Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/0e0c90-717f-40ea-b17e-e6f9db74139d/1/FidXPGiSmrKkWQ6SpRq8QOqeWBc.mft
File:                     FidXPGiSmrKkWQ6SpRq8QOqeWBc.mft (raw, json)
Hash identifier:          XzbJCe4pgAt0nuK2tKjxiyBQzfuEYLPO+7EnPn1lIpA=
Subject key identifier:   20:BB:36:53:8F:E8:82:F1:18:86:E9:A4:A9:E3:09:7B:1E:29:62:42
Authority key identifier: 16:27:57:3C:68:92:9A:B2:A4:59:0E:92:A5:1A:BC:40:EA:9E:58:17
Certificate issuer:       /CN=1627573c68929ab2a4590e92a51abc40ea9e5817
Certificate serial:       0196406738FA6E07CE2B0DD8848AB73138C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FidXPGiSmrKkWQ6SpRq8QOqeWBc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/0e0c90-717f-40ea-b17e-e6f9db74139d/1/FidXPGiSmrKkWQ6SpRq8QOqeWBc.mft
Manifest number:          14F4
Signing time:             Wed 16 Apr 2025 21:00:28 +0000
Manifest this update:     Wed 16 Apr 2025 21:00:28 +0000
Manifest next update:     Thu 17 Apr 2025 21:00:28 +0000
Files and hashes:         1: FidXPGiSmrKkWQ6SpRq8QOqeWBc.crl (hash: UBtcqiwcMxI9iu1YR/1fV2F0yteNSjEyouKkjZuN1pE=)
                          2: OhhSpunX2oFMOOPbpKEEbEzELw0.roa (hash: 3ps6+ztcgkHapstvgub1KecvUe5/zgzQ6krJXv7P6Sc=)
                          3: WfIQgLqg5iDOkRknXs8LwTd___8.roa (hash: 2fUIvuzipETi107axsQwvDcKefOjWiKRaZgxPs7El0w=)
                          4: Y_-vfLL2J88Y5F1d1jLM95Gsw6Y.roa (hash: KkWnVd3PkRGGbRuQNEdI3QvRcPN+F3+rDERlpZoK1Hk=)
                          5: iGpfBbTLVL4RbtqfFkeH2DBrS5I.roa (hash: DzYF6jb/f2Y0zsTtOWIE735rB2ypyM5HGglTzwx4No8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/0e0c90-717f-40ea-b17e-e6f9db74139d/1/FidXPGiSmrKkWQ6SpRq8QOqeWBc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/0e0c90-717f-40ea-b17e-e6f9db74139d/1/FidXPGiSmrKkWQ6SpRq8QOqeWBc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FidXPGiSmrKkWQ6SpRq8QOqeWBc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 17 Apr 2025 13:16:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:40:67:38:fa:6e:07:ce:2b:0d:d8:84:8a:b7:31:38:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1627573c68929ab2a4590e92a51abc40ea9e5817
        Validity
            Not Before: Apr 16 21:00:28 2025 GMT
            Not After : Apr 17 21:00:28 2025 GMT
        Subject: CN=20bb36538fe882f11886e9a4a9e3097b1e296242
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ff:fb:f8:ef:d8:74:33:a0:23:6c:a3:6d:e5:
                    85:57:14:fd:29:b7:b6:9f:47:28:34:b8:00:1d:5d:
                    90:44:4d:0c:f7:d3:09:b5:f7:45:54:f9:50:3b:fb:
                    6d:3c:87:ee:aa:56:3c:a3:43:dd:00:00:64:04:2e:
                    cf:fe:7f:a3:9a:80:c7:b9:9d:e7:8e:d0:c3:0e:ba:
                    b8:b0:58:9a:46:8e:8f:85:0d:66:5c:d6:3d:12:38:
                    90:ba:d1:82:da:1a:f2:b0:4c:a4:35:a4:71:ab:32:
                    08:99:34:43:9f:3f:a0:be:2b:8a:65:31:9a:42:13:
                    f8:4a:8b:84:17:67:90:dc:f0:89:df:b8:1f:77:e0:
                    18:66:6d:86:16:ea:f7:fa:be:86:8c:72:f8:72:3c:
                    bc:dc:d1:7d:25:3b:50:8e:2d:03:be:76:97:8b:a0:
                    d0:01:6c:e0:ba:bb:69:7d:d5:9b:6a:b9:66:5e:41:
                    3d:09:c5:87:a3:03:d2:f3:9c:97:24:ca:61:ed:5e:
                    69:ce:3f:9a:17:1d:95:3d:2f:0c:db:5d:ad:d4:b1:
                    95:0e:16:1a:06:ab:56:90:fd:9e:40:40:70:03:e3:
