33 +0000
Files and hashes:         1: FK8SvCigYLWaKzCvJ0PJ3L10jjo.crl (hash: FuhNNYNO5blhTZUrGr7aGxwQGXH5KX3ogjk3ugFXkcE=)
                          2: UFCOfzoSOjyZ43QIGuny5oDZfK8.roa (hash: q4TVq3IFyn3CwYbhYyk9oa5DP8x2oUqJMMv2fmv9Q8s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/bdc335-0acb-4f71-bdb7-54ee6c513ff9/1/FK8SvCigYLWaKzCvJ0PJ3L10jjo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/bdc335-0acb-4f71-bdb7-54ee6c513ff9/1/FK8SvCigYLWaKzCvJ0PJ3L10jjo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FK8SvCigYLWaKzCvJ0PJ3L10jjo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 07 Jun 2025 20:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:46:d4:b1:34:73:9b:c6:8b:7c:63:aa:d2:35:26:12:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14af12bc28a060b59a2b30af2743c9dcbd748e3a
        Validity
            Not Before: Jun  6 20:00:33 2025 GMT
            Not After : Jun  7 20:00:33 2025 GMT
        Subject: CN=af9d227b2b1a404ec8cdf07abec02732523dc7c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:47:53:86:71:c5:87:a2:ce:11:0c:93:25:05:
                    2f:57:6f:19:7d:7a:0a:70:f5:d9:32:50:76:4f:b9:
                    b3:0f:96:f1:9b:43:f5:bb:fd:ef:7a:85:b0:99:65:
                    f5:3a:b5:fb:c3:5f:73:da:aa:3e:3c:33:43:49:96:
                    3f:c7:33:85:d3:77:f9:d3:66:d4:19:e6:27:06:58:
                    f4:2a:68:fe:45:92:b0:0d:db:ef:6f:5e:1e:b3:3c:
                    49:06:98:b1:1d:b4:2a:a7:58:7f:69:7a:3b:14:15:
                    8e:53:ba:9f:92:fc:f1:41:c9:a6:4e:57:a8:0b:24:
                    b1:11:1b:d0:74:13:2b:7b:8a:f1:1b:72:d1:d2:8d:
                    2c:5f:96:d3:20:f3:72:b2:38:84:22:cd:01:78:81:
                    68:18:5c:a8:db:05:9f:c1:c6:72:4b:84:27:66:2c:
                    34:a4:f4:eb:98:87:3d:dd:4e:75:fc:54:57:a7:d0:
                    2f:02:10:dc:1f:f4:00:b0:2d:c6:13:00:97:21:23:
                    03:ae:d6:fd:4e:55:e6:59:aa:f3:b7:97:b7:6b:e7:
                    9d:d6:3f:2c:aa:34:65:35:7f:d6:79:1b:32:ae:66:
                    fa:9c:db:02:31:a1:e5:71:aa:fa:bc:47:72:a0:9a:
                    22:9a:7e:df:fd:c0:d8:2b:1e:dd:0d:89:25:29:0d:
                    cf:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:9D:22:7B:2B:1A:40:4E:C8:CD:F0:7A:BE:C0:27:32:52:3D:C7:C6
            X509v3 Authority Key Identifier:
                keyid:14:AF:12:BC:28:A0:60:B5:9A:2B:30:AF:27:43:C9:DC:BD:74:8E:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FK8SvCigYLWaKzCvJ0PJ3L10jjo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/bdc335-0acb-4f71-bdb7-54ee6c513ff9/1/FK8SvCigYLWaKzCvJ0PJ3L10jjo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/bdc335-0acb-4f71-bdb7-54ee6c513ff9/1/FK8SvCigYLWaKzCvJ0PJ3L10jjo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:34:af:13:4d:72:dd:41:91:81:cc:6c:5b:74:de:32:4f:c4:
