Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.mft
File:                     A_fnz4F24wJ2TUgpn8Iqm9xrpoM.mft (raw, json)
Hash identifier:          yERK4ZqnUP0rTdxBgvyagYbcMBHCXOwA4lfk1ZxaJ4E=
Subject key identifier:   3F:83:EE:4A:8A:69:BE:CA:55:61:2E:DA:DA:BC:68:8E:B7:6E:35:AB
Authority key identifier: 03:F7:E7:CF:81:76:E3:02:76:4D:48:29:9F:C2:2A:9B:DC:6B:A6:83
Certificate issuer:       /CN=03f7e7cf8176e302764d48299fc22a9bdc6ba683
Certificate serial:       019750EA8D94CE0FEA45861C209C3C3EABFE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.mft
Manifest number:          0FC9
Signing time:             Sun 08 Jun 2025 19:00:38 +0000
Manifest this update:     Sun 08 Jun 2025 19:00:38 +0000
Manifest next update:     Mon 09 Jun 2025 19:00:38 +0000
Files and hashes:         1: 8ea9JzqwyGDT2dMFgAmUz7EOwao.roa (hash: VSNDXOm1+cAC798c36135Xw4x7+9RwirArr3iwfbiGQ=)
                          2: A_fnz4F24wJ2TUgpn8Iqm9xrpoM.crl (hash: Szmiucua5UwW3Msoy/elga/899grWw1dlBM7adlZrxU=)
                          3: CGoYKUbztdIKKtCC46FwnLxxAJQ.roa (hash: x68KjIodNUgVtCpjw6Q/mHOmDSpKRwUfcYK1IisVAiw=)
                          4: TtMpw78SmRxgZIGYNEHEXtMRk7M.roa (hash: A34HD6vBs6SuS2D6qkJmN0sK8pKEio3YxA+zTTW9xgA=)
                          5: lIr5yIALJv3-BOg4uAYoEY_kNlo.roa (hash: f+GijD6e1+UQuvYwAF3v/POqX5KPaUvIB4vfF6bFgTQ=)
                          6: wp6rgT_ySJ7oIdAAI_SCvm21yFU.roa (hash: z87ZPo/PyE4etTlqKK3OFQbBD0NBmeieu4d4u91gewk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 09 Jun 2025 19:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:50:ea:8d:94:ce:0f:ea:45:86:1c:20:9c:3c:3e:ab:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03f7e7cf8176e302764d48299fc22a9bdc6ba683
        Validity
            Not Before: Jun  8 19:00:38 2025 GMT
            Not After : Jun  9 19:00:38 2025 GMT
        Subject: CN=3f83ee4a8a69beca55612edadabc688eb76e35ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:5a:7b:73:1d:10:b8:7c:6d:e7:41:1b:9c:3a:
                    94:6e:93:35:e6:70:64:c5:d4:fd:e8:cc:5e:1f:dd:
                    99:99:3d:d2:d3:e8:37:ec:b6:75:e3:9a:12:2f:22:
                    1b:75:e0:3b:3f:a0:ef:e1:d1:1b:d6:9f:bc:76:a5:
                    49:76:bb:27:be:0c:b7:f5:56:d4:a7:3b:04:51:63:
                    83:f7:10:50:c3:47:1b:33:10:7d:fd:c3:27:d3:77:
                    be:8e:c6:7e:10:3a:47:98:80:e6:51:a0:5c:3e:e9:
                    df:fe:18:90:96:43:b4:5a:f8:fc:d8:0a:a0:c0:68:
                    0a:fd:3a:bb:da:02:4a:21:97:18:19:25:7d:15:40:
                    c8:bf:1c:bf:91:02:0f:40:cc:ec:00:6c:f5:4c:9a:
                    65:d2:20:8e:d8:a2:c7:d9:a0:11:8a:1c:0c:c1:dd:
                    c1:eb:f7:33:ca:ca:34:d5:ea:33:24:86:8e:4d:28:
                    48:e0:41:94:81:29:c8:ab:f2:65:38:6d:ba:a1:a9:
                    1a:3e:fb:b7:07:00:26:65:c3:af:6a:65:65:13:75:
                    5c:02:1c:51:e8:5e:62:b8:f2:91:4a:30:61:32:3f:
                    73:e4:b8:74:d8:b2:76:e3:cd:25:31:2c:c8:88:97:
                    7e:25:8e:6b:7d:f0:9f:1e:b7:bc:6a:56:83:95:75:
                    d3:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:83:EE:4A:8A:69:BE:CA:55:61:2E:DA:DA:BC:68:8E:B7:6E:35:AB
            X509v3 Authority Key Identifier:
                keyid:03:F7:E7:CF:81:76:E3:02:76:4D:48:29:9F:C2:2A:9B:DC:6B:A6:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ae4547-2ca2-4cbd-a1b5-3cf3b463a86a/1/A_fnz4F24wJ2TUgpn8Iqm9xrpoM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:2b:56:9a:bc:05:db:b1:66:19:fb:dc:7e:a3:36:18:4e:06:
         22:8b:01:0e:1b:80:6e:b7:92:14:75:28:a7:7f:84:a8:57:3c:
         a3:ba:17:40:9d:4a:1f:26:0b:cd:2a:cf:7c:68:11:22:a1:fd:
         5e:a4:85:a5:71:b6:7e:33:bc:9a:e8:29:2c:5c:5a:74:c1:4e:
         ac:05:dd:67:b6:75:25:ef:5b:33:cd:e8:8c:25:d0:eb:e0:6f:
         26:e8:ab:72:d9:c6:43:d1:02:84:f5:3a:42:e9:b4:44:39:2d:
         d7:c8:92:3d:44:6f:8d:b6:8f:f8:e0:b6:92:87:6d:de:24:84:
         d4:74:aa:a4:85:9b:87:02:83:6a:fa:dc:3a:36:db:85:fa:72:
         52:6e:8d:50:16:12:9d:02:0c:3c:94:04:d9:f0:1b:4f:ef:dd:
         02:d9:40:04:dd:a9:d3:20:7f:a3:5b:df:7c:c5:3f:7f:8e:a1:
         b8:3b:1c:06:a7:53:8a:03:fe:c4:1c:9b:11:55:c0:c9:3c:60:
         a4:01:82:41:fd:df:a7:8c:23:6e:26:f3:df:d6:b2:ea:ee:fa:
         e8:45:80:ed:25:fb:4c:b6:2e:be:b0:00:65:62:00:7b:5c:0b:
         be:72:23:24:60:f1:1f:67:55:25:b4:ea:c5:87:36:77:f3:ea:
         81:3b:96:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 04:30:45 2025 by rpki-client