Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/f56d7f-1b78-4453-81e7-ba56378a6476/1/FTtGcCg5p5W6uo2NFezcymN-M2w.mft
File:                     FTtGcCg5p5W6uo2NFezcymN-M2w.mft (raw, json)
Hash identifier:          lW5aoL0ko627Wz95Tj+kB0F0PBZae/QFA2ejH3kQ0+8=
Subject key identifier:   AD:AD:6B:D7:C8:85:D9:D8:C8:9D:7E:26:CF:D8:D1:A1:65:FD:2D:8E
Authority key identifier: 15:3B:46:70:28:39:A7:95:BA:BA:8D:8D:15:EC:DC:CA:63:7E:33:6C
Certificate issuer:       /CN=153b46702839a795baba8d8d15ecdcca637e336c
Certificate serial:       01975D5D0E4FAC533B7C2CF29AE08FF6041A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FTtGcCg5p5W6uo2NFezcymN-M2w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/f56d7f-1b78-4453-81e7-ba56378a6476/1/FTtGcCg5p5W6uo2NFezcymN-M2w.mft
Manifest number:          1587
Signing time:             Wed 11 Jun 2025 05:01:08 +0000
Manifest this update:     Wed 11 Jun 2025 05:01:08 +0000
Manifest next update:     Thu 12 Jun 2025 05:01:08 +0000
Files and hashes:         1: 7LfdpybXjkO1zp9O6nzu1fNfc88.roa (hash: QAPjHN/iZlfmzhgOwFaV5zDBEKY0r/wVKeB2R6gKrqA=)
                          2: FTtGcCg5p5W6uo2NFezcymN-M2w.crl (hash: Hz4KuCWaLS0nAsfw5QPFdaKzMGuI/3Jf2f+KdHJn/8Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/f56d7f-1b78-4453-81e7-ba56378a6476/1/FTtGcCg5p5W6uo2NFezcymN-M2w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/f56d7f-1b78-4453-81e7-ba56378a6476/1/FTtGcCg5p5W6uo2NFezcymN-M2w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FTtGcCg5p5W6uo2NFezcymN-M2w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 12 Jun 2025 05:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:5d:5d:0e:4f:ac:53:3b:7c:2c:f2:9a:e0:8f:f6:04:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=153b46702839a795baba8d8d15ecdcca637e336c
        Validity
            Not Before: Jun 11 05:01:08 2025 GMT
            Not After : Jun 12 05:01:08 2025 GMT
        Subject: CN=adad6bd7c885d9d8c89d7e26cfd8d1a165fd2d8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:e6:cd:19:99:31:b6:72:07:27:af:2d:87:29:
                    f9:23:0c:3d:b8:2e:7c:a6:8c:9d:ff:e1:96:1a:97:
                    d3:c9:58:5e:f3:ae:0f:c4:21:1f:f9:02:04:32:6c:
                    4a:9d:7f:7b:06:18:75:71:60:02:43:af:1e:72:6b:
                    89:79:f9:53:60:fd:d8:e8:de:0a:62:3f:4e:5e:b5:
                    7d:34:01:c6:2f:c2:61:b9:e5:f1:bf:d3:e5:de:2b:
                    fe:ad:31:14:6c:bb:c5:aa:85:39:99:c7:c4:47:19:
                    ee:a4:46:07:b2:28:54:34:2d:51:58:a3:c5:94:ad:
                    97:91:67:65:fd:52:c7:3d:8c:ca:c6:3d:2d:b1:dd:
                    f5:27:c4:f9:39:32:12:1a:b1:12:30:50:fd:3b:c2:
                    3a:46:b9:ae:8a:16:45:a3:a0:6b:65:5e:97:9b:ec:
                    89:e0:ca:3d:f2:25:94:60:b7:f0:44:9c:91:b9:4b:
                    05:75:02:61:e8:a3:dc:46:8e:cc:c0:70:cd:a5:e1:
                    87:17:45:49:f0:d1:0e:f6:94:2d:49:4e:66:90:56:
                    31:ab:14:59:7f:4f:a2:35:b4:02:fa:2d:79:e1:2e:
                    eb:35:50:ce:73:67:ae:b2:a2:4b:ec:e6:4c:01:2b:
                    5a:25:39:b1:fa:ab:70:a5:9a:16:2a:a6:76:77:2a:
                    8d:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:AD:6B:D7:C8:85:D9:D8:C8:9D:7E:26:CF:D8:D1:A1:65:FD:2D:8E
            X509v3 Authority Key Identifier:
                keyid:15:3B:46:70:28:39:A7:95:BA:BA:8D:8D:15:EC:DC:CA:63:7E:33:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FTtGcCg5p5W6uo2NFezcymN-M2w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f56d7f-1b78-4453-81e7-ba56378a6476/1/FTtGcCg5p5W6uo2NFezcymN-M2w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/f56d7f-1b78-4453-81e7-ba56378a6476/1/FTtGcCg5p5W6uo2NFezcymN-M2w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:ed:ca:8c:04:8a:18:00:2f:93:cd:9a:6a:bf:54:64:d7:6b:
         92:e2:ca:27:59:cd:c1:3d:d9:7d:f6:1a:09:19:64:68:3e:51:
         3b:5c:45:df:93:18:07:2f:20:9c:85:b2:c8:da:93:bc:1c:77:
         0c:a3:41:b8:c8:a6:35:6b:9b:9e:63:af:69:15:96:34:de:7f:
         97:6a:97:46:53:2f:85:71:24:2c:48:a7:09:29:16:45:e6:94:
         77:da:39:56:fd:22:f8:7a:a8:ed:c3:a5:32:97:63:ed:a3:43:
         e2:fe:e5:3a:18:e7:38:ac:8b:5b:15:3e:42:bc:01:26:37:ce:
         35:5f:bf:93:d5:0e:09:cc:ff:f6:a8:ba:65:a8:ad:db:e7:ec:
         b7:8d:df:71:24:58:d5:bc:3b:d5:a0:39:26:27:33:3a:79:6c:
         b8:ac:d4:22:32:28:75:41:18:1f:b0:c1:0f:22:31:b4:6b:d4:
         86:76:5a:a5:dd:79:1d:fb:70:ca:02:78:b7:e6:62:92:06:ab:
         e8:98:77:77:01:97:44:6b:e0:1c:50:44:60:a5:10:06:74:40:
         5d:06:40:91:1d:9c:f0:b0:f9:17:c5:ce:03:e6:d7:65:7a:e3:
         28:b2:1f:ae:6b:2b:7b:5c:6d:ba:f1:e1:8d:15:09:6e:34:f5:
         f3:1e:85:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 11:11:24 2025 by rpki-client