         35:7f:0b:11:f3:95:54:8b:b8:d0:e6:f8:0c:5b:5c:18:41:37:
         61:0a:83:d6:7c:08:c5:0e:8b:23:92:24:dd:2b:61:ca:b3:3a:
         73:04:7a:e8:96:1e:35:44:ea:f0:28:88:12:d3:bc:a6:4a:c4:
         31:48:72:ce:c3:f4:8a:cb:21:61:2b:aa:e4:50:6d:4f:d0:4b:
         de:c0:11:92:c7:7b:c8:e5:fc:fa:a0:6e:f4:be:93:a2:7b:d3:
         ba:66:a6:fc:f8:99:69:d0:dc:e1:a7:08:b7:64:2c:c3:51:a0:
         0f:57:0a:66:5f:2f:7e:f2:39:a9:35:04:fd:51:6f:eb:03:21:
         9e:df:86:bd:f8:26:5a:88:67:a1:24:50:28:8d:fd:fb:49:38:
         dd:a6:1c:41:35:00:6f:3b:66:0d:81:24:b8:6c:5f:4a:45:4c:
         ea:c5:00:49:d9:09:30:e8:11:8d:b6:d2:4a:82:3d:f0:c0:1d:
         b7:00:4e:cf:b2:ed:62:bc:28:0b:cc:08:e9:11:91:f7:8e:e4:
         6f:1e:e1:6c:69:ab:da:f4:dc:f5:64:0c:aa:76:2c:98:8a:51:
         6e:81:15:5b:bb:31:4a:75:4b:52:d3:0b:02:06:cd:0a:35:8f:
         b5:2e:2d:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdG1LE0c5vGi3xjqtI1JhKdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0YWYxMmJjMjhhMDYwYjU5YTJiMzBhZjI3NDNjOWRjYmQ3
NDhlM2EwHhcNMjUwNjA2MjAwMDMzWhcNMjUwNjA3MjAwMDMzWjAzMTEwLwYDVQQD
EyhhZjlkMjI3YjJiMWE0MDRlYzhjZGYwN2FiZWMwMjczMjUyM2RjN2M2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzkdThnHFh6LOEQyTJQUvV28ZfXoK
cPXZMlB2T7mzD5bxm0P1u/3veoWwmWX1OrX7w19z2qo+PDNDSZY/xzOF03f502bU
GeYnBlj0Kmj+RZKwDdvvb14eszxJBpixHbQqp1h/aXo7FBWOU7qfkvzxQcmmTleo
CySxERvQdBMre4rxG3LR0o0sX5bTIPNysjiEIs0BeIFoGFyo2wWfwcZyS4QnZiw0
pPTrmIc93U51/FRXp9AvAhDcH/QAsC3GEwCXISMDrtb9TlXmWarzt5e3a+ed1j8s
qjRlNX/WeRsyrmb6nNsCMaHlcar6vEdyoJoimn7f/cDYKx7dDYklKQ3PEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK+dInsrGkBOyM3wer7AJzJSPcfGMB8GA1UdIwQY
MBaAFBSvErwooGC1miswrydDydy9dI46MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRks4U3ZDaWdZTFdhS3pDdkowUEozTDEwampvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9iZGMzMzUtMGFjYi00ZjcxLWJkYjct
NTRlZTZjNTEzZmY5LzEvRks4U3ZDaWdZTFdhS3pDdkowUEozTDEwampvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy9iZGMzMzUtMGFjYi00ZjcxLWJkYjctNTRlZTZjNTEzZmY5
LzEvRks4U3ZDaWdZTFdhS3pDdkowUEozTDEwampvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJDSvE01y
3UGRgcxsW3TeMk/ENX8LEfOVVIu40Ob4DFtcGEE3YQqD1nwIxQ6LI5Ik3SthyrM6
cwR66JYeNUTq8CiIEtO8pkrEMUhyzsP0isshYSuq5FBtT9BL3sARksd7yOX8+qBu
9L6TonvTumam/PiZadDc4acIt2Qsw1GgD1cKZl8vfvI5qTUE/VFv6wMhnt+Gvfgm
WohnoSRQKI39+0k43aYcQTUAbztmDYEkuGxfSkVM6sUASdkJMOgRjbbSSoI98MAd
twBOz7LtYrwoC8wI6RGR947kbx7hbGmr2vTc9WQMqnYsmIpRboEVW7sxSnVLUtML
AgbNCjWPtS4tvg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 03:35:25 2025 by rpki-client