                    6e:14:b4:1f:ec:a3:f0:96:aa:a4:9b:90:b0:04:73:
                    2e:e6:f3:b5:af:99:73:17:b5:f0:e5:40:50:17:fb:
                    10:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:BB:36:53:8F:E8:82:F1:18:86:E9:A4:A9:E3:09:7B:1E:29:62:42
            X509v3 Authority Key Identifier:
                keyid:16:27:57:3C:68:92:9A:B2:A4:59:0E:92:A5:1A:BC:40:EA:9E:58:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FidXPGiSmrKkWQ6SpRq8QOqeWBc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0e0c90-717f-40ea-b17e-e6f9db74139d/1/FidXPGiSmrKkWQ6SpRq8QOqeWBc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0e0c90-717f-40ea-b17e-e6f9db74139d/1/FidXPGiSmrKkWQ6SpRq8QOqeWBc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:fc:a3:bf:03:33:de:70:4d:44:85:8f:ba:db:d8:49:d0:19:
         ce:38:c7:c0:c6:fa:71:74:0f:2f:86:3d:c1:62:d3:19:1c:ef:
         45:43:eb:13:fd:59:42:dd:e4:aa:34:09:df:fb:f5:8a:4c:7c:
         e6:30:51:94:f2:93:6a:74:c7:d5:60:26:d2:5d:30:61:53:5f:
         c7:03:35:a0:4f:41:6b:61:29:66:4d:21:17:5b:9b:c7:cd:59:
         38:13:b2:5e:20:a5:03:5c:fe:82:27:92:2c:52:b8:8b:0c:bc:
         3f:61:79:ad:c1:41:df:22:68:07:90:c6:f0:5e:c2:f0:b3:52:
         15:e8:3c:a2:78:3a:3d:7a:05:64:42:7a:cb:a0:77:71:86:2f:
         86:12:3b:e6:a4:23:19:5a:3f:e8:b2:b4:29:86:a4:4a:24:ac:
         fc:dc:75:9b:5c:1e:d9:fd:fa:5d:e2:a6:ec:f7:4b:da:8a:25:
         d6:59:fb:2e:b5:a0:5e:1a:3d:e1:87:be:1d:09:7e:62:c7:24:
         c2:d4:50:76:c8:9e:e9:50:7c:6f:bd:31:74:dc:af:a1:72:e2:
         53:03:34:ba:62:f5:a1:0e:36:2c:ed:fc:ad:76:bf:44:b8:b9:
         10:8f:3c:85:12:c8:e4:89:84:d5:4e:05:24:a2:d3:eb:c3:df:
         94:cd:23:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZAZzj6bgfOKw3YhIq3MTjBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2Mjc1NzNjNjg5MjlhYjJhNDU5MGU5MmE1MWFiYzQwZWE5
ZTU4MTcwHhcNMjUwNDE2MjEwMDI4WhcNMjUwNDE3MjEwMDI4WjAzMTEwLwYDVQQD
EygyMGJiMzY1MzhmZTg4MmYxMTg4NmU5YTRhOWUzMDk3YjFlMjk2MjQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmf/7+O/YdDOgI2yjbeWFVxT9Kbe2
n0coNLgAHV2QRE0M99MJtfdFVPlQO/ttPIfuqlY8o0PdAABkBC7P/n+jmoDHuZ3n
jtDDDrq4sFiaRo6PhQ1mXNY9EjiQutGC2hrysEykNaRxqzIImTRDnz+gviuKZTGa
QhP4SouEF2eQ3PCJ37gfd+AYZm2GFur3+r6GjHL4cjy83NF9JTtQji0DvnaXi6DQ
AWzgurtpfdWbarlmXkE9CcWHowPS85yXJMph7V5pzj+aFx2VPS8M212t1LGVDhYa
BqtWkP2eQEBwA+NuFLQf7KPwlqqkm5CwBHMu5vO1r5lzF7Xw5UBQF/sQOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCC7NlOP6ILxGIbppKnjCXseKWJCMB8GA1UdIwQY
MBaAFBYnVzxokpqypFkOkqUavEDqnlgXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmlkWFBHaVNtcktrV1E2U3BScThRT3FlV0JjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi8wZTBjOTAtNzE3Zi00MGVhLWIxN2Ut
ZTZmOWRiNzQxMzlkLzEvRmlkWFBHaVNtcktrV1E2U3BScThRT3FlV0JjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi8wZTBjOTAtNzE3Zi00MGVhLWIxN2UtZTZmOWRiNzQxMzlk
LzEvRmlkWFBHaVNtcktrV1E2U3BScThRT3FlV0JjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALvyjvwMz
3nBNRIWPutvYSdAZzjjHwMb6cXQPL4Y9wWLTGRzvRUPrE/1ZQt3kqjQJ3/v1ikx8
5jBRlPKTanTH1WAm0l0wYVNfxwM1oE9Ba2EpZk0hF1ubx81ZOBOyXiClA1z+gieS
LFK4iwy8P2F5rcFB3yJoB5DG8F7C8LNSFeg8ong6PXoFZEJ6y6B3cYYvhhI75qQj
GVo/6LK0KYakSiSs/Nx1m1we2f36XeKm7PdL2ool1ln7LrWgXho94Ye+HQl+Ysck
wtRQdsie6VB8b70xdNyvoXLiUwM0umL1oQ42LO38rXa/RLi5EI88hRLI5ImE1U4F
JKLT68PflM0jag==
-----END CERTIFICATE-----
Generated at Thu Apr 17 03:41:45 2025 by rpki-client