Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/6a89f0-0b22-452c-a659-42a7af882e09/1/FTXSThc2fkBbeA9xEEnl940QHxY.mft
File:                     FTXSThc2fkBbeA9xEEnl940QHxY.mft (raw, json)
Hash identifier:          AGCC5MByyzRBfPv7kv1Nc77Dmw3EmQPjF/k4Xpn85BI=
Subject key identifier:   22:19:44:2E:10:93:DD:E7:D9:51:CF:06:BA:1C:88:75:DA:32:FF:AC
Authority key identifier: 15:35:D2:4E:17:36:7E:40:5B:78:0F:71:10:49:E5:F7:8D:10:1F:16
Certificate issuer:       /CN=1535d24e17367e405b780f711049e5f78d101f16
Certificate serial:       01974C31DDB1600627B97F2E7B3484F88CD1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FTXSThc2fkBbeA9xEEnl940QHxY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/6a89f0-0b22-452c-a659-42a7af882e09/1/FTXSThc2fkBbeA9xEEnl940QHxY.mft
Manifest number:          115A
Signing time:             Sat 07 Jun 2025 21:00:25 +0000
Manifest this update:     Sat 07 Jun 2025 21:00:25 +0000
Manifest next update:     Sun 08 Jun 2025 21:00:25 +0000
Files and hashes:         1: 5ogK5Ex4CS4B5KsMhYCUM00RFfQ.roa (hash: ZPbDvWHExMztNeKcllyDlDkCaDogTJsh9sQhQBtO6xU=)
                          2: FTXSThc2fkBbeA9xEEnl940QHxY.crl (hash: 0NWbbI0PPDllMIM7MansOizCdjoCJMRGfBXnw7DVwsM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/6a89f0-0b22-452c-a659-42a7af882e09/1/FTXSThc2fkBbeA9xEEnl940QHxY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/6a89f0-0b22-452c-a659-42a7af882e09/1/FTXSThc2fkBbeA9xEEnl940QHxY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FTXSThc2fkBbeA9xEEnl940QHxY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Jun 2025 18:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:4c:31:dd:b1:60:06:27:b9:7f:2e:7b:34:84:f8:8c:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1535d24e17367e405b780f711049e5f78d101f16
        Validity
            Not Before: Jun  7 21:00:25 2025 GMT
            Not After : Jun  8 21:00:25 2025 GMT
        Subject: CN=2219442e1093dde7d951cf06ba1c8875da32ffac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e2:77:15:f5:7a:e7:fc:1f:59:9e:ee:6c:bc:
                    a2:dd:b6:ad:81:6f:b6:3a:1b:61:2a:18:90:2d:c1:
                    99:c5:c3:d7:6a:ee:a1:1e:12:0b:ee:40:fc:63:84:
                    81:0f:c9:c6:e8:1a:52:ee:33:86:7d:5e:5c:a7:de:
                    98:0e:af:b6:4f:c1:c4:15:14:94:35:cd:3c:bf:5c:
                    2f:2d:10:84:62:c8:27:6f:d4:76:b3:c9:0e:0a:5f:
                    c9:0e:77:f6:d3:f9:75:81:6b:f1:f9:49:e5:20:2e:
                    e7:92:ea:08:f3:65:0e:a4:42:a2:82:6f:fe:f8:c9:
                    f4:9f:a2:48:89:fb:f4:89:a9:cd:7a:ed:0b:16:43:
                    1c:86:89:13:94:c9:5b:ba:f4:1b:26:8c:ee:55:e5:
                    af:f6:de:39:49:22:3b:e7:3c:0a:fd:4a:c2:4c:fb:
                    35:48:94:85:e8:c4:54:6a:dd:b3:bb:e0:83:3f:73:
                    5c:f3:a9:f8:3c:2a:59:47:99:4e:52:86:e8:a0:d5:
                    8b:72:9a:35:49:b8:dc:37:2e:93:cb:ca:1b:39:6c:
                    f6:b2:35:f5:0a:dc:ed:9b:35:de:f1:1d:bc:25:0d:
                    82:b5:65:cf:8c:86:3b:db:60:53:5d:eb:51:24:72:
                    09:92:4e:7d:86:55:c1:1c:c7:ac:58:af:01:95:66:
                    04:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:19:44:2E:10:93:DD:E7:D9:51:CF:06:BA:1C:88:75:DA:32:FF:AC
            X509v3 Authority Key Identifier:
                keyid:15:35:D2:4E:17:36:7E:40:5B:78:0F:71:10:49:E5:F7:8D:10:1F:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FTXSThc2fkBbeA9xEEnl940QHxY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6a89f0-0b22-452c-a659-42a7af882e09/1/FTXSThc2fkBbeA9xEEnl940QHxY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/6a89f0-0b22-452c-a659-42a7af882e09/1/FTXSThc2fkBbeA9xEEnl940QHxY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:4c:73:f4:1e:c4:ee:e8:71:2e:7c:27:9b:47:7b:04:1f:79:
         f5:91:6f:7a:38:76:6b:51:31:d1:3a:98:37:ce:f2:d6:f9:f4:
         78:67:2a:4b:57:6d:c3:57:55:b1:e7:a9:b9:d6:d4:12:d2:30:
         67:5d:00:99:d5:01:0a:5b:2b:3b:fc:00:a1:73:e7:1b:38:24:
         59:c4:09:c8:67:46:74:dd:f3:df:c2:32:24:36:00:cc:bd:ff:
         df:f5:57:d1:69:f7:d8:fa:51:e6:15:dc:31:33:4d:e9:9c:71:
         f8:f7:b1:43:04:09:2c:e7:a7:1d:c8:0b:53:cd:0b:e6:3e:11:
         80:60:f0:f1:a7:5a:ad:59:b5:40:3a:3e:0c:20:48:c7:a3:21:
         ca:49:06:ba:e8:86:e0:7d:60:51:d0:6d:9e:da:b9:ad:d8:09:
         6f:c3:f9:39:cb:0a:e1:48:83:f8:c2:c0:17:82:34:ad:77:89:
         29:88:f5:ed:77:35:87:75:fc:2b:08:98:ee:99:38:f9:4b:c2:
         5f:07:84:f9:27:ec:2e:dc:67:6b:e2:92:f0:d6:0e:03:c6:ae:
         7f:76:3f:97:cd:d2:ca:08:0e:2f:8f:19:b9:d7:aa:63:f7:6c:
         b0:67:4b:49:dc:79:26:24:7a:cb:23:a5:0c:f5:ef:b8:4b:ad:
         79:5e:01:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 03:38:29 2025 by rpki-client